last executing test programs: 5m50.994009282s ago: executing program 1 (id=2824): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1bd) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000001100)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x3, 0x3, 0x4002004c2, 0x7ff, 0x9, 0xfffffffffffffffe, 0xff, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m50.765444455s ago: executing program 1 (id=2828): close(0x3) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) close(r1) 5m50.272640034s ago: executing program 1 (id=2830): syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000ee86dd6015690900132f00fc020000000000000000000000000000ff020000000000000000000000000001242088a8"], 0x0) 5m50.141711972s ago: executing program 1 (id=2832): socket$packet(0x11, 0x3, 0x300) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x28c81, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x54}}, 0x4000054) 5m47.455556769s ago: executing program 1 (id=2867): r0 = socket(0x10, 0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="1201000097793b10d10501200029010203010902120001000000000904"], 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@delqdisc={0x68, 0x25, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x4}, {0xf, 0x9}, {0xd, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0xc, 0x8}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffe}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xe801, "803e6a7f6a2ce2c9211a9ab84b70d9eb"}}}]}, 0x68}}, 0x20000000) openat$zero(0xffffff9c, &(0x7f0000000480), 0x4000, 0x0) r3 = socket(0x10, 0x803, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r6 = syz_open_dev$video4linux(&(0x7f0000000300), 0x100, 0x80) ioctl$VIDIOC_SUBDEV_G_CROP(r6, 0xc038563b, &(0x7f0000000180)={0x1, 0x0, {0xfffffffd, 0x6}}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x1, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x5}}}, 0x24}}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)={0x7, [0x8, 0x3, 0x4, 0xce, 0x5, 0x57a, 0xd747]}) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) mmap$KVM_VCPU(&(0x7f0000001000/0x3000)=nil, r11, 0x2, 0x13, r10, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 5m43.300291493s ago: executing program 1 (id=2885): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000004002, 0x0) ioctl$BLKFINISHZONE(r0, 0x40101288, &(0x7f0000000380)={0xa, 0x80000000}) r1 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x20000, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000100)=@caif=@dbg={0x25, 0xb3, 0x4}, 0x80, 0x0}, 0x4044000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480), 0x1c3902, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, 0x0) socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x16) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0xfffff9, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, 0x0}, 0x108) sendfile(r0, r2, 0x0, 0x201f00) 5m27.601105824s ago: executing program 32 (id=2885): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000004002, 0x0) ioctl$BLKFINISHZONE(r0, 0x40101288, &(0x7f0000000380)={0xa, 0x80000000}) r1 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x20000, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000100)=@caif=@dbg={0x25, 0xb3, 0x4}, 0x80, 0x0}, 0x4044000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480), 0x1c3902, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, 0x0) socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x16) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0xfffff9, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, 0x0}, 0x108) sendfile(r0, r2, 0x0, 0x201f00) 1m46.402308578s ago: executing program 3 (id=3718): mkdir(&(0x7f0000000140)='./control\x00', 0x8) inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xfe1f, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000100), 0xfffffd79) rmdir(&(0x7f0000000100)='./control\x00') 1m44.190608599s ago: executing program 3 (id=3720): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x5}, 0x94) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000008c0), 0x101040, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m44.100214714s ago: executing program 3 (id=3721): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x4, "07000f00007eaba9a208000000706de400000000000000000000008000"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x8, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r3, 0xc0086202, &(0x7f0000000040)=0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 1m43.178872498s ago: executing program 3 (id=3723): r0 = socket(0x10, 0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="1201000097793b10d10501200029010203010902120001000000000904"], 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@delqdisc={0x70, 0x25, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x4}, {0xf, 0x9}, {0xd, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0xc, 0x8}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x80000001}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffe}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xe801, "803e6a7f6a2ce2c9211a9ab84b70d9eb"}}}]}, 0x70}}, 0x20000000) openat$zero(0xffffff9c, &(0x7f0000000480), 0x4000, 0x0) r3 = socket(0x10, 0x803, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r6 = syz_open_dev$video4linux(&(0x7f0000000300), 0x100, 0x80) ioctl$VIDIOC_SUBDEV_G_CROP(r6, 0xc038563b, &(0x7f0000000180)={0x1, 0x0, {0xfffffffd, 0x6}}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x1, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x5}}}, 0x24}}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)={0x7, [0x8, 0x3, 0x4, 0xce, 0x5, 0x57a, 0xd747]}) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) mmap$KVM_VCPU(&(0x7f0000001000/0x3000)=nil, r11, 0x2, 0x13, r10, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 1m42.220556664s ago: executing program 3 (id=3731): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone(0x80080080, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000001000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, 0xd}, 0x1c) 1m42.098298941s ago: executing program 3 (id=3733): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)={0x20001, 0x0, 0x11}, 0x18) 1m26.846619925s ago: executing program 33 (id=3733): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)={0x20001, 0x0, 0x11}, 0x18) 21.202432356s ago: executing program 5 (id=4002): mkdir(&(0x7f0000000140)='./control\x00', 0x8) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xe40009e0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xfe1f, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$eventfd(r4, &(0x7f0000000100), 0xfffffd79) rmdir(&(0x7f0000000100)='./control\x00') 19.250372321s ago: executing program 4 (id=4011): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000fc0)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x1000000fac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x44, 0x0, 0x0, @uid}, @nested={0xd5, 0x66, 0x0, 0x1, [@nested={0x24, 0x132, 0x0, 0x1, [@typed={0x8, 0x141, 0x0, 0x0, @u32=0xb2}, @typed={0x8, 0xca, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x13d, 0x0, 0x0, @u32=0xfffffffc}, @nested={0x4, 0xc5}, @nested={0x4, 0x8a}]}, @nested={0x8, 0xa1, 0x0, 0x1, [@nested={0x4, 0xb}]}, @generic="c073bf8f025953f538087c2947af34d793a12e66cd988ba2df542272ddf8f3b0634ff9883b7914bc9c92aafa8bb7b0c0552ff62f4a9716d08229fbc0558c09235f84d6771d08666d8b337ac75c741e4e77f4a9bc443c6a07af22469f8689554aa0e81e897ed6146a5b6cb1adf5cecbe76fb27a1c2610d17b8d3c80cfe639ce824597e338c1bb6a7d118257e8e8ac7e1f1c03054e4ec9bce7dfd5f3620229ab929fb9ebb565"]}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 19.164943906s ago: executing program 4 (id=4012): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x13, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$usbip_server(r5, &(0x7f0000001600)=@ret_submit={{0x3, 0x2, 0x0, 0x1, 0x6}, 0xa86f, 0x14, 0x0, 0x0, 0x6, 0x0, "a765dbb92e95e37168d50a1a110bb840ade99da1"}, 0x44) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 17.960109066s ago: executing program 4 (id=4016): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) r0 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, r3, 0x25, 0x0, @void}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0xa, @raw_data="1f4fb1af9eeeacbe25d4f44d5304c5f7803bad8262c8baab9b8556cab12c0c53aa8dda46cba79cca9e6962e57b468a58140cf9e37b53a323716f00164aece5c779276e16b94655d06781ab034eeeb6da6c861eebb0608e61c262ece57294766cded98679e8e97920eda356bef938f6a73db9e88a30816e31f31a8269df12681d9f7a3d98b7ffb32478a9973892ce4ea8c67a84b9b357b26f4de78d737f2a7da17bbbff996b07d5c213041d6bb7797c3b0e07bd28da6940ff32466e260f08c047a60ec57885e67661"}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000110001002cbd70000000000000000000", @ANYRES32=r5], 0x20}}, 0x2000e844) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) syz_kvm_add_vcpu$x86(0x0, 0x0) socket(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) close_range(r0, 0xffffffffffffffff, 0x0) 14.48469392s ago: executing program 5 (id=4022): socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x4a173eaa) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x200800, 0x0) syz_open_dev$vivid(&(0x7f0000002680), 0x0, 0x2) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x18000) socket$kcm(0x10, 0x2, 0x4) pselect6(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000003c0)={&(0x7f0000000280)={[0x5]}, 0x8}) r3 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000000c0)=0x20) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getpeername(r4, 0x0, 0x0) 14.086659534s ago: executing program 4 (id=4023): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x9) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000140)={0x7, 0xfff7, 0x8, 0x3, 0x17, "a9b39ba517c50901"}) write(r3, &(0x7f0000000180)="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", 0xa31) 12.670654757s ago: executing program 5 (id=4024): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x11fc, &(0x7f0000002140)=ANY=[@ANYBLOB="fe00004e5c4b4547e2c67587b49524c1c15535ff13bee33ad3dc268102085848806ea94f3813ce943e7bb9aae6ede1e965841d443b53eaa65a45f797f6bf218083a6446da9b5914ba3354873b161c02a4377de68aeeb2dfc4929b1b2042f8eb49f16c0c8ca94bd2cbac96f178409e5627d5f0e7d1212ad3d5936415b3101e261ddfdbfd3699fa4d2e8ca74c74e1ff24674a1b6fdbb8e2a056bd7f342ca8e6ecde4418a03d0db83d464e7b7d13f5b6a0ea96f11ec62316270fe67d5b7dd78938a188aee27fbc1606c3598f7b2bc5ecaeb3a7d066010486a89131298ed44e78c921c00c214c1090d722afbf836e37df13a5eacf1439c3376fd848be5046f5a0f10350000000010004e91b10d14c71ff874ddce42cce58821802a1c2460ba2615b8cca006509b7eed267b0c274247400cddf97f7ebcba19a4030c72b4e8f67a4eec43419032b37e58d844bdf8bb35c1417802766034bfea6fb4a510f73ecc3bfa1ebb447829cd13c6ba24bce0e930d800a0b0b2a94cd80b940ce99498865a96fc0034c369594c7107d449fa981697fc679af13ea17c3a80909c8dd59752241b465b1a99f907090b94d8d30de61e6d46c832fd6917927de509daedcc431864510dc7be03a361ae6f7af001af92f0c1ce18eb918101f4f49127553c0cbde4f774a5357ccca35599908f23d0b9cef7a3a8a78350087183808677ad5073bf33728b0d7b68d25a60868cd178dea8602c2b1f9d3073f9a4b0762d9852bad75ae41543e19fe0eabaeba24e762c3bbbb1ab32c3a95e59d9ad993351d5f6a0e1c66f040ac47e5b4a276c69b2aed1e2f1464d355fb5a32e88b3dc95d14507fa29654c78cd678cc211712ecfbe46bbf9ecf2beb454f090427d06ce5fcc27859d5f8fbc0fb1db08f9f83317f62843a8da7ed2143f057ceae21e28ee7691ad5abeef55dd0e2ff226bb71c148c1a72a462ed978cc9b98cca71c44dc71e672b97f06d05610d0204af8c1b1092e5346af9d971a870c877bd617ad2180036f2b818d9e3f09c8321c001acef25ffeb3c8fac7f90ff48859bec3c427c241450c974c1e4dd624a6eae57236f21decb30e8457523125d8a6ea44ca68e6767bca7172ef03db4ea7c801e2fc15c4fd122e9e9e2959b3260cf2dcc8004069cc2438f1035ebe97c4cec444200790ebecf6ae5b4712de03130cc1683bed426f95a9d35ead4ee147e075d2323acf0fb23ebdb3132ca0d6b8073d2c6b7042455b04dd56b7f13e71d71d4cade4c90cbc3048cea14d4cf3a291c5a1d6fd1b8ed48877b4ed319b2c4f1a8f67c88f8ef2c02b7250db6dce6af218b6ab8a9f4fa7f59d1ba68032305ccf562517450896b688ec956daa85ac2cde3ce6b987e9d0c1fbab6afee13ae752993130a0e1a3847c0bda177acd757700cb873756a0c499b6f1586f6f997f4464889c916219a39f1add5d21ca4a50a16f202b34f592ecb218709f0aaf6998175e451f743d3cf8f80c896c89d82939ec63f1b26d3f68961ace8d97c5f106bfc6f46665710b046781fd7c0d0d21bec881272f7766bb726deca358985c6f7635d3f56352c2467e4c75b65514caf62f6030262d8aa80ca0f1d06b420956ef34e1ab7f5aad13ec52704d10222f15f080a52d1e7a2c88c97f708d286595dee201f3224394845735a5e0c199e91fafe41e9fe06c0e4161dc9c2744322048df4ee6adb3d5641b7d02235707dc69060e4a763f78eb56bb49e4cc99f826f906f364cc76ac31c93dcba3c838c5d8bbf4de82f50a7d902d170345e0e6206f5e290206f05f22d1bebbdc1464cfb7c072631ab73041aa8a9261155efeb16f4737213a93b0bc0a2176f08245c5b337aad921a83802b048b5f65fa681c5b8ce0fbaaaec8d4855ba790230bc36718596359c80f7c3a5ceba8eee755af965c32b45253f4e522e5514a075069c0ca657df229675850f7efa8c2626882a6930c217de9dcc8f9468a24f33017b31710e83eee52f401b858ed30a053380ba06c81a708d7aef544de28304ebb63efb4d0e9f781e13518b8c3d49060046a790199de1ce03097fc88243cbeec2b4efb6330fd7f753e55f069361134d8a8e6c58aa6d94994c386ee46501677eeac37308f6c896a5b45641d494b1186a4fc38edea2a0e4c7996032a9cbb39037cdaabc7fccd46fd8e09ad179dd73bfc914ea756667b4b477ac5d8d099bea619d79e1b8795a669468f834cc8fe4185de8e85d5da9092e96743255431f8a73ea02e1e627ff87244a34dae9d124b902bf55860139865cfb0a3c878e0cef9043e933422a7fd8739c04dd09a3470a98a3cfc535cba9fb2ff8597050c2a025eea89659d1459bc6666228cea04a27a4b9cd540540e66eba9a0729517c7df431214454c7706aa48cbe6e4918ed9a8711121663ab33631cfa6dbafa43d0b770c102c1113f695209ed0f6612972418d375f7e373f21b4c5dfb5725df42395c3b4e3a740d92a738a258ab1abaa5bc7c4d5e640b2e86f8174c3d886756bf0b4a3524d688d35bfed31bc38482627eb1b80f17c76a93fd460f0b991cf418a1f929791f608a26952e3067778abebb91e1b36bd780da624df3352b9c45f35eba61fe27305b5bc48fb22628007242f46e2f2733c61495f07a2ff9ea6ce06e45b99303ecd8151825911441de4eeb2cb2caaeeaa8c420d2ed74c5a340ded6250c4c152bdedabb55adf03b254eefc1e2300349716ad9279ef04b4f31eb1c8c1e3038884a36b4ec0f88ce0771a2a52b209e5eeefc74b8d6f0fee2b5e6c49ef1819a8f3e2de8da3f672b04203a0028a1c59a1dd9463c8040fc4e3765f27c731ed17df034f0a868dd9932a7f3967ece0adb14c5717977c0dc0e7f12c528f2a920c68b481facd09b40e80f1a3c3713994c27df75d25dd6c1621f8ed3a2a5643460655065883080925a935856b135c53fa9f3eb6c8658300c8173d7b1239a8812e51f5807c94f97d1d9e8594d10673e2165db991311a3d3bce174c513524104cba057098dcf62d0ff7aa5ccbe24ec78b6414f472654647dc94bd4e23a7b89a845029fa35f283cf443ae816f67557e1d9a446a8d0580e1bac2f2183d964e99cf571e575763598d91f44c11a1d23277317341d7530b215a6ff0b6ac650ed041f8ffa0365c25edfbec05fbc023410d35bf383bf65fa4338537817e0f2d60d0ca352f21fa36eadf7a6b2b28d656207c01b9e3d547a01e3a5b956135329f738e625119d5332d904366ab990531d5f07d6ab4b11869de78e3a7bde2b1a493437e58328053466bb02c431fd883735ef726ac93739b73fd757e5ca57876ce8574a20e311d65893625c8c2a76b818f067fe9c6f2332ca0c5158316aefcdc076e51655ca5c689bc9aa45e46c7a944b5d0c4e76d05894d02d6ba46df7a97690da212cd308694ab59f1404fce84dd547269106ae3013204bd3084129314741e11cf639c801a628ea325ee03a712151eb6a7f0bc7799429912c6878a8d54a6893d8cd1cb1ce311e18690e60e0d328409dc3d7950ae8fe32b52010a1095c00cd7e934e9e54e13955d484274cf115ff2d62b0068861eb9f71251fe805b495393ca1821a651681d4602067f286971108271bd00a7e530077c3973921c8db81e828a04148bd74209a533b2f91ca6cb82fd4adca8b37d7f81d346ee6445f669c35fd5d1aac4eaa31fb1441964326526c48212a876790a21dd3bf8794fa79e4083847900a2cba7db6f12fab8e9e4c153b2efe4eb22aa8978f5f1ee69316d02340829c8d289726a4ba265ee9e685eebc771d52bc264544893702f8896c677997fda06512c238daaf3f5e7525dc5f9d4aa64ed5c775fdfcbdaa2803e27b73692d663f48ae3cafa31c1423a9aa29f95ea5a8cce4c56fbb1bd44d3246028ace54b8cd77e58eb16b903f8f49182ceb1294705d96f8e47508a6702e85800eb4dc35689d4510b14c24e025675d74f69b5570eed3e9fa56beb531d82db5e1d5511a183d862c72ed6ccd1e8dd30a8b395997f1779be1a42ae4522c0967a449c92562ca2dd4d000c773d797eb3afa2ce7cd843bf6195eb362bf227c5a387f5f8e5379e8efb88fab4b21c04dc5b3bb26e250a920d4ad988b54ff01f365c8d877cd830cc8c7f366393782fa003bbf949385a195eb0210d8b9c27caaf1ffdbf3dd9ec13e7ba9040e7a4b037066379b0d5b9bebb8e3a40ea5c9657ac0d539c2622881772491082a641f5cac9c43c70a12c3cd9cc157d597fa8a95aa7b267364a8f3d705de67464f2f6dcef68c9e144d97e7e5269fcb3d06a2cf1c2fc809c052bf84fb353c3bc5b79f8805dabed0a826577fb25da506a689ff208b3047fc59b990fea15f13fe56293c8dc313cb6700094bce5ad3c20aeb55c6ba36c501c7f77c05bfab4a0aa15d786950376972a70d42bd88cde07263e01d0242c0ce0c49737aac1f4ccfc348d13f45f0457d1438fe3e989fb780ea1109e7df9b8b5590235e4d874260041974b2ccc638dcadac7613f02c03a76f5d6980f7c80403c2cac20848f3f379c9f0fc87381e35d47ecb4533faf04563d1f790d7f1352901a2a412840b4a94f08665acebdc4645c382354e8c2af20da71fc349dc2718a2c1775523c32628f956d46ce4a8583487a33cd11fd0a9c392ea6ce49ade63a1db94043b15d5174611444ca027b8ed7bb59154fa67392ec7d5515ad276e2149d670e03d76c7ad02a39eb25c6c27ce5d2ad6d3ad354107d633b28aaadb9a7230e01fd8e2fafa4325f5e5919388ac8634b557b92553147309432aacdde8afee4714dd5400ff2d592c2cc4daa25db01253db38ef5ae21a0c0ff92ba9240a21ccb299caefabefc66b4206de0d1991797265acd0848642df658c8b0ac07f591109460e11d2ec9b5ddc849e5391a297b4e50f89f77eb5aa5fcf275dbc10df5f715d5fb70f4f6fb258da34a8e98edcad749679c804ad1f069d64f322cf599a74a4a8467ab34d5759b0764a2cf90b3e89b3d32605035bb8790e367b9ae9aecbf7f05810207044e3ed0fbd477526428d89d9edcedecef047a72a0e272d20d0d3044266ea6d120622a2429ab57595c85ebdaa14633ea13aa479e769d93e7c6bc8d9c6a77707847e85156c8b9714a30f701f408c690ccf88a2c43ed3c2a4474e8d465916b32577533ac259406c58f77d709a4329e7c77288410b8192d027529e2a0cc64f055b8e3d6e1f7eb31bf90f1ce9096cb5948fcb06a61cf05a2727b41b2dc847d6de091820a106b9a0c0863fab6a9431979f4a85a9fd5c6f89b5117c5bb7e09984093c95d7424de20a901c29b9446c7266bc640fe193fe9541633020f72fec4cf28f317d5eaf54eb76d81a2310f0e6a0710cd3448d14b999b23685a2efe2d6982f5467422f08d9fe9d75b33689be936b723b6e675df9362cbec19eb345bb9b09ed405ef9f93270e7deb77635862aa2c206ca47a5355a0b65f2bb90e691fcfc801c9f8f56178ce1ab4af86fabc33a125f49f0f13a528f821f08c5c5ba72581e057aaa234d1339ff15b235d6e9115009d530d20c3bc7f9ae5546bdc26da4a5debc8dff58a8afff09b983366fdaaf0b52db2379db2e3c73af2754e7cd83b9f7837c9d95b368ad00a060164f0db848a4da4e7b8b35c23e74b67ac3e4eb321d931a8378ac7c9e86a82bb69cb679eb1eb867f3ec5f422bf0ba5d59f104bbc54ec3663824008654bbd05a6ad748423e3988a95eb29f60b604a08fba7702e3daa26a02efe6801da6302972961e508a16448797bca8b84ce6f8d968a825fa32c316e830f1cb294abed70f51116166aa2d8ff3303182b5450c1800d0d4db0186cfd0facf4b09807e94fd8f0a81b01eb59c241bb0cfa721a2eb0f909a1727e4e21e77bb2b6a6f6960361d3f9f3f677eec0848fc320cd359781494ba630e3ddf55a7bd159370bf9de4125d6a3c490bbb538bcc6250f21fcca0924d29e77293c2b3daa288d1f9522afe59b351df3bbe688addf3d8370fe5aa653c0a713f7422ba975b468efdf101a10388fd00cdf6e61cdb68a2b7d7436b401e05df922abd86c30818162b7fb7f848ee7f9910381175ea13d8ae57301bcdb4cb8dfad7c0b591fefd5d6b01d07f3cbbb780570a5a307bfe428f45379b998e3005c7a48d98fc4c2fcde5ce25211bc5e44e242945bb73394124eb08835a96ad2f382b52d6a493747d00004ea15d7b3f23c1b433a3bc6deb47acf52497c0b69a4057dcc40ba8b729bcb835c0a57ffbb3e0240f64d1f4e88e388ddb1b6bdc0b269da6ded1be2f536b5d01063131c3e305204d3252714704a241c5b315dbd15fd8993a06431a6d68cf2f059ba2e588c8e36c91af22b71e2ed4316b026e7615b5e81bea446550e93671e80000006900004e750a87f1aaf9a4a8ac4f632dc30edcca82ab5613b4a989800e80736442c3e8ce04e94baef4f69eb7236807a331d3762af249378df8436ecdcf31d4ceb1811c798e9b37d6059fb7450146504b0a727ef6f50d851d1466315f2260bb13460bcf8c6fcf4335b2c51bec9e000000582a26e776b2070461d37953ef04cd1020d7484e36c5d6fa99dfbca87c5040b1c2174d7c8873ca822c0b4b6d84b4b5da862d5dac47a9fceb3ba286732cc1f0425831a236839da43e020ca06ace5a9c61d004c40c"]) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) setreuid(0x0, 0x0) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000001100)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x84, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000500)="14", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) ioctl$SIOCAX25OPTRT(r5, 0x89e7, &(0x7f00000003c0)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2, 0x20}) syz_usb_connect(0x0, 0x6e, &(0x7f0000001140)=ANY=[@ANYRESHEX], 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x400, 0x0) 11.634518707s ago: executing program 0 (id=4026): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x24, r1, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x2404c050}, 0x4000) 11.504359465s ago: executing program 0 (id=4027): r0 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x40901, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000000)={0xfffffffffffffe67, 0x5, 0x0, {0x0, 0x6, 0x7, 0xe42}}, 0x30) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000000)={0xf2, "1cf1dc137c0e06723d68cf2e34bec1fe7aeb2e4f9bdca646c4d338b97ec131354c136ec6cf21380651f27fb956a8ae3885ea642da767ac5f7080830a09b0ff10a4e89e9067691bc9d0c78817f1b777a16c084308ced3efc24ca6c31102220f5d34355338afe106101839c316ef0f88d2fcca226daf1c10a3b4d5bfc8a48d752e7f4a193c4b146ed8108bd5fbac85d2de914e1e1f4fd94decd9fdf1c7af946b07ccce200a7e5e20ac043bf7f8dcb806487be03132bf1f4ea1dc15bfee959c453bd5382b93ec14d8cd22c31ae731cbe7526b49c83607a4d6d0184af37286c08c9572e8b83c8dac93d59d5bf5767d5cd3c023cd121bc6894b0449b66a83345f8720f9113d0363314516e93cb1156ed299e6311c6c27c40a082795950300000000000000f54d143624911e7dd42e6cfc53bdace1643feecdf2b236a43f15c815cc95c6dd597a69d1e43791827ad87ec72c556ca24bbdfaa226f2367b76559dfb4b668d9b18bb089124f45be9c870cab5973d8a7488703e0c0704777129845591622a696f225bb81d93f5c72683e9778690770fab6750f3d8ff3162cbf04eb0be6477baa460b3f8e457a7b8bfdda324330accb61d513420c4db90797203eaf78e28160ebda27ba621e550ecbae53a8e48fa9ce5b40d578f6d20998fb060b7c6706d2b842596148cc25a33b5beb909000000000000007b57391b6b34f8d7b900"}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40010160, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$getregs(0xe, r2, 0x9, &(0x7f0000000080)=""/63) r6 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setfsuid(0xffffffffffffffff) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r7, &(0x7f0000000680), 0x4924924924925c6, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="380000001214010027bd7000fddbdf25080001000200000008001500ad96666008004f000000000008004b001300000008000300"], 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x810) 10.786304248s ago: executing program 0 (id=4029): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000380)={0x0, 0x5, 0x200d, 0x1}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f01f000008001240000700000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) r5 = request_key(&(0x7f0000000540)='rxrpc\x00', &(0x7f0000000580)={'syz', 0x0}, &(0x7f0000000640)='@+\x00', 0xfffffffffffffffa) request_key(&(0x7f0000000480)='.request_key_auth\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='\x00', r5) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000240)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000030601030000e80000000000010000020500010007ed0020"], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x4044010) socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e20, 0x1, @empty, 0x2}, 0x1c) setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @random="00de4b37ea00", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbfe0900"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x18}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 9.962922126s ago: executing program 0 (id=4032): mkdir(&(0x7f0000000140)='./control\x00', 0x8) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xe40009e0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xfe1f, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$eventfd(r4, &(0x7f0000000100), 0xfffffd79) rmdir(&(0x7f0000000100)='./control\x00') 9.390218489s ago: executing program 5 (id=4033): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x243, 0x0) syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20}, 0x50) 6.827194249s ago: executing program 0 (id=4037): socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000640)=0x1) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000080)=0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) r4 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) ioctl$CEC_S_MODE(r4, 0x40046109, 0x0) close(r4) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000280)=0x2) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) syz_open_dev$usbmon(0x0, 0x7, 0x0) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000180)=@urb_type_bulk={0x3, {0x4, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x6, 0x7e2, 0xcdf, 0x7, 0x8, &(0x7f00000003c0)="097039cf8dbbc2d4cbc981946f128ec5dda892b3520926207bd40c6eab446cf843c85567a611766291431c672abad94c4c48963efe0b4c8ad4eb018663e6b6d31d4abb153caeee5378bbeaf24500837fb170e3ede12445ddcfc1edf9ba8a298b394944d5ce01cbdc0374fb80afc50a52c02fd6aae6eeeb0a2d771561cf87210b9f7c9bfdad817d0541229a50957381035d9f7ef559cb62397923f81cdce20bcc253be08b7ebeb452e86e40b05560ffe8711a693c05f9e8947d79d9d280d0224934350beac1ab33d8d9b1820417d26361b20c95c747f11cd3745aa5524070e0fa3aa065607c4ae00a629e711e7c"}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 6.12605972s ago: executing program 4 (id=4038): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x14, 0x40018020, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = inotify_init1(0x800) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x541b, 0xfffffffffffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000380)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r5, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r5, 0x80) accept$netrom(r5, &(0x7f0000000400)={{}, [@netrom, @netrom, @remote, @bcast, @remote, @bcast, @netrom, @bcast]}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5.405344293s ago: executing program 4 (id=4039): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xd73, 0x80, 0xfffffffd, 0x283}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) unshare(0x20000400) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2}) io_uring_enter(r2, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 5.363779435s ago: executing program 2 (id=4040): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e2b, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0x77f}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000400)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r2, r0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) 4.915834202s ago: executing program 5 (id=4041): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) accept4$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14, 0x80000) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) 4.634352098s ago: executing program 5 (id=4042): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x800, 0x0, {0xa, 0x14, 0x80, 0x0, 0xff, 0x1, 0x0, 0xb, 0x3000}}, 0x1c}, 0x1, 0x0, 0x0, 0x30000001}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) setresuid(0xee01, 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) syz_clone(0x44200400, 0x0, 0x0, 0x0, 0x0, 0x0) setreuid(0xee01, 0xee00) syz_usb_control_io$sierra_net(r5, 0x0, 0x0) sendto$ax25(r4, 0x0, 0x0, 0x40, 0x0, 0x0) 4.298373007s ago: executing program 2 (id=4043): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) 4.239701801s ago: executing program 6 (id=4044): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x69411b02d7cd66f5}, @dev, @val={@void, {0x8100, 0x3, 0x1, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x5, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x203, 0x5, 0x80, 0x1, 0x21b}}}}}, 0x0) r1 = memfd_secret(0x80000) ftruncate(r1, 0x3) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x8d2, 0x0, &(0x7f0000000040), &(0x7f0000000080)) ioperm(0x101, 0x2, 0xf) poll(&(0x7f0000000000), 0x0, 0x9) syz_open_procfs(0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x8000) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f000079e000/0x3000)=nil, 0x3000, 0x2000002, 0x11, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x118, &(0x7f0000000a00)=0x1, 0x0, 0x4) sendmsg$nl_route_sched(r0, 0x0, 0x0) 3.946338168s ago: executing program 2 (id=4045): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000020c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000020800b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000002080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) 3.041662091s ago: executing program 6 (id=4046): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f00000006c0)={0x4, 0x0, [{0x0, 0x0, 0x1, 0x6}, {0x0, 0x6, 0x0, 0x0, 0x1}, {0x5e2796afef1a2f31, 0xffffffff, 0x0, 0x9, 0x0, 0x80000001, 0x8}, {0x80000001, 0xffffffff, 0x7, 0x8, 0x5, 0x110, 0x3}]}) 2.688939862s ago: executing program 6 (id=4047): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000070000000000000000800027350000007500000095"], 0x0, 0xbb5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)}, 0x8000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.989985113s ago: executing program 2 (id=4048): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd3c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11129, 0x1020}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x3}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8014}, 0x40040) 1.559969758s ago: executing program 6 (id=4049): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xa, 0x4008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2951024, 0x0) 369.600409ms ago: executing program 0 (id=4050): ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f00000002c0)={{0x91, 0xfc}, 0x100, './file0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000200)="0fc79f00800000640f79fd660f380a290f20d7c7442400da586a53c744240209c10000c7442406000000000f011424dbd2660f3882aa1ed90000f2f2f20faac4e1605d15ea2d9b5db900080000b877b98af2baf8b357790f30", 0x59}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 368.757309ms ago: executing program 2 (id=4051): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x30, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000891}, 0x20004044) 269.836905ms ago: executing program 6 (id=4052): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="0091eaa3"]) 110.555984ms ago: executing program 2 (id=4053): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) socket(0x28, 0x801, 0x0) socket$qrtr(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) lseek(0xffffffffffffffff, 0x101, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 0s ago: executing program 6 (id=4054): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1, 0x0, 0x9}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x7}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}}, 0xc0}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) kernel console output (not intermixed with test programs): ve_1 entered promiscuous mode [ 805.180646][T14024] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2934'. [ 806.192660][T14024] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.200151][T14024] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.940965][ T21] Bluetooth: hci5: command 0x040f tx timeout [ 807.721203][T14047] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 808.134643][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.141142][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.213146][T14024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 808.298575][T14024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 808.923101][T14024] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.938477][T14024] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.948156][T14024] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.963179][T14024] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.010809][ T21] Bluetooth: hci5: command 0x0419 tx timeout [ 809.680872][ T21] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 809.866084][T14048] chnl_net:caif_netlink_parms(): no params data found [ 809.970786][T10330] Bluetooth: hci4: command 0x0409 tx timeout [ 809.978770][T13979] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 810.017096][T13979] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 810.049463][T13979] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 810.110899][ T21] usb 3-1: unable to get BOS descriptor or descriptor too short [ 810.139339][ T5690] device dummy0 left promiscuous mode [ 810.161988][ T5690] device hsr_slave_0 left promiscuous mode [ 810.170904][ T21] usb 3-1: not running at top speed; connect to a high speed hub [ 810.206026][ T5690] device hsr_slave_1 left promiscuous mode [ 810.222591][ T5690] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 810.236634][ T5690] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 810.252818][ T5690] device bridge_slave_1 left promiscuous mode [ 810.261737][ T21] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 810.282839][ T5690] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.290382][ T21] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 810.330899][ T21] usb 3-1: config 1 has no interface number 1 [ 810.337055][ T21] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 810.441184][ T21] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 810.486916][ T5690] device bridge_slave_0 left promiscuous mode [ 810.509795][ T5690] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.702076][ T21] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 810.727621][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.759110][ T21] usb 3-1: Product: syz [ 810.773836][ T21] usb 3-1: Manufacturer: syz [ 810.793570][ T21] usb 3-1: SerialNumber: syz [ 811.156501][ T5690] device hsr0 left promiscuous mode [ 811.211057][ T21] usb 3-1: 2:1 : no UAC_FORMAT_TYPE desc [ 811.286391][ T21] usb 3-1: USB disconnect, device number 72 [ 811.545407][ T4738] udevd[4738]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 812.050804][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 812.735667][ T5690] team0 (unregistering): Port device team_slave_1 removed [ 812.934324][ T5690] team0 (unregistering): Port device team_slave_0 removed [ 812.971035][ T5690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 813.926442][ T5690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 814.090032][ T5690] bond0 (unregistering): Released all slaves [ 814.366658][T13979] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 814.409956][T14112] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 814.419333][T14112] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 814.428246][T14112] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 814.437025][T14112] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 814.483440][T14115] tipc: Started in network mode [ 814.490101][T14115] tipc: Node identity 84e, cluster identity 4711 [ 814.496851][T14115] tipc: Node number set to 2126 [ 814.627443][T14048] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.660971][T14048] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.720901][T14048] device bridge_slave_0 entered promiscuous mode [ 814.752917][T14048] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.766458][T14048] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.774300][T10563] Bluetooth: hci4: command 0x040f tx timeout [ 814.795666][T14048] device bridge_slave_1 entered promiscuous mode [ 814.866256][T14048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 814.960321][T14048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 815.146210][T14048] team0: Port device team_slave_0 added [ 815.225878][T14048] team0: Port device team_slave_1 added [ 815.263284][T13979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 815.378459][T13979] 8021q: adding VLAN 0 to HW filter on device team0 [ 815.419853][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 815.465361][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 815.538313][T14048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 815.601113][T14048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 815.730875][T14048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 815.773993][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 815.831633][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 815.872149][ T5695] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.879274][ T5695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 815.955649][T14048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 815.965410][T14048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 816.040846][T14048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 816.081377][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 816.121138][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 816.170753][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 816.205006][ T5695] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.212202][ T5695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 816.307052][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 816.362836][T14048] device hsr_slave_0 entered promiscuous mode [ 816.384017][T14048] device hsr_slave_1 entered promiscuous mode [ 816.426215][T14048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 816.443287][T14048] Cannot create hsr debugfs directory [ 816.465014][T14147] device syzkaller1 entered promiscuous mode [ 816.477861][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 816.620291][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 816.642266][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 816.679947][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 816.698103][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 816.754307][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 816.774606][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 816.881539][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 816.927711][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 816.959481][ T1335] Bluetooth: hci4: command 0x0419 tx timeout [ 816.966744][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 817.048553][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 819.175899][T14048] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 819.964044][T14048] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 820.103813][T14048] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 820.390563][T14198] loop0: detected capacity change from 0 to 40427 [ 820.420434][T14048] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 820.475862][T14198] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 820.483782][T14198] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 820.522141][T14198] F2FS-fs (loop0): invalid crc value [ 820.567082][T14198] F2FS-fs (loop0): Found nat_bits in checkpoint [ 820.604789][T13979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 820.629659][T14198] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 820.636797][T14198] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 820.776603][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 820.809129][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 821.932380][T14048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 821.976783][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 822.011757][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 822.050056][T14048] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.087045][ T5697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 822.101414][ T5697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 822.151294][ T5697] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.158402][ T5697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.252349][ T5697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 822.321122][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 822.338584][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 822.394881][ T4479] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.402040][ T4479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.455699][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 822.501948][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 822.584461][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 822.630877][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 822.662824][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 822.717099][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 822.764839][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 822.796113][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 822.837843][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 822.887848][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 822.936682][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 822.969529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 822.998421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 823.064456][T14048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 823.278853][ T5697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 823.298093][ T5697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 824.208672][ T5697] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 824.375671][ T5697] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 824.476454][T13979] device veth0_vlan entered promiscuous mode [ 824.537975][T13979] device veth1_vlan entered promiscuous mode [ 825.643678][ T5697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 825.661981][ T5697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 825.696630][T13979] device veth0_macvtap entered promiscuous mode [ 825.782320][T13979] device veth1_macvtap entered promiscuous mode [ 825.851993][T13979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 825.885541][T13979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.927677][T13979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 825.961386][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 825.980604][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 826.016060][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 826.094563][T13979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 826.132091][T13979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.176384][T13979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 826.212186][ T5697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 826.232828][ T5697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 826.337040][T14048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 826.356564][ T5697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 826.371449][ T5697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 826.379874][T13979] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.410923][T13979] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.466936][T13979] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.500906][T13979] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.799807][T10474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.859709][T10474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.919608][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 826.943842][ T5684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.000541][ T5684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.123856][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 827.349945][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 827.397580][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 827.469334][T14048] device veth0_vlan entered promiscuous mode [ 827.777317][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 827.796472][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 827.814937][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 827.838236][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 828.434411][T14048] device veth1_vlan entered promiscuous mode [ 829.241372][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 829.261240][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 829.272855][T14048] device veth0_macvtap entered promiscuous mode [ 829.294074][T14048] device veth1_macvtap entered promiscuous mode [ 829.338574][T14048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 829.392731][T14048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.421064][T14048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 829.484868][T14048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.523836][T14048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 829.556095][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 829.597552][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 829.657485][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 829.692403][T14048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.738490][T14048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.809400][T14048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.867788][T14048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.935339][T14048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 829.980038][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 829.999399][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 830.032798][T14048] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.056443][T14048] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.089197][T14048] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.130366][T14048] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.447524][ T5695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.468656][ T5695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.506064][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 830.596069][ T4479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.628715][ T4479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.671238][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 831.221716][T14342] loop5: detected capacity change from 0 to 4096 [ 831.312004][T14347] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2991'. [ 831.983768][T14342] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 832.639177][T14342] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 832.838168][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 832.838183][ T26] audit: type=1800 audit(1769312710.136:158): pid=14342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2936" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 834.335403][ T4259] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 836.078337][T14389] loop4: detected capacity change from 0 to 128 [ 836.090020][ T4259] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 836.217674][T14389] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 836.284457][T14389] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 836.387981][ T4259] usb 6-1: config 0 has no interface number 0 [ 836.450963][ T4259] usb 6-1: string descriptor 0 read error: -71 [ 836.457363][ T4259] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 836.488716][ T4259] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.527334][ T4259] usb 6-1: config 0 descriptor?? [ 836.560934][ T4259] usb 6-1: can't set config #0, error -71 [ 836.584014][ T4259] usb 6-1: USB disconnect, device number 2 [ 836.593843][T14400] IPVS: ip_vs_add_dest(): server weight less than zero [ 836.623578][T14391] loop0: detected capacity change from 0 to 4096 [ 836.817058][T14391] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 837.610261][T14391] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 837.780130][ T26] audit: type=1800 audit(1769312715.076:159): pid=14391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3005" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 838.770949][T10563] Bluetooth: hci0: command 0x0c1a tx timeout [ 840.008540][T14435] loop2: detected capacity change from 0 to 262144 [ 840.080984][T14435] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop2 scanned by syz.2.3019 (14435) [ 840.110931][T14435] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 840.120502][T14435] BTRFS info (device loop2): using free space tree [ 840.127202][T14435] BTRFS info (device loop2): has skinny extents [ 840.133679][T14435] BTRFS info (device loop2): flagging fs with big metadata feature [ 841.118198][T10563] Bluetooth: hci0: command 0x0406 tx timeout [ 841.266321][T14435] BTRFS info (device loop2): enabling ssd optimizations [ 842.814086][ T4738] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 10 /dev/loop2 scanned by udevd (4738) [ 843.071689][T10645] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 843.501517][T10645] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.562898][T10645] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.641254][T10645] usb 5-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 843.728565][T10645] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.805377][T10645] usb 5-1: config 0 descriptor?? [ 844.860931][T10645] usb 5-1: can't set config #0, error -71 [ 844.874895][T10645] usb 5-1: USB disconnect, device number 56 [ 846.836603][T14503] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 855.350869][ T23] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 856.470978][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 856.610903][ T23] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 856.660776][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.674209][T14575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3057'. [ 856.704625][ T23] usb 1-1: config 0 descriptor?? [ 856.746248][ T23] gspca_main: sunplus-2.14.0 probing 041e:400b [ 856.828312][T14573] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3056'. [ 856.877755][T14573] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 856.886894][T14573] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 856.895702][T14573] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 856.904464][T14573] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 857.134059][T14573] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3056'. [ 858.420466][T14591] loop5: detected capacity change from 0 to 262144 [ 858.451255][ T23] gspca_sunplus: reg_w_riv err -110 [ 858.461378][ T23] sunplus: probe of 1-1:0.0 failed with error -110 [ 861.361982][T13003] usb 1-1: USB disconnect, device number 80 [ 865.710887][T13003] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 866.642873][T14651] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3086'. [ 866.671090][T13003] usb 1-1: Using ep0 maxpacket: 16 [ 866.881006][T13003] usb 1-1: config 13 has an invalid interface number: 44 but max is 0 [ 866.900903][T13003] usb 1-1: config 13 has no interface number 0 [ 866.942798][T13003] usb 1-1: config 13 interface 44 altsetting 48 endpoint 0x86 has an invalid bInterval 252, changing to 11 [ 867.026054][T13003] usb 1-1: config 13 interface 44 altsetting 48 endpoint 0x5 has invalid wMaxPacketSize 0 [ 867.086901][T13003] usb 1-1: config 13 interface 44 altsetting 48 has a duplicate endpoint with address 0x5, skipping [ 867.129097][T13003] usb 1-1: config 13 interface 44 altsetting 48 endpoint 0x4 has invalid maxpacket 1535, setting to 1024 [ 867.160815][T13003] usb 1-1: config 13 interface 44 altsetting 48 bulk endpoint 0x4 has invalid maxpacket 1024 [ 867.216555][T13003] usb 1-1: config 13 interface 44 altsetting 48 has an invalid endpoint with address 0x80, skipping [ 867.249879][T13003] usb 1-1: config 13 interface 44 has no altsetting 0 [ 867.470935][T13003] usb 1-1: New USB device found, idVendor=05d1, idProduct=9001, bcdDevice=67.2e [ 867.498959][T13003] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.522604][T13003] usb 1-1: Product: syz [ 867.526818][T13003] usb 1-1: Manufacturer: syz [ 867.540116][T13003] usb 1-1: SerialNumber: syz [ 868.194129][T13003] ftdi_sio 1-1:13.44: FTDI USB Serial Device converter detected [ 869.536095][T13003] usb 1-1: Detected FT-X [ 869.540403][T13003] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 5 [ 869.560820][T13003] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 869.573496][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.579858][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.588540][T13003] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 869.620954][T13003] ftdi_sio 1-1:13.44: GPIO initialisation failed: -71 [ 869.632340][T13003] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 869.664189][T13003] usb 1-1: USB disconnect, device number 81 [ 869.810474][T13003] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 869.863733][T13003] ftdi_sio 1-1:13.44: device disconnected [ 871.109840][T14701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 871.151118][T10643] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 872.556583][T13003] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 872.791363][T10643] usb 3-1: Using ep0 maxpacket: 32 [ 872.830872][T13003] usb 1-1: Using ep0 maxpacket: 32 [ 873.651174][T13003] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 873.723528][T13003] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 873.765493][T13003] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 873.777300][T10643] usb 3-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 873.790743][T10643] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.811969][T13003] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 873.825629][T10643] usb 3-1: Product: syz [ 873.829819][T10643] usb 3-1: Manufacturer: syz [ 873.874673][T10643] usb 3-1: SerialNumber: syz [ 873.880247][T13003] usb 1-1: config 0 interface 0 has no altsetting 0 [ 874.052175][T10643] usb 3-1: config 0 descriptor?? [ 874.070932][T10643] usb 3-1: can't set config #0, error -71 [ 874.081256][T10643] usb 3-1: USB disconnect, device number 73 [ 874.090946][T13003] usb 1-1: string descriptor 0 read error: -71 [ 874.101160][T13003] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 874.115319][T14727] loop0: detected capacity change from 0 to 8 [ 874.245531][T13003] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 874.586511][T13003] usb 1-1: config 0 descriptor?? [ 875.076921][T14727] SQUASHFS error: zlib decompression failed, data probably corrupt [ 875.090928][T13003] usb 1-1: can't set config #0, error -71 [ 875.128824][T14727] SQUASHFS error: Failed to read block 0x9b: -5 [ 875.146500][T13003] usb 1-1: USB disconnect, device number 82 [ 875.167956][T14736] loop5: detected capacity change from 0 to 256 [ 875.174951][T14727] SQUASHFS error: Unable to read metadata cache entry [99] [ 875.230866][T14727] SQUASHFS error: Unable to read inode 0x127 [ 876.113646][T14736] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 876.139956][T14736] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 876.230842][T14736] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 876.238630][T14736] UDF-fs: Scanning with blocksize 512 failed [ 876.269418][T14746] loop4: detected capacity change from 0 to 1024 [ 876.359663][T14736] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 876.388299][T14736] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 877.536616][T14754] bond1: (slave veth3): Enslaving as an active interface with a down link [ 878.710362][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 879.397694][T14747] chnl_net:caif_netlink_parms(): no params data found [ 880.831556][ T23] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 881.050140][T10561] Bluetooth: hci2: command 0x041b tx timeout [ 881.220990][ T23] usb 6-1: config 0 has no interfaces? [ 881.960310][ T23] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 882.030834][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.056573][ T23] usb 6-1: config 0 descriptor?? [ 882.279516][T14747] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.306196][T14747] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.628545][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 883.636033][ T23] usb 6-1: USB disconnect, device number 3 [ 883.649765][T14747] device bridge_slave_0 entered promiscuous mode [ 883.663082][T14747] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.670226][T14747] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.678945][T14747] device bridge_slave_1 entered promiscuous mode [ 883.724334][T14747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 883.765665][T14747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 883.798512][T14801] loop5: detected capacity change from 0 to 1024 [ 884.128374][T14747] team0: Port device team_slave_0 added [ 884.239317][T14747] team0: Port device team_slave_1 added [ 884.672320][T14747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.685242][T14747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.799076][T14747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 884.839111][T14747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 884.900746][T14747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.970717][T14747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 885.304232][T14747] device hsr_slave_0 entered promiscuous mode [ 885.315003][T14747] device hsr_slave_1 entered promiscuous mode [ 885.937081][T10561] Bluetooth: hci2: command 0x0419 tx timeout [ 885.966684][T14747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 886.004769][T14747] Cannot create hsr debugfs directory [ 886.325526][T14820] loop4: detected capacity change from 0 to 256 [ 887.761000][ T23] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 889.694041][T14836] loop0: detected capacity change from 0 to 32768 [ 890.510730][ T23] usb 5-1: device descriptor read/all, error -71 [ 891.582816][T14747] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 891.638494][T14747] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 891.677975][T14747] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 891.702949][T14747] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 893.985509][T14878] device hsr0 entered promiscuous mode [ 893.991313][T14878] device macsec1 entered promiscuous mode [ 894.258131][T14889] loop0: detected capacity change from 0 to 1024 [ 894.375342][T14889] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc,minixdf,,errors=continue. Quota mode: none. [ 894.489539][ T26] audit: type=1800 audit(1769312771.786:160): pid=14889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3155" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 894.546705][T14747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 894.618820][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 894.688893][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 894.774978][ T26] audit: type=1800 audit(1769312771.826:161): pid=14889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3155" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 894.805996][T14747] 8021q: adding VLAN 0 to HW filter on device team0 [ 894.978798][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 895.042229][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 895.296715][ T4479] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.303880][ T4479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 895.452903][ T26] audit: type=1800 audit(1769312772.756:162): pid=14901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3155" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 895.514202][T14909] netlink: 'syz.3.3161': attribute type 10 has an invalid length. [ 895.592213][T14909] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 895.709882][T14747] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 895.795653][T14747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 895.822991][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 895.856764][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 896.731905][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 896.796507][ T4479] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.803697][ T4479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 898.253951][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 898.264189][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 898.275064][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 898.904078][T14923] loop0: detected capacity change from 0 to 8192 [ 898.912406][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 898.922590][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 898.932166][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 898.943502][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 899.087953][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 899.097204][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 899.108923][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 899.151944][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 899.978426][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 900.409898][T14946] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 900.418793][T14946] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 900.427879][T14946] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 900.436704][T14946] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 900.548792][T14851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 900.607749][T14851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 900.638516][T14747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 900.711089][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 900.727790][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 900.762419][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 900.778612][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 900.797734][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 900.828025][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 900.847128][T14747] device veth0_vlan entered promiscuous mode [ 900.901046][T14747] device veth1_vlan entered promiscuous mode [ 900.915501][T14477] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 900.949511][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 900.968183][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 901.004888][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 901.045845][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 901.144193][T14747] device veth0_macvtap entered promiscuous mode [ 901.154880][T14747] device veth1_macvtap entered promiscuous mode [ 901.170436][T14747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 901.181087][T14747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.192328][T14747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 901.203039][T14747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.213420][T14747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 901.224290][T14747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.236686][T14747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 902.323478][T14747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 902.336616][T14747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.347267][T14747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 902.358107][T14747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.368386][T14747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 902.391365][T14747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.432328][T14747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 902.454882][T14747] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.484237][T14747] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.510326][T14747] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.536427][T14747] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.648828][ T5697] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 902.701436][ T5697] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 902.723959][ T5697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 902.740923][T14477] usb 1-1: config 0 has no interfaces? [ 902.746518][T14477] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 902.756899][ T5697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 902.781401][T14477] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.790397][ T5697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 902.815020][ T5697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 902.825527][T14477] usb 1-1: config 0 descriptor?? [ 902.974983][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 903.003013][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.084168][T14477] usb 1-1: USB disconnect, device number 83 [ 903.122043][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 903.156048][T14969] loop4: detected capacity change from 0 to 8192 [ 903.193521][ T5690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 903.222805][ T5690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.267509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 910.170822][T14478] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 910.520798][T14478] usb 5-1: Using ep0 maxpacket: 8 [ 912.053743][T15012] udc-core: couldn't find an available UDC or it's busy [ 912.073759][T15012] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 913.900879][T14478] usb 5-1: unable to get BOS descriptor or descriptor too short [ 913.998528][T14478] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 914.011430][T14478] usb 5-1: can't read configurations, error -71 [ 917.744771][T15174] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 918.025919][T15183] loop4: detected capacity change from 0 to 1024 [ 918.410939][T14478] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 918.681096][T14478] usb 3-1: Using ep0 maxpacket: 16 [ 919.070963][T14478] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 919.088515][T15183] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc,minixdf,,errors=continue. Quota mode: none. [ 919.137608][T14478] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.186717][T14478] usb 3-1: Product: syz [ 919.220903][T14478] usb 3-1: Manufacturer: syz [ 919.223746][ T26] audit: type=1800 audit(1769312796.526:163): pid=15183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3265" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 919.251475][T14478] usb 3-1: SerialNumber: syz [ 919.331432][T14478] usb 3-1: config 0 descriptor?? [ 919.376665][T15196] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 919.598637][T14478] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 919.731021][T15181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3264'. [ 919.764934][ T26] audit: type=1800 audit(1769312796.666:164): pid=15183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3265" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 919.898016][T14478] usb 3-1: Detected FT-X [ 920.070878][T14478] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 920.143263][ T26] audit: type=1800 audit(1769312797.446:165): pid=15195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3265" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 920.151146][T14478] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 920.260856][T14478] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 920.283999][T14478] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 920.344691][T14478] usb 3-1: USB disconnect, device number 74 [ 920.400984][T14478] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 920.451524][T14478] ftdi_sio 3-1:0.0: device disconnected [ 920.464038][T15209] device bond_slave_0 entered promiscuous mode [ 920.470834][T15209] device bond_slave_1 entered promiscuous mode [ 920.521831][T15209] device vlan2 entered promiscuous mode [ 920.546440][T15209] device bond0 entered promiscuous mode [ 923.125360][T15256] ptrace attach of "./syz-executor exec"[15255] was attempted by "./syz-executor exec"[15256] [ 923.936722][ T4259] Bluetooth: hci5: command 0x0406 tx timeout [ 925.777243][T15299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3306'. [ 926.031109][T13003] Bluetooth: hci2: command 0x0401 tx timeout [ 929.471487][T13003] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 929.714738][T13003] usb 1-1: Using ep0 maxpacket: 16 [ 929.990939][T13003] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 930.041136][T13003] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.049201][T13003] usb 1-1: Product: syz [ 930.154069][T13003] usb 1-1: Manufacturer: syz [ 930.170568][T13003] usb 1-1: SerialNumber: syz [ 930.194998][T13003] usb 1-1: config 0 descriptor?? [ 930.262359][T13003] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 930.286528][T13003] usb 1-1: Detected FT-X [ 930.523857][T15362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3328'. [ 931.026626][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.034758][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.610863][T13003] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 931.637108][T13003] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 931.690910][T13003] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 931.715929][T13003] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 931.759496][T13003] usb 1-1: USB disconnect, device number 84 [ 931.811402][T13003] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 931.828317][T15435] fuse: Bad value for 'fd' [ 931.882971][T13003] ftdi_sio 1-1:0.0: device disconnected [ 933.091682][T13003] Bluetooth: hci4: command 0x0406 tx timeout [ 938.772194][T15578] chnl_net:caif_netlink_parms(): no params data found [ 939.272955][T15578] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.331373][T15578] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.367742][T15578] device bridge_slave_0 entered promiscuous mode [ 939.441057][ T4259] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 939.456912][T15578] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.508719][T15578] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.553693][T15578] device bridge_slave_1 entered promiscuous mode [ 939.650939][T10643] Bluetooth: hci1: command 0x0409 tx timeout [ 939.711020][T15578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.722648][T15578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.749443][ T4259] usb 3-1: Using ep0 maxpacket: 16 [ 939.754797][T15578] team0: Port device team_slave_0 added [ 939.786886][T15578] team0: Port device team_slave_1 added [ 939.931756][T15578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 939.938806][T15578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 940.708274][T15578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.819596][T15578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.833646][T15578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 940.861681][T15578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.873385][ T4259] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 940.940710][T15651] loop4: detected capacity change from 0 to 512 [ 941.089947][T15578] device hsr_slave_0 entered promiscuous mode [ 941.702200][ T4259] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.710262][ T4259] usb 3-1: Product: syz [ 941.715033][ T4259] usb 3-1: Manufacturer: syz [ 941.719677][ T4259] usb 3-1: SerialNumber: syz [ 941.739807][T15651] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 941.749628][T15651] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 941.759420][T15651] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 941.775323][T15578] device hsr_slave_1 entered promiscuous mode [ 941.782267][T15578] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 941.793290][ T4259] usb 3-1: config 0 descriptor?? [ 941.803380][T15651] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 941.811599][T15651] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 941.819474][T15651] EXT4-fs (loop4): failed to initialize system zone (-117) [ 941.821637][T15578] Cannot create hsr debugfs directory [ 941.827171][T15651] EXT4-fs (loop4): mount failed [ 941.854782][T10643] Bluetooth: hci1: command 0x041b tx timeout [ 941.882232][ T4259] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 941.901432][ T4259] usb 3-1: Detected FT-X [ 942.080188][T15197] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 942.237905][T15197] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 942.254506][ T4259] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 942.290958][ T4259] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 942.320797][ T4259] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 942.337310][ T4259] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 942.365839][ T4259] usb 3-1: USB disconnect, device number 75 [ 942.391395][ T4259] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 942.429925][ T4259] ftdi_sio 3-1:0.0: device disconnected [ 942.497083][T15197] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 942.879980][T15197] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 944.118247][T13003] Bluetooth: hci1: command 0x040f tx timeout [ 944.211560][T15197] tipc: Left network mode [ 945.645904][T15750] loop2: detected capacity change from 0 to 512 [ 945.823779][T15750] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 945.833739][T15750] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 945.843664][T15750] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 945.927253][T15750] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 945.935498][T15750] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 945.943788][T15750] EXT4-fs (loop2): failed to initialize system zone (-117) [ 945.951350][T15750] EXT4-fs (loop2): mount failed [ 946.342136][T10645] Bluetooth: hci1: command 0x0419 tx timeout [ 946.433592][T15578] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 946.500984][T15578] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 946.606682][T15578] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 946.636273][T15578] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 947.094873][T15578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 947.886798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 947.905445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 947.975077][T15578] 8021q: adding VLAN 0 to HW filter on device team0 [ 948.043406][T15803] netlink: 'syz.4.3482': attribute type 10 has an invalid length. [ 948.137896][T15803] device veth0_vlan left promiscuous mode [ 948.207673][T15803] device veth0_vlan entered promiscuous mode [ 948.243996][T15803] team0: Device veth0_vlan failed to register rx_handler [ 948.355306][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 948.384541][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 948.430254][T10474] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.437434][T10474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 948.635009][T15197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 948.650898][T15197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 948.671040][T15197] device bridge_slave_1 left promiscuous mode [ 948.677358][T15197] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.928283][T15197] device bridge_slave_0 left promiscuous mode [ 948.962791][T15197] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.520677][T15197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 951.538669][T15197] device bond_slave_1 left promiscuous mode [ 951.561350][T15197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 951.578778][T15197] device bond_slave_0 left promiscuous mode [ 951.672182][T15197] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 951.689023][T15197] device dummy0 left promiscuous mode [ 951.709127][T15197] bond0 (unregistering): Released all slaves [ 951.916392][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 951.926399][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 951.939030][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 951.947545][T10474] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.954692][T10474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 951.965077][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 951.975728][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 951.985227][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 951.997367][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 952.006658][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 952.067568][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 952.081873][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 953.675195][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 953.712454][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 953.837410][T15578] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 953.887922][T15578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 954.751355][T15198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 954.766243][T15198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 955.020974][T14477] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 955.174008][T15861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3499'. [ 955.621734][T14477] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 955.632171][T14477] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.650954][T14477] usb 3-1: Product: syz [ 955.660915][T14477] usb 3-1: Manufacturer: syz [ 955.690996][T14477] usb 3-1: SerialNumber: syz [ 955.723643][T14477] usb 3-1: config 0 descriptor?? [ 955.815633][T14851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 955.833709][T14851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 955.861485][T15864] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3500'. [ 955.904385][T15578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 955.954817][T14851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 955.982225][T14851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 956.063623][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 956.128502][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 956.184456][T15578] device veth0_vlan entered promiscuous mode [ 956.192271][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 956.200918][T14477] usb 3-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -32 [ 956.214207][T14477] usb 3-1: Firmware version (0.0) predates our first public release. [ 956.223256][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 956.246520][T15578] device veth1_vlan entered promiscuous mode [ 956.261435][T14477] usb 3-1: Please update to version 0.2 or newer [ 956.300995][T14477] usb 3-1: Firmware: build [ 956.305582][T14477] usb 3-1: atusb_probe: initialization failed, error = -32 [ 956.316341][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 956.326104][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 956.339029][T14477] atusb: probe of 3-1:0.0 failed with error -32 [ 956.350794][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 956.360440][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 956.376426][T15578] device veth0_macvtap entered promiscuous mode [ 956.390424][T15578] device veth1_macvtap entered promiscuous mode [ 956.412581][T15578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 956.449490][T15578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.461717][T15578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 956.473196][T15578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.483551][T15578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 956.499233][T15578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.533710][ T21] usb 3-1: USB disconnect, device number 76 [ 956.542877][T15578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 956.559101][T15578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.622488][T15578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 956.668319][T10643] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 956.677972][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 956.695465][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 956.708810][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 956.729508][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 956.773243][T15578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 956.786528][T15578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.832696][T15578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 956.896314][T15578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.906885][T15578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 956.918051][T15578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.929554][T15578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 956.946881][T15578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 957.157012][T10643] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 957.307264][T15578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 957.350721][T10643] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 957.360718][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 957.369460][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 957.393327][T10643] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.405393][T15578] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.420709][T15578] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.425746][T10643] usb 6-1: config 0 descriptor?? [ 957.450017][T15578] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.470255][T15578] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.493595][T15874] netlink: 'syz.3.3503': attribute type 10 has an invalid length. [ 957.518734][T15874] team0 (unregistering): Port device team_slave_0 removed [ 957.533187][T15874] team0 (unregistering): Port device team_slave_1 removed [ 957.533988][T10643] pwc: Askey VC010 type 2 USB webcam detected. [ 958.243288][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 958.263411][T10474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 958.279194][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 958.300544][T10474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 958.314555][T10643] pwc: recv_control_msg error -32 req 02 val 2b00 [ 958.326063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 958.337607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 959.870820][T10643] pwc: recv_control_msg error -71 req 04 val 1000 [ 961.595630][T10643] pwc: recv_control_msg error -71 req 04 val 1300 [ 961.630805][T10643] pwc: recv_control_msg error -71 req 04 val 1400 [ 961.660768][T10643] pwc: recv_control_msg error -71 req 02 val 2000 [ 961.680899][T10643] pwc: recv_control_msg error -71 req 02 val 2100 [ 961.711207][T10643] pwc: recv_control_msg error -71 req 04 val 1500 [ 961.770948][T10643] pwc: recv_control_msg error -71 req 02 val 2500 [ 961.784809][T15919] 9pnet: Insufficient options for proto=fd [ 963.220725][T10643] pwc: recv_control_msg error -71 req 02 val 2400 [ 963.250815][T10643] pwc: recv_control_msg error -71 req 02 val 2600 [ 963.270782][T10643] pwc: recv_control_msg error -71 req 02 val 2900 [ 963.290899][T10643] pwc: recv_control_msg error -71 req 02 val 2800 [ 963.320939][T10643] pwc: recv_control_msg error -71 req 04 val 1100 [ 963.341511][T10643] pwc: recv_control_msg error -71 req 04 val 1200 [ 963.342893][T10643] pwc: Registered as video103. [ 963.344500][T10643] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input66 [ 963.354130][T10643] usb 6-1: USB disconnect, device number 4 [ 965.863067][T15950] netlink: 'syz.3.3527': attribute type 27 has an invalid length. [ 966.230220][T15950] device gretap1 left promiscuous mode [ 966.249722][T15950] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.258793][T15950] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.268424][T15950] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.277536][T15950] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.683404][T15952] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3527'. [ 966.758319][T15954] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 966.805343][T15954] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 966.832522][T15954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 966.942490][T15954] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 968.310903][T14478] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 968.415658][T15986] loop4: detected capacity change from 0 to 512 [ 969.236473][T15986] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 969.246741][T15986] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 969.256610][T15986] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 969.281087][T15986] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 969.289044][T15986] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 969.296961][T15986] EXT4-fs (loop4): failed to initialize system zone (-117) [ 969.304308][T15986] EXT4-fs (loop4): mount failed [ 969.630981][T14478] usb 6-1: config 0 has no interfaces? [ 969.719304][T15989] loop8: detected capacity change from 0 to 7 [ 969.742805][T14478] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 969.774840][ T4179] Dev loop8: unable to read RDB block 7 [ 969.781704][ T4179] loop8: unable to read partition table [ 969.788663][T14478] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 969.839478][T14478] usb 6-1: SerialNumber: syz [ 969.839739][ T4179] loop8: partition table beyond EOD, truncated [ 969.899009][T14478] usb 6-1: config 0 descriptor?? [ 969.936136][T15989] Dev loop8: unable to read RDB block 7 [ 969.943310][T15989] loop8: unable to read partition table [ 969.999240][T15989] loop8: partition table beyond EOD, truncated [ 970.043187][T15989] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 970.225647][ T1107] usb 6-1: USB disconnect, device number 5 [ 970.590764][T14478] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 970.850996][T14478] usb 1-1: Using ep0 maxpacket: 32 [ 970.980956][T14478] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 970.999586][T14478] usb 1-1: config 0 has no interface number 0 [ 971.029957][T14478] usb 1-1: config 0 interface 184 has no altsetting 0 [ 971.211167][T16017] netlink: 'syz.3.3545': attribute type 4 has an invalid length. [ 971.251332][T14478] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 971.293453][T16017] netlink: 'syz.3.3545': attribute type 4 has an invalid length. [ 971.297945][T14478] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.311524][T14478] usb 1-1: Product: syz [ 971.333033][T14478] usb 1-1: Manufacturer: syz [ 971.364783][T14478] usb 1-1: SerialNumber: syz [ 971.405593][T14478] usb 1-1: config 0 descriptor?? [ 971.482192][T14478] smsc75xx v1.0.0 [ 972.049314][T16032] overlayfs: failed to clone upperpath [ 973.310834][T14478] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 973.331554][T14478] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 973.370828][T14478] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 973.402829][T14478] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 973.538606][T14478] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 973.549085][T14478] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 973.558608][T14478] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 973.569503][T14478] usb 1-1: USB disconnect, device number 85 [ 979.446581][T16074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3562'. [ 979.487722][T16074] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 979.496562][T16074] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 979.505450][T16074] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 979.514217][T16074] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 981.562594][T14478] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 982.572897][T16092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3569'. [ 982.710898][T14478] usb 6-1: Using ep0 maxpacket: 16 [ 983.041013][T14478] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 983.060394][T14478] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.085507][T14478] usb 6-1: Product: syz [ 983.089722][T14478] usb 6-1: Manufacturer: syz [ 983.100704][T14478] usb 6-1: SerialNumber: syz [ 983.123096][T14478] usb 6-1: config 0 descriptor?? [ 983.172449][T14478] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 983.211679][T14478] usb 6-1: Detected FT-X [ 983.413036][T16081] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3565'. [ 984.491039][T14478] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 984.550894][T14478] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 984.570810][T14478] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 984.593188][T14478] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 984.623337][T14478] usb 6-1: USB disconnect, device number 6 [ 984.708968][T16119] loop4: detected capacity change from 0 to 512 [ 984.823831][T14478] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 984.862970][T16119] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 984.872906][T16119] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 984.882818][T16119] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 984.941266][T16119] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 984.949327][T16119] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 984.957745][T16119] EXT4-fs (loop4): failed to initialize system zone (-117) [ 984.965244][T16119] EXT4-fs (loop4): mount failed [ 985.153718][T14478] ftdi_sio 6-1:0.0: device disconnected [ 990.270811][T16153] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3587'. [ 990.296685][T16156] overlayfs: failed to clone upperpath [ 990.464045][T16159] overlayfs: failed to clone lowerpath [ 990.476496][T16159] overlayfs: failed to clone lowerpath [ 990.596283][T16163] fuse: Bad value for 'fd' [ 990.879103][T16171] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 992.012922][T16181] loop2: detected capacity change from 0 to 512 [ 992.456147][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.464950][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.817484][T16181] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 992.827371][T16181] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 992.837194][T16181] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 992.901588][T16181] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 992.909558][T16181] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 992.917540][T16181] EXT4-fs (loop2): failed to initialize system zone (-117) [ 992.924895][T16181] EXT4-fs (loop2): mount failed [ 999.552974][T16265] loop4: detected capacity change from 0 to 512 [ 999.939520][T16265] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 999.949526][T16265] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 999.959743][T16265] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1000.222414][T16265] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1000.230451][T16265] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 1000.238911][T16265] EXT4-fs (loop4): failed to initialize system zone (-117) [ 1000.246542][T16265] EXT4-fs (loop4): mount failed [ 1000.691658][T16277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3625'. [ 1000.700844][T16277] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3625'. [ 1002.538106][T16301] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1004.246674][T16319] loop5: detected capacity change from 0 to 512 [ 1005.027255][T16319] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1005.037602][T16319] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1005.047491][T16319] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1005.095058][T16319] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1005.103069][T16319] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 1005.110899][T16319] EXT4-fs (loop5): failed to initialize system zone (-117) [ 1005.118137][T16319] EXT4-fs (loop5): mount failed [ 1005.800754][ T23] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1006.200910][ T23] usb 6-1: config 64 has an invalid interface number: 146 but max is 0 [ 1006.949893][ T23] usb 6-1: config 64 has no interface number 0 [ 1006.981454][ T23] usb 6-1: config 64 interface 146 has no altsetting 0 [ 1007.230783][ T23] usb 6-1: New USB device found, idVendor=05d1, idProduct=7001, bcdDevice=53.43 [ 1009.074913][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.876302][ T23] usb 6-1: Product: syz [ 1009.880582][ T23] usb 6-1: Manufacturer: syz [ 1009.900394][ T23] usb 6-1: SerialNumber: syz [ 1009.981470][ T23] usb 6-1: can't set config #64, error -71 [ 1010.022063][ T23] usb 6-1: USB disconnect, device number 8 [ 1011.200824][T10564] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1011.582230][T10564] usb 1-1: Using ep0 maxpacket: 32 [ 1011.807501][T10564] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1012.000937][T10564] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1012.030721][T10564] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.067858][T10564] usb 1-1: Product: syz [ 1012.077931][T10564] usb 1-1: Manufacturer: syz [ 1012.098077][T10564] usb 1-1: SerialNumber: syz [ 1012.126339][T10564] usb 1-1: config 0 descriptor?? [ 1012.193249][T10564] usb 1-1: no audio or video endpoints found [ 1012.763622][T16390] netlink: 'syz.3.3655': attribute type 3 has an invalid length. [ 1013.716705][T10643] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1014.241341][T10643] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1014.404052][T10643] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1015.026398][T10645] usb 1-1: USB disconnect, device number 86 [ 1015.070791][T10643] usb 5-1: string descriptor 0 read error: -71 [ 1015.078647][T10643] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1015.210837][T10643] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.280834][T10643] usb 5-1: can't set config #1, error -71 [ 1015.320833][T10643] usb 5-1: USB disconnect, device number 61 [ 1015.781274][T10643] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1016.301492][T10643] usb 5-1: config 64 has an invalid interface number: 146 but max is 0 [ 1016.339871][T10643] usb 5-1: config 64 has no interface number 0 [ 1016.356683][T10643] usb 5-1: config 64 interface 146 has no altsetting 0 [ 1016.540895][T10643] usb 5-1: New USB device found, idVendor=05d1, idProduct=7001, bcdDevice=53.43 [ 1016.550506][T10643] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.590142][T10643] usb 5-1: Product: syz [ 1016.610251][T10643] usb 5-1: Manufacturer: syz [ 1016.624085][T10643] usb 5-1: SerialNumber: syz [ 1017.336071][T16400] device bond_slave_0 entered promiscuous mode [ 1017.342363][T16400] device bond_slave_1 entered promiscuous mode [ 1017.589436][T16427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3657'. [ 1017.647120][T16427] device bond_slave_0 left promiscuous mode [ 1017.653243][T16427] device bond_slave_1 left promiscuous mode [ 1017.848513][T10643] ftdi_sio 5-1:64.146: FTDI USB Serial Device converter detected [ 1017.877164][T10643] usb 5-1: Detected FT-X [ 1017.900866][T10643] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1017.940759][T10643] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1017.960790][T10643] ftdi_sio 5-1:64.146: GPIO initialisation failed: -71 [ 1017.978391][T10643] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1018.017720][T10643] usb 5-1: USB disconnect, device number 62 [ 1018.049892][T10643] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1018.107225][T10643] ftdi_sio 5-1:64.146: device disconnected [ 1018.910749][T10564] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1019.421393][T10643] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1019.440988][T10564] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1019.458060][T10564] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.470085][T10564] usb 1-1: Product: syz [ 1019.564904][T10564] usb 1-1: Manufacturer: syz [ 1019.606047][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f076800: rx timeout, send abort [ 1019.625859][T10564] usb 1-1: SerialNumber: syz [ 1019.663832][T10564] usb 1-1: config 0 descriptor?? [ 1019.680780][T10643] usb 5-1: Using ep0 maxpacket: 8 [ 1019.762577][T10564] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1019.800779][T10643] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1019.819405][T10643] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1019.840806][T10643] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1019.851463][T10643] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1019.866733][T10643] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1019.886201][T10643] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.010745][T14477] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1020.114390][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f076800: abort rx timeout. Force session deactivation [ 1020.130883][T10563] Bluetooth: hci2: command 0x0406 tx timeout [ 1020.160826][T10643] usb 5-1: GET_CAPABILITIES returned 0 [ 1020.166380][T10643] usbtmc 5-1:16.0: can't read capabilities [ 1020.250895][ T23] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1020.277600][T14477] usb 3-1: Using ep0 maxpacket: 16 [ 1020.424360][T10564] usb 1-1: USB disconnect, device number 87 [ 1020.495992][T16470] overlayfs: failed to clone upperpath [ 1020.514177][ T23] usb 6-1: Using ep0 maxpacket: 8 [ 1020.563061][T10643] usb 5-1: USB disconnect, device number 63 [ 1020.601161][T14477] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 1020.610268][T14477] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.630668][T14477] usb 3-1: Product: syz [ 1020.634887][T14477] usb 3-1: Manufacturer: syz [ 1020.639515][T14477] usb 3-1: SerialNumber: syz [ 1020.662531][T14477] usb 3-1: config 0 descriptor?? [ 1020.670974][ T23] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1020.690681][ T23] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1020.702487][T14477] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1020.721330][T14477] usb 3-1: Detected FT-X [ 1020.725731][ T23] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1020.750685][ T23] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1020.771119][ T23] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1020.780201][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.903739][T16460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3681'. [ 1021.070834][T14477] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1021.101179][ T23] usb 6-1: GET_CAPABILITIES returned 0 [ 1021.106901][ T23] usbtmc 6-1:16.0: can't read capabilities [ 1021.141011][T14477] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1021.242076][T14477] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 1021.349463][ T23] usb 6-1: USB disconnect, device number 9 [ 1021.374911][T14477] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1021.678991][T14477] usb 3-1: USB disconnect, device number 77 [ 1021.914359][T14477] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1022.097553][T14477] ftdi_sio 3-1:0.0: device disconnected [ 1022.437253][T16501] device bond_slave_0 entered promiscuous mode [ 1022.443551][T16501] device bond_slave_1 entered promiscuous mode [ 1022.451030][T16501] device vlan2 entered promiscuous mode [ 1022.456679][T16501] device bond0 entered promiscuous mode [ 1023.708194][T16512] loop5: detected capacity change from 0 to 512 [ 1024.017153][T16512] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1024.027492][T16512] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1024.037461][T16512] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1024.100707][T16512] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1024.108748][T16512] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 1024.117157][T16512] EXT4-fs (loop5): failed to initialize system zone (-117) [ 1024.125143][T16512] EXT4-fs (loop5): mount failed [ 1024.556282][T16516] bridge0: port 3(vlan2) entered blocking state [ 1024.573787][T16516] bridge0: port 3(vlan2) entered disabled state [ 1024.697946][T16526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3699'. [ 1025.367057][T14477] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1025.960782][T14477] usb 5-1: Using ep0 maxpacket: 16 [ 1026.630884][T14477] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 1026.640068][T14477] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.660711][T14477] usb 5-1: Product: syz [ 1026.670757][T14477] usb 5-1: Manufacturer: syz [ 1026.683333][T14477] usb 5-1: SerialNumber: syz [ 1027.551922][T14477] usb 5-1: config 0 descriptor?? [ 1027.580847][T14477] usb 5-1: can't set config #0, error -71 [ 1027.589239][T14477] usb 5-1: USB disconnect, device number 64 [ 1029.327853][T16578] ptrace attach of "./syz-executor exec"[16577] was attempted by "./syz-executor exec"[16578] [ 1031.979708][T16592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3723'. [ 1032.268433][T14477] Bluetooth: hci2: command 0x0401 tx timeout [ 1032.810662][T10645] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1033.180794][T10645] usb 5-1: Using ep0 maxpacket: 8 [ 1033.320824][T10645] usb 5-1: config 0 has no interfaces? [ 1033.490915][T10645] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1033.506161][T10645] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.533325][T10645] usb 5-1: Product: syz [ 1033.548580][T10645] usb 5-1: Manufacturer: syz [ 1033.565340][T10645] usb 5-1: SerialNumber: syz [ 1033.595831][T10645] usb 5-1: config 0 descriptor?? [ 1033.881248][T10645] usb 5-1: USB disconnect, device number 65 [ 1035.095063][T10643] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1035.121277][T10643] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1035.129104][T10643] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1035.183893][T10643] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1035.219981][T10643] rtc rtc0: __rtc_set_alarm: err=-22 [ 1035.690759][T14477] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1036.094300][T14477] usb 6-1: Using ep0 maxpacket: 16 [ 1036.461570][T14477] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 1036.977469][T14477] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.007931][T14477] usb 6-1: Product: syz [ 1037.028065][T14477] usb 6-1: Manufacturer: syz [ 1037.090565][T14477] usb 6-1: SerialNumber: syz [ 1037.098009][T14477] usb 6-1: config 0 descriptor?? [ 1037.162076][T14477] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1037.192018][T14477] usb 6-1: Detected FT-X [ 1037.214027][T16677] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3748'. [ 1037.363041][T16659] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3743'. [ 1037.410852][T14477] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1037.550753][T14477] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1038.420856][T14477] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 1038.441511][T14477] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1038.518051][T14477] usb 6-1: USB disconnect, device number 10 [ 1038.585900][T14477] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1038.647189][T14477] ftdi_sio 6-1:0.0: device disconnected [ 1041.089490][T16717] tmpfs: Unknown parameter 'usrquota' [ 1041.598085][T16719] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.371800][T16733] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3767'. [ 1044.563588][T16748] device syzkaller0 entered promiscuous mode [ 1045.140857][ T26] audit: type=1326 audit(1769312922.436:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16760 comm="syz.0.3777" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f56fdd04cb9 code=0x0 [ 1049.925058][T16785] chnl_net:caif_netlink_parms(): no params data found [ 1050.644008][T16785] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.651334][T16785] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.659684][T16785] device bridge_slave_0 entered promiscuous mode [ 1050.668821][T16785] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.676358][T16785] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.695036][T16785] device bridge_slave_1 entered promiscuous mode [ 1050.756571][T16785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1050.770688][T10564] Bluetooth: hci0: command 0x0409 tx timeout [ 1050.795302][T16785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1050.853759][T16785] team0: Port device team_slave_0 added [ 1050.873767][T16785] team0: Port device team_slave_1 added [ 1050.962185][T16785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1050.977559][T16785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1051.004080][T16785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1051.020201][T16785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1051.030749][T16785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1051.063602][T16785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1051.080796][T10643] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1051.160649][T16813] overlayfs: missing 'lowerdir' [ 1051.170510][T16785] device hsr_slave_0 entered promiscuous mode [ 1051.206416][T16816] binder: 16815:16816 ioctl c018620b 200000000180 returned -14 [ 1051.221184][T16785] device hsr_slave_1 entered promiscuous mode [ 1051.268424][T16785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1051.280643][T16785] Cannot create hsr debugfs directory [ 1051.330809][T10643] usb 3-1: Using ep0 maxpacket: 16 [ 1051.610894][T10643] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 1051.643524][T10643] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.674198][T10643] usb 3-1: Product: syz [ 1051.688633][T10643] usb 3-1: Manufacturer: syz [ 1051.716660][T10643] usb 3-1: SerialNumber: syz [ 1051.763943][T10643] usb 3-1: config 0 descriptor?? [ 1051.849848][T10643] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1051.923898][T10643] usb 3-1: Detected FT-X [ 1051.950567][T16785] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1052.031999][T16785] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1052.053048][T16807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3790'. [ 1052.074522][T16785] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1052.109563][T16785] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1052.550058][T16785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1052.561053][T10643] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1052.590455][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1052.617254][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1052.653548][T16785] 8021q: adding VLAN 0 to HW filter on device team0 [ 1052.661586][T10643] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1052.704405][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1052.733191][T10643] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 1052.741381][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1052.777127][T10643] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1052.791177][T10474] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.798339][T10474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1052.849259][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1052.857187][T14477] Bluetooth: hci0: command 0x041b tx timeout [ 1052.864024][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1052.879421][T10643] usb 3-1: USB disconnect, device number 78 [ 1052.880446][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1052.894809][T10474] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.901943][T10474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1052.912467][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1052.941735][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1052.952344][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1052.961521][T10643] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1052.981112][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1053.010334][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1053.022192][T10643] ftdi_sio 3-1:0.0: device disconnected [ 1053.044713][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1053.074861][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1053.119183][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1053.138708][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1053.165651][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1053.201434][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1053.237218][T16785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1054.087081][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.093676][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.312941][T16061] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1054.321431][T16061] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1054.351133][T16785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1054.452647][T10563] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1054.690811][T10563] usb 5-1: Using ep0 maxpacket: 16 [ 1054.766916][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1054.789850][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1054.810904][T10563] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1054.828943][T10563] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1054.853741][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1054.861933][T10563] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1054.876609][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1054.885662][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1054.893236][T10563] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1054.922121][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1054.934585][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 1054.973148][T16785] device veth0_vlan entered promiscuous mode [ 1055.024759][T16785] device veth1_vlan entered promiscuous mode [ 1055.065749][T10563] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1055.085207][T10563] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.099394][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1055.101131][T10563] usb 5-1: Product: syz [ 1055.112887][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1055.121148][T10563] usb 5-1: Manufacturer: syz [ 1055.128704][T16785] device veth0_macvtap entered promiscuous mode [ 1055.135780][T10563] usb 5-1: SerialNumber: syz [ 1055.160732][T16785] device veth1_macvtap entered promiscuous mode [ 1055.166993][T16884] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 1055.239544][T16890] device syzkaller1 entered promiscuous mode [ 1055.282625][T16785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1055.293620][T16785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1055.305382][T16785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1055.316355][T16785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1055.326681][T16785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1055.337431][T16785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1055.341154][ T21] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1055.357875][T16785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1055.368541][T16785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1055.378810][T16785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1055.389750][T16785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1055.401911][T16785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1055.410078][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1055.447733][T10563] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 66 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1055.461301][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1055.469409][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1055.484059][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1055.495993][T16785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1055.519467][T16785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1055.540074][T16785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1055.559700][T16785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1055.570128][T16785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1055.590465][T16785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1055.607819][T16785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1055.618628][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 1055.623992][T16785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1055.635070][T16785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1055.649187][T16785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1055.673430][T16785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1055.689389][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1055.698946][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1055.711856][T16785] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.725301][T16785] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.735537][T16785] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.744630][ T21] usb 1-1: config 7 has an invalid interface number: 246 but max is 0 [ 1055.753203][ T21] usb 1-1: config 7 has no interface number 0 [ 1055.759332][ T21] usb 1-1: config 7 interface 246 altsetting 128 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 1055.771458][T16785] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.791128][T16847] usblp0:failed reading printer status (-32) [ 1055.823102][ T21] usb 1-1: config 7 interface 246 altsetting 128 bulk endpoint 0x1 has invalid maxpacket 82 [ 1055.853517][T10643] usb 5-1: USB disconnect, device number 66 [ 1055.864054][ T21] usb 1-1: config 7 interface 246 has no altsetting 0 [ 1055.876800][T10643] usblp0: removed [ 1055.986048][T10474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1056.016400][T10474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1056.030964][ T21] usb 1-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice= 8.30 [ 1056.050986][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.059113][ T21] usb 1-1: Product: syz [ 1056.063703][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1056.093345][T16061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1056.105100][ T21] usb 1-1: Manufacturer: syz [ 1056.106548][T16061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1056.109820][ T21] usb 1-1: SerialNumber: syz [ 1056.138678][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1056.150748][T10563] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1056.171049][T16881] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1056.400723][T10563] usb 6-1: Using ep0 maxpacket: 32 [ 1056.473214][ T21] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 1056.516763][ T21] usb 1-1: selecting invalid altsetting 0 [ 1056.531185][T10563] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1056.587082][T10563] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.599269][ T2426] pvrusb2: Invalid read control endpoint [ 1056.620899][ T21] usb 1-1: USB disconnect, device number 88 [ 1056.629675][ T2426] usb 1-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 1056.648482][T10563] usb 6-1: config 0 descriptor?? [ 1056.714394][ T2426] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 1057.000825][T10563] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1057.009873][T10563] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1057.033554][T10563] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1057.042899][T10563] usb 6-1: media controller created [ 1057.110013][T16920] binder: 16919:16920 unknown command 112 [ 1057.122452][T16920] binder: 16919:16920 ioctl c0306201 200000000580 returned -22 [ 1057.238267][T10563] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1057.293151][T10563] DVB: Unable to find symbol dib7000p_attach() [ 1057.301409][T10563] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1057.411032][T10563] rc_core: IR keymap rc-dib0700-rc5 not found [ 1057.420852][T10563] Registered IR keymap rc-empty [ 1057.439150][T10563] dvb-usb: could not initialize remote control. [ 1057.446929][T16928] tipc: Started in network mode [ 1057.454651][T16928] tipc: Node identity a27173ee6ac2, cluster identity 4711 [ 1057.463021][T10563] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1057.485937][T16928] tipc: Enabled bearer , priority 0 [ 1057.497128][T16923] tipc: Resetting bearer [ 1057.670371][T16923] tipc: Disabling bearer [ 1057.800163][T13003] usb 6-1: USB disconnect, device number 11 [ 1058.678984][T13003] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1061.074752][T16948] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3827'. [ 1061.098127][T10564] Bluetooth: hci1: command 0x0406 tx timeout [ 1062.183073][T16956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1063.171979][T13003] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1063.824411][T13003] usb 6-1: Using ep0 maxpacket: 32 [ 1063.920686][T10643] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1063.951163][T13003] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.982582][T13003] usb 6-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 1064.024344][T13003] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1064.220973][T13003] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1064.230125][T13003] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.251314][T13003] usb 6-1: Product: syz [ 1064.255548][T13003] usb 6-1: Manufacturer: syz [ 1064.270509][T13003] usb 6-1: SerialNumber: syz [ 1064.280698][T14478] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1064.310993][T10643] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1064.323310][T10643] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1064.343583][T10643] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1064.367257][T13003] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1064.376372][T10643] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.390743][T13003] imon 6-1:155.0: unable to initialize intf0, err -19 [ 1064.416831][T10643] usb 7-1: config 0 descriptor?? [ 1064.430729][T13003] imon:imon_probe: failed to initialize context! [ 1064.447447][T13003] imon 6-1:155.0: unable to register, err -19 [ 1064.706405][T14478] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.726960][T14478] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1064.830897][T14478] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1064.850257][T14478] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1064.860360][T14478] usb 5-1: SerialNumber: syz [ 1064.922550][T10643] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 1064.941532][T10643] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 1064.959730][T10643] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 1064.969310][T10643] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 1064.986860][T10643] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 1064.995283][T10643] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 1065.009940][T10643] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 1065.038550][T10643] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 1065.140996][T10643] cp2112 0003:10C4:EA90.000A: error requesting version [ 1065.153744][T14478] usb 5-1: 0:2 : does not exist [ 1065.158693][T14478] usb 5-1: unit 5 not found! [ 1065.161681][T10643] cp2112: probe of 0003:10C4:EA90.000A failed with error -71 [ 1065.194648][T14478] usb 5-1: USB disconnect, device number 67 [ 1065.210909][T10643] usb 7-1: USB disconnect, device number 2 [ 1065.342717][T17001] fido_id[17001]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1065.514637][T16915] udevd[16915]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1066.110783][T14478] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1066.328308][ T4313] usb 6-1: USB disconnect, device number 12 [ 1066.490892][T14478] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.514291][T14478] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1066.710924][T14478] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1066.759276][T14478] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.797766][T14478] usb 5-1: Product: syz [ 1066.810683][T14478] usb 5-1: Manufacturer: syz [ 1066.827546][T14478] usb 5-1: SerialNumber: syz [ 1066.856775][T14478] usb 5-1: config 0 descriptor?? [ 1066.923181][T14478] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1066.950548][T14478] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1066.980983][T14478] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1067.024991][T14478] usb 5-1: media controller created [ 1067.066998][T14478] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1067.203608][T14478] DVB: Unable to find symbol tda10046_attach() [ 1067.210112][T14478] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1067.219458][T14478] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1067.243978][T14478] dvb_usb_m920x: probe of 5-1:0.0 failed with error -71 [ 1067.272037][T14478] usb 5-1: USB disconnect, device number 68 [ 1067.280739][ T23] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1067.410865][T10564] Bluetooth: hci3: command 0x1003 tx timeout [ 1067.420809][T10496] Bluetooth: hci3: sending frame failed (-49) [ 1067.738490][ T23] usb 6-1: Using ep0 maxpacket: 16 [ 1069.181019][ T23] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 1069.211197][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.270820][ T23] usb 6-1: Product: syz [ 1069.275045][ T23] usb 6-1: Manufacturer: syz [ 1069.295288][ T23] usb 6-1: SerialNumber: syz [ 1069.407015][ T23] usb 6-1: config 0 descriptor?? [ 1069.490867][T10563] Bluetooth: hci3: command 0x1001 tx timeout [ 1069.509258][ T23] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1069.520908][T10496] Bluetooth: hci3: sending frame failed (-49) [ 1069.612567][ T23] usb 6-1: Detected FT-X [ 1069.764877][T17037] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3857'. [ 1070.210953][ T23] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1070.241443][ T23] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1070.280751][ T23] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 1070.290507][ T23] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1070.333565][ T23] usb 6-1: USB disconnect, device number 13 [ 1070.342385][ T23] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1070.456482][ T23] ftdi_sio 6-1:0.0: device disconnected [ 1071.860801][T10644] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1072.253747][ T23] Bluetooth: hci3: command 0x1009 tx timeout [ 1072.460708][T10644] usb 5-1: device descriptor read/64, error -71 [ 1072.730758][T10644] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1072.930845][T10644] usb 5-1: device descriptor read/64, error -71 [ 1073.054331][T10644] usb usb5-port1: attempt power cycle [ 1073.657692][T17097] input: syz0 as /devices/virtual/input/input68 [ 1073.840764][T10644] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1073.944262][T10644] usb 5-1: device descriptor read/8, error -71 [ 1074.220696][T10644] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1074.461862][T10563] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1074.535590][T10644] usb 5-1: device descriptor read/8, error -71 [ 1074.679043][T17113] UBIFS error (pid: 17113): cannot open "ubifs", error -22 [ 1074.750785][T10563] usb 7-1: Using ep0 maxpacket: 16 [ 1075.111405][T10563] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 1075.167052][T10563] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.300491][T10563] usb 7-1: Product: syz [ 1075.330661][T10563] usb 7-1: Manufacturer: syz [ 1075.341051][T10563] usb 7-1: SerialNumber: syz [ 1075.371186][T10563] usb 7-1: config 0 descriptor?? [ 1075.383691][T10644] usb usb5-port1: unable to enumerate USB device [ 1075.444534][T17116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3879'. [ 1075.472335][T10563] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 1075.484795][T10563] usb 7-1: Detected FT-X [ 1075.916438][T17108] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3877'. [ 1076.175387][ T1091] block nbd5: Attempted send on invalid socket [ 1076.182887][ T1091] blk_update_request: I/O error, dev nbd5, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 1076.197200][ T1091] gfs2: error 10 reading superblock [ 1076.310744][T10563] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1076.330769][T10563] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1076.364208][T10563] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71 [ 1076.422347][T10563] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1076.500816][T10563] usb 7-1: USB disconnect, device number 3 [ 1076.576784][T10563] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1076.597728][T10563] ftdi_sio 7-1:0.0: device disconnected [ 1076.880704][T10564] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1077.270748][ T4313] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1077.281898][T10564] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1077.313721][T10564] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1077.359544][T10564] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.387699][T10564] usb 6-1: config 0 descriptor?? [ 1077.851357][ T4313] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1077.870699][ T4313] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.886410][T10564] lenovo 0003:17EF:6047.000B: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.5-1/input0 [ 1077.890801][ T4313] usb 7-1: Product: syz [ 1077.910706][ T4313] usb 7-1: Manufacturer: syz [ 1077.923032][ T4313] usb 7-1: SerialNumber: syz [ 1077.951483][ T4313] usb 7-1: config 0 descriptor?? [ 1078.451869][ T4313] usb 7-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -32 [ 1078.464383][ T4313] usb 7-1: Firmware version (0.0) predates our first public release. [ 1078.480188][ T4313] usb 7-1: Please update to version 0.2 or newer [ 1078.540794][ T4313] usb 7-1: Firmware: build [ 1078.545560][ T4313] usb 7-1: atusb_probe: initialization failed, error = -32 [ 1078.553395][ T4313] atusb: probe of 7-1:0.0 failed with error -32 [ 1078.767750][T10645] usb 7-1: USB disconnect, device number 4 [ 1078.964317][ T4313] usb 6-1: USB disconnect, device number 14 [ 1080.657729][T17159] binder: 17158:17159 ioctl 4018620d 0 returned -22 [ 1080.664875][T17159] binder: 17158:17159 ioctl c0306201 0 returned -14 [ 1080.678234][T17168] ieee802154 phy0 wpan0: encryption failed: -22 [ 1080.716034][T17171] 9pnet: Insufficient options for proto=fd [ 1081.034801][T17177] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 1081.046330][T10474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 1081.210865][T10564] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1081.470899][T10564] usb 3-1: Using ep0 maxpacket: 16 [ 1081.750913][T10564] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 1081.770569][T10564] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.089265][T10564] usb 3-1: Product: syz [ 1082.093936][T10564] usb 3-1: Manufacturer: syz [ 1082.098641][T10564] usb 3-1: SerialNumber: syz [ 1082.113548][T10564] usb 3-1: config 0 descriptor?? [ 1082.152771][T10564] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1082.704674][T17175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3896'. [ 1082.811108][T10564] usb 3-1: Detected FT-X [ 1085.020884][T10564] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1085.066701][T10564] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1085.251086][T10564] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 1085.261080][T10564] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1085.311100][T10564] usb 3-1: USB disconnect, device number 79 [ 1085.363295][T10564] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1085.416698][T10564] ftdi_sio 3-1:0.0: device disconnected [ 1090.611074][T10564] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1090.870663][T10564] usb 5-1: Using ep0 maxpacket: 32 [ 1090.906178][T12987] kernel write not supported for file /vcs (pid: 12987 comm: kworker/1:15) [ 1091.014168][T10564] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1091.040748][T10564] usb 5-1: config 0 has no interface number 0 [ 1091.056220][T10564] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1091.060921][ T4313] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1091.311299][ T4313] usb 3-1: Using ep0 maxpacket: 16 [ 1091.430916][ T4313] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1091.450995][T10564] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1091.460677][ T4313] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1091.484451][T10564] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.492832][ T4313] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1091.504497][T10564] usb 5-1: Product: syz [ 1091.508841][T10564] usb 5-1: Manufacturer: syz [ 1091.519379][T10564] usb 5-1: SerialNumber: syz [ 1091.530674][ T4313] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 1091.553859][T10564] usb 5-1: config 0 descriptor?? [ 1091.614238][T10564] smsc75xx v1.0.0 [ 1091.680962][ T4313] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1091.690119][ T4313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1091.720662][ T4313] usb 3-1: SerialNumber: syz [ 1091.740914][T17273] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1091.748026][T17273] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1092.001824][ T4313] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 1092.009716][ T4313] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 1092.039051][ T4313] cdc_acm: probe of 3-1:1.0 failed with error -22 [ 1092.078473][T17305] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3934'. [ 1092.095230][ T4313] usb 3-1: USB disconnect, device number 80 [ 1092.818976][T17311] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1092.830844][T10564] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1092.848573][T10564] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1093.130890][T10564] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 1093.158530][T10564] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 1093.188950][T10564] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1093.200867][T17318] device syzkaller0 entered promiscuous mode [ 1093.220511][T17318] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 1093.228865][T10564] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 1093.244769][T10564] usb 5-1: USB disconnect, device number 73 [ 1098.771275][T10643] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1099.018529][T10643] usb 7-1: Using ep0 maxpacket: 32 [ 1099.276726][T10643] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 1099.285679][T10643] usb 7-1: config 0 has no interface number 0 [ 1099.291882][T10643] usb 7-1: config 0 interface 12 has no altsetting 0 [ 1099.561455][T10643] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1099.584023][T10643] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.627936][T10643] usb 7-1: Product: syz [ 1099.650072][T10643] usb 7-1: Manufacturer: syz [ 1099.673685][T10643] usb 7-1: SerialNumber: syz [ 1099.730714][T10643] usb 7-1: config 0 descriptor?? [ 1100.014674][T10643] usb 7-1: can't set config #0, error -71 [ 1100.097829][T10643] usb 7-1: USB disconnect, device number 5 [ 1102.311772][ T4313] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 1103.571186][ T4313] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1103.589634][ T4313] usb 5-1: config 0 has no interface number 0 [ 1103.596476][ T4313] usb 5-1: config 0 interface 41 has no altsetting 0 [ 1103.770797][ T4313] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1103.779905][ T4313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.800648][ T4313] usb 5-1: Product: syz [ 1103.804839][ T4313] usb 5-1: Manufacturer: syz [ 1103.809437][ T4313] usb 5-1: SerialNumber: syz [ 1103.832618][ T4313] usb 5-1: config 0 descriptor?? [ 1104.826469][ T4313] CoreChips: probe of 5-1:0.41 failed with error -71 [ 1104.836168][ T4313] usb 5-1: USB disconnect, device number 74 [ 1104.995060][T17474] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3975'. [ 1105.161990][T17474] device vlan2 entered promiscuous mode [ 1105.228421][T17474] device team0 entered promiscuous mode [ 1105.268297][T17474] device team_slave_0 entered promiscuous mode [ 1105.305216][T17474] device team_slave_1 entered promiscuous mode [ 1105.742560][T17483] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3979'. [ 1109.111045][T17517] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1111.504038][T17554] binder: 17552:17554 ioctl c018620b 0 returned -14 [ 1115.332746][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.339101][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.345707][ T4259] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1115.760883][ T4259] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1115.805059][ T4259] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1115.871977][ T4259] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1115.927811][ T4259] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1115.985239][ T4259] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1116.170980][ T4259] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1116.186029][ T4259] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1116.222254][ T4259] usb 3-1: Product: syz [ 1116.233954][ T4259] usb 3-1: Manufacturer: syz [ 1116.337592][ T4259] cdc_wdm 3-1:1.0: skipping garbage [ 1116.460599][ T4259] cdc_wdm 3-1:1.0: skipping garbage [ 1116.528540][ T4259] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1116.528609][ T4259] cdc_wdm 3-1:1.0: Unknown control protocol [ 1116.932299][T10645] usb 3-1: USB disconnect, device number 81 [ 1116.940944][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1116.948344][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1116.954432][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1120.221261][T17630] overlayfs: failed to resolve './file2': -2 [ 1120.232918][T17620] team0: Port device team_slave_0 removed [ 1120.418430][T17630] Can't find ip_set type bitmap:ip [ 1120.454201][ T2426] pvrusb2: request_firmware fatal error with code=-110 [ 1120.574013][ T2426] pvrusb2: Failure uploading firmware1 [ 1120.579538][ T2426] pvrusb2: Device initialization was not successful. [ 1120.587647][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1120.598728][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1120.614298][ T21] pvrusb2: Device being rendered inoperable [ 1121.200778][ T21] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1121.577982][ T21] usb 1-1: device descriptor read/64, error -71 [ 1121.870762][ T21] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1122.460638][ T4313] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1122.891934][ T4313] usb 7-1: Using ep0 maxpacket: 16 [ 1123.134100][ T21] usb 1-1: device descriptor read/64, error -71 [ 1123.291022][ T21] usb usb1-port1: attempt power cycle [ 1123.500800][ T4313] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 1123.509894][ T4313] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.540710][T10645] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1123.616369][ T4313] usb 7-1: Product: syz [ 1123.629492][ T4313] usb 7-1: Manufacturer: syz [ 1123.650730][ T4313] usb 7-1: SerialNumber: syz [ 1123.662393][ T4313] usb 7-1: config 0 descriptor?? [ 1123.690703][ T4313] usb 7-1: can't set config #0, error -71 [ 1123.700942][ T4313] usb 7-1: USB disconnect, device number 6 [ 1123.730650][T10645] usb 6-1: device descriptor read/64, error -71 [ 1124.026452][ T26] audit: type=1326 audit(1769313001.236:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17664 comm="syz.0.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56fdd04cb9 code=0x7ffc0000 [ 1124.120742][T10645] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1124.620780][T10645] usb 6-1: device descriptor read/64, error -71 [ 1124.809996][T10645] usb usb6-port1: attempt power cycle [ 1124.815698][ T26] audit: type=1326 audit(1769313001.246:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17664 comm="syz.0.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f56fdd04cb9 code=0x7ffc0000 [ 1125.091785][ T26] audit: type=1326 audit(1769313001.246:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17664 comm="syz.0.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56fdd04cb9 code=0x7ffc0000 [ 1125.114314][ T26] audit: type=1326 audit(1769313001.246:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17664 comm="syz.0.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f56fdd04cb9 code=0x7ffc0000 [ 1125.220659][T10645] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1125.397259][ T26] audit: type=1326 audit(1769313001.246:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17664 comm="syz.0.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56fdd04cb9 code=0x7ffc0000 [ 1125.440540][T10645] usb 6-1: device descriptor read/8, error -71 [ 1126.224763][T17677] block device autoloading is deprecated and will be removed. [ 1126.557018][ T26] audit: type=1326 audit(1769313001.246:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17664 comm="syz.0.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f56fdd04cb9 code=0x7ffc0000 [ 1126.730717][ T26] audit: type=1326 audit(1769313001.246:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17664 comm="syz.0.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56fdd04cb9 code=0x7ffc0000 [ 1126.791273][ T26] audit: type=1326 audit(1769313001.256:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17664 comm="syz.0.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f56fdd04cb9 code=0x7ffc0000 [ 1127.180913][ T21] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1127.648376][ T26] audit: type=1326 audit(1769313001.256:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17664 comm="syz.0.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56fdd04cb9 code=0x7ffc0000 [ 1127.686466][ T26] audit: type=1326 audit(1769313001.256:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17664 comm="syz.0.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f56fdd04cb9 code=0x7ffc0000 [ 1127.788315][ T21] usb 3-1: device descriptor read/64, error -71 [ 1128.070759][ T21] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1128.290780][ T21] usb 3-1: device descriptor read/64, error -71 [ 1128.420927][ T21] usb usb3-port1: attempt power cycle [ 1128.830675][ T21] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1128.940882][ T21] usb 3-1: device descriptor read/8, error -71 [ 1129.710695][ T21] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1129.990683][ T21] usb 3-1: device not accepting address 85, error -71 [ 1130.018115][ T21] usb usb3-port1: unable to enumerate USB device [ 1131.011468][ T21] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1131.320692][ T21] usb 6-1: Using ep0 maxpacket: 16 [ 1132.100876][ T21] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1132.111801][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.260411][ T21] usb 6-1: Product: syz [ 1132.264926][ T21] usb 6-1: Manufacturer: syz [ 1132.269549][ T21] usb 6-1: SerialNumber: syz [ 1132.282942][ T21] r8152-cfgselector 6-1: config 0 descriptor?? [ 1133.240789][ T21] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1133.750811][ T21] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1133.763625][ T21] r8152-cfgselector 6-1: bad CDC descriptors [ 1134.720707][ T21] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1134.812132][ T21] r8152-cfgselector 6-1: USB disconnect, device number 19 [ 1135.130584][T17775] ------------[ cut here ]------------ [ 1135.137115][T17775] WARNING: CPU: 0 PID: 17775 at include/linux/fs.h:532 hugetlb_split+0x237/0x2a0 [ 1135.156551][T17775] Modules linked in: [ 1135.160597][T17775] CPU: 0 PID: 17775 Comm: syz.2.4053 Not tainted syzkaller #0 [ 1135.174572][T17775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1135.190589][T17775] RIP: 0010:hugetlb_split+0x237/0x2a0 [ 1135.197797][T17775] Code: bf ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7a e8 e5 b3 bf ff 0f 0b e9 62 fe ff ff e8 d9 b3 bf ff <0f> 0b e9 2d ff ff ff 48 c7 c1 44 0c 8a 8d 80 e1 07 80 c1 03 38 c1 [ 1135.218405][T17775] RSP: 0018:ffffc9000320fa80 EFLAGS: 00010287 [ 1135.234562][T17775] RAX: ffffffff81b96bc7 RBX: 0000200000000000 RCX: 0000000000080000 [ 1135.249339][T17775] RDX: ffffc90011c35000 RSI: 0000000000000b26 RDI: 0000000000000b27 [ 1135.266152][T17775] RBP: 0000000000000000 R08: ffff88802bbfe9bf R09: 1ffff1100577fd37 [ 1135.275426][T17775] R10: dffffc0000000000 R11: ffffed100577fd38 R12: ffff8880749276d0 [ 1135.290346][T17775] R13: dffffc0000000000 R14: ffff888074927630 R15: ffff88801fadbd40 [ 1135.300580][T17775] FS: 00007f3c67eed6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 1135.310051][T17775] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1135.317810][T17775] CR2: 000000110c2bebc6 CR3: 00000000651aa000 CR4: 00000000003506f0 [ 1135.327657][T17775] Call Trace: [ 1135.331876][T17775] [ 1135.337200][T17775] __vma_adjust+0x2b6/0x1c10 [ 1135.345435][T17775] ? rcu_lock_acquire+0x30/0x30 [ 1135.353676][T17775] ? memset+0x1e/0x40 [ 1135.361790][T17775] __split_vma+0x34b/0x410 [ 1135.370035][T17775] __do_munmap+0x383/0xdf0 [ 1135.379757][T17775] mmap_region+0x8b4/0x1650 [ 1135.388767][T17775] ? bpf_lsm_mmap_addr+0x5/0x10 [ 1135.395514][T17775] do_mmap+0x819/0xe90 [ 1135.406435][T17775] __se_sys_remap_file_pages+0x4ce/0x670 [ 1135.414529][T17775] ? syscall_enter_from_user_mode+0x21/0x70 [ 1135.421449][T17775] do_syscall_64+0x4c/0xa0 [ 1135.428401][T17775] ? clear_bhb_loop+0x30/0x80 [ 1135.433545][T17775] ? clear_bhb_loop+0x30/0x80 [ 1135.440941][T17775] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1135.453617][T17775] RIP: 0033:0x7f3c69cd3cb9 [ 1135.461845][T17775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1135.485675][T17775] RSP: 002b:00007f3c67eed028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 1135.495443][T17775] RAX: ffffffffffffffda RBX: 00007f3c69f4f180 RCX: 00007f3c69cd3cb9 [ 1135.504957][T17775] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000800000 [ 1135.513670][T17775] RBP: 00007f3c69d41bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1135.524159][T17775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1135.532268][T17775] R13: 00007f3c69f4f218 R14: 00007f3c69f4f180 R15: 00007ffc295db9a8 [ 1135.540935][T17775] [ 1135.544819][T17775] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1135.552120][T17775] CPU: 0 PID: 17775 Comm: syz.2.4053 Not tainted syzkaller #0 [ 1135.559607][T17775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1135.569803][T17775] Call Trace: [ 1135.573117][T17775] [ 1135.576057][T17775] dump_stack_lvl+0x188/0x250 [ 1135.580742][T17775] ? show_regs_print_info+0x20/0x20 [ 1135.585956][T17775] ? load_image+0x400/0x400 [ 1135.590498][T17775] panic+0x2e5/0x810 [ 1135.594453][T17775] ? bpf_jit_dump+0xd0/0xd0 [ 1135.598999][T17775] ? hugetlb_split+0x237/0x2a0 [ 1135.603816][T17775] __warn+0x248/0x2b0 [ 1135.607812][T17775] ? hugetlb_split+0x237/0x2a0 [ 1135.612583][T17775] report_bug+0x1b7/0x2e0 [ 1135.616920][T17775] handle_bug+0x3a/0x70 [ 1135.621077][T17775] exc_invalid_op+0x16/0x40 [ 1135.625603][T17775] asm_exc_invalid_op+0x16/0x20 [ 1135.630461][T17775] RIP: 0010:hugetlb_split+0x237/0x2a0 [ 1135.635850][T17775] Code: bf ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7a e8 e5 b3 bf ff 0f 0b e9 62 fe ff ff e8 d9 b3 bf ff <0f> 0b e9 2d ff ff ff 48 c7 c1 44 0c 8a 8d 80 e1 07 80 c1 03 38 c1 [ 1135.655489][T17775] RSP: 0018:ffffc9000320fa80 EFLAGS: 00010287 [ 1135.661602][T17775] RAX: ffffffff81b96bc7 RBX: 0000200000000000 RCX: 0000000000080000 [ 1135.669606][T17775] RDX: ffffc90011c35000 RSI: 0000000000000b26 RDI: 0000000000000b27 [ 1135.677583][T17775] RBP: 0000000000000000 R08: ffff88802bbfe9bf R09: 1ffff1100577fd37 [ 1135.685593][T17775] R10: dffffc0000000000 R11: ffffed100577fd38 R12: ffff8880749276d0 [ 1135.693568][T17775] R13: dffffc0000000000 R14: ffff888074927630 R15: ffff88801fadbd40 [ 1135.701569][T17775] ? hugetlb_split+0x237/0x2a0 [ 1135.706341][T17775] __vma_adjust+0x2b6/0x1c10 [ 1135.710932][T17775] ? rcu_lock_acquire+0x30/0x30 [ 1135.715796][T17775] ? memset+0x1e/0x40 [ 1135.719788][T17775] __split_vma+0x34b/0x410 [ 1135.724209][T17775] __do_munmap+0x383/0xdf0 [ 1135.728631][T17775] mmap_region+0x8b4/0x1650 [ 1135.733158][T17775] ? bpf_lsm_mmap_addr+0x5/0x10 [ 1135.738034][T17775] do_mmap+0x819/0xe90 [ 1135.742150][T17775] __se_sys_remap_file_pages+0x4ce/0x670 [ 1135.747786][T17775] ? syscall_enter_from_user_mode+0x21/0x70 [ 1135.753694][T17775] do_syscall_64+0x4c/0xa0 [ 1135.758127][T17775] ? clear_bhb_loop+0x30/0x80 [ 1135.762802][T17775] ? clear_bhb_loop+0x30/0x80 [ 1135.767485][T17775] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1135.773403][T17775] RIP: 0033:0x7f3c69cd3cb9 [ 1135.777840][T17775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1135.797448][T17775] RSP: 002b:00007f3c67eed028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 1135.805869][T17775] RAX: ffffffffffffffda RBX: 00007f3c69f4f180 RCX: 00007f3c69cd3cb9 [ 1135.813854][T17775] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000800000 [ 1135.821833][T17775] RBP: 00007f3c69d41bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1135.829827][T17775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1135.837937][T17775] R13: 00007f3c69f4f218 R14: 00007f3c69f4f180 R15: 00007ffc295db9a8 [ 1135.846065][T17775] [ 1135.849327][T17775] Kernel Offset: disabled [ 1135.857714][T17775] Rebooting in 86400 seconds..