last executing test programs: 11m11.177801069s ago: executing program 2 (id=2311): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 11m11.079681971s ago: executing program 2 (id=2313): bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$ARCH_GET_GS(0x1e, r0, 0x0, 0x1004) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) timer_create(0x3, 0x0, &(0x7f0000000080)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) timer_getoverrun(r3) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) dup(r4) sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x12, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 11m10.066131735s ago: executing program 2 (id=2316): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$loop(0x0, 0x4, 0x901) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) 11m9.158173537s ago: executing program 2 (id=2318): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000002c0)='./file1\x00', 0x400, &(0x7f0000000300)=ANY=[], 0x1, 0x127a, &(0x7f0000000680)="$eJzs3U1rXFUcB+D/JJPXmhe1VlsQD7pRhLHJwpULg7QgBpRoCioIt2aiQyYzITMERsTGlSvBjyHq0p0gfoFs3AjuBEEkG5ddiFcmM7WZzKSNjZ1geZ7NPZxzfvfcl9wLN9wzd/+lLzY31hul9awZI4VCFLfGongzRYqRGI2O3Xju2k+/PPnm2++8trS8fGUlpatLby28mFKafer7dz/+5ukfmueufTv73UTszb+3/8fir3sX9i7u//V1VBqp0ki1ejNl6Xq93syuV8tprdLYKKX0RrWcNcqpUmuUt3va16v1ra1WymprM9Nb2+VGI2W1Vtoot1KzkJrbrZR9kFVqqVQqpZnp4DRWv7qZ53lEno/FeOR5nk/FdJyLh2ImZmMu5uPheCQejfPxWFyIx+OJuHjQ66y3GwAAAAAAAAAAAAAAAAAAAB4sd5n/XzD/HwAAAAAAAAAAAAAAAAAAAO6/o/P/ixG+/w8AAAAAAAAAAAAAAAAAAABDdpfv/x+Z///8ofn/o2e96QAAAAAAAAAAAAAAAAAAAPDgmOwsVlKajNj8bGd1Z7Wz7NQvrUclqlGOyzEXf8bB7P+OTvnqq8tXLqcD8/HC5o1u/sbO6mhvfmFsLuYLA/MLnXzqzU/E9OH8YszF+cHjLw7MT8azz7Tzn3bypZiLH9+PelRjLaLQ3fuD/CcLKb3y+vJUb/5Su9+x/PoBAAAA/yel9I/+5/fdbqeB7Z2m7vN56vYs3OH/A0eez4txqXhWe80tjdZHG1m1Wt6+x8L48esZP92a+wqFiMjicM3s9G8r7cH/syHutTA61EHH7tznFOc0ivf3YLZP4TAO1O9fHqqZjOH+SYx0L4ms2r5/niwVu3ne1/TyieMnuE4HNU3crvm5L3X8PaMwhPsSw3H7pJ/1lgAAAAAAAAAAAPBvDHxncCoi+t4H/LCv5tbr4b3x/jUfP/rnQ9hDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPibHTgWAAAAABDmb51GxwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8FUAAAD//8DezoA=") r0 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file1\x00', 0x177a42, 0x15) close(0xffffffffffffffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0xb}, 0xe) shutdown(r1, 0x1) set_mempolicy(0x4005, &(0x7f0000000080)=0x8, 0x8) r4 = syz_open_dev$sg(&(0x7f0000001800), 0xcc60, 0xa002) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="060000080000000000000000"]) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = mq_open(&(0x7f0000000240)='/dev/cpu/#/msr\x00', 0x40, 0x17, &(0x7f0000000280)={0xfffffffffffffffe, 0x0, 0xffffffffffffff65, 0x3}) mq_notify(r6, &(0x7f0000000440)={0x0, 0xc, 0x4, @thr={&(0x7f0000000340)="b9c76c2924ac9490fe0888948a1483d8", &(0x7f0000000380)="8aad4f3cab2284323f35c037cf0432ea18c6ee6d262aa737bab73d0f9dad5e6c61693217b8ee270cb130c6696d9af5c0a9aa450027ecc19c9d2e4fa02a447139970a27c1dfae536365da6bf810d9bf30a90bdea6e8c41a5eb96f4a0cb7e83bd442b7f0c3f7b09ecc4fbf2a5c14bb1321e7f71aee96bb3aecc13393fb18f4e6766ddace205ce8f21b61cb3a635f49e736721d1072bcfa5fe754f924e2fcf96cdb742a038ad8a800192dcafc1af2212725"}}) getgroups(0x2, &(0x7f0000000000)=[0xffffffffffffffff, 0xee00]) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000540)={0x0, @local, @initdev}, &(0x7f0000000180)=0xc) fcntl$dupfd(0xffffffffffffffff, 0x406, r5) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0xb, 0x80000, 0x4274) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r8, 0x0, 0x0) 11m8.010208844s ago: executing program 2 (id=2319): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(0xffffffffffffffff, 0xffff) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x74, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x60, 0x1, [@m_tunnel_key={0x5c, 0x1, 0x0, 0x0, {{0xf}, {0x2c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) open$dir(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10000, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x202, 0x82) 11m7.223296152s ago: executing program 2 (id=2327): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r3) socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x7, 0xffffffff, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x3, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0x8, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 11m6.184510537s ago: executing program 32 (id=2327): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r3) socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x7, 0xffffffff, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x3, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0x8, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 10m38.776190361s ago: executing program 4 (id=2402): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)="02", 0x1}], 0x1}}], 0x1, 0x24005805) 10m38.645722855s ago: executing program 4 (id=2405): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(0xffffffffffffffff, 0xffff) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) open$dir(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10000, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x202, 0x82) 10m37.505394082s ago: executing program 4 (id=2408): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/uhci_hcd/unbind\x00', 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff) rmdir(&(0x7f0000000440)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00') r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0xf9, &(0x7f0000006680)) munlock(&(0x7f00000ef000/0x1000)=nil, 0x1000) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) 10m35.218664725s ago: executing program 4 (id=2414): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000002c0)='./file1\x00', 0x400, &(0x7f0000000300)=ANY=[], 0x1, 0x127a, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file1\x00', 0x177a42, 0x15) close(0xffffffffffffffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) shutdown(r1, 0x1) set_mempolicy(0x4005, &(0x7f0000000080)=0x8, 0x8) r4 = syz_open_dev$sg(&(0x7f0000001800), 0xcc60, 0xa002) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="060000080000000000000000"]) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = mq_open(&(0x7f0000000240)='/dev/cpu/#/msr\x00', 0x40, 0x17, &(0x7f0000000280)={0xfffffffffffffffe, 0x0, 0xffffffffffffff65, 0x3}) mq_notify(r6, &(0x7f0000000440)={0x0, 0xc, 0x4, @thr={&(0x7f0000000340)="b9c76c2924ac9490fe0888948a1483d8", &(0x7f0000000380)="8aad4f3cab2284323f35c037cf0432ea18c6ee6d262aa737bab73d0f9dad5e6c61693217b8ee270cb130c6696d9af5c0a9aa450027ecc19c9d2e4fa02a447139970a27c1dfae536365da6bf810d9bf30a90bdea6e8c41a5eb96f4a0cb7e83bd442b7f0c3f7b09ecc4fbf2a5c14bb1321e7f71aee96bb3aecc13393fb18f4e6766ddace205ce8f21b61cb3a635f49e736721d1072bcfa5fe754f924e2fcf96cdb742a038ad8a800192dcafc1af2212725"}}) getgroups(0x2, &(0x7f0000000000)=[0xffffffffffffffff, 0xee00]) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000540)={0x0, @local, @initdev}, &(0x7f0000000180)=0xc) fcntl$dupfd(0xffffffffffffffff, 0x406, r5) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0xb, 0x80000, 0x4274) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES64=0x0, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 10m32.686793765s ago: executing program 4 (id=2422): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(0xffffffffffffffff, 0xffff) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) open$dir(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10000, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x202, 0x82) 10m29.818579332s ago: executing program 4 (id=2429): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 10m28.785717217s ago: executing program 33 (id=2429): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 37.488460064s ago: executing program 1 (id=4204): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x60, 0x16, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'erspan0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 36.738203633s ago: executing program 1 (id=4206): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) getsockopt$sock_buf(r1, 0x1, 0x31, 0x0, &(0x7f00000002c0)) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) 36.671592744s ago: executing program 1 (id=4209): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="3c00000058001f000307f4f9002304000a04d649080001000201000204000380050000009ddb973b91aa05797251725df7006700912deb815b7c22", 0x3b) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000305bfdd082e0c0007f4d40102030109022400016406200b0904ad8e02df30059e09050e124000fafa0109058303"], &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) r1 = landlock_create_ruleset(&(0x7f0000000340)={0x1411, 0x1}, 0x18, 0x0) readv(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/10, 0xa}], 0x1) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000001}}, './file0\x00'}) fcntl$getown(r2, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000001c0)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x5, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 33.190495081s ago: executing program 1 (id=4224): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) setresuid(r0, r0, 0x0) 33.092074053s ago: executing program 1 (id=4227): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xaeea) r1 = accept4(r0, 0x0, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000240)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xd49}, 0xfffffffffffffff8, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x1}) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x43, 0x4c050, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x1, 0x4}, &(0x7f0000000240)=0x8) 32.738285112s ago: executing program 1 (id=4228): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x81) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/devices\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000005200)={0x2020}, 0x2020) 17.648659794s ago: executing program 34 (id=4228): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x81) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/devices\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000005200)={0x2020}, 0x2020) 10.5261458s ago: executing program 6 (id=4345): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x29, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = add_key$user(&(0x7f00000001c0), &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799a4a0c7cb5b000600", 0xe, 0xfffffffffffffffe) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[], 0x6}, 0x1, 0x0, 0x0, 0x4000001}, 0x44040) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, 0x0, r6}, &(0x7f00000000c0)=""/83, 0x53, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x0, 0x24000004) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'wlan0\x00', 0x0}) readahead(r0, 0x6, 0x0) 9.585014713s ago: executing program 6 (id=4352): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="3c00000058001f000307f4f9002304000a04d649080001000201000204000380050000009ddb973b91aa05797251725df7006700912deb815b7c22", 0x3b) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000305bfdd082e0c0007f4d40102030109022400016406200b0904ad8e02df30059e09050e124000fafa0109058303"], &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) r1 = landlock_create_ruleset(&(0x7f0000000340)={0x1411, 0x1}, 0x18, 0x0) readv(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/10, 0xa}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdx;De', 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000001}}, './file0\x00'}) fcntl$getown(r2, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000001c0)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x5, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 8.320347335s ago: executing program 0 (id=4361): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x29, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = add_key$user(&(0x7f00000001c0), &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799a4a0c7cb5b000600", 0xe, 0xfffffffffffffffe) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[], 0x6}, 0x1, 0x0, 0x0, 0x4000001}, 0x44040) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, 0x0, r6}, &(0x7f00000000c0)=""/83, 0x53, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x0, 0x24000004) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'wlan0\x00', 0x0}) readahead(r0, 0x6, 0x0) 7.413415157s ago: executing program 0 (id=4367): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x6, 0x0, 0x1}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000940)={r3, &(0x7f0000000900)}, 0x20) 6.528620899s ago: executing program 5 (id=4371): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) 6.178592577s ago: executing program 6 (id=4372): socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) unshare(0x1e060c80) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$COMEDI_RANGEINFO(0xffffffffffffffff, 0x80106408, &(0x7f0000000280)={0xb, 0x0}) r2 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) acct(&(0x7f00000000c0)='./file1\x00') 5.807883066s ago: executing program 3 (id=4373): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) getsockopt$sock_buf(r1, 0x1, 0x31, 0x0, &(0x7f00000002c0)) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) 5.390744436s ago: executing program 5 (id=4374): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) 4.266558904s ago: executing program 5 (id=4375): r0 = epoll_create1(0x80000) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='10', 0x2) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) dup3(r0, r0, 0x80000) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x1d8, 0xffffffffffffffff) syz_genetlink_get_family_id$nfc(&(0x7f0000003b80), r5) sendmsg$NFC_CMD_DISABLE_SE(r5, &(0x7f0000003c80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0x4000018) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000440)={0xa0000001}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 4.251740115s ago: executing program 6 (id=4376): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x8404) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r0, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r6, 0x6a98047402e98331, 0xa1, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}}, 0x40010) 4.226026595s ago: executing program 3 (id=4377): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) futex(&(0x7f000000cffc)=0x1, 0x5, 0x0, 0x0, &(0x7f0000000340)=0x2, 0x8b000000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3d) 3.267188909s ago: executing program 3 (id=4378): r0 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r0, &(0x7f0000000070)='syz0:', 0x5) 3.134174523s ago: executing program 5 (id=4379): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sync() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) close(r2) r3 = socket$kcm(0x2b, 0x1, 0x0) close(r3) socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x8044) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.133938232s ago: executing program 3 (id=4380): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0xa, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 3.021303715s ago: executing program 0 (id=4381): r0 = socket$packet(0x11, 0x2, 0x300) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) fcntl$setflags(r0, 0x2, 0x0) 2.756904372s ago: executing program 6 (id=4382): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0xfffffce5) r2 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2) unshare(0x28000600) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYRESHEX=r1], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) io_setup(0x8, &(0x7f0000001d80)) fcntl$getflags(r2, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r6, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) 2.724623362s ago: executing program 7 (id=4313): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r0 = socket$inet(0x2, 0x1, 0x6) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x100, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@ll={0x11, 0x17, r5, 0x1, 0xc, 0x6, @multicast}, 0x80, &(0x7f0000002080)=[{&(0x7f00000004c0)='\x00', 0x1}], 0x1}, 0x0) 2.666212864s ago: executing program 0 (id=4383): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="3c00000058001f000307f4f9002304000a04d649080001000201000204000380050000009ddb973b91aa05797251725df7006700912deb815b7c22", 0x3b) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000305bfdd082e0c0007f4d40102030109022400016406200b0904ad8e02df30059e09050e124000fafa0109058303"], &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) r1 = landlock_create_ruleset(&(0x7f0000000340)={0x1411, 0x1}, 0x18, 0x0) readv(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/10, 0xa}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdx;De', 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000001}}, './file0\x00'}) fcntl$getown(r2, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000001c0)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x5, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 2.551128237s ago: executing program 3 (id=4384): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$can_raw(0x1d, 0x3, 0x1) setxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="020000000100000000000015010000000400000008000000", @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x2c, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x10, 0x0, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85512, &(0x7f0000000780)={{0xa}, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffd, 0x0, 0x20000000000, 0x3123, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffff9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xd451, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x1, 0x2000000000, 0x0, 0x0, 0x80, 0x3, 0x0, 0x0, 0x10000, 0x7785, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0xdf, 0x4, 0xffffffffffffffff, 0x2, 0x0, 0x80000000000, 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x49, 0x20000000000, 0x0, 0x0, 0x200, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x10004, 0x5, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x5, 0x80000001]}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000011646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xba03d6b623375271, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8d90}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt(r1, 0xfffffff9, 0xd, 0x0, 0x0) r7 = syz_open_dev$video(&(0x7f00000008c0), 0x8, 0x400) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r7, 0xc0945662, &(0x7f0000000900)={0x9, 0x0, '\x00', {0x0, @bt={0x3, 0x7, 0x1, 0x0, 0x2, 0x6, 0x8, 0xc537, 0x8000, 0x200, 0x8, 0x5, 0xf73, 0x6, 0x1, 0x10, {0x9, 0x80000001}, 0x3, 0x1}}}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 1.57771481s ago: executing program 3 (id=4385): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000054c0)="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", 0x2000, &(0x7f0000005400)={&(0x7f0000000380)={0x50, 0x0, 0x2000b3404, {0x7, 0x2d, 0x4, 0x210420, 0xb, 0x0, 0x1, 0x1, 0x0, 0x0, 0x100, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000400)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x80000004}}, 0x30) read$FUSE(r0, &(0x7f00000074c0)={0x2020}, 0x2020) 1.560661251s ago: executing program 5 (id=4386): socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) unshare(0x1e060c80) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$COMEDI_RANGEINFO(0xffffffffffffffff, 0x80106408, &(0x7f0000000280)={0xb, 0x0}) r2 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) acct(&(0x7f00000000c0)='./file1\x00') 1.514025623s ago: executing program 7 (id=4387): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c00100000000d0085a168d0bf46d32345653600648d0a00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000500020000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x8100, r2, 0x1, 0x3, 0x6, @remote}, 0x14) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r3) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780)={r4}, &(0x7f00000007c0)={'enc=', 'pkcs1', ' hash=', {'sha224\x00'}}, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x84) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000e00)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) syz_usb_connect(0x0, 0x0, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r7 = fcntl$dupfd(r6, 0x406, r6) write$binfmt_elf64(r7, &(0x7f0000000400)=ANY=[], 0xfffffdcf) syz_usb_connect(0x5, 0x36, &(0x7f0000003340)={{0x12, 0x1, 0x250, 0x90, 0x3a, 0xf0, 0x10, 0x1608, 0x243, 0xc3b4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x6, 0x81, 0x50, 0x64, "", [{{0x9, 0x4, 0xe9, 0x8, 0x2, 0xf9, 0x67, 0x1d, 0x5, [], [{{0x9, 0x5, 0xb, 0x0, 0x5c7, 0x0, 0xfd, 0x1}}, {{0x9, 0x5, 0xa, 0x2, 0x400, 0x10, 0xa, 0x1}}]}}]}}]}}, &(0x7f0000003b40)={0x0, 0x0, 0x0, 0x0}) 1.513767543s ago: executing program 0 (id=4388): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) futex(&(0x7f000000cffc)=0x1, 0x5, 0x0, 0x0, &(0x7f0000000340)=0x2, 0x8b000000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3d) 1.490067263s ago: executing program 6 (id=4389): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe, 0x4}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x18414, 0x3, 0x2}, 0x30, 0x0) landlock_restrict_self(r2, 0x9) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 20.644209ms ago: executing program 0 (id=4390): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x0, 0x310, 0xfeffffff, 0x240, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x3e8, 0x3e8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x40, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e24}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @port=0x4e24}}}}, {{@ip={@local, @empty, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@multicast1, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) mount(0x0, &(0x7f0000000200)='proc\x00', 0x0, 0x800000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$video4linux(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000070)='syz0:', 0x5) 0s ago: executing program 5 (id=4391): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x8404) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r0, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r6, 0x6a98047402e98331, 0xa1, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}}, 0x40010) kernel console output (not intermixed with test programs): 3188'. [ 1304.989027][T19517] tipc: Enabling of bearer rejected, failed to enable media [ 1305.011757][T19512] loop6: detected capacity change from 0 to 8192 [ 1305.344480][T19531] program syz.6.3192 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1305.364828][T19531] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3192'. [ 1307.323466][T19538] loop6: detected capacity change from 0 to 8192 [ 1309.049032][T19564] program syz.6.3196 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1309.062401][T19564] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3196'. [ 1309.397088][T19572] device syzkaller0 entered promiscuous mode [ 1309.428178][T19572] tipc: Enabled bearer , priority 0 [ 1309.453438][T19572] tipc: Resetting bearer [ 1310.257695][T19571] tipc: Resetting bearer [ 1310.296223][T19571] tipc: Disabling bearer [ 1310.372964][T19577] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3201'. [ 1312.803063][T19593] device syzkaller0 entered promiscuous mode [ 1312.840769][T19593] tipc: Enabled bearer , priority 0 [ 1312.859540][T19593] tipc: Resetting bearer [ 1312.913567][T19592] tipc: Resetting bearer [ 1312.957222][T19592] tipc: Disabling bearer [ 1313.291150][T19603] tipc: Enabling of bearer rejected, failed to enable media [ 1316.440558][T19646] loop5: detected capacity change from 0 to 4096 [ 1316.529953][T19646] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1316.576646][T19648] loop6: detected capacity change from 0 to 8192 [ 1316.806596][T19657] program syz.6.3219 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1316.824041][T19657] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3219'. [ 1316.860817][T19652] loop1: detected capacity change from 0 to 8192 [ 1317.258740][T19660] program syz.1.3220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1317.304942][T19660] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3220'. [ 1317.423562][T19662] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3205'. [ 1321.317542][T19685] loop1: detected capacity change from 0 to 8192 [ 1322.218895][T19700] loop5: detected capacity change from 0 to 8192 [ 1322.785573][T19720] program syz.5.3227 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1322.838115][T19720] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3227'. [ 1323.791171][T19727] loop1: detected capacity change from 0 to 4096 [ 1323.857906][T19743] loop5: detected capacity change from 0 to 8192 [ 1323.918567][T19727] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1324.133201][T19750] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3234'. [ 1324.757148][T19756] program syz.5.3239 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1324.774578][T19756] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3239'. [ 1326.442266][T19763] loop6: detected capacity change from 0 to 8192 [ 1326.687628][T19781] program syz.6.3241 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1326.721533][T19781] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3241'. [ 1327.093850][T19784] device syzkaller0 entered promiscuous mode [ 1328.191804][T19797] device syzkaller0 entered promiscuous mode [ 1330.798730][T19828] loop5: detected capacity change from 0 to 8192 [ 1331.834717][T19828] program syz.5.3253 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1331.852445][T19828] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3253'. [ 1332.542562][T19838] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3251'. [ 1332.587937][T19837] device syzkaller0 entered promiscuous mode [ 1332.599260][T19834] loop1: detected capacity change from 0 to 8192 [ 1332.640860][T19837] tipc: Enabled bearer , priority 0 [ 1332.720070][T19837] tipc: Resetting bearer [ 1332.857473][T19844] program syz.1.3255 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1332.963707][T19844] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3255'. [ 1333.161902][T19836] tipc: Resetting bearer [ 1333.923956][T19836] tipc: Disabling bearer [ 1333.954743][T19846] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3257'. [ 1333.964134][T15339] tipc: Node number set to 85744909 [ 1333.984844][T19848] IPVS: Error connecting to the multicast addr [ 1336.085107][T19878] device syzkaller0 entered promiscuous mode [ 1337.783795][T19895] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3260'. [ 1338.390613][T19900] loop1: detected capacity change from 0 to 8192 [ 1338.644697][T19909] program syz.1.3273 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1338.658119][T19909] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3273'. [ 1343.466037][T19948] loop6: detected capacity change from 0 to 8192 [ 1344.706460][T19976] program syz.6.3282 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1344.719594][T19976] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3282'. [ 1347.994679][T20021] loop5: detected capacity change from 0 to 8192 [ 1348.859318][T20021] program syz.5.3295 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1348.872699][T20021] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3295'. [ 1351.135778][T20073] loop5: detected capacity change from 0 to 4096 [ 1351.408056][T20073] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1352.980589][T20085] device syzkaller0 entered promiscuous mode [ 1352.992049][T20085] tipc: Enabled bearer , priority 0 [ 1353.032484][T20085] tipc: Resetting bearer [ 1353.082911][T20084] tipc: Resetting bearer [ 1353.119590][T20084] tipc: Disabling bearer [ 1353.193790][T20087] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3307'. [ 1353.475622][T20090] device syzkaller0 entered promiscuous mode [ 1353.528305][T20093] tipc: Enabling of bearer rejected, failed to enable media [ 1354.108233][T20102] IPVS: Error connecting to the multicast addr [ 1355.814630][T20119] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3312'. [ 1356.766914][T20124] device syzkaller0 entered promiscuous mode [ 1356.810115][T20124] tipc: Enabled bearer , priority 0 [ 1356.840561][T20124] tipc: Resetting bearer [ 1356.854472][T20123] tipc: Resetting bearer [ 1356.896626][T20123] tipc: Disabling bearer [ 1358.741641][T20140] device syzkaller0 entered promiscuous mode [ 1358.784883][T20140] tipc: Enabled bearer , priority 0 [ 1358.845741][T20140] tipc: Resetting bearer [ 1358.853620][T20139] tipc: Resetting bearer [ 1358.881338][T20139] tipc: Disabling bearer [ 1359.034671][T20147] device syzkaller0 entered promiscuous mode [ 1359.115730][T20150] IPVS: Error connecting to the multicast addr [ 1361.169332][T20156] loop5: detected capacity change from 0 to 4096 [ 1361.218086][T20166] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3320'. [ 1361.372022][T20156] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1361.545977][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.552315][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.328212][T20179] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3330'. [ 1364.335198][T20186] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3331'. [ 1365.520979][T20199] device syzkaller0 entered promiscuous mode [ 1366.285504][T20204] tipc: Enabled bearer , priority 0 [ 1366.303532][T20199] tipc: Resetting bearer [ 1366.967654][T20196] tipc: Resetting bearer [ 1367.056763][T20196] tipc: Disabling bearer [ 1367.992564][T20239] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3341'. [ 1368.610219][T20248] tipc: Enabling of bearer rejected, failed to enable media [ 1371.011414][T20283] tipc: Enabling of bearer rejected, failed to enable media [ 1373.997802][T20309] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3356'. [ 1377.398828][T20371] tipc: Enabling of bearer rejected, failed to enable media [ 1377.938167][T20389] device syzkaller0 entered promiscuous mode [ 1377.962050][T20389] tipc: Enabled bearer , priority 0 [ 1378.000003][T20388] tipc: Resetting bearer [ 1378.036386][T20388] tipc: Disabling bearer [ 1379.928078][T20410] loop6: detected capacity change from 0 to 8192 [ 1380.416546][T20421] program syz.6.3378 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1380.429464][T20421] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3378'. [ 1381.640257][T20402] loop1: detected capacity change from 0 to 8192 [ 1384.825159][T20469] program syz.1.3388 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1384.871945][T20469] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3388'. [ 1385.484888][T20456] loop6: detected capacity change from 0 to 8192 [ 1385.619409][T20471] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3390'. [ 1385.836369][T20474] program syz.6.3382 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1385.849047][T20474] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3382'. [ 1386.349183][T20482] loop6: detected capacity change from 0 to 8192 [ 1386.620550][T20484] program syz.6.3394 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1386.633852][T20484] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3394'. [ 1387.886866][T20497] IPVS: Error connecting to the multicast addr [ 1388.607502][T20506] tipc: Enabling of bearer rejected, failed to enable media [ 1388.912152][T20522] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1388.953829][T20522] IPVS: Error connecting to the multicast addr [ 1391.971101][T20546] loop6: detected capacity change from 0 to 8192 [ 1393.121634][T20567] program syz.6.3405 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1393.138255][T20567] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3405'. [ 1393.574625][T20574] device syzkaller0 entered promiscuous mode [ 1393.586995][T20574] tipc: Enabled bearer , priority 0 [ 1393.608205][T20569] tipc: Resetting bearer [ 1394.389020][T20569] tipc: Disabling bearer [ 1394.537966][T20582] device syzkaller0 entered promiscuous mode [ 1394.595821][T20585] tipc: Enabled bearer , priority 0 [ 1394.688812][T20579] loop6: detected capacity change from 0 to 8192 [ 1394.933969][T20581] tipc: Resetting bearer [ 1394.999469][T20581] tipc: Disabling bearer [ 1395.161705][T20591] program syz.6.3411 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1395.488211][T20593] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3414'. [ 1395.512749][T20590] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3411'. [ 1397.074372][T15339] Bluetooth: hci5: command 0x0409 tx timeout [ 1397.185619][ T4988] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.229430][T17208] Bluetooth: hci5: command 0x041b tx timeout [ 1399.335223][T20635] loop6: detected capacity change from 0 to 8192 [ 1399.354688][ T4988] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.743490][T20643] IPVS: Error connecting to the multicast addr [ 1400.437625][ T4988] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.471561][T20648] program syz.6.3422 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1400.503803][T20648] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3422'. [ 1400.526876][ T4988] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.072745][ T4988] tipc: Disabling bearer [ 1401.079447][ T4988] tipc: Left network mode [ 1401.181927][T20587] chnl_net:caif_netlink_parms(): no params data found [ 1401.312925][T15339] Bluetooth: hci5: command 0x040f tx timeout [ 1402.963270][T20692] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3434'. [ 1403.087964][T20587] bridge0: port 1(bridge_slave_0) entered blocking state [ 1403.153144][T20587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1403.192163][T20587] device bridge_slave_0 entered promiscuous mode [ 1403.222283][T20587] bridge0: port 2(bridge_slave_1) entered blocking state [ 1403.255942][T20587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1403.284613][T20587] device bridge_slave_1 entered promiscuous mode [ 1403.450961][T15339] Bluetooth: hci5: command 0x0419 tx timeout [ 1403.470655][T20587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1403.484647][T20587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1403.834330][T20587] team0: Port device team_slave_0 added [ 1403.885738][T20587] team0: Port device team_slave_1 added [ 1404.004755][T20587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1404.084828][T20587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1404.250655][T20587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1404.399955][T20587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1404.427201][T20587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1404.477270][T20587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1404.647098][ T4988] device hsr_slave_0 left promiscuous mode [ 1404.683685][ T4988] device hsr_slave_1 left promiscuous mode [ 1404.703649][ T4988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1404.711228][ T4988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1404.769080][ T4988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1404.781285][ T4988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1404.796692][ T4988] device bridge_slave_1 left promiscuous mode [ 1404.812959][ T4988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.836807][ T4988] device bridge_slave_0 left promiscuous mode [ 1404.869618][ T4988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.983672][ T4988] device veth1_macvtap left promiscuous mode [ 1404.989759][ T4988] device veth0_macvtap left promiscuous mode [ 1405.001188][ T4988] device veth1_vlan left promiscuous mode [ 1405.010603][ T4988] device veth0_vlan left promiscuous mode [ 1405.889006][ T7656] Bluetooth: hci5: command 0x0405 tx timeout [ 1406.891434][T20746] loop6: detected capacity change from 0 to 8192 [ 1406.946704][ T4988] team0 (unregistering): Port device team_slave_1 removed [ 1406.982105][ T4988] team0 (unregistering): Port device team_slave_0 removed [ 1407.010437][ T4988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1407.031505][ T4988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1407.199051][T20757] program syz.6.3439 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1407.484420][ T4988] bond0 (unregistering): Released all slaves [ 1407.581240][T20757] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3439'. [ 1407.618881][T20587] device hsr_slave_0 entered promiscuous mode [ 1407.647447][T20587] device hsr_slave_1 entered promiscuous mode [ 1418.257849][T20855] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3460'. [ 1418.407497][T20587] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1418.495760][T20587] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1418.574537][T20587] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1419.024283][T20587] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1419.373235][T20872] IPVS: Error connecting to the multicast addr [ 1419.452174][T20587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1419.461119][T20869] loop5: detected capacity change from 0 to 4096 [ 1419.512188][T20871] loop1: detected capacity change from 0 to 8192 [ 1419.527778][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1419.580920][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1419.641962][T20587] 8021q: adding VLAN 0 to HW filter on device team0 [ 1419.847522][ T1339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1419.964441][T20869] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1420.051324][ T1339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1420.436356][ T1339] bridge0: port 1(bridge_slave_0) entered blocking state [ 1420.443553][ T1339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1420.495057][ T1339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1420.508092][ T1339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1420.750577][T20889] program syz.1.3464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1420.907259][ T1339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1421.133221][ T1339] bridge0: port 2(bridge_slave_1) entered blocking state [ 1421.140325][ T1339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1421.233046][ T1339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1421.275323][ T1339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1421.333594][ T1339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1421.343497][T20883] loop6: detected capacity change from 0 to 8192 [ 1421.374985][ T1339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1421.667188][T20898] program syz.6.3468 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1421.693101][ T1339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1421.779936][ T1339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1421.862467][T20889] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3464'. [ 1421.893721][ T1339] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1422.679515][T20898] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3468'. [ 1422.699997][T20587] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1422.855565][T20587] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1422.987093][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.993443][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.726432][T19299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1424.229641][T19299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1425.183967][T19299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1426.075540][T19299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1426.193392][T19299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1427.633983][T20925] IPVS: Error connecting to the multicast addr [ 1427.762283][T20953] loop5: detected capacity change from 0 to 8192 [ 1428.887892][T20962] program syz.5.3481 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1428.945261][T20962] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3481'. [ 1429.666118][T20968] loop6: detected capacity change from 0 to 8192 [ 1429.977111][T21000] program syz.6.3485 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1430.050330][T21000] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3485'. [ 1430.131013][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1430.182449][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1430.307782][T20587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1430.489599][T19299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1430.576829][T19299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1431.543453][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1431.592235][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1431.659367][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1431.677063][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1431.708905][T20587] device veth0_vlan entered promiscuous mode [ 1431.939087][T20587] device veth1_vlan entered promiscuous mode [ 1432.123862][T21035] IPVS: Error connecting to the multicast addr [ 1432.153491][T21022] loop5: detected capacity change from 0 to 8192 [ 1432.169121][T20587] device veth0_macvtap entered promiscuous mode [ 1432.198138][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1432.239703][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1432.334114][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1432.512099][T21045] program syz.5.3493 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1432.570804][T21045] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3493'. [ 1432.595529][T20587] device veth1_macvtap entered promiscuous mode [ 1432.814839][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1432.872757][T21046] tipc: Enabled bearer , priority 0 [ 1432.886239][T21039] tipc: Resetting bearer [ 1432.915767][T21038] tipc: Disabling bearer [ 1432.944222][T20587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1433.005588][T20587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1433.059088][T20587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1433.132962][T21050] loop1: detected capacity change from 0 to 8192 [ 1433.139637][T20587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1433.166353][T20587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1433.197102][T20587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1433.226416][T20587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1433.263628][T20587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1433.299773][T20587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1433.330059][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1433.404319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1433.555475][T21061] program syz.1.3497 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1433.648606][T21061] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3497'. [ 1433.666837][T20587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1433.872232][T20587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1433.893680][T20587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1433.935602][T20587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1433.982673][T20587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1434.046734][T20587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.110432][T20587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1434.128019][T20587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.263590][T20587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1434.429801][T20587] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.559538][T20587] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.639037][T20587] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.717643][T20587] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.922888][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1434.938178][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1435.127576][T21078] device syzkaller0 entered promiscuous mode [ 1435.208851][T21078] tipc: Enabled bearer , priority 0 [ 1435.274065][T21075] tipc: Resetting bearer [ 1435.318569][T21075] tipc: Disabling bearer [ 1435.351370][T21080] loop6: detected capacity change from 0 to 8192 [ 1435.355274][ T1218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1435.391969][ T1218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1435.467809][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1435.513965][ T4842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1435.593115][ T4842] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1435.780911][T21091] program syz.6.3502 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1435.803270][T21091] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3502'. [ 1435.833537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1436.198134][T21086] loop1: detected capacity change from 0 to 4096 [ 1436.318322][T21086] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1436.521836][T21106] program syz.0.3412 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1436.563355][T21106] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3412'. [ 1437.821542][T21112] loop6: detected capacity change from 0 to 8192 [ 1438.147988][T21120] program syz.6.3506 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1438.172144][T21120] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3506'. [ 1438.588270][T21126] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3505'. [ 1439.768271][T21134] loop6: detected capacity change from 0 to 8192 [ 1440.014876][T21141] program syz.6.3511 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1440.090264][T21141] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3511'. [ 1440.200843][ T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.265633][T21136] loop5: detected capacity change from 0 to 8192 [ 1440.415483][ T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.628525][T21147] program syz.5.3513 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1440.861348][T21147] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3513'. [ 1440.937989][ T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.064776][ T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.159731][T21130] chnl_net:caif_netlink_parms(): no params data found [ 1441.210518][T21160] device syzkaller0 entered promiscuous mode [ 1442.187377][T15339] Bluetooth: hci0: command 0x0409 tx timeout [ 1442.813501][T21170] program syz.0.3508 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1442.831197][T21170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3508'. [ 1443.608011][T21130] bridge0: port 1(bridge_slave_0) entered blocking state [ 1443.658213][T21130] bridge0: port 1(bridge_slave_0) entered disabled state [ 1443.729960][T21130] device bridge_slave_0 entered promiscuous mode [ 1443.738592][ T154] tipc: Disabling bearer [ 1443.744917][ T154] tipc: Left network mode [ 1443.749822][T21130] bridge0: port 2(bridge_slave_1) entered blocking state [ 1443.812047][T21130] bridge0: port 2(bridge_slave_1) entered disabled state [ 1443.836002][T21130] device bridge_slave_1 entered promiscuous mode [ 1443.918541][T21130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1443.947769][T21130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1444.009251][T21197] device syzkaller0 entered promiscuous mode [ 1444.031628][T21198] tipc: Enabled bearer , priority 0 [ 1444.044039][T21203] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3520'. [ 1444.094480][T21193] device syzkaller0 entered promiscuous mode [ 1444.116751][T21191] tipc: Resetting bearer [ 1444.162986][T21191] tipc: Disabling bearer [ 1444.309132][T21130] team0: Port device team_slave_0 added [ 1444.352061][T21130] team0: Port device team_slave_1 added [ 1444.503376][T21130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1444.554174][T21130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1444.734506][T21130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1444.822827][ T7656] Bluetooth: hci0: command 0x041b tx timeout [ 1444.829273][T21130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1444.882064][T21130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1445.005813][T21130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1445.906150][T21130] device hsr_slave_0 entered promiscuous mode [ 1445.985207][T21130] device hsr_slave_1 entered promiscuous mode [ 1446.006227][T21130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1446.023239][T21130] Cannot create hsr debugfs directory [ 1446.729736][T21228] loop5: detected capacity change from 0 to 8192 [ 1446.902899][ T7656] Bluetooth: hci0: command 0x040f tx timeout [ 1447.101321][T21242] program syz.5.3526 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1447.206203][T21242] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3526'. [ 1447.542198][T21244] tipc: Enabled bearer , priority 0 [ 1447.567971][T21243] tipc: Disabling bearer [ 1448.671123][T21254] loop6: detected capacity change from 0 to 8192 [ 1448.745801][ T154] device hsr_slave_0 left promiscuous mode [ 1448.761019][ T154] device hsr_slave_1 left promiscuous mode [ 1448.798551][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1448.814559][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1448.879656][T21259] loop5: detected capacity change from 0 to 8192 [ 1448.894050][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1448.901517][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1449.209037][T21269] program syz.6.3533 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1449.435118][T17208] Bluetooth: hci0: command 0x0419 tx timeout [ 1449.543326][T21272] program syz.5.3534 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1449.615067][ T154] device bridge_slave_1 left promiscuous mode [ 1449.652883][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.689397][ T154] device bridge_slave_0 left promiscuous mode [ 1449.778960][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1449.920587][ T154] device veth1_macvtap left promiscuous mode [ 1449.930062][ T154] device veth0_macvtap left promiscuous mode [ 1449.953098][ T154] device veth1_vlan left promiscuous mode [ 1449.959439][ T154] device veth0_vlan left promiscuous mode [ 1451.055730][T21302] process 'syz.0.3540' launched './file0' with NULL argv: empty string added [ 1451.542790][ T7656] Bluetooth: hci0: command 0x0405 tx timeout [ 1452.110940][ T154] team0 (unregistering): Port device team_slave_1 removed [ 1452.137185][ T154] team0 (unregistering): Port device team_slave_0 removed [ 1452.150865][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1452.166451][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1452.228259][ T154] bond0 (unregistering): Released all slaves [ 1452.282829][T21272] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3534'. [ 1452.327682][T21307] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3543'. [ 1452.477700][T21130] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1452.514492][T21322] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1452.569373][T21130] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1452.625145][T21130] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1452.676078][T21130] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1452.968344][T21130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1453.060443][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1453.106237][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1453.167526][T21130] 8021q: adding VLAN 0 to HW filter on device team0 [ 1453.205275][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1453.229920][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1453.256947][ T4842] bridge0: port 1(bridge_slave_0) entered blocking state [ 1453.264146][ T4842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1453.296637][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1453.344664][ T6003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1453.367400][ T6003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1453.400552][ T6003] bridge0: port 2(bridge_slave_1) entered blocking state [ 1453.407772][ T6003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1453.444182][ T6003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1453.477891][ T6003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1453.519056][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1453.539189][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1453.581618][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1453.614938][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1453.634997][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1453.654739][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1453.673338][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1453.695199][T21130] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1453.727962][T21130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1453.755966][T21378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3566'. [ 1453.772267][T21378] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.779528][T21378] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.823205][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1453.849042][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1454.158826][ T6003] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1454.197207][ T6003] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1454.222033][T21130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1454.267206][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1454.279591][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1454.324014][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1454.340099][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1454.359279][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1454.377123][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1454.398269][T21130] device veth0_vlan entered promiscuous mode [ 1454.439398][T21130] device veth1_vlan entered promiscuous mode [ 1454.505334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1454.520519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1454.550497][T21130] device veth0_macvtap entered promiscuous mode [ 1454.629114][T21130] device veth1_macvtap entered promiscuous mode [ 1454.698386][T21130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1454.737341][T21130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1455.523012][T21130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1455.580917][T21130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1455.622202][T21130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1455.678339][T21130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1455.719227][T21130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1455.750504][T21130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1455.808748][T21130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1455.849990][T21130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1455.890555][T21130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1455.942028][T21130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1455.983539][T21130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1456.040918][T21130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1456.082653][T21130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1456.115763][T21130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1456.155249][T21130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1456.166413][T21130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1456.179218][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1456.197801][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1456.269925][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1456.293603][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1456.326680][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1456.351018][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1456.411567][T21130] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.424354][T21130] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.442664][T21130] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.461710][T21130] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.381836][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1457.405819][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1457.443717][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1457.525473][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1457.564931][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1457.572577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1457.852901][T17208] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1458.237205][T17208] usb 7-1: config 0 has no interfaces? [ 1458.652896][T17208] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 1458.676419][T17208] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.690390][T17208] usb 7-1: Product: syz [ 1458.697574][T17208] usb 7-1: Manufacturer: syz [ 1458.702313][T17208] usb 7-1: SerialNumber: syz [ 1458.763740][T17208] usb 7-1: config 0 descriptor?? [ 1458.991377][T19299] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.077220][ T4390] usb 7-1: USB disconnect, device number 2 [ 1459.106760][T19299] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.212234][T19299] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.341158][T19299] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.381001][T21454] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3592'. [ 1460.545102][T19299] tipc: Disabling bearer [ 1460.553557][T19299] tipc: Left network mode [ 1460.599142][T21443] chnl_net:caif_netlink_parms(): no params data found [ 1460.795436][T17770] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1461.368448][T17722] Bluetooth: hci2: command 0x0409 tx timeout [ 1461.432792][T17770] usb 6-1: Using ep0 maxpacket: 16 [ 1461.618732][T21495] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3603'. [ 1461.633174][T17770] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1461.710313][T17770] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1461.745176][T21508] CIFS: Attempting to mount \\127.0.0.1\share [ 1461.746668][T17770] usb 6-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1461.768093][T17770] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.778658][T21443] bridge0: port 1(bridge_slave_0) entered blocking state [ 1461.800802][T17770] usb 6-1: config 0 descriptor?? [ 1461.854705][T21443] bridge0: port 1(bridge_slave_0) entered disabled state [ 1461.886286][T21443] device bridge_slave_0 entered promiscuous mode [ 1461.894995][T21443] bridge0: port 2(bridge_slave_1) entered blocking state [ 1461.903147][T21518] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 1461.915658][T21443] bridge0: port 2(bridge_slave_1) entered disabled state [ 1461.925964][T21508] CIFS: VFS: \\127.0.0.1 Send error in SessSetup = -11 [ 1461.929447][T21443] device bridge_slave_1 entered promiscuous mode [ 1461.972332][T21443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1461.974387][T21508] CIFS: VFS: cifs_mount failed w/return code = -11 [ 1461.986928][T21443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1462.126308][T21443] team0: Port device team_slave_0 added [ 1462.146734][T21443] team0: Port device team_slave_1 added [ 1462.303213][ T1346] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1462.334550][T17770] hid-generic 0003:057E:2019.0001: hidraw0: USB HID v0.05 Device [HID 057e:2019] on usb-dummy_hcd.5-1/input0 [ 1462.393210][T21443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1462.407384][T21443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1462.438387][T21443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1462.483780][T21443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1462.491726][T21443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1462.599927][T21443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1462.726761][T21443] device hsr_slave_0 entered promiscuous mode [ 1462.744170][T21443] device hsr_slave_1 entered promiscuous mode [ 1462.752860][T21443] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1462.760909][T21545] tmpfs: Unknown parameter 'quota' [ 1462.780419][T21443] Cannot create hsr debugfs directory [ 1462.797319][T17770] usb 6-1: USB disconnect, device number 2 [ 1462.842830][ T1346] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1462.870551][ T1346] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.913562][T21551] ubi15: attaching mtd0 [ 1462.921470][ T1346] usb 7-1: Product: syz [ 1462.941921][ T1346] usb 7-1: Manufacturer: syz [ 1462.956339][ T1346] usb 7-1: SerialNumber: syz [ 1462.995666][ T1346] usb 7-1: config 0 descriptor?? [ 1463.028801][T21557] overlayfs: conflicting lowerdir path [ 1463.047027][ T1346] i2c-tiny-usb 7-1:0.0: version 6d.cc found at bus 007 address 003 [ 1463.144277][T21561] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1463.262805][ T1346] (null): failure setting delay to 10us [ 1463.270504][ T1346] i2c-tiny-usb: probe of 7-1:0.0 failed with error -5 [ 1463.345902][ T1346] usb 7-1: USB disconnect, device number 3 [ 1463.357527][T19299] device hsr_slave_0 left promiscuous mode [ 1463.388948][T19299] device hsr_slave_1 left promiscuous mode [ 1463.458405][T19299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1463.466620][ T4228] Bluetooth: hci2: command 0x041b tx timeout [ 1463.483112][T19299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1463.514516][T19299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1463.539216][T19299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1463.572426][T19299] device bridge_slave_1 left promiscuous mode [ 1463.585273][T19299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1463.607206][T19299] device bridge_slave_0 left promiscuous mode [ 1463.613636][T19299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.739517][T19299] device veth1_macvtap left promiscuous mode [ 1463.767562][T19299] device veth0_macvtap left promiscuous mode [ 1463.815785][T19299] device veth1_vlan left promiscuous mode [ 1463.870930][T19299] device veth0_vlan left promiscuous mode [ 1465.520277][T21604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3634'. [ 1465.543097][ T1107] Bluetooth: hci2: command 0x040f tx timeout [ 1465.559155][T19299] team0 (unregistering): Port device team_slave_1 removed [ 1465.590696][T19299] team0 (unregistering): Port device team_slave_0 removed [ 1465.619625][T19299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1465.658288][T19299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1465.676134][ T1346] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1465.806324][T19299] bond0 (unregistering): Released all slaves [ 1465.942772][ T1346] usb 7-1: Using ep0 maxpacket: 8 [ 1466.062909][ T1346] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1466.080308][ T1346] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1466.090388][ T1346] usb 7-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0xB6, skipping [ 1466.101591][ T1346] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1466.115679][ T1346] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1466.124801][ T1346] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.183796][ T1346] usbtmc 7-1:16.0: bulk endpoints not found [ 1466.303889][ T4228] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1466.334167][T21443] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1466.349516][T21443] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1466.360184][T21443] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1466.386146][T21443] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1466.532396][T21443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1466.569460][ T1339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1466.599349][ T1339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1466.612775][ T4228] usb 2-1: Using ep0 maxpacket: 32 [ 1466.620848][T21443] 8021q: adding VLAN 0 to HW filter on device team0 [ 1466.645685][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1466.669037][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1466.698001][ T4380] bridge0: port 1(bridge_slave_0) entered blocking state [ 1466.705158][ T4380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1466.745026][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1466.862747][ T4228] usb 2-1: config 183 has an invalid interface number: 124 but max is 0 [ 1466.871140][ T4228] usb 2-1: config 183 has no interface number 0 [ 1466.877943][ T4228] usb 2-1: config 183 interface 124 altsetting 5 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1466.889066][ T4228] usb 2-1: config 183 interface 124 altsetting 5 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 1466.900428][ T4228] usb 2-1: config 183 interface 124 altsetting 5 endpoint 0x1 has an invalid bInterval 92, changing to 7 [ 1466.912134][ T4228] usb 2-1: config 183 interface 124 altsetting 5 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1466.919101][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1466.932291][ T4228] usb 2-1: config 183 interface 124 altsetting 5 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1466.938868][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1467.202094][ T4558] bridge0: port 2(bridge_slave_1) entered blocking state [ 1467.209315][ T4558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1467.574731][ T4228] usb 2-1: config 183 interface 124 has no altsetting 0 [ 1467.589779][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1467.679859][ T4230] Bluetooth: hci2: command 0x0419 tx timeout [ 1467.732571][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1467.742128][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1467.754317][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1467.763471][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1467.778194][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1467.802255][T21443] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1467.818629][T21443] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1467.832526][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1467.840343][ T4228] usb 2-1: New USB device found, idVendor=1199, idProduct=0224, bcdDevice=bc.e6 [ 1467.855850][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1467.866373][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.908313][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1467.917328][ T4228] usb 2-1: Product: syz [ 1467.948259][ T4228] usb 2-1: Manufacturer: syz [ 1467.962200][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1468.032977][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1468.113433][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1468.294879][ T4228] usb 2-1: SerialNumber: syz [ 1468.374332][ T4390] usb 7-1: USB disconnect, device number 4 [ 1468.546949][T21681] jffs2: notice: (21681) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1469.237674][ T1339] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1469.254483][ T4228] sierra 2-1:183.124: Sierra USB modem converter detected [ 1469.263162][ T1339] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1469.279280][T21443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1469.423868][ T4228] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 1469.431805][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1469.470996][T17722] hid-generic 0F98:0004:0009.0002: unknown main item tag 0x0 [ 1469.485957][ T4228] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 1469.503400][T17722] hid-generic 0F98:0004:0009.0002: unknown main item tag 0x0 [ 1469.532969][ T4228] usb 2-1: USB disconnect, device number 2 [ 1469.542375][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1469.572213][T21698] qnx6: unable to read the first superblock [ 1469.590654][T17722] hid-generic 0F98:0004:0009.0002: unknown main item tag 0x0 [ 1469.666758][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1469.693516][ T4228] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1469.699587][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1469.712218][T17722] hid-generic 0F98:0004:0009.0002: unknown main item tag 0x0 [ 1469.732261][T17722] hid-generic 0F98:0004:0009.0002: unknown main item tag 0x0 [ 1469.855322][ T4228] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 1469.924479][T17722] hid-generic 0F98:0004:0009.0002: unknown main item tag 0x0 [ 1470.121250][T17722] hid-generic 0F98:0004:0009.0002: unknown main item tag 0x0 [ 1470.143629][ T4228] sierra 2-1:183.124: device disconnected [ 1470.288088][T21443] device veth0_vlan entered promiscuous mode [ 1470.300817][T21443] device veth1_vlan entered promiscuous mode [ 1470.338693][T17722] hid-generic 0F98:0004:0009.0002: unknown main item tag 0x0 [ 1470.358283][T17722] hid-generic 0F98:0004:0009.0002: unknown main item tag 0x0 [ 1470.368389][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1470.383380][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1470.413431][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1470.451560][T12889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1470.460121][T17722] hid-generic 0F98:0004:0009.0002: unknown main item tag 0x0 [ 1470.471595][T12889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1470.499669][T17722] hid-generic 0F98:0004:0009.0002: unknown main item tag 0x0 [ 1470.517739][T21443] device veth0_macvtap entered promiscuous mode [ 1470.527638][T17722] hid-generic 0F98:0004:0009.0002: unknown main item tag 0x0 [ 1470.553255][T21443] device veth1_macvtap entered promiscuous mode [ 1470.566621][T17722] hid-generic 0F98:0004:0009.0002: unknown main item tag 0x0 [ 1470.585086][T17722] hid-generic 0F98:0004:0009.0002: unknown main item tag 0x0 [ 1470.617547][T17722] hid-generic 0F98:0004:0009.0002: unknown main item tag 0x0 [ 1470.632761][T17722] hid-generic 0F98:0004:0009.0002: unknown main item tag 0x0 [ 1470.648692][T21443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1470.650613][T17722] hid-generic 0F98:0004:0009.0002: unknown main item tag 0x0 [ 1470.702951][T21443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1470.714117][T17722] hid-generic 0F98:0004:0009.0002: hidraw0: HID v0.04 Device [syz1] on syz0 [ 1470.742902][T21443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1470.801708][T21443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1470.872663][T21443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1470.922736][T21443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.055949][T21715] fido_id[21715]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1471.122658][T21443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1471.212278][T21443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.241732][T21724] syz.0.3657 uses obsolete (PF_INET,SOCK_PACKET) [ 1471.628150][T21443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1471.717628][T21443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1471.821944][T21443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.922966][T21443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1471.982662][T21443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1472.032966][T21443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1472.092696][T21443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1472.872685][T21443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1472.892654][T21443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1472.937347][T21443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1472.995729][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1473.011166][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1473.034371][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1473.056613][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1473.102152][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1473.153428][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1473.175873][T21443] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.193133][T21443] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.235311][T21443] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.396162][T21443] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1474.832694][T21756] netlink: 'syz.0.3665': attribute type 4 has an invalid length. [ 1475.765834][T21757] netlink: 'syz.0.3665': attribute type 4 has an invalid length. [ 1475.870143][ T1218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1475.884269][ T1218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1475.912149][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1475.966554][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1475.987232][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1476.035104][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1476.060593][T21783] autofs4:pid:21783:autofs_fill_super: called with bogus options [ 1476.137669][ T4228] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1477.907590][ T4390] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 1477.923134][ T4228] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1477.940879][T21808] ceph: No mds server is up or the cluster is laggy [ 1477.956105][ T4390] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 1478.026463][ T4228] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1478.036732][ T4230] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1478.045080][ T4228] usb 7-1: config 1 interface 0 altsetting 37 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1478.058988][ T4228] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1478.130129][T21807] process '/newroot/52/file0' started with executable stack [ 1478.216194][T21816] CIFS: Attempting to mount \\127.0.0.1\share [ 1478.262987][ T4228] usb 7-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 1478.280674][ T4228] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.291421][T21819] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 1478.300719][T21816] CIFS: VFS: \\127.0.0.1 Send error in SessSetup = -11 [ 1478.315391][T21816] CIFS: VFS: cifs_mount failed w/return code = -11 [ 1478.325254][ T4228] usb 7-1: Product: syz [ 1478.329812][ T4228] usb 7-1: Manufacturer: syz [ 1478.335966][ T4228] usb 7-1: SerialNumber: syz [ 1478.415348][ T4230] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 1478.452967][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.699857][ T4228] snd-usb-audio: probe of 7-1:1.0 failed with error -2 [ 1478.722502][ T4228] usb 7-1: USB disconnect, device number 5 [ 1479.030605][T21803] tipc: Started in network mode [ 1479.050255][T21803] tipc: Node identity ac14140f, cluster identity 4711 [ 1479.105538][T21803] tipc: New replicast peer: 172.30.0.4 [ 1479.160417][T21803] tipc: Enabled bearer , priority 10 [ 1479.207447][T21851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3678'. [ 1479.289131][T21851] tipc: Disabling bearer [ 1479.487430][ T4230] input: HID 04d8:c002 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:04D8:C002.0003/input/input6 [ 1479.616310][T20790] udevd[20790]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1479.677423][T21859] CIFS: Attempting to mount \\127.0.0.1\share [ 1479.932889][ T4230] rc_core: IR keymap rc-rc6-mce not found [ 1479.939301][ T4230] Registered IR keymap rc-empty [ 1480.135568][ T4230] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:04D8:C002.0003/rc/rc0 [ 1480.354343][ T4230] input: HID 04d8:c002 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:04D8:C002.0003/rc/rc0/input7 [ 1480.413905][T21859] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1481.795146][ T4230] hid-picolcd 0003:04D8:C002.0003: No report with id 0x94 found [ 1481.835288][ T4230] hid-picolcd 0003:04D8:C002.0003: failed to configure display [ 1482.058269][ T4230] usb 4-1: USB disconnect, device number 2 [ 1482.064491][ T1107] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1482.942729][ T1107] usb 6-1: Using ep0 maxpacket: 32 [ 1483.063355][ T1107] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1483.283210][ T1107] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1483.307043][ T1107] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1483.338295][ T1107] usb 6-1: Product: syz [ 1483.355900][T21915] overlayfs: failed to clone upperpath [ 1483.362297][ T1107] usb 6-1: Manufacturer: syz [ 1483.406161][ T1107] usb 6-1: SerialNumber: syz [ 1483.416165][T21915] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 1483.502224][ T1107] usb 6-1: config 0 descriptor?? [ 1483.523881][T21919] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1483.573011][T21869] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1483.593487][ T1107] hub 6-1:0.0: bad descriptor, ignoring hub [ 1483.606027][ T1107] hub: probe of 6-1:0.0 failed with error -5 [ 1483.873235][ T1107] usb 6-1: USB disconnect, device number 3 [ 1484.062779][ T4230] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1484.426774][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.433352][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.020484][T21945] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3729'. [ 1485.052756][ T4230] usb 4-1: Using ep0 maxpacket: 32 [ 1485.175941][T21953] fuse: Bad value for 'fd' [ 1485.232136][T21955] netlink: 120 bytes leftover after parsing attributes in process `syz.5.3733'. [ 1485.320717][T21958] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3734'. [ 1485.347572][T21958] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3734'. [ 1485.692050][T21965] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3737'. [ 1485.723116][T21965] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3737'. [ 1486.298054][ T4230] usb 4-1: device descriptor read/all, error -71 [ 1486.382803][T17208] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 1486.488187][T21991] CIFS: Attempting to mount \\127.0.0.1\share [ 1486.546540][T21992] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 1486.556159][T21991] CIFS: VFS: \\127.0.0.1 Send error in SessSetup = -11 [ 1486.572846][T21991] CIFS: VFS: cifs_mount failed w/return code = -11 [ 1486.782951][T17208] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1486.784783][T22002] serio: Serial port ttyS3 [ 1486.821831][T17208] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1486.957583][T22006] overlayfs: failed to clone upperpath [ 1486.983433][T17208] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1486.992533][T17208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1487.025422][T17208] usb 2-1: SerialNumber: syz [ 1487.074175][T17208] usb 2-1: bad CDC descriptors [ 1487.278456][ T4390] usb 2-1: USB disconnect, device number 3 [ 1490.631102][T22046] device wlan0 entered promiscuous mode [ 1490.805113][T22044] Process accounting resumed [ 1491.164304][ T4228] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1491.542872][ T4228] usb 2-1: Using ep0 maxpacket: 32 [ 1491.703849][ T4228] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1491.990758][ T4228] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1492.203014][ T4228] usb 2-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 1492.272772][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.299832][ T4228] usb 2-1: Product: syz [ 1492.310267][T22076] device-mapper: table: 248:1: thin-pool: Invalid argument count [ 1492.329940][ T4228] usb 2-1: Manufacturer: syz [ 1492.345277][ T4228] usb 2-1: SerialNumber: syz [ 1492.376314][T22076] device-mapper: ioctl: error adding target to table [ 1492.677180][ T4228] usb 2-1: interface 1 not found [ 1492.705877][ T4228] usb 2-1: USB disconnect, device number 4 [ 1492.881427][T22082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3775'. [ 1492.922576][T22082] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1492.931559][T22082] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1492.940372][T22082] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1492.949337][T22082] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1493.042655][T22082] device vxlan0 entered promiscuous mode [ 1493.053629][T22083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3775'. [ 1495.119650][T22102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1496.035025][T22119] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3788'. [ 1497.547665][ T26] audit: type=1326 audit(1786180535.971:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22121 comm="syz.5.3790" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad461e40d9 code=0x0 [ 1497.617351][T22133] Process accounting resumed [ 1497.668892][T22140] netlink: 'syz.3.3795': attribute type 1 has an invalid length. [ 1497.955358][T22145] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3798'. [ 1498.003099][ T7153] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1498.443623][ T7153] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 1498.502792][ T7153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.953288][ T4228] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1499.001723][T22142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3797'. [ 1499.232863][ T4228] usb 6-1: Using ep0 maxpacket: 32 [ 1499.543751][ T4228] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1499.573544][ T4228] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.685785][ T4228] usb 6-1: Product: syz [ 1499.714795][ T7153] input: HID 04d8:c002 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:04D8:C002.0004/input/input8 [ 1499.723769][ T4228] usb 6-1: Manufacturer: syz [ 1499.761073][ T4228] usb 6-1: SerialNumber: syz [ 1499.786018][ T4228] usb 6-1: config 0 descriptor?? [ 1499.792888][ T7153] rc_core: IR keymap rc-rc6-mce not found [ 1499.798713][ T7153] Registered IR keymap rc-empty [ 1499.806169][ T7153] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:04D8:C002.0004/rc/rc0 [ 1499.822584][ T7153] input: HID 04d8:c002 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:04D8:C002.0004/rc/rc0/input9 [ 1499.894813][ T7153] hid-picolcd 0003:04D8:C002.0004: No report with id 0x94 found [ 1499.905002][ T7153] hid-picolcd 0003:04D8:C002.0004: failed to configure display [ 1500.384559][ T4228] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1500.507903][ T4228] dvb-usb: bulk message failed: -22 (4/0) [ 1500.547981][ T4228] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1500.580763][ T4228] dvb-usb: bulk message failed: -22 (5/0) [ 1500.626278][ T4228] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1500.732111][ T4228] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1500.870341][ T13] usb 4-1: USB disconnect, device number 5 [ 1500.896913][ T4228] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1501.097568][ T4228] usb 6-1: media controller created [ 1501.459705][T22176] Process accounting resumed [ 1501.488607][ T4228] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1501.770651][ T4228] usb 6-1: selecting invalid altsetting 3 [ 1502.398250][T22195] ODEBUG: Out of memory. ODEBUG disabled [ 1503.005112][ T4228] ttusb2: set interface to alts=3 failed [ 1503.076238][T22197] jffs2: notice: (22197) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1503.187164][ T4228] DVB: Unable to find symbol tda10086_attach() [ 1503.210521][ T4228] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1503.212926][T22206] netlink: 'syz.5.3817': attribute type 1 has an invalid length. [ 1503.248840][T22206] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1503.291938][T22206] device macvlan2 entered promiscuous mode [ 1503.298594][T22206] device bond1 entered promiscuous mode [ 1503.317384][ T4228] dvb-usb: bulk message failed: -22 (4/0) [ 1503.325307][ T4228] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1503.331498][T22206] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1503.345532][T22206] team0: Port device macvlan2 added [ 1503.354033][ T4228] dvb-usb: bulk message failed: -22 (5/0) [ 1503.359096][T22209] bond1: (slave ip6gretap2): making interface the new active one [ 1503.374304][T22209] device ip6gretap2 entered promiscuous mode [ 1503.374410][ T4228] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1503.382187][T22209] bond1: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1503.397943][ T4228] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1503.418739][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1503.432766][ T1107] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1503.443161][ T4228] usb 6-1: USB disconnect, device number 4 [ 1503.454188][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 1503.472747][ T1346] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1503.528336][ T4228] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1503.582465][T22214] kernel profiling enabled (shift: 9) [ 1503.732805][ T1346] usb 7-1: Using ep0 maxpacket: 32 [ 1503.852925][ T1346] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 1503.862791][ T1107] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1503.886118][ T1346] usb 7-1: config 0 has no interface number 0 [ 1504.093230][ T1346] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1504.124748][ T1346] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.192415][ T1346] usb 7-1: Product: syz [ 1504.223520][ T1346] usb 7-1: Manufacturer: syz [ 1504.280225][ T1346] usb 7-1: SerialNumber: syz [ 1504.411806][ T1346] usb 7-1: config 0 descriptor?? [ 1504.532750][ T1107] usb 2-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 1504.539926][ T1346] smsc95xx v2.0.0 [ 1504.543297][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1504.560471][T22217] Process accounting resumed [ 1504.587852][ T1107] usb 2-1: can't set config #1, error -71 [ 1504.595395][ T1107] usb 2-1: USB disconnect, device number 5 [ 1505.092441][T22232] CIFS: Attempting to mount \\127.0.0.1\share [ 1505.863166][ T1346] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 1506.020557][T22232] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1506.031764][T22249] jffs2: notice: (22249) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1506.095680][ T1346] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1506.133053][ T1346] smsc95xx: probe of 7-1:0.67 failed with error -71 [ 1506.223993][ T1346] usb 7-1: USB disconnect, device number 6 [ 1506.232784][ T4390] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1506.583215][ T4390] usb 6-1: not running at top speed; connect to a high speed hub [ 1506.723306][ T4390] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1506.800023][ T4390] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1506.904392][ T4390] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.237600][ T4390] usb 6-1: Found UVC 1.00 device (046d:0825) [ 1510.047787][ T4390] usb 6-1: No streaming interface found for terminal 2. [ 1510.319702][ T4390] usb 6-1: USB disconnect, device number 5 [ 1510.482330][T22267] Process accounting resumed [ 1511.123426][T22293] device syzkaller0 entered promiscuous mode [ 1512.612707][ T7153] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1513.923105][ T7153] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1514.199513][ T7153] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.232151][ T7153] usb 7-1: config 0 descriptor?? [ 1514.329014][T22318] Process accounting resumed [ 1514.994133][ T7153] ath6kl: Failed to submit usb control message: -71 [ 1515.010102][ T7153] ath6kl: unable to send the bmi data to the device: -71 [ 1515.040847][ T7153] ath6kl: Unable to send get target info: -71 [ 1515.092988][ T7153] ath6kl: Failed to init ath6kl core: -71 [ 1515.230111][ T7153] ath6kl_usb: probe of 7-1:0.0 failed with error -71 [ 1515.266692][ T7153] usb 7-1: USB disconnect, device number 7 [ 1516.166483][T22365] jffs2: notice: (22365) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1517.262847][ T4230] Bluetooth: hci5: command 0x0406 tx timeout [ 1517.405376][T22393] tmpfs: Bad value for 'mpol' [ 1518.213787][T22402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3878'. [ 1518.425491][ T13] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1518.445714][ T13] Bluetooth: hci3: Injecting HCI hardware error event [ 1518.467356][T20588] Bluetooth: hci3: hardware error 0x00 [ 1518.732779][ T1346] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 1518.752723][ T13] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1519.153301][ T13] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1519.788283][ T13] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1519.802216][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1519.817111][ T13] usb 2-1: Product: syz [ 1519.821841][ T13] usb 2-1: Manufacturer: syz [ 1519.823966][ T26] audit: type=1326 audit(1786180558.251:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22424 comm="syz.5.3886" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad461e40d9 code=0x0 [ 1519.828360][ T13] usb 2-1: SerialNumber: syz [ 1519.862897][ T1346] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1519.952958][ T1346] usb 4-1: config 100 has an invalid interface number: 173 but max is 0 [ 1519.962754][T17208] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 1519.972347][ T1346] usb 4-1: config 100 has no interface number 0 [ 1519.985629][ T1346] usb 4-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 1519.999692][ T1346] usb 4-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1520.012483][ T1346] usb 4-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 26368, setting to 8 [ 1520.024725][ T1346] usb 4-1: config 100 interface 173 has no altsetting 0 [ 1520.133004][ T13] usb 2-1: Limiting number of CPorts to U8_MAX [ 1520.141570][ T13] usb 2-1: Not enough endpoints found in device, aborting! [ 1520.264183][ T1346] usb 4-1: string descriptor 0 read error: -22 [ 1520.272372][ T1346] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 1520.287168][ T1346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.323104][T22413] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1520.330411][T17208] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 1520.340475][T22413] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1520.347860][T17208] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1520.360359][ T4230] usb 2-1: USB disconnect, device number 6 [ 1520.364576][ T1346] metro_usb 4-1:100.173: Metrologic USB to Serial converter detected [ 1520.385342][ T1346] usb 4-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1520.432936][T17208] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1520.453350][T17208] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1520.462252][T17208] usb 7-1: Manufacturer: syz [ 1520.486187][T17208] usb 7-1: config 0 descriptor?? [ 1520.604045][T17208] rc_core: IR keymap rc-hauppauge not found [ 1520.610133][T17208] Registered IR keymap rc-empty [ 1520.623618][T22413] metro-usb ttyUSB0: metrousb_open - failed to configure device, error code=-8 [ 1520.666102][T17208] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1520.687300][ T4230] usb 4-1: USB disconnect, device number 6 [ 1520.705056][T17208] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input10 [ 1520.716725][ T4230] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1520.828785][T17208] usb 7-1: USB disconnect, device number 8 [ 1520.948979][ T4230] metro_usb 4-1:100.173: device disconnected [ 1521.925450][T22448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1521.989049][T22450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1522.142685][T22459] 9pnet: p9_fd_create_tcp (22459): problem binding to privport [ 1522.200836][ T1346] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1522.642791][ T1346] usb 2-1: Using ep0 maxpacket: 8 [ 1522.901405][T22466] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1522.910993][T22466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1522.918951][T22466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1522.929646][T22466] device bridge_slave_0 left promiscuous mode [ 1522.936977][T22466] bridge0: port 1(bridge_slave_0) entered disabled state [ 1522.952934][ T1346] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1522.966586][ T1346] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1523.028030][ T1346] usb 2-1: Product: syz [ 1523.051188][ T1346] usb 2-1: Manufacturer: syz [ 1523.066687][ T1346] usb 2-1: SerialNumber: syz [ 1523.109851][ T1346] usb 2-1: config 0 descriptor?? [ 1523.309014][ T1346] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1523.521781][T22466] device bridge_slave_1 left promiscuous mode [ 1523.630298][T22466] bridge0: port 2(bridge_slave_1) entered disabled state [ 1523.715264][T22466] bond0: (slave bond_slave_0): Releasing backup interface [ 1523.770365][T22466] bond0: (slave bond_slave_1): Releasing backup interface [ 1523.966314][T22466] team0: Port device team_slave_0 removed [ 1524.052854][T22466] team0: Port device team_slave_1 removed [ 1524.081705][T22466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1524.111295][T22466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1524.172312][T22466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1524.202430][T22466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1524.342395][T22480] tmpfs: Bad value for 'mpol' [ 1524.403108][ T1346] gspca_sq905: bulk read fail (-22) len 0/4 [ 1524.411829][ T1346] sq905: probe of 2-1:0.0 failed with error -5 [ 1524.428919][T22482] device gretap0 entered promiscuous mode [ 1524.437469][T22482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3903'. [ 1524.449038][T22482] device gretap0 left promiscuous mode [ 1524.609722][T22490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3907'. [ 1524.637974][ T4230] usb 2-1: USB disconnect, device number 7 [ 1524.700480][T22494] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3909'. [ 1525.128877][T22492] bridge0: port 2(bridge_slave_1) entered disabled state [ 1525.136166][T22492] bridge0: port 1(bridge_slave_0) entered disabled state [ 1525.162872][ T4230] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1525.382218][T22516] input: syz1 as /devices/virtual/input/input11 [ 1525.553256][ T4230] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1525.568898][ T4230] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1525.579970][ T4230] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1525.590917][ T4230] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1525.643081][T22501] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1525.768049][T22492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1525.846839][T22492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1526.834201][T22492] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.854285][T22492] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.867868][T22492] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.877952][T22492] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.197146][T22492] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1527.206209][T22492] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1527.215151][T22492] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1527.224099][T22492] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1527.273990][T22503] netlink: 'syz.0.3913': attribute type 1 has an invalid length. [ 1528.658183][T22559] netlink: 'syz.1.3933': attribute type 1 has an invalid length. [ 1528.676613][ T13] usb 6-1: USB disconnect, device number 6 [ 1529.049067][T22559] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1529.120877][T22562] device macvlan2 entered promiscuous mode [ 1529.148517][T22562] device bond1 entered promiscuous mode [ 1529.196340][T22562] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1529.235994][T22562] team0: Port device macvlan2 added [ 1529.431169][T22584] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3938'. [ 1530.451729][T22596] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1530.625778][T22611] netlink: 'syz.0.3948': attribute type 1 has an invalid length. [ 1530.661257][T22611] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1530.679637][T22611] device macvlan2 entered promiscuous mode [ 1530.692124][T22611] device bond1 entered promiscuous mode [ 1530.700414][T22611] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1530.714083][T22611] team0: Port device macvlan2 added [ 1530.811391][T22619] device bridge1 entered promiscuous mode [ 1530.879126][T22619] team0: Port device bridge1 added [ 1530.905009][T22626] bridge0: port 3(team0) entered blocking state [ 1530.919468][T22626] bridge0: port 3(team0) entered disabled state [ 1530.951960][T22626] device team0 entered promiscuous mode [ 1530.962093][T22626] device team_slave_0 entered promiscuous mode [ 1530.977626][T22626] device team_slave_1 entered promiscuous mode [ 1531.031352][T22626] bridge0: port 3(team0) entered blocking state [ 1531.037091][T15339] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 1531.038189][T22626] bridge0: port 3(team0) entered forwarding state [ 1531.739304][T22645] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3961'. [ 1531.748732][T22645] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3961'. [ 1532.189719][T22652] orangefs_mount: mount request failed with -4 [ 1532.365994][T15339] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 1532.389465][T15339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1532.509626][T22640] bridge0: port 2(bridge_slave_1) entered disabled state [ 1532.517424][T22640] bridge0: port 1(bridge_slave_0) entered disabled state [ 1532.527698][T15339] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1532.544073][T15339] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1532.562121][T15339] usb 2-1: Manufacturer: syz [ 1532.599770][T15339] usb 2-1: config 0 descriptor?? [ 1532.758095][T15339] rc_core: IR keymap rc-hauppauge not found [ 1532.768194][T15339] Registered IR keymap rc-empty [ 1532.782522][T15339] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1532.804469][T15339] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input12 [ 1532.878923][T22640] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1532.892796][T17722] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1532.918594][T15339] usb 2-1: USB disconnect, device number 8 [ 1532.934044][T22640] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1533.142703][T17722] usb 4-1: Using ep0 maxpacket: 8 [ 1533.229443][T22640] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1533.238647][T22640] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1533.248064][T22640] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1533.256954][T22640] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1533.284053][T17722] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1533.295110][T17722] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1533.308273][T17722] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1533.315369][T17722] usb 4-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 1533.324576][T17722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.334330][T17722] usb 4-1: config 0 descriptor?? [ 1533.552905][T22640] device bond1 left promiscuous mode [ 1533.558454][T22640] device macvlan2 left promiscuous mode [ 1533.582840][T22656] netlink: 'syz.5.3964': attribute type 1 has an invalid length. [ 1533.815782][T17722] hid-generic 0003:0853:0148.0005: unknown main item tag 0x0 [ 1533.823464][T17722] hid-generic 0003:0853:0148.0005: unknown main item tag 0x0 [ 1533.831583][T17722] hid-generic 0003:0853:0148.0005: unknown main item tag 0x0 [ 1533.839322][T17722] hid-generic 0003:0853:0148.0005: unknown main item tag 0x0 [ 1533.846921][T17722] hid-generic 0003:0853:0148.0005: unknown main item tag 0x0 [ 1533.854686][T17722] hid-generic 0003:0853:0148.0005: unknown main item tag 0x0 [ 1533.862134][T17722] hid-generic 0003:0853:0148.0005: unknown main item tag 0x0 [ 1533.874305][T17722] hid-generic 0003:0853:0148.0005: unknown main item tag 0x0 [ 1533.899661][T17722] hid-generic 0003:0853:0148.0005: unknown main item tag 0x0 [ 1533.910672][T17722] hid-generic 0003:0853:0148.0005: unknown main item tag 0x0 [ 1533.918565][T17722] hid-generic 0003:0853:0148.0005: unknown main item tag 0x0 [ 1533.926644][T17722] hid-generic 0003:0853:0148.0005: unknown main item tag 0x0 [ 1533.935219][T17722] hid-generic 0003:0853:0148.0005: unknown main item tag 0x0 [ 1533.943306][T17722] hid-generic 0003:0853:0148.0005: unknown main item tag 0x0 [ 1533.950820][T17722] hid-generic 0003:0853:0148.0005: unknown main item tag 0x0 [ 1533.958898][T17722] hid-generic 0003:0853:0148.0005: unknown main item tag 0x0 [ 1533.966829][T17722] hid-generic 0003:0853:0148.0005: unknown main item tag 0x0 [ 1533.975595][T17722] hid-generic 0003:0853:0148.0005: unknown main item tag 0x0 [ 1533.983712][T17722] hid-generic 0003:0853:0148.0005: unknown main item tag 0x0 [ 1533.991205][T17722] hid-generic 0003:0853:0148.0005: unknown main item tag 0x0 [ 1533.999098][T17722] hid-generic 0003:0853:0148.0005: unknown main item tag 0x0 [ 1534.006898][T17722] hid-generic 0003:0853:0148.0005: unknown main item tag 0x0 [ 1534.015360][T17722] hid-generic 0003:0853:0148.0005: unknown main item tag 0x0 [ 1534.024531][T17722] hid-generic 0003:0853:0148.0005: unknown main item tag 0x0 [ 1534.033051][T17722] hid-generic 0003:0853:0148.0005: unknown main item tag 0x0 [ 1534.040578][T17722] hid-generic 0003:0853:0148.0005: unknown main item tag 0x0 [ 1534.049020][T17722] hid-generic 0003:0853:0148.0005: unknown main item tag 0x0 [ 1534.057168][T17722] hid-generic 0003:0853:0148.0005: unknown main item tag 0x0 [ 1534.064976][T17722] hid-generic 0003:0853:0148.0005: unknown main item tag 0x0 [ 1534.072457][T17722] hid-generic 0003:0853:0148.0005: unknown main item tag 0x0 [ 1534.080541][T17722] hid-generic 0003:0853:0148.0005: unknown main item tag 0x0 [ 1534.088551][T17722] hid-generic 0003:0853:0148.0005: unknown main item tag 0x0 [ 1534.096855][T17722] hid-generic 0003:0853:0148.0005: unknown main item tag 0x0 [ 1534.104760][T17722] hid-generic 0003:0853:0148.0005: unknown main item tag 0x0 [ 1534.112238][T17722] hid-generic 0003:0853:0148.0005: unknown main item tag 0x0 [ 1534.120525][T17722] hid-generic 0003:0853:0148.0005: unknown main item tag 0x0 [ 1534.128302][T17722] hid-generic 0003:0853:0148.0005: unknown main item tag 0x0 [ 1534.137018][T17722] hid-generic 0003:0853:0148.0005: unknown main item tag 0x0 [ 1534.145397][T17722] hid-generic 0003:0853:0148.0005: unknown main item tag 0x0 [ 1534.153278][T17722] hid-generic 0003:0853:0148.0005: unknown main item tag 0x0 [ 1534.166774][T17722] hid-generic 0003:0853:0148.0005: hidraw0: USB HID v0.05 Device [HID 0853:0148] on usb-dummy_hcd.3-1/input0 [ 1534.182931][T17722] usb 4-1: USB disconnect, device number 7 [ 1534.251360][T22682] fido_id[22682]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1534.352848][ T4230] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 1534.579590][T22695] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3975'. [ 1534.631970][T22699] loop8: detected capacity change from 0 to 7 [ 1534.772877][T20790] Dev loop8: unable to read RDB block 7 [ 1534.773640][T22703] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3975'. [ 1534.778651][T20790] loop8: unable to read partition table [ 1534.824723][T20790] loop8: partition table beyond EOD, truncated [ 1534.893012][ T4230] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1535.442196][T22699] Dev loop8: unable to read RDB block 7 [ 1535.528169][T22699] loop8: unable to read partition table [ 1535.570625][T22699] loop8: partition table beyond EOD, truncated [ 1535.625879][T22699] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1535.901015][T22709] netlink: 'syz.0.3979': attribute type 1 has an invalid length. [ 1536.298374][T22709] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1536.309337][ T4230] usb 7-1: config 100 has an invalid interface number: 173 but max is 0 [ 1536.318264][ T4230] usb 7-1: config 100 has no interface number 0 [ 1536.324825][ T4230] usb 7-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 1536.335556][ T4230] usb 7-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1536.348226][ T4230] usb 7-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 26368, setting to 8 [ 1536.352402][T22710] device macvlan3 entered promiscuous mode [ 1536.360015][ T4230] usb 7-1: config 100 interface 173 has no altsetting 0 [ 1536.414503][T22710] device bond3 entered promiscuous mode [ 1536.435429][T22710] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1536.541313][T22710] team0: Port device macvlan3 added [ 1536.590344][T22723] netlink: 'syz.5.3983': attribute type 11 has an invalid length. [ 1536.615305][ T4230] usb 7-1: string descriptor 0 read error: -22 [ 1536.639219][ T4230] usb 7-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 1536.658837][ T4230] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.671572][T22726] overlayfs: failed to clone lowerpath [ 1536.713487][T22680] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1536.731122][T22680] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1536.812840][ T4230] usb 7-1: can't set config #100, error -71 [ 1536.838673][ T4230] usb 7-1: USB disconnect, device number 9 [ 1536.856785][T22729] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3985'. [ 1536.953224][T22729] device vlan2 entered promiscuous mode [ 1536.971818][T22729] device gretap0 entered promiscuous mode [ 1537.761180][T22756] netlink: 'syz.6.3995': attribute type 1 has an invalid length. [ 1537.821740][T22756] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1537.843442][T22756] device macvlan2 entered promiscuous mode [ 1537.855396][T22756] device bond1 entered promiscuous mode [ 1537.886395][T22756] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1537.895653][T22756] team0: Port device macvlan2 added [ 1538.153023][ T7153] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 1538.642934][ T7153] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1538.743101][ T7153] usb 2-1: config 100 has an invalid interface number: 173 but max is 0 [ 1538.751489][ T7153] usb 2-1: config 100 has no interface number 0 [ 1538.802194][ T7153] usb 2-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 1538.881754][ T7153] usb 2-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1538.897965][ T7153] usb 2-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 26368, setting to 8 [ 1538.909748][ T7153] usb 2-1: config 100 interface 173 has no altsetting 0 [ 1539.081075][T22794] CIFS: Attempting to mount \\127.0.0.1\share [ 1539.183012][ T7153] usb 2-1: string descriptor 0 read error: -22 [ 1539.899157][T22794] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1539.942457][T22794] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1539.995799][ T7153] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 1540.029781][ T7153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.082967][T22763] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1540.090093][T22763] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1540.114231][ T7153] metro_usb 2-1:100.173: Metrologic USB to Serial converter detected [ 1540.151331][ T7153] usb 2-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1541.550582][ T7153] usb 2-1: USB disconnect, device number 9 [ 1541.584393][ T7153] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1541.617010][ T7153] metro_usb 2-1:100.173: device disconnected [ 1541.886973][T22845] CIFS: Attempting to mount \\127.0.0.1\share [ 1542.012855][ T4228] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1542.049933][T22859] device dummy0 entered promiscuous mode [ 1542.312736][ T7153] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 1542.778451][T22845] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1542.832910][ T7153] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1543.072755][ T7153] usb 4-1: config 100 has an invalid interface number: 173 but max is 0 [ 1543.081163][ T7153] usb 4-1: config 100 has no interface number 0 [ 1543.082878][ T4228] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1543.091889][ T7153] usb 4-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 1543.141765][ T4228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1543.157867][ T7153] usb 4-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1543.190164][ T7153] usb 4-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 26368, setting to 8 [ 1543.202051][ T7153] usb 4-1: config 100 interface 173 has no altsetting 0 [ 1543.572872][ T7153] usb 4-1: string descriptor 0 read error: -22 [ 1543.579702][ T7153] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 1543.621447][ T7153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.625286][ T4228] cxacru 6-1:1.0: invalid response length to cm 0x90: 0 [ 1543.672062][T22908] cxacru 6-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 1543.709239][T22908] cxacru 6-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 1543.722659][T22856] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1543.861662][T22856] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1544.061088][ T7153] metro_usb 4-1:100.173: Metrologic USB to Serial converter detected [ 1544.333358][ T7153] usb 4-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1544.410990][ T7153] usb 4-1: USB disconnect, device number 8 [ 1544.569750][ T7153] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1544.581184][ T7153] metro_usb 4-1:100.173: device disconnected [ 1545.865562][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.872095][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.996916][T12608] usb 6-1: USB disconnect, device number 7 [ 1546.049959][T22931] tipc: Enabled bearer , priority 0 [ 1546.059903][T22932] jffs2: notice: (22932) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1546.131578][T22930] tipc: Disabling bearer [ 1550.170358][T22976] syz.6.4061 (22976): drop_caches: 2 [ 1550.475977][T22994] Process accounting resumed [ 1550.530584][T23001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4072'. [ 1550.561403][T23001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4072'. [ 1550.802714][T15339] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1552.153181][T15339] usb 7-1: Using ep0 maxpacket: 32 [ 1554.812754][T15339] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1554.861074][T23061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4092'. [ 1554.948950][T15339] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1555.009137][T15339] usb 7-1: can't read configurations, error -71 [ 1555.908447][T23073] netlink: 'syz.5.4098': attribute type 12 has an invalid length. [ 1555.917810][T23073] netlink: 'syz.5.4098': attribute type 29 has an invalid length. [ 1555.925814][T23073] netlink: 148 bytes leftover after parsing attributes in process `syz.5.4098'. [ 1555.935762][T23073] netlink: 'syz.5.4098': attribute type 3 has an invalid length. [ 1555.944401][T23073] netlink: 'syz.5.4098': attribute type 2 has an invalid length. [ 1555.952366][T23073] netlink: 35 bytes leftover after parsing attributes in process `syz.5.4098'. [ 1556.021797][T23069] Process accounting resumed [ 1556.577576][T23079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4101'. [ 1556.823447][T23079] bridge1: port 1(erspan0) entered blocking state [ 1556.841249][T23079] bridge1: port 1(erspan0) entered disabled state [ 1556.851227][T23079] device erspan0 entered promiscuous mode [ 1557.858536][ T4230] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 1557.957755][T23099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4108'. [ 1558.069180][T23106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4111'. [ 1558.302726][ T4230] usb 4-1: device not accepting address 9, error -71 [ 1560.854602][T23102] Process accounting resumed [ 1562.258401][T15339] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1562.522899][T15339] usb 7-1: Using ep0 maxpacket: 32 [ 1562.713321][T15339] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1562.833570][T15339] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 1562.951865][T15339] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 1562.972189][T15339] usb 7-1: config 14 has no interface number 0 [ 1563.002666][T15339] usb 7-1: config 14 has no interface number 1 [ 1563.033891][T15339] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1563.127597][T15339] usb 7-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0x1B, skipping [ 1563.138918][T15339] usb 7-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 1563.150414][T15339] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 1563.162133][T15339] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1563.172785][T15339] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1563.187350][T15339] usb 7-1: config 14 interface 57 has no altsetting 0 [ 1563.194445][T15339] usb 7-1: config 14 interface 228 has no altsetting 0 [ 1563.302763][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 1563.393912][T15339] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1563.414054][T15339] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.426730][T15339] usb 7-1: Product: syz [ 1563.431572][T15339] usb 7-1: Manufacturer: syz [ 1563.500624][T15339] usb 7-1: SerialNumber: syz [ 1564.088823][T23175] jffs2: notice: (23175) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1564.254277][T15339] legousbtower 7-1:14.57: interrupt endpoints not found [ 1564.486567][T15339] legousbtower 7-1:14.228: interrupt endpoints not found [ 1565.721620][T23214] jffs2: notice: (23214) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1565.886617][T23223] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 1566.005638][T23230] fuse: Invalid rootmode [ 1567.254751][ T4230] usb 7-1: USB disconnect, device number 12 [ 1567.564189][T23250] jffs2: notice: (23250) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1570.197964][T23309] CIFS: Attempting to mount \\127.0.0.1\share [ 1570.205435][T23309] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1570.213231][T23309] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1575.469986][T23356] CIFS: Attempting to mount \\127.0.0.1\share [ 1575.530665][T23356] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1577.073298][T23356] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1577.922331][T23386] fuse: Bad value for 'fd' [ 1579.092441][T23396] CIFS: Attempting to mount \\127.0.0.1\share [ 1579.492154][T23405] overlayfs: failed to resolve './bus': -2 [ 1579.893224][T23396] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1579.900702][T23396] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1580.622807][ T4230] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 1581.192932][ T4230] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1581.344825][ T4230] usb 2-1: config 100 has an invalid interface number: 173 but max is 0 [ 1581.360904][ T4230] usb 2-1: config 100 has no interface number 0 [ 1581.379834][ T4230] usb 2-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 1581.411470][ T4230] usb 2-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1581.460549][ T4230] usb 2-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 26368, setting to 8 [ 1581.484240][T23451] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1581.508659][ T4230] usb 2-1: config 100 interface 173 has no altsetting 0 [ 1581.556607][T23451] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4220'. [ 1581.573120][T23455] CIFS: Attempting to mount \\127.0.0.1\share [ 1581.600815][T23455] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1581.621013][T23453] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4220'. [ 1581.630718][T23455] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1581.643556][T23451] device bond1 left promiscuous mode [ 1581.671357][T23451] team0 (unregistering): Port device macvlan2 removed [ 1581.792752][ T4230] usb 2-1: string descriptor 0 read error: -22 [ 1582.422738][ T4230] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 1582.431827][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.463615][T23418] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1582.470693][T23418] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1582.584288][ T4230] metro_usb 2-1:100.173: Metrologic USB to Serial converter detected [ 1583.351833][ T4230] usb 2-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1583.387756][ T4230] usb 2-1: USB disconnect, device number 10 [ 1583.413054][ T4230] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1583.431452][ T4230] metro_usb 2-1:100.173: device disconnected [ 1583.478013][T23468] jffs2: notice: (23468) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1583.782794][ T4230] Bluetooth: hci2: command 0x0406 tx timeout [ 1584.891271][T23495] autofs4:pid:23495:autofs_fill_super: called with bogus options [ 1585.247455][ T4390] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 1586.694003][ T4390] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1586.809380][ T4390] usb 7-1: config 100 has an invalid interface number: 173 but max is 0 [ 1586.830717][ T4390] usb 7-1: config 100 has no interface number 0 [ 1586.846418][ T4390] usb 7-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 1586.862578][ T4390] usb 7-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1586.880853][ T4390] usb 7-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 26368, setting to 8 [ 1586.899498][ T4390] usb 7-1: config 100 interface 173 has no altsetting 0 [ 1587.176020][ T4390] usb 7-1: string descriptor 0 read error: -22 [ 1587.182472][ T4390] usb 7-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 1587.197317][ T4390] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.263058][T23501] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1587.270199][T23501] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1587.335186][ T4390] metro_usb 7-1:100.173: Metrologic USB to Serial converter detected [ 1587.365088][ T4390] usb 7-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1587.552859][T23501] metro-usb ttyUSB0: metrousb_open - failed to configure device, error code=-8 [ 1587.590324][T15339] usb 7-1: USB disconnect, device number 13 [ 1587.605050][T15339] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1587.625335][T23571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4260'. [ 1587.636714][T15339] metro_usb 7-1:100.173: device disconnected [ 1587.651059][T23571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4260'. [ 1587.713133][T23571] device bond3 left promiscuous mode [ 1587.876857][T23573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4261'. [ 1588.412691][ T13] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1588.965311][ T13] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1588.974262][ T13] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1589.142905][ T13] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1589.152086][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.169970][ T13] usb 4-1: Product: syz [ 1589.182208][ T13] usb 4-1: Manufacturer: syz [ 1589.199863][ T13] usb 4-1: SerialNumber: syz [ 1589.233465][ T13] usb 4-1: config 0 descriptor?? [ 1589.279489][ T13] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1589.822804][ T13] gspca_sunplus: reg_r err -110 [ 1589.828288][ T13] sunplus: probe of 4-1:0.0 failed with error -110 [ 1590.444165][T23614] cgroup: Unknown subsys name 'io' [ 1590.674068][T23618] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4277'. [ 1592.149417][T23626] netlink: 'syz.5.4280': attribute type 1 has an invalid length. [ 1592.157932][T15339] usb 4-1: USB disconnect, device number 11 [ 1592.293097][T23626] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1592.303497][T23630] device macvlan3 entered promiscuous mode [ 1592.983120][T23630] device bond2 entered promiscuous mode [ 1593.000058][T23630] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1593.032748][T23630] team0: Port device macvlan3 added [ 1593.440093][T23653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1593.531688][T23657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1596.934608][T23679] netlink: 'syz.3.4297': attribute type 1 has an invalid length. [ 1596.992351][T23679] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1597.045907][T23681] device macvlan2 entered promiscuous mode [ 1597.056845][T23681] device bond1 entered promiscuous mode [ 1597.084838][T23681] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1597.123279][T23681] team0: Port device macvlan2 added [ 1597.155957][T23679] bond1: (slave ip6gretap1): making interface the new active one [ 1597.170763][T23679] device ip6gretap1 entered promiscuous mode [ 1597.188316][T23679] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1597.199604][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1597.224992][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 1597.792800][ T4187] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 1598.212849][ T4187] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1598.292830][ T4187] usb 4-1: config 100 has an invalid interface number: 173 but max is 0 [ 1598.301232][ T4187] usb 4-1: config 100 has no interface number 0 [ 1598.310761][ T4187] usb 4-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 1598.321576][ T4187] usb 4-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1598.336466][ T4187] usb 4-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 26368, setting to 8 [ 1598.348102][ T4187] usb 4-1: config 100 interface 173 has no altsetting 0 [ 1598.607088][T23715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4310'. [ 1598.616434][ T4187] usb 4-1: string descriptor 0 read error: -22 [ 1598.622769][ T4187] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 1598.631839][ T4187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1598.652916][T23695] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1598.660016][T23695] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1598.674733][ T4187] metro_usb 4-1:100.173: Metrologic USB to Serial converter detected [ 1598.698235][ T4187] usb 4-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1598.784020][T23719] CIFS: Attempting to mount \\127.0.0.1\share [ 1598.791084][T23719] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1598.804697][T23719] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1598.898154][ T4187] usb 4-1: USB disconnect, device number 12 [ 1598.937842][ T4187] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1599.666060][ T4187] metro_usb 4-1:100.173: device disconnected [ 1599.967438][T23726] chnl_net:caif_netlink_parms(): no params data found [ 1600.182288][T23726] bridge0: port 1(bridge_slave_0) entered blocking state [ 1600.189701][T23726] bridge0: port 1(bridge_slave_0) entered disabled state [ 1600.198706][T23726] device bridge_slave_0 entered promiscuous mode [ 1600.208014][T23726] bridge0: port 2(bridge_slave_1) entered blocking state [ 1600.216463][T23726] bridge0: port 2(bridge_slave_1) entered disabled state [ 1600.290671][T23726] device bridge_slave_1 entered promiscuous mode [ 1600.366991][T23726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1600.400790][T23726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1600.482435][T23726] team0: Port device team_slave_0 added [ 1600.492526][T23726] team0: Port device team_slave_1 added [ 1600.518405][T23726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1600.525828][T23726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1600.552107][T23726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1600.580736][T23726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1600.600462][T23726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1601.594079][T23726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1601.793007][ T4390] Bluetooth: hci4: command 0x0409 tx timeout [ 1602.813535][T23726] device hsr_slave_0 entered promiscuous mode [ 1603.383579][T23726] device hsr_slave_1 entered promiscuous mode [ 1603.403552][T23726] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1603.426482][T23726] Cannot create hsr debugfs directory [ 1603.762573][T23788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4332'. [ 1603.863745][T23793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4335'. [ 1603.873293][ T7153] Bluetooth: hci4: command 0x041b tx timeout [ 1603.987708][ T7153] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1604.015846][T23726] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1604.179255][ T7153] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1604.199691][T23726] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1604.226949][T23726] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1604.546499][T23726] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1605.213421][T23806] xt_nfacct: accounting object `syz0' does not exist [ 1605.378309][T23726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1605.551351][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1605.584295][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1605.655500][T23726] 8021q: adding VLAN 0 to HW filter on device team0 [ 1605.847430][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1605.877526][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1605.919836][ T4380] bridge0: port 1(bridge_slave_0) entered blocking state [ 1605.926982][ T4380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1605.993512][ T7153] Bluetooth: hci4: command 0x040f tx timeout [ 1606.020713][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1606.046905][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1606.184823][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1606.236685][ T4380] bridge0: port 2(bridge_slave_1) entered blocking state [ 1606.243831][ T4380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1606.327271][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1606.364949][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1606.461016][T12889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1606.513232][T12889] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1606.563521][T12889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1606.741566][T23831] autofs4:pid:23831:autofs_fill_super: called with bogus options [ 1606.812976][T12889] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1606.842382][T12889] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1606.872844][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1606.890019][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1606.905886][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1606.949552][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1606.982439][T23726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1607.307165][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.307537][T22908] cxacru 6-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 1607.313559][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.403331][ T4390] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 1607.439391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1607.448333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1607.460399][T23726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1607.574478][T23853] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4358'. [ 1607.853270][ T4390] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1608.205655][T17208] Bluetooth: hci4: command 0x0419 tx timeout [ 1608.302874][ T4390] usb 7-1: config 100 has an invalid interface number: 173 but max is 0 [ 1608.460166][ T4390] usb 7-1: config 100 has no interface number 0 [ 1608.466940][ T4390] usb 7-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 1608.477563][ T4390] usb 7-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1608.506732][ T4390] usb 7-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 26368, setting to 8 [ 1608.533340][ T4390] usb 7-1: config 100 interface 173 has no altsetting 0 [ 1608.656624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1608.812759][ T4390] usb 7-1: string descriptor 0 read error: -22 [ 1609.025760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1609.482249][ T4390] usb 7-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 1609.491558][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1609.502873][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1609.511229][ T4390] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.522694][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1609.553914][T23839] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1609.587959][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1609.597372][T23839] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1609.619432][T23726] device veth0_vlan entered promiscuous mode [ 1609.634675][ T4390] metro_usb 7-1:100.173: Metrologic USB to Serial converter detected [ 1609.635311][T23726] device veth1_vlan entered promiscuous mode [ 1609.663096][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1609.687952][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1609.728025][ T4390] usb 7-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1609.751819][T23726] device veth0_macvtap entered promiscuous mode [ 1609.776777][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1609.844700][T15339] usb 7-1: USB disconnect, device number 14 [ 1609.864194][T15339] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1609.885090][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1609.939335][T23726] device veth1_macvtap entered promiscuous mode [ 1609.941961][T23892] tmpfs: Bad value for 'mpol' [ 1609.951718][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1609.960445][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1609.968453][T15339] metro_usb 7-1:100.173: device disconnected [ 1609.973511][T23726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1609.986257][T23726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1609.996862][T23726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1610.008297][T23726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1610.041862][T23726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1610.224222][T23726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1610.238229][T23726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1610.248285][T23726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1610.258856][T23726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1610.289369][T23726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1610.309614][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1610.322729][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1610.340916][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1610.370767][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1610.420973][T23726] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.440801][T23726] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.469083][T23726] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.487417][T23726] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.230866][ T4380] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.312984][ T4380] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.402143][ T4380] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.492966][T19299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1612.531030][T19299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1612.663771][T12889] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1613.062462][ T4380] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.241968][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1613.276579][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1613.355759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1613.891492][T23927] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1614.179015][T23948] device syzkaller0 entered promiscuous mode [ 1615.055142][T23960] netlink: 'syz.7.4387': attribute type 5 has an invalid length. [ 1616.544616][T23960] ------------[ cut here ]------------ [ 1616.576838][T23960] kernel BUG at include/linux/scatterlist.h:143! [ 1616.620705][T23960] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1616.627009][T23960] CPU: 1 PID: 23960 Comm: syz.7.4387 Not tainted syzkaller #0 [ 1616.634475][T23960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1616.644543][T23960] RIP: 0010:sg_init_one+0x14a/0x160 [ 1616.649986][T23960] Code: 80 c1 03 38 c1 7c cf e8 f4 4d d8 fd eb c8 44 89 f1 80 e1 07 80 c1 03 38 c1 7c d2 4c 89 f7 e8 dd 4d d8 fd eb c8 e8 b6 2a 93 fd <0f> 0b e8 af 2a 93 fd 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 [ 1616.669691][T23960] RSP: 0018:ffffc9000410f928 EFLAGS: 00010287 [ 1616.675849][T23960] RAX: ffffffff83e5d1fa RBX: ffffc9000410fc40 RCX: 0000000000080000 [ 1616.684002][T23960] RDX: ffffc900120d7000 RSI: 0000000000004517 RDI: 0000000000004518 [ 1616.691985][T23960] RBP: 0000000000000000 R08: ffffc9000410fa9f R09: ffffc9000410fa88 [ 1616.699972][T23960] R10: dffffc0000000000 R11: fffff52000821f54 R12: 1ffff92000821f50 [ 1616.707994][T23960] R13: dffffc0000000000 R14: ffffc9000410fa80 R15: 0000000000000010 [ 1616.715986][T23960] FS: 00007f3bab1156c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 1616.724940][T23960] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1616.731537][T23960] CR2: 00007f31ca240368 CR3: 0000000067ef8000 CR4: 00000000003506e0 [ 1616.739522][T23960] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1616.747502][T23960] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1616.755488][T23960] Call Trace: [ 1616.758864][T23960] [ 1616.761856][T23960] software_key_eds_op+0x4f6/0xb30 [ 1616.767097][T23960] ? stack_depot_save+0x41b/0x460 [ 1616.772205][T23960] ? software_key_query+0x830/0x830 [ 1616.777432][T23960] ? asymmetric_key_eds_op+0xe9/0x130 [ 1616.782815][T23960] keyctl_pkey_e_d_s+0x208/0x300 [ 1616.787884][T23960] ? keyctl_pkey_params_get+0x4c0/0x4c0 [ 1616.793442][T23960] ? do_futex+0xdc2/0x12b0 [ 1616.797978][T23960] __se_sys_keyctl+0x6c6/0xa20 [ 1616.802787][T23960] ? __x64_sys_keyctl+0xc0/0xc0 [ 1616.807656][T23960] ? __context_tracking_exit+0x4c/0x80 [ 1616.813212][T23960] ? __lock_acquire+0x7b50/0x7b50 [ 1616.818348][T23960] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1616.824350][T23960] ? lock_chain_count+0x20/0x20 [ 1616.829222][T23960] ? lockdep_hardirqs_on+0x94/0x140 [ 1616.834437][T23960] ? __x64_sys_keyctl+0x1c/0xc0 [ 1616.839310][T23960] do_syscall_64+0x4c/0xa0 [ 1616.843738][T23960] ? clear_bhb_loop+0x30/0x80 [ 1616.848534][T23960] ? clear_bhb_loop+0x30/0x80 [ 1616.853223][T23960] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1616.859124][T23960] RIP: 0033:0x7f3bacebd0d9 [ 1616.863546][T23960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1616.883162][T23960] RSP: 002b:00007f3bab115028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1616.891594][T23960] RAX: ffffffffffffffda RBX: 00007f3bad144fa0 RCX: 00007f3bacebd0d9 [ 1616.899577][T23960] RDX: 00002000000007c0 RSI: 0000200000000780 RDI: 0000000000000019 [ 1616.907679][T23960] RBP: 00007f3bacf54024 R08: 0000000000000000 R09: 0000000000000000 [ 1616.915696][T23960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1616.923679][T23960] R13: 00007f3bad145038 R14: 00007f3bad144fa0 R15: 00007ffeb4db24e8 [ 1616.931755][T23960] [ 1616.934789][T23960] Modules linked in: [ 1616.960547][T23960] ---[ end trace ed003132b38c2013 ]--- [ 1616.967219][T23960] RIP: 0010:sg_init_one+0x14a/0x160 [ 1616.979750][T23960] Code: 80 c1 03 38 c1 7c cf e8 f4 4d d8 fd eb c8 44 89 f1 80 e1 07 80 c1 03 38 c1 7c d2 4c 89 f7 e8 dd 4d d8 fd eb c8 e8 b6 2a 93 fd <0f> 0b e8 af 2a 93 fd 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 [ 1617.036362][T23960] RSP: 0018:ffffc9000410f928 EFLAGS: 00010287 [ 1617.043501][T23960] RAX: ffffffff83e5d1fa RBX: ffffc9000410fc40 RCX: 0000000000080000 [ 1617.051537][T23960] RDX: ffffc900120d7000 RSI: 0000000000004517 RDI: 0000000000004518 [ 1617.063367][T23960] RBP: 0000000000000000 R08: ffffc9000410fa9f R09: ffffc9000410fa88 [ 1617.071488][T23960] R10: dffffc0000000000 R11: fffff52000821f54 R12: 1ffff92000821f50 [ 1617.089230][T23960] R13: dffffc0000000000 R14: ffffc9000410fa80 R15: 0000000000000010 [ 1617.099094][T23960] FS: 00007f3bab1156c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 1617.108515][T23960] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1617.116991][T23960] CR2: 00007f0362b95158 CR3: 0000000067ef8000 CR4: 00000000003506e0 [ 1617.125492][T23960] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1617.135507][T23960] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1617.151873][T23960] Kernel panic - not syncing: Fatal exception [ 1617.158150][T23960] Kernel Offset: disabled [ 1617.162469][T23960] Rebooting in 86400 seconds..