last executing test programs: 10.051151869s ago: executing program 0 (id=476): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 9.950947864s ago: executing program 0 (id=477): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 9.219351065s ago: executing program 0 (id=482): openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x42401, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) pwritev(r2, &(0x7f0000000500), 0x0, 0x5, 0xfffffff9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) remap_file_pages(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x0, 0x5, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)) 9.094918224s ago: executing program 2 (id=484): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r5, 0xc048aec8, &(0x7f00000005c0)={0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) wait4(r6, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x1, 0x0, 0x0) mincore(&(0x7f00001b0000/0x3000)=nil, 0x3000, &(0x7f0000000480)=""/153) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r7 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r7, 0x8955, 0x0) 8.763033455s ago: executing program 4 (id=487): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r2 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2) sched_getattr(0x0, &(0x7f0000000200)={0x38}, 0x38, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40087447, &(0x7f0000000140)={0x0, &(0x7f0000000100)}) write$sysctl(r2, &(0x7f00000000c0)='2\x00', 0x2) 7.060482719s ago: executing program 0 (id=490): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40043d0d, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8003, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x6, 0xffffffff}, 0x0) r3 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0cc5640, &(0x7f00000000c0)={0x2, @sdr={0x34524742, 0x400ffff}}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@gettaction={0xe8, 0x32, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x88, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xfffffffb, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200003}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x478000}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xa, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x21, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'tunnel_key\x00'}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x44080) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000280)={0x3, r6, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1, 0x1, &(0x7f0000000200)=ANY=[], 0x0, 0x40, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3d}, 0x94) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r6, 0x0}) r9 = openat$drirender128(0xffffff9c, &(0x7f0000000300), 0xe0000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r9, 0xc01064c5, &(0x7f0000000540)={&(0x7f0000000500)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x7, 0x0, [], [0x10, 0x0, 0xfffffffc, 0x3]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000040)={r6, r8, 0x9, 0x7, 0x1}) r10 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r10, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0x4}, 'port0\x00', 0x786520dbf34c80ff, 0x20a03, 0x122, 0x0, 0x0, 0xc, 0x400, 0x0, 0x0, 0x87}) 6.099858167s ago: executing program 0 (id=494): socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0xe3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_open_dev$vbi(0x0, 0x0, 0x2) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 5.778284771s ago: executing program 2 (id=496): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="1421094471e98f885ffa9d00001000010000000000000000000700000a48000000060a03c900000000000000000a0000050900010073797a31000000001c0004801800018008000100647570100c0002173243f4000000001400000011000692000000124dbe986aa0d8975a4f25de83f81bc9f6e2ce9d66b800000000008000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0xffffffff, 0x2, 0x2, 0x6ec}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x200480c0}, 0x4008000) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000040)="c35f", 0x2}], 0x1) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000000)={0x800, 0xa, 0x4}) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000140)=@multiplanar_userptr={0x0, 0x8, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "dd4291c0"}, 0x0, 0x2, {0x0}}) socket$kcm(0x10, 0x2, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x4, 0xb}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}, {0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c041}, 0x4041080) r10 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r10, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r10, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000440)=[0x0]}) 5.531978278s ago: executing program 1 (id=497): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xd231c4f959ad4808) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) socket(0x15, 0x800, 0x0) 5.258008834s ago: executing program 3 (id=498): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1000000000000112, 0x2000, 0x0, 0x3) 4.960275787s ago: executing program 3 (id=499): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x1, 0xc, 0x3, 0x7, 0x4, 0x5, 0x10, 0x1, 0x3, 0x1, 0x40, 0x1, 0x2}, {0x806, 0x50, 0x6, 0x2, 0x3, 0x8, 0x7f, 0x8, 0x19, 0x1, 0x5, 0x9}, {0x40, 0x0, 0xff, 0x4, 0x0, 0x5c, 0x0, 0x9, 0x14, 0x1b, 0xf9, 0x3, 0x100000000}], 0x6}) 4.927681329s ago: executing program 2 (id=500): openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x42401, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) pwritev(r2, &(0x7f0000000500), 0x0, 0x5, 0xfffffff9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) remap_file_pages(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x0, 0x5, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)) 4.858956423s ago: executing program 4 (id=501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="50000000090601020000000000000000010000030900020073797a31000000000500010007000000280007800c000180080001407f0100010c00148008000140ac1414100c000280"], 0x50}, 0x1, 0x1000000, 0x0, 0xd24f4d5778621d06}, 0x4) 4.679601294s ago: executing program 4 (id=502): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_EMATCHES={0x48, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x23, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x7, 0x3, [@TCF_META_TYPE_VAR="043f51"]}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='3', @TCF_META_TYPE_VAR]}]}}]}]}]}}]}, 0x7c}}, 0x0) 4.561517581s ago: executing program 0 (id=503): ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r3 = socket(0xa, 0x5, 0x0) timer_create(0x0, 0x0, &(0x7f0000000000)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000009e01000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xc242, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r5}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) listen(r3, 0x100) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r6, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4089, 0xff9}, {&(0x7f000000bcc0)=""/63, 0x3f}], 0x2}, 0x20) r7 = socket$can_j1939(0x1d, 0x2, 0x7) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r8, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r8, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f0000000300)=[{0x3, 0x3, {0x2, 0x0, 0x1}, {0x1, 0x1}, 0xff, 0xff}, {0x1, 0x3, {0x1, 0xf0, 0x1}, {0x1, 0xff}, 0x2, 0xfd}, {0x1, 0x3, {0x0, 0x1, 0x3}, {0x2, 0x1}, 0x1}, {0x2, 0x2, {0x1, 0xf0, 0x1}, {0x2, 0xff, 0x2}, 0x1, 0xfe}, {0x2, 0x1, {0x3, 0xf0, 0x2}, {0x1, 0xff}, 0xfe, 0x1}, {0x1, 0x2, {0x0, 0xf0, 0x2}, {0x2, 0xf0}, 0x1, 0xff}], 0xa8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18) creat(0x0, 0x0) 4.482655083s ago: executing program 4 (id=504): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000040)=0xc) close(r3) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000200)='befs\x00', 0x0) inotify_init() bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = fsopen(&(0x7f0000000140)='xfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000240)='#\x00', &(0x7f00000002c0)="09002c429a91a7e02dd614249835300841eb56f62b62e565b0ebf99796b773d2b9611775a4a35a9adb9093563cd30a933d16f42c0c6fd5f2494d2fd4597a60b91da2dc9b87c6559cdd194dcc56775eb76583cc278cbc958b791e76672d76eb386776e65d188189d19badab568571f7", 0x6f) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r5 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x13}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f00000000c0)={0xffffff04, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x4}}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r6, 0x60b, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000d80)={0x44, &(0x7f00000008c0)={0x20, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3f, 0x30, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x4, 0x606f, 0x0, 0xe7, {[@generic={0x8, 0x7, "3f0b9afb1d"}]}}}}}}}, 0x0) 4.453489734s ago: executing program 3 (id=505): socket(0x10, 0x3, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, 0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3.827821801s ago: executing program 1 (id=506): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000200)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0xfffffffe, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) 3.505362715s ago: executing program 1 (id=507): socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000780)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0x3, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) setitimer(0x2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r3, r3, 0x0) 2.66610063s ago: executing program 2 (id=508): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.474800601s ago: executing program 3 (id=509): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1000000000000112, 0x2000, 0x0, 0x3) 2.366058691s ago: executing program 3 (id=510): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x103381) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000180)={0xc}) 2.191429673s ago: executing program 3 (id=511): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r2 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2) sched_getattr(0x0, &(0x7f0000000200)={0x38}, 0x38, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40087447, &(0x7f0000000140)={0x0, &(0x7f0000000100)}) write$sysctl(r2, &(0x7f00000000c0)='2\x00', 0x2) 1.859243631s ago: executing program 1 (id=512): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff00", 0x5, 0x0, 0x0, 0x2}]) 1.446624327s ago: executing program 1 (id=513): socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0xe3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_open_dev$vbi(0x0, 0x0, 0x2) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 675.576602ms ago: executing program 2 (id=514): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket(0x1, 0x803, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfc85}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 383.052606ms ago: executing program 4 (id=515): unshare(0x22020400) r0 = open(0x0, 0x141bc2, 0xeb) copy_file_range(r0, 0x0, r0, 0xffffffffffffffff, 0xc1, 0x0) 179.23357ms ago: executing program 1 (id=516): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xd231c4f959ad4808) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) socket(0x15, 0x800, 0x0) 22.843824ms ago: executing program 4 (id=517): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 0s ago: executing program 2 (id=518): openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x42401, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) pwritev(r2, &(0x7f0000000500), 0x0, 0x5, 0xfffffff9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) remap_file_pages(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x0, 0x5, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01e"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.120' (ED25519) to the list of known hosts. [ 63.936890][ T5807] cgroup: Unknown subsys name 'net' [ 64.086103][ T5807] cgroup: Unknown subsys name 'cpuset' [ 64.094360][ T5807] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.477466][ T5807] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.317371][ T5147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.325568][ T5147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.333368][ T5147] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.341467][ T5147] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.349383][ T5147] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.393636][ T5147] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.403754][ T5147] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.411234][ T5147] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.420306][ T5147] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.428989][ T5147] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.500645][ T5147] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.509201][ T5147] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.517259][ T5147] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.524718][ T5147] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.532913][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.540490][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.549008][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.556771][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.564144][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.569994][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.571340][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.578908][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.586443][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.595693][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.599828][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.115891][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 69.149162][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 69.331769][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 69.393499][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 69.499175][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.507173][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.514628][ T5819] bridge_slave_0: entered allmulticast mode [ 69.521613][ T5819] bridge_slave_0: entered promiscuous mode [ 69.564233][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.571333][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.578737][ T5819] bridge_slave_1: entered allmulticast mode [ 69.585707][ T5819] bridge_slave_1: entered promiscuous mode [ 69.592831][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 69.607710][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.614914][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.622096][ T5823] bridge_slave_0: entered allmulticast mode [ 69.629275][ T5823] bridge_slave_0: entered promiscuous mode [ 69.661299][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.668483][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.675839][ T5823] bridge_slave_1: entered allmulticast mode [ 69.682730][ T5823] bridge_slave_1: entered promiscuous mode [ 69.750936][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.803371][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.817126][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.824371][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.831461][ T5828] bridge_slave_0: entered allmulticast mode [ 69.838651][ T5828] bridge_slave_0: entered promiscuous mode [ 69.848384][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.857868][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.865048][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.872154][ T5830] bridge_slave_0: entered allmulticast mode [ 69.879297][ T5830] bridge_slave_0: entered promiscuous mode [ 69.907390][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.914684][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.921789][ T5828] bridge_slave_1: entered allmulticast mode [ 69.929103][ T5828] bridge_slave_1: entered promiscuous mode [ 69.937793][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.947208][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.955136][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.962343][ T5830] bridge_slave_1: entered allmulticast mode [ 69.969629][ T5830] bridge_slave_1: entered promiscuous mode [ 70.032231][ T5819] team0: Port device team_slave_0 added [ 70.082852][ T5819] team0: Port device team_slave_1 added [ 70.089048][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.096269][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.103875][ T5827] bridge_slave_0: entered allmulticast mode [ 70.110853][ T5827] bridge_slave_0: entered promiscuous mode [ 70.120791][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.131900][ T5823] team0: Port device team_slave_0 added [ 70.140315][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.161019][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.168275][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.176057][ T5827] bridge_slave_1: entered allmulticast mode [ 70.183287][ T5827] bridge_slave_1: entered promiscuous mode [ 70.192397][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.203546][ T5823] team0: Port device team_slave_1 added [ 70.211032][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.271611][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.279139][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.305088][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.359678][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.366794][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.393019][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.404731][ T5822] Bluetooth: hci0: command tx timeout [ 70.408254][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.421442][ T5828] team0: Port device team_slave_0 added [ 70.427908][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.434904][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.460819][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.473026][ T5822] Bluetooth: hci1: command tx timeout [ 70.474724][ T5830] team0: Port device team_slave_0 added [ 70.494134][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.504849][ T5828] team0: Port device team_slave_1 added [ 70.511964][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.519170][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.545343][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.557986][ T5830] team0: Port device team_slave_1 added [ 70.633140][ T5822] Bluetooth: hci4: command tx timeout [ 70.643433][ T5822] Bluetooth: hci2: command tx timeout [ 70.643463][ T5836] Bluetooth: hci3: command tx timeout [ 70.664347][ T5827] team0: Port device team_slave_0 added [ 70.670859][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.677870][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.704570][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.733809][ T5819] hsr_slave_0: entered promiscuous mode [ 70.740376][ T5819] hsr_slave_1: entered promiscuous mode [ 70.747663][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.754729][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.780719][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.793728][ T5827] team0: Port device team_slave_1 added [ 70.800160][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.807238][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.833164][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.856465][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.863449][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.889374][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.931487][ T5823] hsr_slave_0: entered promiscuous mode [ 70.937849][ T5823] hsr_slave_1: entered promiscuous mode [ 70.944416][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 70.950197][ T5823] Cannot create hsr debugfs directory [ 71.014601][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.021549][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.047598][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.060153][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.068117][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.094037][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.200066][ T5828] hsr_slave_0: entered promiscuous mode [ 71.206456][ T5828] hsr_slave_1: entered promiscuous mode [ 71.212537][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 71.218779][ T5828] Cannot create hsr debugfs directory [ 71.241102][ T5830] hsr_slave_0: entered promiscuous mode [ 71.247525][ T5830] hsr_slave_1: entered promiscuous mode [ 71.253796][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 71.259518][ T5830] Cannot create hsr debugfs directory [ 71.281964][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.288794][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.364948][ T5827] hsr_slave_0: entered promiscuous mode [ 71.371620][ T5827] hsr_slave_1: entered promiscuous mode [ 71.378148][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 71.384286][ T5827] Cannot create hsr debugfs directory [ 71.815567][ T5819] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.826877][ T5819] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.841445][ T5819] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.864795][ T5819] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.944302][ T5823] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.958981][ T5823] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.988215][ T5823] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.015093][ T5823] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.080389][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.091180][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.101939][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.115298][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.240081][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.263967][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.277985][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.289174][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.397744][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.432092][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.445613][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.466176][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.473985][ T5836] Bluetooth: hci0: command tx timeout [ 72.484122][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.509736][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.542904][ T4798] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.550216][ T4798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.559171][ T5836] Bluetooth: hci1: command tx timeout [ 72.591232][ T4798] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.598417][ T4798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.649382][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.699502][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.716313][ T5836] Bluetooth: hci3: command tx timeout [ 72.716335][ T5822] Bluetooth: hci2: command tx timeout [ 72.721717][ T5833] Bluetooth: hci4: command tx timeout [ 72.745869][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.774679][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.781829][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.795793][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.809054][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.826702][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.833812][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.851709][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.858845][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.892151][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.899378][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.942130][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.981160][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.994089][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.001264][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.062720][ T1315] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.069864][ T1315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.112377][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.180422][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.187648][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.215376][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.222552][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.292640][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.571445][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.628419][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.735998][ T5830] veth0_vlan: entered promiscuous mode [ 73.808601][ T5830] veth1_vlan: entered promiscuous mode [ 73.828057][ T5823] veth0_vlan: entered promiscuous mode [ 73.852643][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.888122][ T5823] veth1_vlan: entered promiscuous mode [ 73.942440][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.972694][ T5830] veth0_macvtap: entered promiscuous mode [ 73.996870][ T5830] veth1_macvtap: entered promiscuous mode [ 74.046214][ T5819] veth0_vlan: entered promiscuous mode [ 74.071472][ T5823] veth0_macvtap: entered promiscuous mode [ 74.078861][ T5828] veth0_vlan: entered promiscuous mode [ 74.090117][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.108946][ T5827] veth0_vlan: entered promiscuous mode [ 74.116807][ T5819] veth1_vlan: entered promiscuous mode [ 74.128817][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.141278][ T5823] veth1_macvtap: entered promiscuous mode [ 74.158908][ T5828] veth1_vlan: entered promiscuous mode [ 74.177200][ T5827] veth1_vlan: entered promiscuous mode [ 74.187928][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.197145][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.217922][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.226744][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.264096][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.286987][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.329443][ T4385] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.339482][ T4385] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.359633][ T4385] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.371639][ T4385] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.399716][ T5819] veth0_macvtap: entered promiscuous mode [ 74.434689][ T5828] veth0_macvtap: entered promiscuous mode [ 74.444452][ T5819] veth1_macvtap: entered promiscuous mode [ 74.455088][ T4798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.466679][ T5827] veth0_macvtap: entered promiscuous mode [ 74.478900][ T4798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.493711][ T5828] veth1_macvtap: entered promiscuous mode [ 74.515746][ T5827] veth1_macvtap: entered promiscuous mode [ 74.553130][ T5833] Bluetooth: hci0: command tx timeout [ 74.576352][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.602383][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.609982][ T4798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.623289][ T4798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.637925][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.643156][ T5833] Bluetooth: hci1: command tx timeout [ 74.667596][ T2954] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.676527][ T2954] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.688604][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.700821][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.723799][ T4798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.735561][ T2954] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.746027][ T4798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.750687][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.776552][ T2954] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.795019][ T5836] Bluetooth: hci3: command tx timeout [ 74.795063][ T5822] Bluetooth: hci2: command tx timeout [ 74.800494][ T5833] Bluetooth: hci4: command tx timeout [ 74.809094][ T2954] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.837123][ T2954] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.864528][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.872111][ T2954] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.892742][ T2954] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.945405][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.956138][ T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.974972][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.976635][ T3569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.986586][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.003207][ T3569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.158461][ T5939] syz.0.1 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 75.169629][ T5939] random: crng reseeded on system resumption [ 75.421027][ T4798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.450824][ T4798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.502448][ T2954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.571590][ T2954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.589126][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.603838][ T5933] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.679878][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.700490][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.743296][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.764509][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.813162][ T5933] usb 1-1: Using ep0 maxpacket: 8 [ 75.844483][ T5933] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 75.852776][ T5933] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 75.872737][ T5933] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 75.889983][ T2954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.903120][ T5933] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 75.933287][ T5933] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.964293][ T2954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.999581][ T5933] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 76.028128][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.050064][ T4049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.098482][ T4049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.141164][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.346187][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.377523][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.551705][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 76.571357][ T5933] usb 1-1: GET_CAPABILITIES returned 0 [ 76.593964][ T5933] usbtmc 1-1:16.0: can't read capabilities [ 76.653593][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 76.665237][ T5833] Bluetooth: hci0: command tx timeout [ 76.713176][ T5833] Bluetooth: hci1: command tx timeout [ 76.755913][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.853569][ T5933] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.875966][ T5836] Bluetooth: hci3: command tx timeout [ 76.875977][ T5833] Bluetooth: hci2: command tx timeout [ 76.876012][ T5822] Bluetooth: hci4: command tx timeout [ 76.953585][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.962809][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 77.023358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.064549][ T5933] usb 4-1: Using ep0 maxpacket: 32 [ 77.071289][ T5933] usb 4-1: config 1 has an invalid interface number: 236 but max is 0 [ 77.080023][ T5933] usb 4-1: config 1 has no interface number 0 [ 77.100165][ T5933] usb 4-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 77.149897][ T5933] usb 4-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 77.186554][ T5933] usb 4-1: config 1 interface 236 has no altsetting 0 [ 77.220754][ T5933] usb 4-1: config 1 has an invalid interface number: 236 but max is 0 [ 77.249401][ T5933] usb 4-1: config 1 has no interface number 0 [ 77.270914][ T5933] usb 4-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 77.308140][ T5933] usb 4-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 77.353702][ T5933] usb 4-1: config 1 interface 236 has no altsetting 0 [ 77.364546][ T5933] usb 4-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 77.393336][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.423071][ T5933] usb 4-1: Product: syz [ 77.427282][ T5933] usb 4-1: Manufacturer: syz [ 77.431886][ T5933] usb 4-1: SerialNumber: syz [ 77.498506][ T5933] ti_usb_3410_5052 4-1:1.236: TI USB 5052 2 port adapter converter detected [ 77.703488][ T5933] usb 4-1: USB disconnect, device number 2 [ 77.836235][ T5966] openvswitch: netlink: Flow key attr not present in new flow. [ 77.945498][ T5904] usb 1-1: USB disconnect, device number 2 [ 78.512245][ T5976] fuse: Unknown parameter 'user_id00000000000000000000' [ 79.052603][ T5987] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.120991][ T5992] QAT: failed to copy from user. [ 79.482987][ T29] audit: type=1326 audit(1768356493.556:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715f78f749 code=0x7ffc0000 [ 79.553012][ T29] audit: type=1326 audit(1768356493.566:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715f78f749 code=0x7ffc0000 [ 79.553056][ T29] audit: type=1326 audit(1768356493.566:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f715f78f749 code=0x7ffc0000 [ 79.650118][ T29] audit: type=1326 audit(1768356493.736:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715f78f749 code=0x7ffc0000 [ 79.650466][ T29] audit: type=1326 audit(1768356493.736:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f715f7c2005 code=0x7ffc0000 [ 79.650509][ T29] audit: type=1326 audit(1768356493.736:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715f78f749 code=0x7ffc0000 [ 79.874391][ T29] audit: type=1326 audit(1768356493.886:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f715f78f749 code=0x7ffc0000 [ 79.884989][ T29] audit: type=1326 audit(1768356493.976:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f715f78f749 code=0x7ffc0000 [ 79.886128][ T29] audit: type=1326 audit(1768356493.976:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715f78f749 code=0x7ffc0000 [ 79.886751][ T29] audit: type=1326 audit(1768356493.976:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715f78f749 code=0x7ffc0000 [ 80.580798][ T6008] netlink: 156 bytes leftover after parsing attributes in process `syz.3.20'. [ 80.594925][ T6008] netlink: 64 bytes leftover after parsing attributes in process `syz.3.20'. [ 81.114243][ T5904] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 81.253100][ T5904] usb 1-1: device descriptor read/64, error -71 [ 81.404947][ T6020] fuse: Unknown parameter 'user_id00000000000000000000' [ 81.495992][ T5904] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 81.633084][ T5904] usb 1-1: device descriptor read/64, error -71 [ 81.756566][ T5904] usb usb1-port1: attempt power cycle [ 81.914129][ T5890] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.103166][ T5904] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 82.123710][ T5904] usb 1-1: device descriptor read/8, error -71 [ 82.134696][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.149929][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.163887][ T5890] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 82.181908][ T5890] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 82.201686][ T5890] usb 2-1: Manufacturer: syz [ 82.213758][ T5890] usb 2-1: config 0 descriptor?? [ 82.363050][ T5904] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 82.404204][ T5904] usb 1-1: device descriptor read/8, error -71 [ 82.523822][ T5904] usb usb1-port1: unable to enumerate USB device [ 82.933116][ T5865] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 83.076306][ T5890] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0001/input/input5 [ 83.103230][ T5865] usb 5-1: Using ep0 maxpacket: 8 [ 83.111549][ T5865] usb 5-1: config 1 interface 0 altsetting 129 bulk endpoint 0x82 has invalid maxpacket 8 [ 83.126193][ T5865] usb 5-1: config 1 interface 0 has no altsetting 0 [ 83.136337][ T5865] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 83.155024][ T5890] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0001/input/input6 [ 83.165584][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.182996][ T5865] usb 5-1: Product: îµ—ä¥é±°à¼¹à·­ç°¹à¨¯ï˜³ê³ ì”€â«¦î¯’딑㧬Ꜿê á¯¨á§¤î¬½ê¡²è± æ³ãº©ïŸ¤ê‡’왚쪦躤뜅责赮瀾éšì«µè”™íž½ë°Ÿíƒ–瞋勆ꨪåŸê—Œîˆ½ã“‘롣ꥅ맛៉约è‚⌀瀥է냛▎⮻鳿ٓ톽ç¸á“”宋꣹瀚鼻äƒè¬Žáº—ᑱæŠâ­£å„§á‹“⯋◞ï”顔璇侯èŸç¦˜ê­¬ï¯²ï£å¶ŠëŒ´åŽîŽ›ä¹Ÿ [ 83.238510][ T5890] input: syz Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0001/input/input7 [ 83.252437][ T5865] usb 5-1: Manufacturer: 魳呻ঽ࠵Ɑ츑㜮ꚯá¾ç¼›ãº…䘣ä¼ìšé½å¦«æ¶æ¬­ãª«î¨œê¹€ì¥ªæ¬› [ 83.273667][ T5890] input: syz Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0001/input/input8 [ 83.286238][ T5865] usb 5-1: SerialNumber: syz [ 83.294206][ T6031] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 83.312476][ T5890] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.1-1/input0 [ 83.328583][ T5890] usb 2-1: USB disconnect, device number 2 [ 83.598684][ T5865] usblp0: Disabling reads from problematic bidirectional printer [ 83.627459][ T5865] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 129 proto 3 vid 0x03F0 pid 0x0004 [ 83.644389][ T6051] fido_id[6051]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 83.703711][ T5865] usb 5-1: USB disconnect, device number 2 [ 83.742206][ T5865] usblp0: removed [ 83.883162][ T6054] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.510094][ T6077] syzkaller0: entered promiscuous mode [ 84.555706][ T6077] syzkaller0: entered allmulticast mode [ 84.626266][ T1028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.743863][ T6084] mmap: syz.4.42 (6084) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 85.121745][ T6088] loop3: detected capacity change from 0 to 256 [ 85.593301][ T6097] random: crng reseeded on system resumption [ 85.913030][ T5933] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.183106][ T5933] usb 3-1: Using ep0 maxpacket: 8 [ 86.243657][ T5933] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 86.264808][ T5933] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 86.309145][ T5933] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 86.338243][ T5933] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 86.356799][ T5933] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.362221][ T6103] loop4: detected capacity change from 0 to 2048 [ 86.370508][ T5933] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 86.435093][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.517485][ T6106] netlink: 'syz.3.51': attribute type 1 has an invalid length. [ 86.525316][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 86.538338][ T6103] ======================================================= [ 86.538338][ T6103] WARNING: The mand mount option has been deprecated and [ 86.538338][ T6103] and is ignored by this kernel. Remove the mand [ 86.538338][ T6103] option from the mount to silence this warning. [ 86.538338][ T6103] ======================================================= [ 86.650809][ T9] cfg80211: failed to load regulatory.db [ 86.663229][ T24] usb 1-1: device descriptor read/64, error -71 [ 86.725383][ T6103] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 86.777124][ T6103] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 86.812200][ T6107] veth3: entered promiscuous mode [ 86.903341][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 87.043042][ T24] usb 1-1: device descriptor read/64, error -71 [ 87.078892][ T6109] loop4: detected capacity change from 0 to 2048 [ 87.205368][ T24] usb usb1-port1: attempt power cycle [ 87.232344][ T6109] loop4: p1 < > p3 p4 [ 87.250981][ T6109] loop4: partition table partially beyond EOD, truncated [ 87.284072][ T6109] loop4: p1 start 2304 is beyond EOD, truncated [ 87.291277][ T6109] loop4: p3 start 4294901760 is beyond EOD, truncated [ 87.309533][ T6109] loop4: p4 start 3539992576 is beyond EOD, truncated [ 87.323403][ T6111] syzkaller0: entered promiscuous mode [ 87.329029][ T6111] syzkaller0: entered allmulticast mode [ 87.495985][ T6111] Zero length message leads to an empty skb [ 87.571583][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 87.604924][ T24] usb 1-1: device descriptor read/8, error -71 [ 87.683056][ T5937] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 87.873195][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 87.893109][ T5937] usb 5-1: Using ep0 maxpacket: 32 [ 87.898580][ T24] usb 1-1: device descriptor read/8, error -71 [ 87.907181][ T5937] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 87.920559][ T5937] usb 5-1: config 0 has no interface number 0 [ 87.942114][ T5937] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 87.951553][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.960334][ T5937] usb 5-1: Product: syz [ 87.965896][ T5937] usb 5-1: Manufacturer: syz [ 87.970605][ T5937] usb 5-1: SerialNumber: syz [ 87.984705][ T5937] usb 5-1: config 0 descriptor?? [ 88.000518][ T5937] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 88.013669][ T24] usb usb1-port1: unable to enumerate USB device [ 88.128515][ T6119] netlink: 'syz.1.56': attribute type 10 has an invalid length. [ 88.154585][ T6119] netlink: 40 bytes leftover after parsing attributes in process `syz.1.56'. [ 88.164911][ T6119] batadv0: entered promiscuous mode [ 88.170165][ T6119] batadv0: entered allmulticast mode [ 88.176859][ T6119] bridge0: port 3(batadv0) entered blocking state [ 88.185606][ T6119] bridge0: port 3(batadv0) entered disabled state [ 88.205330][ T6119] bridge0: port 3(batadv0) entered blocking state [ 88.212030][ T6119] bridge0: port 3(batadv0) entered forwarding state [ 88.217043][ T5937] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 88.258926][ T5937] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 88.284537][ T6117] loop3: detected capacity change from 0 to 32768 [ 88.286230][ T6119] loop5: detected capacity change from 0 to 7 [ 88.294476][ T6117] btrfs: Deprecated parameter 'usebackuproot' [ 88.303716][ T6117] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 88.324522][ T6085] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 88.334999][ T6085] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 88.354396][ T6117] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.54 (6117) [ 88.367498][ T6119] Dev loop5: unable to read RDB block 7 [ 88.377762][ T6119] loop5: unable to read partition table [ 88.410171][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 6 [ 88.424318][ T6117] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 88.438136][ T6119] loop5: partition table beyond EOD, truncated [ 88.445711][ T6117] BTRFS info (device loop3): using crc32c checksum algorithm [ 88.473897][ T6119] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 88.610799][ T5954] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 88.625373][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 88.625825][ T5890] usb 5-1: USB disconnect, device number 3 [ 88.651842][ T5890] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 88.670398][ T5890] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 88.673510][ T6117] BTRFS error (device loop3): failed to load root extent [ 88.703198][ T6117] BTRFS warning (device loop3): try to load backup roots slot 1 [ 88.721542][ T3569] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 88.742645][ T6117] BTRFS warning (device loop3): couldn't read tree root [ 88.761188][ T6117] BTRFS warning (device loop3): try to load backup roots slot 2 [ 88.771675][ T5890] quatech2 5-1:0.51: device disconnected [ 88.789167][ T35] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 88.801949][ T6117] BTRFS warning (device loop3): couldn't read tree root [ 88.809529][ T6117] BTRFS warning (device loop3): try to load backup roots slot 3 [ 88.931890][ T6117] BTRFS info (device loop3): rebuilding free space tree [ 88.978804][ T5933] usb 3-1: usb_control_msg returned -71 [ 88.988653][ T5933] usbtmc 3-1:16.0: can't read capabilities [ 89.026062][ T5933] usb 3-1: USB disconnect, device number 2 [ 89.058251][ T6117] BTRFS info (device loop3): checking UUID tree [ 89.068886][ T6139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57'. [ 89.088656][ T6117] BTRFS info (device loop3): enabling ssd optimizations [ 89.121260][ T6139] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.143127][ T6117] BTRFS info (device loop3): turning off barriers [ 89.212031][ T6117] BTRFS info (device loop3): turning on sync discard [ 89.267882][ T6117] BTRFS info (device loop3): enabling free space tree [ 89.283113][ T6117] BTRFS info (device loop3): force clearing of disk cache [ 89.290260][ T6117] BTRFS info (device loop3): enabling auto defrag [ 89.362718][ T6117] BTRFS info (device loop3): trying to use backup root at mount time [ 89.549883][ T6117] BTRFS info (device loop3): use lzo compression, level 1 [ 89.971593][ T5828] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 90.852477][ T6169] syzkaller0: entered promiscuous mode [ 90.926975][ T6169] syzkaller0: entered allmulticast mode [ 91.129038][ T6182] loop1: detected capacity change from 0 to 64 [ 91.191465][ T6184] netlink: 'syz.3.73': attribute type 1 has an invalid length. [ 91.223405][ T5865] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 91.265036][ T6184] veth3: entered promiscuous mode [ 91.323017][ T5933] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 91.384958][ T5865] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 91.401249][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.481422][ T5865] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 91.491181][ T5865] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 91.499314][ T5865] usb 3-1: Manufacturer: syz [ 91.513314][ T5865] usb 3-1: config 0 descriptor?? [ 91.575842][ T5933] usb 5-1: no configurations [ 91.580482][ T5933] usb 5-1: can't read configurations, error -22 [ 91.643289][ T5865] rc_core: IR keymap rc-hauppauge not found [ 91.651154][ T5865] Registered IR keymap rc-empty [ 91.683754][ T5865] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 91.726236][ T5865] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9 [ 91.774299][ T5933] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 91.828308][ T6195] loop3: detected capacity change from 0 to 128 [ 91.843213][ T5865] usb 3-1: USB disconnect, device number 3 [ 91.938079][ T5933] usb 5-1: no configurations [ 91.949214][ T5933] usb 5-1: can't read configurations, error -22 [ 91.970277][ T5933] usb usb5-port1: attempt power cycle [ 92.246942][ T6187] loop1: detected capacity change from 0 to 32768 [ 92.264033][ T6187] btrfs: Deprecated parameter 'usebackuproot' [ 92.307429][ T6187] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 92.351785][ T6187] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.74 (6187) [ 92.382329][ T6187] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 92.415369][ T6187] BTRFS info (device loop1): using crc32c checksum algorithm [ 92.512216][ T49] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 92.526885][ T5933] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 92.539269][ T6187] BTRFS error (device loop1): failed to load root extent [ 92.561134][ T6187] BTRFS warning (device loop1): try to load backup roots slot 1 [ 92.561647][ T5933] usb 5-1: no configurations [ 92.597527][ T5933] usb 5-1: can't read configurations, error -22 [ 92.619418][ T1336] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 92.732907][ T6187] BTRFS warning (device loop1): couldn't read tree root [ 92.733089][ T5933] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 92.760869][ T6187] BTRFS warning (device loop1): try to load backup roots slot 2 [ 92.778897][ T1336] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 92.789965][ T5933] usb 5-1: no configurations [ 92.802411][ T5933] usb 5-1: can't read configurations, error -22 [ 92.825476][ T5933] usb usb5-port1: unable to enumerate USB device [ 92.838959][ T6187] BTRFS warning (device loop1): couldn't read tree root [ 92.847578][ T6187] BTRFS warning (device loop1): try to load backup roots slot 3 [ 92.868364][ T6187] BTRFS info (device loop1): rebuilding free space tree [ 92.912214][ T6187] BTRFS info (device loop1): checking UUID tree [ 92.943329][ T6187] BTRFS info (device loop1): enabling ssd optimizations [ 92.950721][ T6187] BTRFS info (device loop1): turning off barriers [ 92.996902][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 92.996914][ T29] audit: type=1326 audit(1768356507.086:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6221 comm="syz.0.79" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa7fef8f749 code=0x0 [ 93.064957][ T6187] BTRFS info (device loop1): turning on sync discard [ 93.088816][ T6187] BTRFS info (device loop1): enabling free space tree [ 93.167791][ T6187] BTRFS info (device loop1): force clearing of disk cache [ 93.189205][ T6187] BTRFS info (device loop1): enabling auto defrag [ 93.211835][ T6187] BTRFS info (device loop1): trying to use backup root at mount time [ 93.237655][ T6187] BTRFS info (device loop1): use lzo compression, level 1 [ 93.398103][ T5827] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 94.018400][ T6237] syzkaller0: entered promiscuous mode [ 94.062756][ T6237] syzkaller0: entered allmulticast mode [ 94.269697][ T6242] loop4: detected capacity change from 0 to 8 [ 94.426529][ T6240] trusted_key: encrypted_key: keylen parameter is missing [ 94.919157][ T6255] syz.2.87 uses obsolete (PF_INET,SOCK_PACKET) [ 94.967598][ T6258] loop4: detected capacity change from 0 to 512 [ 94.987455][ T6255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.87'. [ 95.913701][ T6267] loop1: detected capacity change from 0 to 1024 [ 96.013747][ T6265] hfsplus: invalid extended attribute record [ 96.125821][ T6269] netlink: 'syz.4.92': attribute type 1 has an invalid length. [ 96.162792][ T3569] hfsplus: b-tree write err: -5, ino 8 [ 96.273614][ T6269] veth3: entered promiscuous mode [ 96.352857][ T6273] loop1: detected capacity change from 0 to 64 [ 96.433341][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 96.634885][ T24] usb 1-1: no configurations [ 96.639515][ T24] usb 1-1: can't read configurations, error -22 [ 96.665187][ T6277] fuse: Unknown parameter '0x0000000000000004' [ 96.743741][ T6279] netlink: 156 bytes leftover after parsing attributes in process `syz.4.95'. [ 96.793163][ T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 96.986914][ T6281] netlink: 64 bytes leftover after parsing attributes in process `syz.4.95'. [ 96.999758][ T6284] syzkaller0: entered promiscuous mode [ 97.006035][ T24] usb 1-1: no configurations [ 97.013494][ T24] usb 1-1: can't read configurations, error -22 [ 97.022448][ T6284] syzkaller0: entered allmulticast mode [ 97.039052][ T24] usb usb1-port1: attempt power cycle [ 97.403286][ T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 97.434401][ T24] usb 1-1: no configurations [ 97.439196][ T24] usb 1-1: can't read configurations, error -22 [ 97.615259][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 97.674192][ T24] usb 1-1: no configurations [ 97.678865][ T24] usb 1-1: can't read configurations, error -22 [ 97.685616][ T24] usb usb1-port1: unable to enumerate USB device [ 98.459760][ T6305] loop1: detected capacity change from 0 to 32768 [ 98.476196][ T6305] btrfs: Deprecated parameter 'usebackuproot' [ 98.488052][ T6305] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 98.510324][ T6310] netlink: 'syz.2.106': attribute type 1 has an invalid length. [ 98.520083][ T6305] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.104 (6305) [ 98.574469][ T6305] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 98.601296][ T6312] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.628646][ T6305] BTRFS info (device loop1): using crc32c checksum algorithm [ 98.704773][ T6310] veth3: entered promiscuous mode [ 98.716864][ T1205] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 98.741727][ T6310] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 98.753871][ T6305] BTRFS error (device loop1): failed to load root extent [ 98.760919][ T6305] BTRFS warning (device loop1): try to load backup roots slot 1 [ 98.798478][ T6085] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 98.823889][ T6305] BTRFS warning (device loop1): couldn't read tree root [ 98.839083][ T6305] BTRFS warning (device loop1): try to load backup roots slot 2 [ 98.984044][ T35] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 98.998186][ T6305] BTRFS warning (device loop1): couldn't read tree root [ 99.013015][ T6305] BTRFS warning (device loop1): try to load backup roots slot 3 [ 99.027917][ T6305] BTRFS info (device loop1): rebuilding free space tree [ 99.070153][ T6305] BTRFS info (device loop1): checking UUID tree [ 99.097350][ T6305] BTRFS info (device loop1): enabling ssd optimizations [ 99.106432][ T6305] BTRFS info (device loop1): turning off barriers [ 99.113340][ T6305] BTRFS info (device loop1): turning on sync discard [ 99.136702][ T6305] BTRFS info (device loop1): enabling free space tree [ 99.149647][ T6305] BTRFS info (device loop1): force clearing of disk cache [ 99.322717][ T6305] BTRFS info (device loop1): enabling auto defrag [ 99.330213][ T6305] BTRFS info (device loop1): trying to use backup root at mount time [ 99.348466][ T6305] BTRFS info (device loop1): use lzo compression, level 1 [ 99.618983][ T6342] block device autoloading is deprecated and will be removed. [ 99.619447][ T6343] netlink: 'syz.2.109': attribute type 4 has an invalid length. [ 99.670562][ T5827] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 100.117461][ T6350] loop4: detected capacity change from 0 to 512 [ 100.242473][ T6350] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.112: invalid indirect mapped block 4294967295 (level 1) [ 100.342428][ T6350] EXT4-fs (loop4): Remounting filesystem read-only [ 100.381878][ T6350] EXT4-fs (loop4): 2 truncates cleaned up [ 100.425094][ T6350] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.601238][ T6360] EXT4-fs (loop4): shut down requested (1) [ 100.700607][ T6357] syzkaller0: entered promiscuous mode [ 100.706437][ T6357] syzkaller0: entered allmulticast mode [ 100.752178][ T5819] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.303096][ T6390] random: crng reseeded on system resumption [ 102.572078][ T6398] random: crng reseeded on system resumption [ 102.624656][ T6397] netlink: 156 bytes leftover after parsing attributes in process `syz.0.122'. [ 102.685675][ T6397] netlink: 64 bytes leftover after parsing attributes in process `syz.0.122'. [ 102.823012][ T6306] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 102.985731][ T6306] usb 5-1: Using ep0 maxpacket: 8 [ 103.012337][ T6306] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 103.038296][ T6306] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 103.079064][ T6306] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 103.124782][ T6306] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 103.152322][ T6402] loop2: detected capacity change from 0 to 4096 [ 103.165335][ T6306] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.186518][ T6402] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 103.293617][ T6402] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 103.315119][ T6306] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 103.351283][ T6306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.876855][ T6408] netlink: 'syz.2.126': attribute type 4 has an invalid length. [ 103.938791][ T6306] usb 5-1: GET_CAPABILITIES returned 0 [ 103.951459][ T6306] usbtmc 5-1:16.0: can't read capabilities [ 105.050953][ T6427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.132'. [ 105.226284][ T6427] netlink: 36 bytes leftover after parsing attributes in process `syz.1.132'. [ 105.236313][ T6427] netlink: 16 bytes leftover after parsing attributes in process `syz.1.132'. [ 105.247406][ T6427] netlink: 36 bytes leftover after parsing attributes in process `syz.1.132'. [ 105.256897][ T6427] netlink: 36 bytes leftover after parsing attributes in process `syz.1.132'. [ 106.242204][ T9] usb 5-1: USB disconnect, device number 8 [ 106.593636][ T6462] random: crng reseeded on system resumption [ 106.739378][ T6464] netlink: 'syz.3.138': attribute type 4 has an invalid length. [ 107.334653][ T6472] loop0: detected capacity change from 0 to 1024 [ 107.416833][ T6472] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 107.444265][ T6472] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (49802!=20869) [ 107.458810][ T6472] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 107.474615][ T6472] EXT4-fs error (device loop0): ext4_get_journal_inode:5849: inode #5: comm syz.0.141: unexpected bad inode w/o EXT4_IGET_BAD [ 107.498870][ T6472] EXT4-fs (loop0): no journal found [ 107.504746][ T6472] EXT4-fs (loop0): can't get journal size [ 107.515767][ T6472] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.531370][ T6472] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.832320][ T6478] loop0: detected capacity change from 0 to 8 [ 107.872553][ T6478] SQUASHFS error: xz decompression failed, data probably corrupt [ 107.905826][ T6478] SQUASHFS error: Failed to read block 0x108: -5 [ 107.921288][ T6478] SQUASHFS error: Unable to read metadata cache entry [106] [ 107.945514][ T6478] SQUASHFS error: Unable to read inode 0x11f [ 108.260523][ T6487] loop0: detected capacity change from 0 to 512 [ 108.342802][ T6487] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.408361][ T6493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 108.509191][ T6493] netlink: 36 bytes leftover after parsing attributes in process `syz.3.146'. [ 108.611537][ T6493] netlink: 16 bytes leftover after parsing attributes in process `syz.3.146'. [ 108.624352][ T6493] netlink: 36 bytes leftover after parsing attributes in process `syz.3.146'. [ 108.653342][ T6493] netlink: 36 bytes leftover after parsing attributes in process `syz.3.146'. [ 108.718988][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.383132][ T6511] : renamed from bridge_slave_0 (while UP) [ 109.515347][ T6517] loop4: detected capacity change from 0 to 256 [ 109.894026][ T6517] exFAT-fs (loop4): failed to load upcase table (idx : 0x00002e7f, chksum : 0x03279930, utbl_chksum : 0xe619d30d) [ 109.917448][ T6520] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 110.358413][ T6533] loop2: detected capacity change from 0 to 16 [ 110.374169][ T6532] QAT: failed to copy from user. [ 110.513203][ T6533] erofs (device loop2): mounted with root inode @ nid 36. [ 110.588694][ T6533] overlay: filesystem on ./file0 is read-only [ 111.127073][ T6549] random: crng reseeded on system resumption [ 112.701810][ T6583] : renamed from bridge_slave_0 (while UP) [ 114.743182][ T5941] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 114.913834][ T5941] usb 2-1: Using ep0 maxpacket: 16 [ 114.965871][ T5941] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.005316][ T5941] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 115.044693][ T5941] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 115.058458][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.173008][ T5941] usb 2-1: Product: syz [ 115.206934][ T5941] usb 2-1: Manufacturer: syz [ 115.211538][ T5941] usb 2-1: SerialNumber: syz [ 115.235369][ T5941] usb 2-1: config 0 descriptor?? [ 115.494616][ T6621] loop4: detected capacity change from 0 to 4096 [ 115.965038][ T6632] QAT: failed to copy from user. [ 116.846273][ T6660] random: crng reseeded on system resumption [ 117.500666][ T5876] usb 2-1: USB disconnect, device number 3 [ 118.990274][ T6704] syzkaller0: entered promiscuous mode [ 118.996434][ T6704] syzkaller0: entered allmulticast mode [ 120.265917][ T5876] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 120.423496][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 120.425338][ T5876] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 120.427498][ T5876] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 120.427525][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.427544][ T5876] usb 2-1: Product: syz [ 120.427554][ T5876] usb 2-1: Manufacturer: syz [ 120.427562][ T5876] usb 2-1: SerialNumber: syz [ 120.429194][ T5876] usb 2-1: config 0 descriptor?? [ 121.103242][ T5876] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 121.273049][ T5876] usb 5-1: Using ep0 maxpacket: 32 [ 121.300885][ T5876] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 121.320526][ T5876] usb 5-1: config 0 has no interface number 0 [ 121.331991][ T6774] loop3: detected capacity change from 0 to 64 [ 121.350899][ T5876] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 121.365140][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.373426][ T5876] usb 5-1: Product: syz [ 121.377572][ T5876] usb 5-1: Manufacturer: syz [ 121.382145][ T5876] usb 5-1: SerialNumber: syz [ 121.400071][ T5876] usb 5-1: config 0 descriptor?? [ 121.416776][ T5876] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 121.446106][ T5876] usb 5-1: selecting invalid altsetting 1 [ 121.474895][ T5876] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 121.506765][ T5876] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 121.604237][ T5876] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 121.646173][ T5876] usb 5-1: media controller created [ 121.807563][ T5876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.925901][ T5876] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 121.947232][ T5876] zl10353_read_register: readreg error (reg=127, ret==-71) [ 121.988578][ T5876] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 122.023033][ T5865] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 122.138312][ T5876] usb 5-1: USB disconnect, device number 9 [ 122.174501][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.205424][ T5865] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 122.223904][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.269407][ T5865] usb 4-1: config 0 descriptor?? [ 122.406410][ T6796] Invalid ELF header type: 2 != 1 [ 122.523801][ T6799] tipc: Started in network mode [ 122.537784][ T6799] tipc: Node identity 6eaa5d273597, cluster identity 4711 [ 122.548292][ T6799] tipc: Enabled bearer , priority 0 [ 122.559730][ T6799] syzkaller0: entered promiscuous mode [ 122.565959][ T6799] syzkaller0: entered allmulticast mode [ 122.589358][ T6799] tipc: Resetting bearer [ 122.599293][ T6798] tipc: Resetting bearer [ 122.615001][ T6798] tipc: Disabling bearer [ 122.692843][ T5865] hid_mf 0003:0079:1846.0002: unknown main item tag 0x0 [ 122.712599][ T5865] hid_mf 0003:0079:1846.0002: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.3-1/input0 [ 122.728983][ T5865] hid_mf 0003:0079:1846.0002: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 122.812361][ T6806] syzkaller0: entered promiscuous mode [ 122.818036][ T6806] syzkaller0: entered allmulticast mode [ 122.947168][ T5876] usb 4-1: USB disconnect, device number 3 [ 123.084232][ T5865] usb 2-1: USB disconnect, device number 4 [ 123.441957][ T6830] loop1: detected capacity change from 0 to 256 [ 123.491704][ T6830] exfat: Deprecated parameter 'utf8' [ 123.533306][ T6830] exfat: Deprecated parameter 'utf8' [ 123.546702][ T6830] exfat: Deprecated parameter 'utf8' [ 123.582652][ T6830] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 123.681903][ T6833] syz_tun: entered allmulticast mode [ 123.743631][ T6833] dvmrp6: entered allmulticast mode [ 124.243919][ T6840] tipc: Started in network mode [ 124.248879][ T6840] tipc: Node identity 6a05c3bea285, cluster identity 4711 [ 124.256216][ T6840] tipc: Enabled bearer , priority 0 [ 124.278713][ T6840] syzkaller0: entered promiscuous mode [ 124.313488][ T6840] syzkaller0: entered allmulticast mode [ 124.381667][ T6840] tipc: Resetting bearer [ 124.450195][ T6839] tipc: Resetting bearer [ 124.479818][ T6839] tipc: Disabling bearer [ 124.779825][ T6855] loop3: detected capacity change from 0 to 8192 [ 125.163000][ T5941] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 125.323058][ T5941] usb 5-1: Using ep0 maxpacket: 16 [ 125.329417][ T6871] random: crng reseeded on system resumption [ 125.557355][ T6873] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 125.557402][ T5941] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 125.914932][ T5941] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 125.924126][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.938202][ T5941] usb 5-1: Product: syz [ 125.944483][ T5941] usb 5-1: Manufacturer: syz [ 125.949085][ T5941] usb 5-1: SerialNumber: syz [ 126.063940][ T5941] usb 5-1: config 0 descriptor?? [ 127.482482][ T6904] syzkaller0: entered promiscuous mode [ 127.493892][ T6904] syzkaller0: entered allmulticast mode [ 127.689563][ T6910] loop3: detected capacity change from 0 to 256 [ 127.741246][ T6910] FAT-fs (loop3): Directory bread(block 64) failed [ 127.748851][ T6910] FAT-fs (loop3): Directory bread(block 65) failed [ 127.756371][ T6910] FAT-fs (loop3): Directory bread(block 66) failed [ 127.802378][ T6910] FAT-fs (loop3): Directory bread(block 67) failed [ 127.823440][ T6910] FAT-fs (loop3): Directory bread(block 68) failed [ 127.833984][ T6910] FAT-fs (loop3): Directory bread(block 69) failed [ 127.840685][ T6910] FAT-fs (loop3): Directory bread(block 70) failed [ 127.850926][ T6910] FAT-fs (loop3): Directory bread(block 71) failed [ 127.857843][ T6910] FAT-fs (loop3): Directory bread(block 72) failed [ 127.866640][ T6910] FAT-fs (loop3): Directory bread(block 73) failed [ 127.958550][ T6306] usb 5-1: USB disconnect, device number 10 [ 128.076200][ T6923] loop1: detected capacity change from 0 to 2048 [ 128.104107][ T6928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.240'. [ 128.141233][ T6923] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 128.165658][ T6923] UDF-fs: Scanning with blocksize 512 failed [ 128.176409][ T6928] netlink: 36 bytes leftover after parsing attributes in process `syz.0.240'. [ 128.204603][ T6923] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.223397][ T6928] netlink: 16 bytes leftover after parsing attributes in process `syz.0.240'. [ 128.232289][ T6928] netlink: 36 bytes leftover after parsing attributes in process `syz.0.240'. [ 128.294952][ T6928] netlink: 36 bytes leftover after parsing attributes in process `syz.0.240'. [ 129.349699][ T6937] loop3: detected capacity change from 0 to 2048 [ 129.396218][ T6937] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 129.472727][ T6937] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.540284][ T6950] syzkaller0: entered promiscuous mode [ 129.569038][ T6950] syzkaller0: entered allmulticast mode [ 130.243455][ T5937] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 130.413292][ T5937] usb 2-1: Using ep0 maxpacket: 16 [ 130.428852][ T5937] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 130.471878][ T5937] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 130.485398][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.499837][ T5937] usb 2-1: Product: syz [ 130.517843][ T5937] usb 2-1: Manufacturer: syz [ 130.537259][ T5937] usb 2-1: SerialNumber: syz [ 130.558556][ T5937] usb 2-1: config 0 descriptor?? [ 130.703535][ T6991] netlink: 68 bytes leftover after parsing attributes in process `syz.3.258'. [ 130.703915][ T6992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.257'. [ 130.758980][ T6992] netlink: 36 bytes leftover after parsing attributes in process `syz.4.257'. [ 130.769639][ T6992] netlink: 16 bytes leftover after parsing attributes in process `syz.4.257'. [ 130.808247][ T6992] netlink: 36 bytes leftover after parsing attributes in process `syz.4.257'. [ 131.026125][ T6996] netlink: 'syz.3.260': attribute type 1 has an invalid length. [ 131.130496][ T7000] syzkaller0: entered promiscuous mode [ 131.136708][ T7000] syzkaller0: entered allmulticast mode [ 131.160105][ T6996] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.212010][ T6996] veth3: entered promiscuous mode [ 131.220994][ T6996] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 132.625099][ T7037] loop4: detected capacity change from 0 to 128 [ 132.721049][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.730854][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.019559][ T7050] loop4: detected capacity change from 0 to 164 [ 133.058877][ T5937] usb 2-1: USB disconnect, device number 5 [ 133.178611][ T7054] syzkaller0: entered promiscuous mode [ 133.201681][ T7054] syzkaller0: entered allmulticast mode [ 133.380189][ T7060] __nla_validate_parse: 2 callbacks suppressed [ 133.380210][ T7060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.277'. [ 133.443670][ T7063] netlink: 36 bytes leftover after parsing attributes in process `syz.3.277'. [ 133.462684][ T7063] netlink: 16 bytes leftover after parsing attributes in process `syz.3.277'. [ 133.474539][ T7063] netlink: 36 bytes leftover after parsing attributes in process `syz.3.277'. [ 133.485557][ T7063] netlink: 36 bytes leftover after parsing attributes in process `syz.3.277'. [ 135.682289][ T7099] random: crng reseeded on system resumption [ 136.488851][ T7106] netlink: 68 bytes leftover after parsing attributes in process `syz.3.289'. [ 136.497336][ T7107] syzkaller0: entered promiscuous mode [ 136.504532][ T7107] syzkaller0: entered allmulticast mode [ 137.733358][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 137.975001][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.004492][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.043032][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 138.093016][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 138.103022][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.128481][ T9] usb 1-1: config 0 descriptor?? [ 138.518464][ T7136] loop2: detected capacity change from 0 to 1024 [ 138.555747][ T7136] EXT4-fs: Ignoring removed nobh option [ 138.596794][ T7136] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 138.657247][ T7136] EXT4-fs error (device loop2): ext4_ext_check_inode:528: inode #11: comm syz.2.298: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 138.741410][ T7140] loop1: detected capacity change from 0 to 1024 [ 138.754528][ T7136] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.298: couldn't read orphan inode 11 (err -117) [ 138.755260][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 138.782662][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 138.811158][ T7140] EXT4-fs: Ignoring removed nomblk_io_submit option [ 138.854432][ T9] usb 1-1: USB disconnect, device number 15 [ 138.855546][ T7136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.911249][ T7140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.043816][ T7136] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.298: Invalid block bitmap block 0 in block_group 0 [ 139.066090][ T7136] Quota error (device loop2): write_blk: dquota write failed [ 139.076335][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.077460][ T7136] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 139.097349][ T7136] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.298: Failed to acquire dquot type 0 [ 139.156680][ T7136] EXT4-fs error (device loop2): __ext4_get_inode_loc:4829: comm syz.2.298: Invalid inode table block 8589934593 in block_group 0 [ 139.297264][ T5954] EXT4-fs error (device loop2): __ext4_get_inode_loc:4829: comm kworker/u8:16: Invalid inode table block 8589934593 in block_group 0 [ 139.329019][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.534476][ T7160] syzkaller0: entered promiscuous mode [ 139.540105][ T7160] syzkaller0: entered allmulticast mode [ 139.870677][ T7167] random: crng reseeded on system resumption [ 140.618187][ T7181] tipc: Enabling of bearer rejected, failed to enable media [ 141.492995][ T5941] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 141.684957][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.697051][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.712213][ T5941] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 141.730781][ T5941] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 141.740546][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.775623][ T5941] usb 3-1: config 0 descriptor?? [ 141.856884][ T7208] syzkaller0: entered promiscuous mode [ 141.862496][ T7208] syzkaller0: entered allmulticast mode [ 142.191946][ T7216] loop1: detected capacity change from 0 to 256 [ 142.206586][ T7216] exfat: Deprecated parameter 'utf8' [ 142.221698][ T7216] exfat: Deprecated parameter 'utf8' [ 142.230989][ T7216] exfat: Deprecated parameter 'utf8' [ 142.248529][ T7219] tipc: Enabling of bearer rejected, failed to enable media [ 142.267053][ T7216] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 142.439744][ T5941] usbhid 3-1:0.0: can't add hid device: -71 [ 142.523678][ T5941] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 142.563223][ T5941] usb 3-1: USB disconnect, device number 4 [ 142.670956][ T7227] netlink: 'syz.0.324': attribute type 1 has an invalid length. [ 142.735449][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.324'. [ 142.758431][ T7231] netlink: 24 bytes leftover after parsing attributes in process `syz.0.324'. [ 143.034062][ T7227] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.148174][ T7233] veth3: entered promiscuous mode [ 143.188808][ T7233] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 143.474762][ T7241] veth1_to_bond: entered allmulticast mode [ 144.098596][ T7249] syzkaller0: entered promiscuous mode [ 144.104137][ T7249] syzkaller0: entered allmulticast mode [ 144.227322][ T7237] veth1_to_bond: left allmulticast mode [ 144.657607][ T7256] syzkaller0: entered promiscuous mode [ 144.664199][ T7256] syzkaller0: entered allmulticast mode [ 144.665682][ T7260] loop2: detected capacity change from 0 to 256 [ 144.670122][ T7258] loop0: detected capacity change from 0 to 512 [ 144.685582][ T7260] exfat: Deprecated parameter 'utf8' [ 144.723281][ T7260] exfat: Deprecated parameter 'utf8' [ 144.749229][ T7260] exfat: Deprecated parameter 'utf8' [ 144.760098][ T7258] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.334: invalid block [ 144.782673][ T7258] EXT4-fs (loop0): Remounting filesystem read-only [ 144.816438][ T7258] EXT4-fs (loop0): 2 truncates cleaned up [ 144.817127][ T7260] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 144.824313][ T7258] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.902381][ T7264] tipc: Enabled bearer , priority 0 [ 144.911988][ T7264] syzkaller0: entered promiscuous mode [ 144.920240][ T7264] syzkaller0: entered allmulticast mode [ 144.986359][ T7264] tipc: Resetting bearer [ 144.994846][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.013423][ T7263] tipc: Resetting bearer [ 145.091472][ T7263] tipc: Disabling bearer [ 145.243693][ T7274] syzkaller0: entered promiscuous mode [ 145.266693][ T7274] syzkaller0: entered allmulticast mode [ 145.421668][ T36] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 145.472354][ T7285] syzkaller0: entered promiscuous mode [ 145.485297][ T7285] syzkaller0: entered allmulticast mode [ 145.604721][ T36] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 145.618542][ T36] usb 1-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 145.645480][ T36] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 145.657576][ T36] usb 1-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 145.681885][ T36] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 145.707865][ T36] usb 1-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 145.741739][ T36] usb 1-1: string descriptor 0 read error: -22 [ 145.750218][ T36] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 145.765730][ T7289] veth1_to_bond: entered allmulticast mode [ 145.840704][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.871242][ T36] adutux 1-1:168.0: interrupt endpoints not found [ 146.209133][ T5941] usb 1-1: USB disconnect, device number 16 [ 146.585775][ T7286] veth1_to_bond: left allmulticast mode [ 147.055038][ T7306] loop3: detected capacity change from 0 to 256 [ 147.085168][ T7303] syzkaller0: entered promiscuous mode [ 147.090686][ T7303] syzkaller0: entered allmulticast mode [ 147.179100][ T7308] loop0: detected capacity change from 0 to 256 [ 147.214043][ T7308] exfat: Deprecated parameter 'utf8' [ 147.233215][ T7308] exfat: Deprecated parameter 'utf8' [ 147.238781][ T7308] exfat: Deprecated parameter 'utf8' [ 147.358024][ T7308] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 147.645974][ T7312] syzkaller0: entered promiscuous mode [ 147.652188][ T7312] syzkaller0: entered allmulticast mode [ 147.662684][ T7313] syzkaller0: entered promiscuous mode [ 147.672744][ T7313] syzkaller0: entered allmulticast mode [ 147.756117][ T7323] bridge1: entered promiscuous mode [ 147.761367][ T7323] bridge1: entered allmulticast mode [ 147.798226][ T7323] team0: Port device bridge1 added [ 147.824735][ T6306] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 147.963060][ T6306] usb 1-1: device descriptor read/64, error -71 [ 148.054644][ T7338] loop1: detected capacity change from 0 to 512 [ 148.093229][ T7335] syzkaller0: entered promiscuous mode [ 148.098773][ T7335] syzkaller0: entered allmulticast mode [ 148.117152][ T7338] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.133593][ T7338] ext4 filesystem being mounted at /70/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.222994][ T6306] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 148.281085][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.380137][ T6306] usb 1-1: device descriptor read/64, error -71 [ 148.742543][ T6306] usb usb1-port1: attempt power cycle [ 148.782526][ T7359] syzkaller0: entered promiscuous mode [ 148.818630][ T7359] syzkaller0: entered allmulticast mode [ 148.996147][ T7367] syzkaller0: entered promiscuous mode [ 149.082193][ T7367] syzkaller0: entered allmulticast mode [ 149.103060][ T6306] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 149.138851][ T6306] usb 1-1: device descriptor read/8, error -71 [ 149.403240][ T6306] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 149.423730][ T6306] usb 1-1: device descriptor read/8, error -71 [ 149.513980][ T7384] trusted_key: encrypted_key: insufficient parameters specified [ 149.525627][ T7384] trusted_key: encrypted_key: keylen parameter is missing [ 149.533446][ T7382] syzkaller0: entered promiscuous mode [ 149.537997][ T6306] usb usb1-port1: unable to enumerate USB device [ 149.553003][ T7382] syzkaller0: entered allmulticast mode [ 150.099001][ T7396] syzkaller0: entered promiscuous mode [ 150.114222][ T7396] syzkaller0: entered allmulticast mode [ 150.444104][ T7408] loop4: detected capacity change from 0 to 256 [ 150.562988][ T5826] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 150.733869][ T5826] usb 4-1: Using ep0 maxpacket: 16 [ 150.756238][ T5826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.793585][ T5826] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 150.806456][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.849977][ T5826] usb 4-1: config 0 descriptor?? [ 150.878592][ T7423] loop0: detected capacity change from 0 to 512 [ 150.922187][ T7423] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.006390][ T7423] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 151.275682][ T121] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 151.358351][ T5826] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 151.473021][ T5941] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 151.476002][ T121] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 151.488980][ T121] usb 2-1: config 0 has no interface number 0 [ 151.526162][ T121] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 151.547739][ T121] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.573393][ T121] usb 2-1: Product: syz [ 151.584156][ T121] usb 2-1: Manufacturer: syz [ 151.599019][ T121] usb 2-1: SerialNumber: syz [ 151.627985][ T121] usb 2-1: config 0 descriptor?? [ 151.673106][ T5941] usb 5-1: Using ep0 maxpacket: 8 [ 151.700291][ T5941] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 151.714863][ T5941] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 151.735745][ T5941] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 151.746101][ T5941] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 151.759687][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.778198][ T5941] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.826652][ T5941] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 151.867250][ T121] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 151.867819][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.893402][ T7430] i2c i2c-1: unsupported multi-msg i2c transaction [ 151.937919][ T121] usb 2-1: USB disconnect, device number 6 [ 152.227870][ T5941] usb 5-1: GET_CAPABILITIES returned 0 [ 152.259527][ T5941] usbtmc 5-1:16.0: can't read capabilities [ 152.468615][ T121] libceph: connect (1)[c::]:6789 error -101 [ 152.479420][ T121] libceph: mon0 (1)[c::]:6789 connect error [ 152.492874][ T121] libceph: connect (1)[c::]:6789 error -101 [ 152.499224][ T121] libceph: mon0 (1)[c::]:6789 connect error [ 152.673278][ T121] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 152.770193][ T36] libceph: connect (1)[c::]:6789 error -101 [ 152.780239][ T36] libceph: mon0 (1)[c::]:6789 connect error [ 152.933017][ T121] usb 1-1: Using ep0 maxpacket: 16 [ 152.942409][ T121] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 152.958717][ T121] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 153.016217][ T121] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.047500][ T7450] syzkaller0: entered promiscuous mode [ 153.053120][ T7450] syzkaller0: entered allmulticast mode [ 153.130575][ T121] usb 1-1: config 1 interface 0 has no altsetting 0 [ 153.153020][ T121] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 153.162480][ T121] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.186899][ T121] usb 1-1: Product: syz [ 153.191190][ T121] usb 1-1: Manufacturer: syz [ 153.196457][ T121] usb 1-1: SerialNumber: syz [ 153.317668][ T6306] libceph: connect (1)[c::]:6789 error -101 [ 153.330041][ T6306] libceph: mon0 (1)[c::]:6789 connect error [ 153.438240][ T121] usblp 1-1:1.0: usblp1: USB Unidirectional printer dev 21 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 153.554625][ T121] usb 4-1: USB disconnect, device number 4 [ 153.742990][ T6306] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 153.932622][ T6306] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 153.947602][ T6306] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.973026][ T6306] usb 3-1: config 0 has no interface number 0 [ 154.161302][ T6306] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 154.183589][ T121] usb 5-1: USB disconnect, device number 11 [ 154.196180][ T6306] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.295525][ T6306] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 154.316968][ T6306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.362539][ T6306] usb 3-1: Product: syz [ 154.369456][ T6306] usb 3-1: Manufacturer: syz [ 154.397620][ T7469] tipc: Enabling of bearer rejected, failed to enable media [ 154.402990][ T6306] usb 3-1: SerialNumber: syz [ 154.419699][ T6306] usb 3-1: config 0 descriptor?? [ 154.557256][ T7471] loop3: detected capacity change from 0 to 1024 [ 154.714591][ T6306] libceph: connect (1)[c::]:6789 error -101 [ 154.720700][ T6306] libceph: mon0 (1)[c::]:6789 connect error [ 154.777058][ T7471] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 154.790630][ T7471] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 154.851866][ T7476] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 154.901127][ T7476] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 155.016999][ T6377] hfsplus: b-tree write err: -5, ino 4 [ 155.032039][ T6377] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 155.156061][ T7440] ceph: No mds server is up or the cluster is laggy [ 155.223873][ T7481] loop3: detected capacity change from 0 to 128 [ 155.232974][ T7482] 9p: Bad value for 'rfdno' [ 155.254361][ T5826] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 155.314526][ T5865] usb 1-1: USB disconnect, device number 21 [ 155.362879][ T7481] syz.3.409: attempt to access beyond end of device [ 155.362879][ T7481] loop3: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 155.406204][ T5865] usblp1: removed [ 155.423943][ T7481] syz.3.409: attempt to access beyond end of device [ 155.423943][ T7481] loop3: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 155.445184][ T5826] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 155.456454][ T5826] usb 2-1: config 0 has no interface number 0 [ 155.472009][ T5826] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 155.476221][ T7481] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 155.489921][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.490231][ T7481] syz.3.409: attempt to access beyond end of device [ 155.490231][ T7481] loop3: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 155.512013][ T7481] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 155.534246][ T5826] usb 2-1: Product: syz [ 155.537813][ T7485] syz.3.409: attempt to access beyond end of device [ 155.537813][ T7485] loop3: rw=8388608, sector=154, nr_sectors = 2 limit=128 [ 155.554254][ T5826] usb 2-1: Manufacturer: syz [ 155.593153][ T5826] usb 2-1: SerialNumber: syz [ 155.604394][ T5826] usb 2-1: config 0 descriptor?? [ 155.814807][ T5826] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 155.828009][ T5826] usb 2-1: USB disconnect, device number 7 [ 156.133016][ T6306] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 156.146803][ T7505] loop4: detected capacity change from 0 to 4096 [ 156.158743][ T7505] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 156.210131][ T7505] ntfs3(loop4): ino=19, mi_enum_attr [ 156.217138][ T7505] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 156.283142][ T6306] usb 4-1: Using ep0 maxpacket: 16 [ 156.411743][ T6306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.440806][ T6306] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 156.482825][ T6306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.518293][ T6306] usb 4-1: config 0 descriptor?? [ 156.613050][ T5826] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 156.769441][ T5941] usb 3-1: USB disconnect, device number 5 [ 156.802993][ T5826] usb 1-1: Using ep0 maxpacket: 8 [ 156.846512][ T5826] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 156.856586][ T5826] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 156.871659][ T5826] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 156.882817][ T5826] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 156.893029][ T5826] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.906930][ T5826] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 156.936205][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.063708][ T6306] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 157.177417][ T5826] usb 1-1: GET_CAPABILITIES returned 0 [ 157.199300][ T5826] usbtmc 1-1:16.0: can't read capabilities [ 158.561972][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 158.568473][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 158.709571][ T7537] syzkaller0: entered promiscuous mode [ 158.718958][ T7537] syzkaller0: entered allmulticast mode [ 158.773246][ T5922] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 158.933212][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 158.946424][ T5922] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 158.974576][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 158.981239][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 159.008510][ T5922] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 159.044017][ T5922] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.093169][ T121] usb 4-1: USB disconnect, device number 5 [ 159.104709][ T5922] usb 2-1: config 1 interface 0 has no altsetting 0 [ 159.148300][ T5922] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 159.211772][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.220968][ T5922] usb 2-1: Product: syz [ 159.245685][ T5922] usb 2-1: Manufacturer: syz [ 159.250295][ T5922] usb 2-1: SerialNumber: syz [ 159.356117][ T7546] loop4: detected capacity change from 0 to 256 [ 159.371088][ T121] usb 1-1: USB disconnect, device number 22 [ 159.508875][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 159.673602][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 159.807071][ T7546] FAT-fs (loop4): Directory bread(block 64) failed [ 159.824890][ T7546] FAT-fs (loop4): Directory bread(block 65) failed [ 159.869005][ T7553] loop0: detected capacity change from 0 to 256 [ 159.878623][ T7553] exfat: Deprecated parameter 'utf8' [ 159.887357][ T7553] exfat: Deprecated parameter 'utf8' [ 159.897479][ T7553] exfat: Deprecated parameter 'utf8' [ 159.924236][ T7546] FAT-fs (loop4): Directory bread(block 66) failed [ 159.934853][ T7546] FAT-fs (loop4): Directory bread(block 67) failed [ 159.937102][ T7553] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 159.971662][ T7546] FAT-fs (loop4): Directory bread(block 68) failed [ 160.033883][ T7546] FAT-fs (loop4): Directory bread(block 69) failed [ 160.041618][ T7546] FAT-fs (loop4): Directory bread(block 70) failed [ 160.055617][ T5922] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 160.066926][ T7546] FAT-fs (loop4): Directory bread(block 71) failed [ 160.113537][ T7546] FAT-fs (loop4): Directory bread(block 72) failed [ 160.121760][ T7546] FAT-fs (loop4): Directory bread(block 73) failed [ 160.543093][ T5826] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 160.725128][ T5826] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.750457][ T5826] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.797389][ T5890] libceph: connect (1)[c::]:6789 error -101 [ 160.803619][ T5890] libceph: mon0 (1)[c::]:6789 connect error [ 160.828802][ T5826] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 160.860889][ T5826] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.903257][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.923037][ T7563] syzkaller0: entered promiscuous mode [ 160.929760][ T5826] usb 1-1: config 0 descriptor?? [ 160.935219][ T7563] syzkaller0: entered allmulticast mode [ 161.323000][ T5922] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 161.348059][ T7577] bridge2: entered promiscuous mode [ 161.357155][ T7577] bridge2: entered allmulticast mode [ 161.387675][ T5826] plantronics 0003:047F:FFFF.0005: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 161.407477][ T7577] team0: Port device bridge2 added [ 161.433732][ T7577] bridge0: port 3(team0) entered blocking state [ 161.458723][ T7577] bridge0: port 3(team0) entered disabled state [ 161.503677][ T7577] team0: entered allmulticast mode [ 161.515515][ T7577] team_slave_0: entered allmulticast mode [ 161.523043][ T5922] usb 3-1: Using ep0 maxpacket: 16 [ 161.530290][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.545211][ T5922] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 161.548573][ T7577] team_slave_1: entered allmulticast mode [ 161.560368][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.572133][ T5876] usb 1-1: USB disconnect, device number 23 [ 161.599719][ T7577] team0: entered promiscuous mode [ 161.604328][ T5922] usb 3-1: config 0 descriptor?? [ 161.616867][ T7577] team_slave_0: entered promiscuous mode [ 161.624834][ T7577] team_slave_1: entered promiscuous mode [ 161.658683][ T7577] bridge0: port 3(team0) entered blocking state [ 161.665518][ T7577] bridge0: port 3(team0) entered forwarding state [ 161.756533][ T5941] libceph: connect (1)[c::]:6789 error -101 [ 161.762802][ T5941] libceph: mon0 (1)[c::]:6789 connect error [ 161.972617][ T7530] ceph: No mds server is up or the cluster is laggy [ 162.024370][ T7584] loop3: detected capacity change from 0 to 256 [ 162.031810][ T7584] exfat: Deprecated parameter 'utf8' [ 162.037528][ T7584] exfat: Deprecated parameter 'utf8' [ 162.087355][ T5865] usb 2-1: USB disconnect, device number 8 [ 162.126109][ T5865] usblp0: removed [ 162.170967][ T7584] exfat: Deprecated parameter 'utf8' [ 162.224903][ T7584] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 162.309109][ T5922] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 162.706296][ T7592] loop4: detected capacity change from 0 to 4096 [ 163.506379][ T7603] loop1: detected capacity change from 0 to 32768 [ 163.537594][ T7603] btrfs: Deprecated parameter 'usebackuproot' [ 163.588682][ T7603] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 163.624410][ T7603] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.444 (7603) [ 163.677593][ T7603] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 163.703044][ T7603] BTRFS info (device loop1): using crc32c checksum algorithm [ 163.828759][ T3931] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 163.866263][ T7603] BTRFS error (device loop1): failed to load root extent [ 163.899081][ T7603] BTRFS warning (device loop1): try to load backup roots slot 1 [ 163.939188][ T6377] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 163.972841][ T7603] BTRFS warning (device loop1): couldn't read tree root [ 163.980257][ T7603] BTRFS warning (device loop1): try to load backup roots slot 2 [ 163.999393][ T7621] syzkaller0: entered promiscuous mode [ 164.027282][ T6377] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 164.040963][ T7621] syzkaller0: entered allmulticast mode [ 164.053835][ T7603] BTRFS warning (device loop1): couldn't read tree root [ 164.060807][ T7603] BTRFS warning (device loop1): try to load backup roots slot 3 [ 164.133482][ T7603] BTRFS info (device loop1): rebuilding free space tree [ 164.189869][ T7603] BTRFS info (device loop1): checking UUID tree [ 164.219093][ T7603] BTRFS info (device loop1): enabling ssd optimizations [ 164.233022][ T7603] BTRFS info (device loop1): turning off barriers [ 164.258358][ T7603] BTRFS info (device loop1): turning on sync discard [ 164.273090][ T7603] BTRFS info (device loop1): enabling free space tree [ 164.290315][ T7603] BTRFS info (device loop1): force clearing of disk cache [ 164.305731][ T5865] usb 3-1: USB disconnect, device number 6 [ 164.320489][ T7603] BTRFS info (device loop1): enabling auto defrag [ 164.330761][ T7603] BTRFS info (device loop1): trying to use backup root at mount time [ 164.339372][ T7603] BTRFS info (device loop1): use lzo compression, level 1 [ 164.503827][ T7633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.449'. [ 164.528934][ T7636] loop0: detected capacity change from 0 to 256 [ 164.587291][ T7636] FAT-fs (loop0): Directory bread(block 64) failed [ 164.597361][ T5827] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 164.601305][ T7636] FAT-fs (loop0): Directory bread(block 65) failed [ 164.640970][ T7636] FAT-fs (loop0): Directory bread(block 66) failed [ 164.663677][ T7636] FAT-fs (loop0): Directory bread(block 67) failed [ 164.683714][ T7636] FAT-fs (loop0): Directory bread(block 68) failed [ 164.699957][ T7636] FAT-fs (loop0): Directory bread(block 69) failed [ 164.700069][ T7636] FAT-fs (loop0): Directory bread(block 70) failed [ 164.700102][ T7636] FAT-fs (loop0): Directory bread(block 71) failed [ 164.700175][ T7636] FAT-fs (loop0): Directory bread(block 72) failed [ 164.700197][ T7636] FAT-fs (loop0): Directory bread(block 73) failed [ 164.800975][ T7643] netlink: 'syz.1.452': attribute type 1 has an invalid length. [ 164.864397][ T7641] loop2: detected capacity change from 0 to 1024 [ 164.865482][ T7641] EXT4-fs: inline encryption not supported [ 164.865504][ T7641] EXT4-fs: Ignoring removed i_version option [ 164.874231][ T7641] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 165.027459][ T7643] 8021q: adding VLAN 0 to HW filter on device bond3 [ 165.050083][ T7643] bond2: (slave bond3): making interface the new active one [ 165.051376][ T7643] bond2: (slave bond3): Enslaving as an active interface with an up link [ 165.056736][ T7641] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.453: lblock 2 mapped to illegal pblock 2 (length 1) [ 165.064188][ T7641] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 165.064234][ T7641] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.453: lblock 0 mapped to illegal pblock 48 (length 1) [ 165.064455][ T7641] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 165.064511][ T7641] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.453: Failed to acquire dquot type 0 [ 165.064946][ T7641] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6297: Corrupt filesystem [ 165.076708][ T7641] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.453: mark_inode_dirty error [ 165.077156][ T7641] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 165.077242][ T7641] EXT4-fs (loop2): 1 orphan inode deleted [ 165.085512][ T6085] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:17: lblock 1 mapped to illegal pblock 1 (length 1) [ 165.087410][ T6085] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 165.087445][ T6085] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:17: Failed to release dquot type 0 [ 165.103079][ T7641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.321124][ T7652] loop0: detected capacity change from 0 to 4096 [ 165.483570][ T7639] EXT4-fs error (device loop2): __ext4_get_inode_loc:4829: comm syz.2.453: Invalid inode table block 1 in block_group 0 [ 165.753822][ T7639] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6297: Corrupt filesystem [ 166.005847][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.020020][ T5823] EXT4-fs error (device loop2): __ext4_get_inode_loc:4829: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 166.123945][ T5823] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6297: Corrupt filesystem [ 166.137052][ T5823] EXT4-fs error (device loop2): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 166.153137][ T5941] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 166.463005][ T5941] usb 5-1: Using ep0 maxpacket: 16 [ 166.473550][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.484766][ T5941] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 166.494186][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.510537][ T5941] usb 5-1: config 0 descriptor?? [ 166.848502][ T7683] loop3: detected capacity change from 0 to 256 [ 166.924106][ T7683] exfat: Deprecated parameter 'utf8' [ 166.976108][ T7683] exfat: Deprecated parameter 'utf8' [ 166.986999][ T7685] loop2: detected capacity change from 0 to 512 [ 167.013173][ T7683] exfat: Deprecated parameter 'utf8' [ 167.066446][ T7683] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 167.140377][ T5941] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 167.162671][ T7685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.175573][ T7685] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 167.481969][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.734614][ T7696] tipc: Enabling of bearer rejected, failed to enable media [ 167.752306][ T7694] loop3: detected capacity change from 0 to 4096 [ 168.971015][ T5865] usb 5-1: USB disconnect, device number 12 [ 169.094149][ T7717] syzkaller0: entered promiscuous mode [ 169.099690][ T7717] syzkaller0: entered allmulticast mode [ 169.132615][ T7717] tipc: Started in network mode [ 169.138304][ T7717] tipc: Node identity 72fa4a9631b2, cluster identity 4711 [ 169.219545][ T7717] tipc: Enabled bearer , priority 0 [ 169.255921][ T7726] loop1: detected capacity change from 0 to 256 [ 169.324040][ T7726] exfat: Deprecated parameter 'utf8' [ 169.333069][ T7726] exfat: Deprecated parameter 'utf8' [ 169.355875][ T7726] exfat: Deprecated parameter 'utf8' [ 169.386384][ T7716] tipc: Resetting bearer [ 169.427130][ T7726] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 169.451251][ T7716] tipc: Disabling bearer [ 169.502136][ T7730] tipc: Enabling of bearer rejected, failed to enable media [ 170.066175][ T29] audit: type=1326 audit(1768356584.146:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09a98f749 code=0x7ffc0000 [ 170.107785][ T29] audit: type=1326 audit(1768356584.146:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe09a98f749 code=0x7ffc0000 [ 170.145247][ T29] audit: type=1326 audit(1768356584.156:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe09a9c2005 code=0x7ffc0000 [ 170.508156][ T29] audit: type=1326 audit(1768356584.166:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09a98f749 code=0x7ffc0000 [ 170.532605][ T29] audit: type=1326 audit(1768356584.216:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe09a98f749 code=0x7ffc0000 [ 170.554934][ T29] audit: type=1326 audit(1768356584.216:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09a98f749 code=0x7ffc0000 [ 170.578444][ T29] audit: type=1326 audit(1768356584.216:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fe09a98f749 code=0x7ffc0000 [ 170.607205][ T29] audit: type=1326 audit(1768356584.366:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fe09a98f749 code=0x7ffc0000 [ 170.632566][ T29] audit: type=1326 audit(1768356584.506:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe09a92b829 code=0x7ffc0000 [ 171.002667][ T5865] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 171.159889][ T29] audit: type=1326 audit(1768356584.506:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09a98f749 code=0x7ffc0000 [ 171.247341][ T5865] usb 5-1: config 0 has no interfaces? [ 171.253136][ T5865] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 171.264991][ T29] audit: type=1326 audit(1768356584.506:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09a98f749 code=0x7ffc0000 [ 171.295036][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.350420][ T5865] usb 5-1: config 0 descriptor?? [ 171.795937][ T7763] loop1: detected capacity change from 0 to 4096 [ 171.875869][ T7766] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.936329][ T7767] : renamed from bridge_slave_0 (while UP) [ 172.435647][ T7772] random: crng reseeded on system resumption [ 172.773114][ T7777] loop3: detected capacity change from 0 to 256 [ 172.788153][ T7777] exfat: Deprecated parameter 'utf8' [ 172.800906][ T7777] exfat: Deprecated parameter 'utf8' [ 172.831843][ T7777] exfat: Deprecated parameter 'utf8' [ 172.861794][ T7777] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 173.252534][ T7783] tipc: Enabling of bearer rejected, failed to enable media [ 173.341153][ T7786] loop3: detected capacity change from 0 to 1024 [ 173.392354][ T7786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.571821][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.828038][ T121] usb 5-1: USB disconnect, device number 13 [ 174.200876][ T7809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.502'. [ 174.811818][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 174.818251][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 175.007330][ T121] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 175.136093][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 175.160041][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 175.252964][ T121] usb 5-1: Using ep0 maxpacket: 16 [ 175.266305][ T121] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 175.381556][ T121] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 175.470977][ T121] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.517152][ T121] usb 5-1: config 1 interface 0 has no altsetting 0 [ 175.539260][ T121] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 175.569782][ T7834] random: crng reseeded on system resumption [ 175.640700][ T121] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.651285][ T121] usb 5-1: Product: syz [ 175.655767][ T121] usb 5-1: Manufacturer: syz [ 175.660387][ T121] usb 5-1: SerialNumber: syz [ 175.706781][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 175.722133][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 175.935473][ T121] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 176.437889][ T121] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 176.604814][ T121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.623104][ T121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.651618][ T121] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 176.706513][ T121] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 176.786992][ T121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.803373][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 176.809450][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 176.849308][ T121] usb 3-1: config 0 descriptor?? [ 176.973593][ T5937] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 177.137221][ T5937] usb 4-1: config 0 has no interfaces? [ 177.168206][ T5937] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 177.275216][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.285974][ T121] plantronics 0003:047F:FFFF.0008: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 177.308927][ T5937] usb 4-1: config 0 descriptor?? [ 177.526071][ T7822] ceph: No mds server is up or the cluster is laggy [ 177.535985][ T121] usb 3-1: USB disconnect, device number 7 [ 177.621825][ T7850] fido_id[7850]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 178.274447][ T5826] usb 5-1: USB disconnect, device number 14 [ 178.294820][ T5826] usblp0: removed [ 178.368897][ T7855] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 178.437083][ T7855] team0: Device ipvlan2 is already an upper device of the team interface [ 179.417403][ T7869] ------------[ cut here ]------------ [ 179.423620][ T7869] WARNING: mm/memcontrol-v1.c:642 at memcg1_swapout+0x6c2/0x8d0, CPU#1: syz.1.516/7869 [ 179.433254][ T7869] Modules linked in: [ 179.437701][ T7869] CPU: 1 UID: 0 PID: 7869 Comm: syz.1.516 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.448462][ T7869] Tainted: [L]=SOFTLOCKUP [ 179.452785][ T7869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 179.462842][ T7869] RIP: 0010:memcg1_swapout+0x6c2/0x8d0 [ 179.468309][ T7869] Code: 6d 5d 0d 00 0f 85 01 fa ff ff 48 89 df 48 c7 c6 a0 c3 98 8b e8 bf 8c f8 fe c6 05 77 6d 5d 0d 01 90 0f 0b 90 e9 e2 f9 ff ff 90 <0f> 0b 90 e9 eb fb ff ff 90 0f 0b 90 41 80 3c 2e 00 0f 85 d5 fe ff [ 179.487916][ T7869] RSP: 0018:ffffc9001bb6e718 EFLAGS: 00010006 [ 179.493979][ T7869] RAX: 0000000000000006 RBX: ffffea0000ce5b40 RCX: ffff88807cd36150 [ 179.501939][ T7869] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffc9000b41b400 [ 179.509907][ T7869] RBP: dffffc0000000000 R08: ffffc9000b41b403 R09: 1ffff92001683680 [ 179.517869][ T7869] R10: dffffc0000000000 R11: fffff52001683681 R12: ffffea0000ce5b48 [ 179.525832][ T7869] R13: 1ffffd400019cb68 R14: 1ffffd400019cb69 R15: ffff888027ea3088 [ 179.533802][ T7869] FS: 00007f9141c076c0(0000) GS:ffff888125cf7000(0000) knlGS:0000000000000000 [ 179.542718][ T7869] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 179.549289][ T7869] CR2: 0000000000000000 CR3: 000000003168e000 CR4: 00000000003526f0 [ 179.557250][ T7869] Call Trace: [ 179.560533][ T7869] [ 179.563457][ T7869] __remove_mapping+0xac5/0xe30 [ 179.568313][ T7869] shrink_folio_list+0x28d8/0x5320 [ 179.573436][ T7869] ? __pfx_shrink_folio_list+0x10/0x10 [ 179.578882][ T7869] ? __lock_acquire+0x6b6/0x2cf0 [ 179.583824][ T7869] ? __lock_acquire+0x6b6/0x2cf0 [ 179.588781][ T7869] ? __lock_acquire+0x6b6/0x2cf0 [ 179.593727][ T7869] ? finish_task_switch+0x162/0x950 [ 179.598910][ T7869] ? lock_acquire+0x107/0x340 [ 179.603583][ T7869] ? css_rstat_updated+0x239/0x520 [ 179.608684][ T7869] ? __pfx_css_rstat_updated+0x10/0x10 [ 179.614129][ T7869] reclaim_folio_list+0xeb/0x4e0 [ 179.619052][ T7869] ? __lock_acquire+0x6b6/0x2cf0 [ 179.623988][ T7869] ? __pfx_reclaim_folio_list+0x10/0x10 [ 179.629527][ T7869] ? lru_gen_update_size+0x818/0xd20 [ 179.634810][ T7869] ? __mod_zone_page_state+0xd7/0x140 [ 179.640176][ T7869] ? lru_gen_del_folio+0x359/0x540 [ 179.645274][ T7869] reclaim_pages+0x454/0x520 [ 179.649880][ T7869] ? __pfx_reclaim_pages+0x10/0x10 [ 179.655013][ T7869] ? madvise_cold_or_pageout_pte_range+0x1977/0x1ce0 [ 179.661725][ T7869] madvise_cold_or_pageout_pte_range+0x19a0/0x1ce0 [ 179.668239][ T7869] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 179.675093][ T7869] walk_pgd_range+0x1037/0x1d30 [ 179.679950][ T7869] ? __pfx_walk_pgd_range+0x10/0x10 [ 179.685137][ T7869] __walk_page_range+0x14c/0x710 [ 179.690084][ T7869] ? __pfx___schedule+0x10/0x10 [ 179.694916][ T7869] ? folio_batch_move_lru+0x39b/0x420 [ 179.700281][ T7869] walk_page_range_vma_unsafe+0x34c/0x400 [ 179.706002][ T7869] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 179.712223][ T7869] ? mlock_drain_local+0x79/0x480 [ 179.717233][ T7869] ? walk_page_range_vma+0x6b/0x90 [ 179.722346][ T7869] madvise_vma_behavior+0x30c7/0x4420 [ 179.727705][ T7869] ? update_se+0x91/0x5d0 [ 179.732015][ T7869] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 179.737718][ T7869] ? __lock_acquire+0x6b6/0x2cf0 [ 179.742650][ T7869] ? finish_task_switch+0x162/0x950 [ 179.747827][ T7869] ? lock_acquire+0x107/0x340 [ 179.752493][ T7869] ? finish_task_switch+0x241/0x950 [ 179.757679][ T7869] ? lockdep_hardirqs_on+0x7b/0x110 [ 179.762862][ T7869] ? __lock_acquire+0x6b6/0x2cf0 [ 179.767781][ T7869] ? __lock_acquire+0x6b6/0x2cf0 [ 179.772712][ T7869] ? mas_prev_slot+0xb31/0xbb0 [ 179.777480][ T7869] ? find_vma_prev+0xe3/0x150 [ 179.782137][ T7869] ? __pfx_find_vma_prev+0x10/0x10 [ 179.787231][ T7869] ? __schedule+0x14f1/0x5030 [ 179.791892][ T7869] madvise_walk_vmas+0x575/0xaf0 [ 179.796819][ T7869] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 179.802262][ T7869] ? blk_start_plug+0x6f/0x1b0 [ 179.807012][ T7869] madvise_do_behavior+0x38e/0x550 [ 179.812128][ T7869] ? __pfx_madvise_do_behavior+0x10/0x10 [ 179.817752][ T7869] ? down_read+0x2af/0x2e0 [ 179.822144][ T7869] ? madvise_lock+0x146/0x2f0 [ 179.826804][ T7869] do_madvise+0x1bc/0x270 [ 179.831145][ T7869] ? __pfx_do_madvise+0x10/0x10 [ 179.835983][ T7869] ? __se_sys_futex+0x36f/0x400 [ 179.840819][ T7869] ? rcu_is_watching+0x15/0xb0 [ 179.845567][ T7869] __x64_sys_madvise+0xa7/0xc0 [ 179.850321][ T7869] do_syscall_64+0xec/0xf80 [ 179.854812][ T7869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.860856][ T7869] ? trace_irq_disable+0x37/0x100 [ 179.865857][ T7869] ? clear_bhb_loop+0x40/0x90 [ 179.870521][ T7869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.876392][ T7869] RIP: 0033:0x7f9140d8f749 [ 179.880801][ T7869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.900384][ T7869] RSP: 002b:00007f9141c07038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 179.908782][ T7869] RAX: ffffffffffffffda RBX: 00007f9140fe6270 RCX: 00007f9140d8f749 [ 179.916740][ T7869] RDX: 0000000000000015 RSI: 0000000000600003 RDI: 0000200000000000 [ 179.924698][ T7869] RBP: 00007f9140e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 179.932647][ T7869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.940597][ T7869] R13: 00007f9140fe6308 R14: 00007f9140fe6270 R15: 00007ffc57cf2a68 [ 179.948557][ T7869] [ 179.951559][ T7869] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 179.958907][ T7869] CPU: 1 UID: 0 PID: 7869 Comm: syz.1.516 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.969643][ T7869] Tainted: [L]=SOFTLOCKUP [ 179.973940][ T7869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 179.984092][ T7869] Call Trace: [ 179.987353][ T7869] [ 179.990263][ T7869] vpanic+0x1e0/0x670 [ 179.994227][ T7869] panic+0xb9/0xc0 [ 179.997926][ T7869] ? __pfx_panic+0x10/0x10 [ 180.002331][ T7869] __warn+0x317/0x4b0 [ 180.006290][ T7869] ? memcg1_swapout+0x6c2/0x8d0 [ 180.011123][ T7869] ? memcg1_swapout+0x6c2/0x8d0 [ 180.015952][ T7869] __report_bug+0x288/0x500 [ 180.020432][ T7869] ? memcg1_swapout+0x6c2/0x8d0 [ 180.025264][ T7869] ? __pfx___report_bug+0x10/0x10 [ 180.030264][ T7869] ? __pfx_css_rstat_updated+0x10/0x10 [ 180.035708][ T7869] ? lruvec_stat_mod_folio+0x6f/0x2e0 [ 180.041058][ T7869] ? memcg1_swapout+0x6c2/0x8d0 [ 180.045886][ T7869] report_bug+0x16a/0x220 [ 180.050192][ T7869] ? memcg1_swapout+0x6c2/0x8d0 [ 180.055019][ T7869] ? memcg1_swapout+0x6c4/0x8d0 [ 180.059843][ T7869] handle_bug+0x98/0x200 [ 180.064066][ T7869] exc_invalid_op+0x1a/0x50 [ 180.068549][ T7869] asm_exc_invalid_op+0x1a/0x20 [ 180.073376][ T7869] RIP: 0010:memcg1_swapout+0x6c2/0x8d0 [ 180.078817][ T7869] Code: 6d 5d 0d 00 0f 85 01 fa ff ff 48 89 df 48 c7 c6 a0 c3 98 8b e8 bf 8c f8 fe c6 05 77 6d 5d 0d 01 90 0f 0b 90 e9 e2 f9 ff ff 90 <0f> 0b 90 e9 eb fb ff ff 90 0f 0b 90 41 80 3c 2e 00 0f 85 d5 fe ff [ 180.098401][ T7869] RSP: 0018:ffffc9001bb6e718 EFLAGS: 00010006 [ 180.104480][ T7869] RAX: 0000000000000006 RBX: ffffea0000ce5b40 RCX: ffff88807cd36150 [ 180.112438][ T7869] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffc9000b41b400 [ 180.120412][ T7869] RBP: dffffc0000000000 R08: ffffc9000b41b403 R09: 1ffff92001683680 [ 180.128364][ T7869] R10: dffffc0000000000 R11: fffff52001683681 R12: ffffea0000ce5b48 [ 180.136317][ T7869] R13: 1ffffd400019cb68 R14: 1ffffd400019cb69 R15: ffff888027ea3088 [ 180.144290][ T7869] ? memcg1_swapout+0x22d/0x8d0 [ 180.149149][ T7869] __remove_mapping+0xac5/0xe30 [ 180.154004][ T7869] shrink_folio_list+0x28d8/0x5320 [ 180.159135][ T7869] ? __pfx_shrink_folio_list+0x10/0x10 [ 180.164584][ T7869] ? __lock_acquire+0x6b6/0x2cf0 [ 180.169517][ T7869] ? __lock_acquire+0x6b6/0x2cf0 [ 180.174446][ T7869] ? __lock_acquire+0x6b6/0x2cf0 [ 180.179376][ T7869] ? finish_task_switch+0x162/0x950 [ 180.184553][ T7869] ? lock_acquire+0x107/0x340 [ 180.189213][ T7869] ? css_rstat_updated+0x239/0x520 [ 180.194304][ T7869] ? __pfx_css_rstat_updated+0x10/0x10 [ 180.199743][ T7869] reclaim_folio_list+0xeb/0x4e0 [ 180.204665][ T7869] ? __lock_acquire+0x6b6/0x2cf0 [ 180.209592][ T7869] ? __pfx_reclaim_folio_list+0x10/0x10 [ 180.215121][ T7869] ? lru_gen_update_size+0x818/0xd20 [ 180.220388][ T7869] ? __mod_zone_page_state+0xd7/0x140 [ 180.225741][ T7869] ? lru_gen_del_folio+0x359/0x540 [ 180.230833][ T7869] reclaim_pages+0x454/0x520 [ 180.235410][ T7869] ? __pfx_reclaim_pages+0x10/0x10 [ 180.240507][ T7869] ? madvise_cold_or_pageout_pte_range+0x1977/0x1ce0 [ 180.247168][ T7869] madvise_cold_or_pageout_pte_range+0x19a0/0x1ce0 [ 180.253663][ T7869] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 180.260503][ T7869] walk_pgd_range+0x1037/0x1d30 [ 180.265353][ T7869] ? __pfx_walk_pgd_range+0x10/0x10 [ 180.270533][ T7869] __walk_page_range+0x14c/0x710 [ 180.275456][ T7869] ? __pfx___schedule+0x10/0x10 [ 180.280286][ T7869] ? folio_batch_move_lru+0x39b/0x420 [ 180.285644][ T7869] walk_page_range_vma_unsafe+0x34c/0x400 [ 180.291344][ T7869] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 180.297571][ T7869] ? mlock_drain_local+0x79/0x480 [ 180.302581][ T7869] ? walk_page_range_vma+0x6b/0x90 [ 180.307671][ T7869] madvise_vma_behavior+0x30c7/0x4420 [ 180.313026][ T7869] ? update_se+0x91/0x5d0 [ 180.317425][ T7869] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 180.323129][ T7869] ? __lock_acquire+0x6b6/0x2cf0 [ 180.328065][ T7869] ? finish_task_switch+0x162/0x950 [ 180.333251][ T7869] ? lock_acquire+0x107/0x340 [ 180.337919][ T7869] ? finish_task_switch+0x241/0x950 [ 180.343098][ T7869] ? lockdep_hardirqs_on+0x7b/0x110 [ 180.348280][ T7869] ? __lock_acquire+0x6b6/0x2cf0 [ 180.353200][ T7869] ? __lock_acquire+0x6b6/0x2cf0 [ 180.358130][ T7869] ? mas_prev_slot+0xb31/0xbb0 [ 180.362889][ T7869] ? find_vma_prev+0xe3/0x150 [ 180.367547][ T7869] ? __pfx_find_vma_prev+0x10/0x10 [ 180.372729][ T7869] ? __schedule+0x14f1/0x5030 [ 180.377406][ T7869] madvise_walk_vmas+0x575/0xaf0 [ 180.382343][ T7869] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 180.387785][ T7869] ? blk_start_plug+0x6f/0x1b0 [ 180.392532][ T7869] madvise_do_behavior+0x38e/0x550 [ 180.397634][ T7869] ? __pfx_madvise_do_behavior+0x10/0x10 [ 180.403251][ T7869] ? down_read+0x2af/0x2e0 [ 180.407647][ T7869] ? madvise_lock+0x146/0x2f0 [ 180.412311][ T7869] do_madvise+0x1bc/0x270 [ 180.416629][ T7869] ? __pfx_do_madvise+0x10/0x10 [ 180.421467][ T7869] ? __se_sys_futex+0x36f/0x400 [ 180.426303][ T7869] ? rcu_is_watching+0x15/0xb0 [ 180.431053][ T7869] __x64_sys_madvise+0xa7/0xc0 [ 180.435889][ T7869] do_syscall_64+0xec/0xf80 [ 180.440380][ T7869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.446433][ T7869] ? trace_irq_disable+0x37/0x100 [ 180.451438][ T7869] ? clear_bhb_loop+0x40/0x90 [ 180.456099][ T7869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.461976][ T7869] RIP: 0033:0x7f9140d8f749 [ 180.466375][ T7869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.485972][ T7869] RSP: 002b:00007f9141c07038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 180.494365][ T7869] RAX: ffffffffffffffda RBX: 00007f9140fe6270 RCX: 00007f9140d8f749 [ 180.502403][ T7869] RDX: 0000000000000015 RSI: 0000000000600003 RDI: 0000200000000000 [ 180.510357][ T7869] RBP: 00007f9140e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 180.518308][ T7869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.526257][ T7869] R13: 00007f9140fe6308 R14: 00007f9140fe6270 R15: 00007ffc57cf2a68 [ 180.534219][ T7869] [ 180.537667][ T7869] Kernel Offset: disabled [ 180.541987][ T7869] Rebooting in 86400 seconds..