last executing test programs: 1m6.908089024s ago: executing program 3 (id=2570): syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="04df0a02deb70000000000007148537b9b2adde4c76296c45bd14200080000000000009d8220f9ef"], 0xd) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x3, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_req={{0x17, 0x1, 0x16}, {0x4, 0x7, 0x1, 0xecd, [0x2, 0x7, 0x7, 0x2, 0x0, 0x6, 0x7]}}}}, 0x23) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) 1m5.712809018s ago: executing program 3 (id=2576): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000040000000560000022500000019000a001000000007fd17e5ffff080004000000000000000a", 0x39}], 0x1) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000500)='./file0/file0/../file0\x00', 0x0, 0x800020, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x3f7, 0x8, 0x70bd25, 0x25dfdbfc, {0x7, 0x10, './file0', './file0/../file0'}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x50) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r4, @ANYBLOB="1c002c8004"], 0x38}}, 0x0) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x13, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@cipso={0x86, 0x30, 0x0, [{0x0, 0x4, "34a6"}, {0x0, 0xf, "e39335900f115624170e15dad0"}, {0x0, 0x11, "4f1347dfaaca82c253d084b7a02d70"}, {0x0, 0x6, "533dbecc"}]}, @noop, @timestamp={0x44, 0x4}]}}}}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x208e24b) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x101}, &(0x7f00000002c0)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m2.13208438s ago: executing program 3 (id=2608): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 1m1.675024733s ago: executing program 3 (id=2610): syz_io_uring_setup(0x0, &(0x7f00000003c0), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="880000000314010000000000400000000900020073797a3200000000080041007278650014003300766c616e3000000000000000000000000900020073797a3000000000080041007369770014003300776c616e3000000000000000000000000900020073797a3200000000080041007369770014003300697000a02ecc5f13cc5f3eaa93fac90a5efed27e23cbdd734d76c6918889b096b9187ee1"], 0x88}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 31.253477707s ago: executing program 3 (id=2611): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) dup(r0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2286, 0xfffffffffffffffc) r2 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) 31.013141677s ago: executing program 3 (id=2692): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000180)={0x0, 0x2, 0x3}) 16.243881763s ago: executing program 0 (id=2730): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 12.855178516s ago: executing program 0 (id=2739): socket$inet_icmp(0x2, 0x2, 0x1) mlockall(0x3) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0) 8.948666866s ago: executing program 0 (id=2746): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xb}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f00000006c0)=ANY=[@ANYRES8=r2, @ANYRES32=r2, @ANYBLOB="000032914016a5d7e437dc34bc4dee415ba400e5ffffffffb5ef000000000000850000000c000000b7000000000000b50000dc00c50000f5c7cc253434c174c1e196e72821054a13bc3d6fc4310abf865aebe4716eca426e30674297e6730af6f59271a0"], &(0x7f0000000980)='GPL\x00', 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b703000000006c288500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setresuid(0x0, 0xffffffffffffffff, 0xee00) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000940), &(0x7f0000000a40)=0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) prlimit64(r7, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x6e}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/16, 0x10}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 7.780448006s ago: executing program 0 (id=2750): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000040000000560000022500000019000a001000000007fd17e5ffff080004000000000000000a", 0x39}], 0x1) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000500)='./file0/file0/../file0\x00', 0x0, 0x800020, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x3f7, 0x8, 0x70bd25, 0x25dfdbfc, {0x7, 0x10, './file0', './file0/../file0'}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x50) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r4, @ANYBLOB="1c002c8004"], 0x38}}, 0x0) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x13, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@cipso={0x86, 0x31, 0x0, [{0x0, 0x5, "34a6ca"}, {0x0, 0xf, "e39335900f115624170e15dad0"}, {0x0, 0x11, "4f1347dfaaca82c253d084b7a02d70"}, {0x0, 0x6, "533dbecc"}]}, @noop, @timestamp={0x44, 0x4}]}}}}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x101}, &(0x7f00000002c0)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 5.78857869s ago: executing program 1 (id=2755): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x25, 0x3, 0x0, [{@multicast1, 0x80}, {@multicast2, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@empty, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev}, {@multicast2}, {@rand_addr, 0x800}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x52b1}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.785367627s ago: executing program 0 (id=2756): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc0109058903"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0xffffff00, 0x0, 0x1, 0x1a, '\x00', r2, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000880)={r1, 0x7fff, 0x80000000000, 0x8}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@generic={&(0x7f00000008c0)='./file0\x00', 0x0, 0x8}, 0x18) pipe2$watch_queue(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', r2, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x48) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', r2, 0xffffffffffffffff, 0x5, 0x2}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_lsm={0x1d, 0x1c, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@generic={0xff, 0xc, 0x9, 0x7, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x465e}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}, @ldst={0x3, 0x0, 0x4, 0xc, 0x1, 0x100, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x9a41, 0x84, &(0x7f0000000740)=""/132, 0x40f00, 0xb2600e78eeef5a82, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f0000000800)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0xa, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[r4, r5, r7, r8, r9, r1, r10, r11], 0x0, 0x10, 0x8}, 0x90) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000140)=""/192}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x0, 0xec, 0x0, &(0x7f0000000540)="ec00ff0000000000000000000000f004798d95fc4dbb49d54339ed8d31c4e73c7718076c98bb8b27e072e2007152b720a0d3bbfeed25c4be8ed971b5601dc34383d66df5a49bc7a27ba101f67bdc428e7c93145ce3d8bc0ffcc74a7498e9630c36b12f7aa6235988df6be4e7912df90b262c6a72b2f2a88d6ae2abf6e1c4f87d6b900b33aea7dd0d94ec0079b35cbaa8c240dd589ba4dd961bcbb6b1fc3a6e62269010af5bf3c195701feb4063c6d1e3ba28d9ac7caf2cbd46d05c143d09b4193fe474b3f598f5918db02c493fc7c24388b46c8bbd80745c993deafb8a03810aec701ee24051e942915f13e1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r13 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r15 = socket$packet(0x11, 0x3, 0x300) bind$packet(r15, &(0x7f0000000180)={0x11, 0x0, r14, 0x1, 0x0, 0x6, @remote}, 0x14) r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r16, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x1a, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0x0, 0x5}}}, 0x24}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f00000003c0)={0x0, 0x0, 0x3b, {0x3b, 0x12, "4cadcc5adbd33000000000b262b159cefcff027dc4b792ee1fc22f0d8a5e97177eff7fecdf0d396ef28d07260dbebe572439d06a7b40e6e04c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 5.464235328s ago: executing program 4 (id=2758): ioprio_set$pid(0x3, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) fanotify_init(0x4, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003a, r1, 0x0) read$FUSE(r0, 0x0, 0x0) 5.336086912s ago: executing program 0 (id=2759): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xb}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f00000006c0)=ANY=[@ANYRES8=r2, @ANYRES32=r2, @ANYBLOB="000032914016a5d7e437dc34bc4dee415ba400e5ffffffffb5ef000000000000850000000c000000b7000000000000b50000dc00c50000f5c7cc253434c174c1e196e72821054a13bc3d6fc4310abf865aebe4716eca426e30674297e6730af6f59271a0"], &(0x7f0000000980)='GPL\x00', 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b703000000006c288500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setresuid(0x0, 0xffffffffffffffff, 0xee00) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000940), &(0x7f0000000a40)=0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) prlimit64(r7, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x6e}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/16, 0x10}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 5.308902059s ago: executing program 4 (id=2760): socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x15, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xff}}, 0x1c}}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x891c, &(0x7f0000000000)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, {0x2, 0x0, @multicast1}}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac00090400000107000009090585cf"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 4.961690153s ago: executing program 1 (id=2762): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4.837343053s ago: executing program 1 (id=2764): sched_setscheduler(0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000200)) 4.706081363s ago: executing program 1 (id=2765): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000040000000560000022500000019000a001000000007fd17e5ffff080004000000000000000a", 0x39}], 0x1) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000500)='./file0/file0/../file0\x00', 0x0, 0x800020, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x3f7, 0x8, 0x70bd25, 0x25dfdbfc, {0x7, 0x10, './file0', './file0/../file0'}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x50) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r4, @ANYBLOB="1c002c8004"], 0x38}}, 0x0) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x13, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@cipso={0x86, 0x31, 0x0, [{0x0, 0x5, "34a6ca"}, {0x0, 0xf, "e39335900f115624170e15dad0"}, {0x0, 0x11, "4f1347dfaaca82c253d084b7a02d70"}, {0x0, 0x6, "533dbecc"}]}, @noop, @timestamp={0x44, 0x4}]}}}}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x101}, &(0x7f00000002c0)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.670620714s ago: executing program 2 (id=2767): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.543808071s ago: executing program 4 (id=2768): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc0109058903"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0xffffff00, 0x0, 0x1, 0x1a, '\x00', r2, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000880)={r1, 0x7fff, 0x80000000000, 0x8}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@generic={&(0x7f00000008c0)='./file0\x00', 0x0, 0x8}, 0x18) pipe2$watch_queue(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', r2, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x48) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', r2, 0xffffffffffffffff, 0x5, 0x2}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_lsm={0x1d, 0x1c, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@generic={0xff, 0xc, 0x9, 0x7, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x465e}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}, @ldst={0x3, 0x0, 0x4, 0xc, 0x1, 0x100, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x9a41, 0x84, &(0x7f0000000740)=""/132, 0x40f00, 0xb2600e78eeef5a82, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f0000000800)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0xa, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[r4, r5, r7, r8, r9, r1, r10, r11], 0x0, 0x10, 0x8}, 0x90) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000140)=""/192}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x0, 0xec, 0x0, &(0x7f0000000540)="ec00ff0000000000000000000000f004798d95fc4dbb49d54339ed8d31c4e73c7718076c98bb8b27e072e2007152b720a0d3bbfeed25c4be8ed971b5601dc34383d66df5a49bc7a27ba101f67bdc428e7c93145ce3d8bc0ffcc74a7498e9630c36b12f7aa6235988df6be4e7912df90b262c6a72b2f2a88d6ae2abf6e1c4f87d6b900b33aea7dd0d94ec0079b35cbaa8c240dd589ba4dd961bcbb6b1fc3a6e62269010af5bf3c195701feb4063c6d1e3ba28d9ac7caf2cbd46d05c143d09b4193fe474b3f598f5918db02c493fc7c24388b46c8bbd80745c993deafb8a03810aec701ee24051e942915f13e1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r13 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r15 = socket$packet(0x11, 0x3, 0x300) bind$packet(r15, &(0x7f0000000180)={0x11, 0x0, r14, 0x1, 0x0, 0x6, @remote}, 0x14) r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r16, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x1a, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0x0, 0x5}}}, 0x24}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f00000003c0)={0x0, 0x0, 0x3b, {0x3b, 0x12, "4cadcc5adbd33000000000b262b159cefcff027dc4b792ee1fc22f0d8a5e97177eff7fecdf0d396ef28d07260dbebe572439d06a7b40e6e04c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.503059215s ago: executing program 2 (id=2769): ioprio_set$pid(0x3, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x4, 0x0) fanotify_mark(r2, 0x0, 0x4800003a, r1, 0x0) read$FUSE(r0, 0x0, 0x0) 3.352554487s ago: executing program 2 (id=2770): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x25, 0x3, 0x0, [{@multicast1, 0x80}, {@multicast2, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@empty, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev}, {@multicast2}, {@rand_addr, 0x800}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x52b1}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.677072048s ago: executing program 2 (id=2771): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 2.604236858s ago: executing program 1 (id=2772): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.456158959s ago: executing program 2 (id=2773): sched_setscheduler(0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000200)) 2.344789188s ago: executing program 2 (id=2774): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r4) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$SIOCSIFHWADDR(r4, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\\ \x00'}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='stat\x00') preadv(r5, &(0x7f0000000140)=[{&(0x7f0000001140)=""/190, 0xbe}], 0x1, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000480)="6f1f01bc069be4f1bc39943a2c637108a2a7e7fddbdcf0336786633ad26a3b08775a0cb58aceefc91646b81a9c679c1fff22214fc56e4f4960b0cfebe96fb6896f1431e3b42c460df9b3dbe0470dad955d86813280d587fa9ab06a3733bc115dc285b94f8cd79774bac0cf3b308a371154773aa01fc58fac403fb3275bce59fe4e8836", 0x83}], 0x1) 1.74300475s ago: executing program 1 (id=2775): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001dc0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001e40)={{0x14}, [@NFT_MSG_DELTABLE={0x138, 0x2, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_USERDATA={0x9, 0x6, "ffd8047fd0"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0xc9, 0x6, "a4fb07f0f80319fd73c242e578c5cd1704ed8b1f32f7149c0b421eb4568004cc4edbd013f6e018cb70c0ee596ec6d9344d2806d5fb27ba1793b226fa5392064185b89a11f487eb1e1d44761c5a2e90a2224840f0d1367fe53a33846499d6bcb6a601467b2fe42f052023bed039e72a0da2a060c21df5dbb7802324eeb5d58f5313db1eb990ddfd7025dca76e3b9250d0b0cbe84076f870838670ea5bc0971f90cc6febef99634bd0b0b7f798189559848ac3d21a1baf787d99b93d4d47f7bf1371a2fceac6"}]}, @NFT_MSG_DELSETELEM={0x64, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}]}], {0x14}}, 0x1c4}}, 0x0) 1.33068384s ago: executing program 4 (id=2777): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.204726956s ago: executing program 4 (id=2778): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000180)={0x0, 0x2, 0x3}) 0s ago: executing program 4 (id=2779): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', 0x0}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000040), 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b7080000000000000301090292"], 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0x0) memfd_create(&(0x7f0000000040)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9xp#\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06\xfd\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee]\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96Z\xf7\x06\xbe\xc9', 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x22042, 0x0) r2 = creat(0x0, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) recvmmsg(r2, 0x0, 0x0, 0x1, 0x0) getpid() write$tun(r1, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1], 0x15) kernel console output (not intermixed with test programs): 3089] ip6gretap0 speed is unknown, defaulting to 1000 [ 587.546911][T13124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2404'. [ 587.589838][T13123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2404'. [ 587.676430][ T2806] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.744007][T13128] ip6gretap0 speed is unknown, defaulting to 1000 [ 587.850317][ T2806] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.983235][ T5096] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 587.999127][ T5096] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 588.011689][ T5096] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 588.021336][ T5096] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 588.040384][ T5096] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 588.053164][ T5096] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 588.070781][ T2806] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.369859][ T2806] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.632851][T13136] ip6gretap0 speed is unknown, defaulting to 1000 [ 588.945133][ T5141] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 589.329273][ T5141] usb 3-1: Using ep0 maxpacket: 8 [ 589.352926][ T5141] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 589.396827][ T5141] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 589.441438][ T5141] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 589.490179][ T5141] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 589.554842][ T5141] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 589.620473][ T5141] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 589.654130][ T5141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.699259][ T2806] bridge_slave_1: left allmulticast mode [ 589.727846][ T2806] bridge_slave_1: left promiscuous mode [ 589.751616][ T2806] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.797719][ T2806] bridge_slave_0: left allmulticast mode [ 589.841262][ T2806] bridge_slave_0: left promiscuous mode [ 589.850851][ T2806] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.044599][ T5141] usb 3-1: usb_control_msg returned -32 [ 590.090560][ T5141] usbtmc 3-1:16.0: can't read capabilities [ 590.226408][T13150] xt_CT: No such helper "netbios-ns" [ 590.281133][ T55] Bluetooth: hci3: command tx timeout [ 590.336261][ T5141] usb 3-1: USB disconnect, device number 60 [ 590.894469][ T2806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.920411][ T2806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.935936][ T2806] bond0 (unregistering): Released all slaves [ 591.238392][T13170] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2416'. [ 591.607978][ T5146] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 591.881996][ T5146] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 64 [ 592.153747][ T5146] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 592.206030][ T5146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.266223][ T5146] usb 2-1: config 0 descriptor?? [ 592.308934][ T5146] hub 2-1:0.0: USB hub found [ 592.494951][ T55] Bluetooth: hci3: command tx timeout [ 592.525030][ T5146] hub 2-1:0.0: 1 port detected [ 592.627883][ T2806] hsr_slave_0: left promiscuous mode [ 592.675780][ T2806] hsr_slave_1: left promiscuous mode [ 592.703860][ T2806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 592.732986][ T2806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.761511][ T29] audit: type=1800 audit(1719535850.800:266): pid=13170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2416" name="bus" dev="sda1" ino=2027 res=0 errno=0 [ 592.785520][ T5146] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 592.786374][ T2806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 592.803095][ T5146] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 592.835386][ T5146] usbhid 2-1:0.0: can't add hid device: -71 [ 592.836230][ T2806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.855699][ T5146] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 592.923270][ T5146] usb 2-1: USB disconnect, device number 63 [ 592.928215][ T2806] veth0_macvtap: left promiscuous mode [ 592.953569][ T2806] veth1_vlan: left promiscuous mode [ 592.973501][ T2806] veth0_vlan: left promiscuous mode [ 594.239014][ T2806] team0 (unregistering): Port device team_slave_1 removed [ 594.339015][ T29] audit: type=1326 audit(1719535852.268:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13199 comm="syz.2.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067af75b29 code=0x7ffc0000 [ 594.390494][ T2806] team0 (unregistering): Port device team_slave_0 removed [ 594.418159][ T29] audit: type=1326 audit(1719535852.268:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13199 comm="syz.2.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067af75b29 code=0x7ffc0000 [ 594.471606][ T29] audit: type=1326 audit(1719535852.268:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13199 comm="syz.2.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f067af75b29 code=0x7ffc0000 [ 594.529683][ T29] audit: type=1326 audit(1719535852.268:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13199 comm="syz.2.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067af75b29 code=0x7ffc0000 [ 594.585472][ T29] audit: type=1326 audit(1719535852.268:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13199 comm="syz.2.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f067af75b29 code=0x7ffc0000 [ 594.717496][ T55] Bluetooth: hci3: command tx timeout [ 594.920573][ T59] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 595.144568][ T59] usb 2-1: Using ep0 maxpacket: 16 [ 595.165323][ T59] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.177210][ T59] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 595.186226][ T59] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 595.196558][ T59] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.214008][ T59] usb 2-1: config 0 descriptor?? [ 595.380266][T13136] chnl_net:caif_netlink_parms(): no params data found [ 595.843321][T13136] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.860994][T13136] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.882859][T13136] bridge_slave_0: entered allmulticast mode [ 595.921567][T13136] bridge_slave_0: entered promiscuous mode [ 595.958540][ T5145] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 595.967569][T13136] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.983997][T13136] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.011304][T13136] bridge_slave_1: entered allmulticast mode [ 596.028373][T13136] bridge_slave_1: entered promiscuous mode [ 596.161048][ T5145] usb 5-1: Using ep0 maxpacket: 8 [ 596.178417][ T5145] usb 5-1: no configurations [ 596.188776][T13136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.204183][ T5145] usb 5-1: can't read configurations, error -22 [ 596.243409][T13136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 596.385468][ T5145] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 596.657732][T13136] team0: Port device team_slave_0 added [ 596.704064][T13136] team0: Port device team_slave_1 added [ 596.753675][ T5145] usb 5-1: Using ep0 maxpacket: 8 [ 596.937288][T13136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.944798][ T55] Bluetooth: hci3: command tx timeout [ 596.958248][T13136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.992698][T13136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.993247][ T5145] usb 5-1: no configurations [ 597.020535][ T5145] usb 5-1: can't read configurations, error -22 [ 597.030917][ T5145] usb usb5-port1: attempt power cycle [ 597.033530][T13136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.049322][T13136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.114255][T13136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.873025][ T5146] usb 2-1: USB disconnect, device number 64 [ 597.999148][T13136] hsr_slave_0: entered promiscuous mode [ 598.024741][T13136] hsr_slave_1: entered promiscuous mode [ 598.062149][T13136] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 598.094204][T13136] Cannot create hsr debugfs directory [ 598.202551][ T929] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 598.220131][ T29] audit: type=1326 audit(1719535855.888:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13263 comm="syz.2.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067af75b29 code=0x7ffc0000 [ 598.247709][ T29] audit: type=1326 audit(1719535855.888:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13263 comm="syz.2.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067af75b29 code=0x7ffc0000 [ 598.277865][ T5145] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 598.290647][ T29] audit: type=1326 audit(1719535855.888:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13263 comm="syz.2.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f067af75b29 code=0x7ffc0000 [ 598.320317][ T29] audit: type=1326 audit(1719535855.888:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13263 comm="syz.2.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067af75b29 code=0x7ffc0000 [ 598.321455][ T5145] usb 5-1: Using ep0 maxpacket: 8 [ 598.379718][ T29] audit: type=1326 audit(1719535855.888:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13263 comm="syz.2.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067af75b29 code=0x7ffc0000 [ 598.404135][ T5145] usb 5-1: no configurations [ 598.417627][ T5145] usb 5-1: can't read configurations, error -22 [ 598.421364][ T29] audit: type=1326 audit(1719535855.888:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13263 comm="syz.2.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f067af75b29 code=0x7ffc0000 [ 598.496163][ T929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.507528][ T929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.544594][ T929] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 598.553710][ T929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.577196][ T5145] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 598.603588][ T929] usb 4-1: config 0 descriptor?? [ 598.641155][ T5145] usb 5-1: Using ep0 maxpacket: 8 [ 598.651915][ T5145] usb 5-1: no configurations [ 598.656561][ T5145] usb 5-1: can't read configurations, error -22 [ 598.684280][ T5145] usb usb5-port1: unable to enumerate USB device [ 599.868198][T13136] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 599.869789][ T929] usb 4-1: language id specifier not provided by device, defaulting to English [ 599.891366][T13136] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 599.943252][T13136] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 599.982131][T13136] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 600.020824][ T5141] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 600.113489][ T929] uclogic 0003:256C:006D.001F: failed retrieving Huion firmware version: -71 [ 600.139846][ T929] uclogic 0003:256C:006D.001F: failed probing parameters: -71 [ 600.147490][ T929] uclogic 0003:256C:006D.001F: probe with driver uclogic failed with error -71 [ 600.187117][ T929] usb 4-1: USB disconnect, device number 49 [ 600.248890][ T5141] usb 3-1: config 0 has an invalid interface number: 48 but max is 1 [ 600.268392][ T5141] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 600.281958][ T5141] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.308971][ T5141] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 600.325261][ T5141] usb 3-1: config 0 has no interface number 0 [ 600.333281][ T5141] usb 3-1: config 0 interface 48 altsetting 192 has an invalid endpoint descriptor of length 5, skipping [ 600.443805][T13136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.460352][ T5141] usb 3-1: config 0 interface 48 altsetting 192 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 600.474740][ T5141] usb 3-1: config 0 interface 48 has no altsetting 0 [ 600.506987][ T5141] usb 3-1: New USB device found, idVendor=0499, idProduct=103b, bcdDevice=54.6e [ 600.533421][ T5141] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.546945][ T5141] usb 3-1: Product: syz [ 600.551161][ T5141] usb 3-1: Manufacturer: syz [ 600.620803][T13136] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.662688][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.669970][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.734869][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.742156][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.792280][ T5141] usb 3-1: SerialNumber: syz [ 600.807129][ T5141] usb 3-1: config 0 descriptor?? [ 601.767691][ T5141] snd-usb-audio 3-1:0.48: probe with driver snd-usb-audio failed with error -2 [ 601.802181][ T5141] usb 3-1: USB disconnect, device number 61 [ 602.243819][ T5141] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 602.441232][T13136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.468329][ T5141] usb 3-1: Using ep0 maxpacket: 8 [ 602.483006][ T5141] usb 3-1: no configurations [ 602.500441][ T5141] usb 3-1: can't read configurations, error -22 [ 602.694786][ T5141] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 602.749743][ T29] audit: type=1326 audit(1719535860.135:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13346 comm="syz.1.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d6175b29 code=0x7ffc0000 [ 602.831517][ T29] audit: type=1326 audit(1719535860.135:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13346 comm="syz.1.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f41d6175b29 code=0x7ffc0000 [ 602.895787][ T29] audit: type=1326 audit(1719535860.135:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13346 comm="syz.1.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d6175b29 code=0x7ffc0000 [ 602.920083][ T5141] usb 3-1: Using ep0 maxpacket: 8 [ 602.956167][T13136] veth0_vlan: entered promiscuous mode [ 602.963288][ T5141] usb 3-1: no configurations [ 602.970874][ T5141] usb 3-1: can't read configurations, error -22 [ 602.985974][ T29] audit: type=1326 audit(1719535860.135:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13346 comm="syz.1.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f41d6175b29 code=0x7ffc0000 [ 603.010099][ T5141] usb usb3-port1: attempt power cycle [ 603.092517][T13136] veth1_vlan: entered promiscuous mode [ 603.247220][T13136] veth0_macvtap: entered promiscuous mode [ 603.279556][T13136] veth1_macvtap: entered promiscuous mode [ 603.431517][T13136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.451668][ T5141] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 603.455790][T13136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.483819][T13136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.496734][ T5141] usb 3-1: Using ep0 maxpacket: 8 [ 603.515078][ T5141] usb 3-1: no configurations [ 603.515647][T13136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.526729][ T5141] usb 3-1: can't read configurations, error -22 [ 603.580931][T13136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.624722][T13136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.665323][T13136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.679925][T13136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.729717][ T5141] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 603.795702][ T5141] usb 3-1: Using ep0 maxpacket: 8 [ 603.806635][ T5141] usb 3-1: no configurations [ 603.811276][ T5141] usb 3-1: can't read configurations, error -22 [ 603.843933][T13136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.872178][ T5141] usb usb3-port1: unable to enumerate USB device [ 603.903645][ T5244] udevd[5244]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.48/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 604.006875][T13136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.071646][T13136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.109696][T13136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.142558][T13136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.170847][T13136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.220945][T13136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.263107][T13136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.294149][T13136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.315397][T13136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 604.357734][T13136] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.402613][T13136] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.422529][T13136] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.432917][T13136] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.662497][T12440] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 604.805981][T13398] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2462'. [ 604.828116][ T2782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.851271][ T2782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.888045][T12440] usb 4-1: config 0 has an invalid interface number: 48 but max is 1 [ 604.901525][T12440] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 604.933300][T12440] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 604.955928][T12440] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 604.968973][ T2816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.986327][T12440] usb 4-1: config 0 has no interface number 0 [ 604.989589][ T2816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.001244][T12440] usb 4-1: config 0 interface 48 altsetting 192 has an invalid endpoint descriptor of length 5, skipping [ 605.054711][T12440] usb 4-1: config 0 interface 48 altsetting 192 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 605.152305][T12440] usb 4-1: config 0 interface 48 has no altsetting 0 [ 605.162523][T12440] usb 4-1: New USB device found, idVendor=0499, idProduct=103b, bcdDevice=54.6e [ 605.182005][T12440] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.194765][T12440] usb 4-1: Product: syz [ 605.198990][T12440] usb 4-1: Manufacturer: syz [ 605.213648][T12440] usb 4-1: SerialNumber: syz [ 605.216511][ T929] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 605.241402][T12440] usb 4-1: config 0 descriptor?? [ 605.661521][ T29] audit: type=1326 audit(1719535862.857:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13418 comm="syz.0.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302e975b29 code=0x7ffc0000 [ 605.710660][ T929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 64 [ 605.723605][T12440] snd-usb-audio 4-1:0.48: probe with driver snd-usb-audio failed with error -2 [ 605.736483][ T929] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 605.756034][ T29] audit: type=1326 audit(1719535862.857:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13418 comm="syz.0.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f302e975b29 code=0x7ffc0000 [ 605.772322][T12440] usb 4-1: USB disconnect, device number 50 [ 605.784355][ T929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.788876][ T929] usb 5-1: config 0 descriptor?? [ 605.809730][ T929] hub 5-1:0.0: USB hub found [ 605.821901][ T29] audit: type=1326 audit(1719535862.857:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13418 comm="syz.0.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302e975b29 code=0x7ffc0000 [ 605.864501][ T29] audit: type=1326 audit(1719535862.857:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13418 comm="syz.0.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f302e975b29 code=0x7ffc0000 [ 606.023940][ T929] hub 5-1:0.0: 1 port detected [ 606.105630][ T5140] udevd[5140]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.48/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 606.276025][ T29] audit: type=1800 audit(1719535863.427:286): pid=13398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2462" name="bus" dev="sda1" ino=2032 res=0 errno=0 [ 606.424365][ T929] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 606.461089][ T929] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 606.605094][T13436] syz.0.2473(13436): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 606.739615][ T929] usbhid 5-1:0.0: can't add hid device: -71 [ 606.746547][ T929] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 606.790283][ T929] usb 5-1: USB disconnect, device number 48 [ 607.375298][ T5141] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 607.599491][ T5141] usb 4-1: Using ep0 maxpacket: 32 [ 607.611981][ T5141] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.645282][ T5141] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.682198][ T5141] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 607.714552][ T5141] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 607.747868][ T5141] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 607.760002][T13459] netlink: 'syz.2.2481': attribute type 1 has an invalid length. [ 607.767767][T13459] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2481'. [ 607.817370][ T5141] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 607.862380][ T5141] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 607.894217][ T5141] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.915309][ T5141] usb 4-1: Product: syz [ 607.919542][ T5141] usb 4-1: Manufacturer: syz [ 607.937716][ T5141] usb 4-1: SerialNumber: syz [ 608.196954][ T5141] cdc_ncm 4-1:1.0: bind() failure [ 608.225378][ T5141] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 608.295585][ T5141] cdc_ncm 4-1:1.1: bind() failure [ 608.327189][ T5141] usb 4-1: USB disconnect, device number 51 [ 608.339546][ T59] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 608.553701][ T59] usb 5-1: config 0 has an invalid interface number: 48 but max is 1 [ 608.590382][ T59] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 608.604975][ T59] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 608.619693][ T59] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 608.629721][ T59] usb 5-1: config 0 has no interface number 0 [ 608.641436][ T59] usb 5-1: config 0 interface 48 altsetting 192 has an invalid endpoint descriptor of length 5, skipping [ 608.653370][ T59] usb 5-1: config 0 interface 48 altsetting 192 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 608.677179][ T59] usb 5-1: config 0 interface 48 has no altsetting 0 [ 608.688317][ T59] usb 5-1: New USB device found, idVendor=0499, idProduct=103b, bcdDevice=54.6e [ 608.698139][ T59] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.706790][ T59] usb 5-1: Product: syz [ 608.711656][ T59] usb 5-1: Manufacturer: syz [ 608.716366][ T59] usb 5-1: SerialNumber: syz [ 608.739155][ T59] usb 5-1: config 0 descriptor?? [ 609.071600][T13471] input: syz1 as /devices/virtual/input/input24 [ 609.105243][ T59] snd-usb-audio 5-1:0.48: probe with driver snd-usb-audio failed with error -2 [ 609.167587][ T59] usb 5-1: USB disconnect, device number 49 [ 609.439451][ T5140] udevd[5140]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.48/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 609.577574][ T5144] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 609.684675][ T929] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 609.719621][T13490] netlink: 'syz.1.2492': attribute type 1 has an invalid length. [ 609.731280][T13490] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2492'. [ 609.798439][ T5144] usb 4-1: Using ep0 maxpacket: 16 [ 609.814771][ T5144] usb 4-1: config 50 has too many interfaces: 75, using maximum allowed: 32 [ 609.838725][ T5144] usb 4-1: config 50 contains an unexpected descriptor of type 0x2, skipping [ 609.852181][ T5144] usb 4-1: config 50 has an invalid descriptor of length 0, skipping remainder of the config [ 609.864065][ T5144] usb 4-1: config 50 has 0 interfaces, different from the descriptor's value: 75 [ 609.877299][ T5144] usb 4-1: New USB device found, idVendor=12d1, idProduct=c09d, bcdDevice=21.0d [ 609.887534][ T5144] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.889836][ T929] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.895619][ T5144] usb 4-1: Product: syz [ 609.911672][ T5144] usb 4-1: Manufacturer: syz [ 609.916393][ T5144] usb 4-1: SerialNumber: syz [ 609.930411][ T929] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 609.957979][ T929] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 609.986345][ T929] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 610.004864][ T929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.013084][ T929] usb 3-1: Product: syz [ 610.032117][ T929] usb 3-1: Manufacturer: syz [ 610.036775][ T929] usb 3-1: SerialNumber: syz [ 610.182886][ T5144] usb 4-1: USB disconnect, device number 52 [ 611.112236][T13515] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 611.215459][ T929] cdc_ncm 3-1:1.0: bind() failure [ 611.267593][ T929] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 611.299917][ T929] cdc_ncm 3-1:1.1: bind() failure [ 611.377936][T13519] input: syz1 as /devices/virtual/input/input25 [ 611.448233][ T929] usb 3-1: USB disconnect, device number 66 [ 611.672925][ T5145] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 611.710869][T13523] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 611.763807][T13525] 9pnet_fd: Insufficient options for proto=fd [ 611.889720][ T5145] usb 1-1: Using ep0 maxpacket: 8 [ 611.918224][ T5145] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 611.939337][ T5145] usb 1-1: can't read configurations, error -61 [ 612.134104][ T5145] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 613.543613][ T5145] usb 1-1: Using ep0 maxpacket: 8 [ 613.579570][ T5145] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 613.810874][ T5145] usb 1-1: can't read configurations, error -61 [ 613.817874][ T5145] usb usb1-port1: attempt power cycle [ 613.889261][ T29] audit: type=1800 audit(1719535870.565:287): pid=13552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2513" name="bus" dev="sda1" ino=2013 res=0 errno=0 [ 613.942624][ T29] audit: type=1800 audit(1719535870.565:288): pid=13552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2513" name="bus" dev="sda1" ino=2013 res=0 errno=0 [ 614.170802][T13563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2518'. [ 614.292165][ T5145] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 614.308697][T13567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2518'. [ 614.334202][T13563] ip6gretap0 speed is unknown, defaulting to 1000 [ 614.343411][ T5145] usb 1-1: Using ep0 maxpacket: 8 [ 614.351637][ T5145] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 614.362862][ T5145] usb 1-1: can't read configurations, error -61 [ 614.549195][ T5145] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 614.572497][ T59] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 614.819258][ T5145] usb 1-1: device not accepting address 66, error -71 [ 614.832087][ T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 58079, setting to 1024 [ 614.844692][ T5145] usb usb1-port1: unable to enumerate USB device [ 614.859231][ T59] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 614.912475][ T59] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 614.921613][ T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.973995][ T59] usb 3-1: config 0 descriptor?? [ 615.007975][T13574] fscrypt: AES-128-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 615.564344][ T59] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 615.864012][ T59] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving [ 615.918998][T13574] fscrypt (sda1): Missing crypto API support for AES-128-CBC-ESSIV (API name: "essiv(cbc(aes),sha256)") [ 615.987816][ T59] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 616.136348][ T59] usb 3-1: USB disconnect, device number 67 [ 617.168066][T13616] netlink: del zone limit has 8 unknown bytes [ 617.745274][ T5146] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 617.840601][T13619] siw: device registration error -23 [ 617.850815][T13621] loop2: detected capacity change from 0 to 1024 [ 617.897020][T13621] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 617.969402][ T5146] usb 5-1: Using ep0 maxpacket: 8 [ 617.988461][T13621] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2536: Invalid block bitmap block 0 in block_group 0 [ 617.997555][ T5146] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 618.011452][T13621] Quota error (device loop2): write_blk: dquota write failed [ 618.019209][ T5146] usb 5-1: can't read configurations, error -61 [ 618.022169][T13621] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 618.036548][T13621] EXT4-fs error (device loop2): ext4_acquire_dquot:6858: comm syz.2.2536: Failed to acquire dquot type 0 [ 618.053434][T13621] EXT4-fs error (device loop2): ext4_free_blocks:6590: comm syz.2.2536: Freeing blocks not in datazone - block = 0, count = 4096 [ 618.069984][T13621] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.2536: Invalid inode bitmap blk 0 in block_group 0 [ 618.084485][T13621] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 618.098238][ T2782] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 618.103094][T13621] EXT4-fs (loop2): 1 orphan inode deleted [ 618.114726][T13621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.129750][ T2782] EXT4-fs error (device loop2): ext4_release_dquot:6881: comm kworker/u8:7: Failed to release dquot type 0 [ 618.215308][ T5146] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 618.429185][ T25] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 618.450623][ T5146] usb 5-1: Using ep0 maxpacket: 8 [ 618.477622][ T5146] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 618.494248][ T5146] usb 5-1: can't read configurations, error -61 [ 618.515724][ T5146] usb usb5-port1: attempt power cycle [ 618.963986][ T5146] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 619.074074][ T5146] usb 5-1: Using ep0 maxpacket: 8 [ 619.139297][ T5146] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 619.231096][ T5146] usb 5-1: can't read configurations, error -61 [ 619.455498][ T5146] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 619.509854][ T5146] usb 5-1: Using ep0 maxpacket: 8 [ 619.585951][ T59] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 619.595117][ T5146] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 619.627530][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 619.639276][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 619.644200][ T5146] usb 5-1: can't read configurations, error -71 [ 619.650439][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 619.667112][ T25] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 619.676783][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.690133][ T5146] usb usb5-port1: unable to enumerate USB device [ 619.702107][ T25] usb 3-1: config 0 descriptor?? [ 619.736825][T13643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2545'. [ 619.786928][ T59] usb 4-1: Using ep0 maxpacket: 16 [ 619.794869][ T59] usb 4-1: config 50 has too many interfaces: 75, using maximum allowed: 32 [ 619.823494][ T59] usb 4-1: config 50 contains an unexpected descriptor of type 0x2, skipping [ 619.846535][ T59] usb 4-1: config 50 has an invalid descriptor of length 0, skipping remainder of the config [ 619.881929][T13646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2545'. [ 619.902177][ T59] usb 4-1: config 50 has 0 interfaces, different from the descriptor's value: 75 [ 619.938450][ T59] usb 4-1: New USB device found, idVendor=12d1, idProduct=c09d, bcdDevice=21.0d [ 619.974384][T13643] ip6gretap0 speed is unknown, defaulting to 1000 [ 619.995988][ T59] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.004664][ T59] usb 4-1: Product: syz [ 620.008925][ T59] usb 4-1: Manufacturer: syz [ 620.013782][ T59] usb 4-1: SerialNumber: syz [ 620.222551][T13621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.547450][T13621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.804853][ T25] hid (null): unknown global tag 0xd [ 620.810309][ T25] hid (null): report_id 5085 is invalid [ 620.820626][ T59] usb 4-1: USB disconnect, device number 53 [ 620.860086][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 620.871446][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 620.879670][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 620.887112][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 620.904428][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 620.912281][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 620.919851][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 620.928087][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 620.937012][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 620.947407][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 620.962725][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 620.971017][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 621.004695][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 621.023711][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 621.034528][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 621.045564][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 621.054266][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 621.066544][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 621.074031][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 621.093004][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 621.308446][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 621.316964][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 621.324408][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 621.334488][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 621.342129][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 621.349660][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 621.357122][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 621.364718][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 621.499542][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 621.507022][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 621.515440][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 621.543971][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 621.620513][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 621.635956][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 621.644254][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 621.652308][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 621.688290][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 621.703190][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 621.710839][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 621.719061][ T2782] EXT4-fs error (device loop2): __ext4_get_inode_loc:4357: comm kworker/u8:7: Invalid inode table block 12884901889 in block_group 0 [ 621.743165][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 621.751610][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 621.762264][ T5108] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.767130][T13670] netlink: 'syz.3.2553': attribute type 1 has an invalid length. [ 621.773932][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 621.787482][T13670] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2553'. [ 621.790312][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 621.813485][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 621.822422][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 621.830473][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 621.838126][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 621.847567][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 621.859859][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 621.890070][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 621.911813][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 621.936766][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 621.963697][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 622.018072][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 622.060854][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 622.099428][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 622.361158][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 622.379207][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 622.391337][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 622.446031][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 622.485166][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 622.706842][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 622.849277][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 622.942983][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 623.102425][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 623.121534][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 623.135256][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 623.142732][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 623.150537][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 623.158312][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 623.166123][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 623.174310][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 623.204207][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 623.232393][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 623.253642][T13688] 9pnet_fd: Insufficient options for proto=fd [ 623.262286][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 623.282114][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 623.529503][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 623.537778][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 623.546063][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 623.553566][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 623.561157][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 623.568589][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 623.581974][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 623.589423][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 623.606218][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 623.613826][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 623.621915][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 623.631995][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 623.642535][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 623.666864][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 623.674763][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 623.682858][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 623.690723][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 623.698546][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 623.706607][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 623.714596][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 623.811970][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 624.010366][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 624.201519][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 624.248998][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 624.279292][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 624.345329][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 624.405103][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 624.412569][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 624.454010][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 624.476058][T13704] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 624.478873][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 624.521909][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 624.550363][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 624.577116][T13713] netlink: 'syz.2.2554': attribute type 1 has an invalid length. [ 624.595030][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 624.612834][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 624.688085][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 624.754368][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 625.045212][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 625.067395][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 625.076420][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 625.085476][ T5145] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 625.097434][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 625.107361][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 625.214651][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 625.298851][ T5145] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 625.354525][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 625.428657][ T5145] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.476855][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 625.583162][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 625.625055][ T5145] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.673677][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 625.692576][ T5145] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 625.724179][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 625.793983][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 625.812878][ T5145] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 625.857370][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 625.880548][T13727] 9pnet_fd: Insufficient options for proto=fd [ 625.900610][ T5145] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 625.935977][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 625.943439][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 625.967553][ T5145] usb 2-1: Manufacturer: syz [ 625.996145][ T5145] usb 2-1: config 0 descriptor?? [ 626.006948][T13734] netlink: 'syz.3.2576': attribute type 10 has an invalid length. [ 626.027477][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 626.064609][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 626.074889][T13734] veth1_macvtap: left promiscuous mode [ 626.083766][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 626.110771][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 626.152390][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 626.185289][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 626.209199][T13737] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 626.239752][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 626.276400][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 626.283959][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 626.332491][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 626.342414][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 626.350037][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 626.378555][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 626.407944][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 626.436364][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 626.462356][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 626.483414][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 626.787320][ T5145] appleir 0003:05AC:8243.0022: unknown main item tag 0x0 [ 626.841218][ T5145] appleir 0003:05AC:8243.0022: No inputs registered, leaving [ 626.851722][T13758] netlink: del zone limit has 8 unknown bytes [ 626.866630][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 626.882534][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 626.977082][ T5145] appleir 0003:05AC:8243.0022: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 627.002022][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 627.118013][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 627.293280][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 627.520091][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 627.546297][ T5094] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 627.554709][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 627.590011][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 627.619734][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 627.638838][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 627.651048][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 627.659317][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 627.667402][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 627.674898][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 627.685252][ T59] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 627.698362][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 627.708331][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 627.716443][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 627.737917][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 627.746432][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 627.754505][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 627.762177][ T5094] usb 4-1: Using ep0 maxpacket: 16 [ 627.764288][ T5094] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 627.768338][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 627.787797][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 627.798033][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 627.809457][ T5094] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 627.818928][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 627.818966][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 627.818997][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 627.851004][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 627.869311][ T59] usb 1-1: device descriptor read/64, error -71 [ 627.879883][ T5094] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.907195][ T5094] usb 4-1: config 0 descriptor?? [ 627.914764][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 627.930331][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 627.945054][T13776] binder: 13773:13776 ioctl c0306201 0 returned -14 [ 627.962302][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 627.976018][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 627.983457][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 628.016273][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 628.029715][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 628.048046][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 628.061382][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 628.068827][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 628.097306][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 628.112172][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 628.136742][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 628.157800][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 628.168387][ T59] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 628.190292][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x1 [ 628.197752][ T25] hid-generic 0003:0158:0100.0021: unknown main item tag 0x0 [ 628.222648][ T25] hid-generic 0003:0158:0100.0021: unknown global tag 0xd [ 628.240948][ T25] hid-generic 0003:0158:0100.0021: item 0 4 1 13 parsing failed [ 628.262371][ T25] hid-generic 0003:0158:0100.0021: probe with driver hid-generic failed with error -22 [ 628.296629][ T25] usb 3-1: USB disconnect, device number 68 [ 628.380612][ T59] usb 1-1: device descriptor read/64, error -71 [ 628.414317][T12440] usb 2-1: reset high-speed USB device number 65 using dummy_hcd [ 628.430851][T13734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.473156][T13734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.517559][ T59] usb usb1-port1: attempt power cycle [ 628.640722][ T5094] hid-generic 0003:0158:0100.0023: unknown main item tag 0x1 [ 628.648257][ T5094] hid-generic 0003:0158:0100.0023: unexpected long global item [ 628.656935][ T5094] hid-generic 0003:0158:0100.0023: probe with driver hid-generic failed with error -22 [ 628.689089][T13794] netlink: del zone limit has 8 unknown bytes [ 628.733221][ T25] usb 4-1: USB disconnect, device number 54 [ 628.991507][ T59] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 629.049197][ T59] usb 1-1: device descriptor read/8, error -71 [ 629.159199][T13803] loop1: detected capacity change from 0 to 512 [ 629.221398][T13803] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.346845][ T59] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 629.356523][ T5144] usb 2-1: USB disconnect, device number 65 [ 629.376901][T13803] ext4 filesystem being mounted at /root/syzkaller.3h1gJa/150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 629.412036][ T59] usb 1-1: device descriptor read/8, error -71 [ 629.460182][T13803] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #2: comm syz.1.2606: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 629.544241][ T59] usb usb1-port1: unable to enumerate USB device [ 629.722892][T10715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.001829][ T2835] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.289515][ T2835] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.610007][ T2835] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.769162][ T2835] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.136873][ T5096] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 631.149283][ T5096] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 631.163402][ T5096] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 631.172490][ T5096] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 631.181361][ T5096] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 631.190831][ T5096] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 631.322629][T12440] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 631.427846][ T2835] bridge_slave_1: left allmulticast mode [ 631.444838][ T2835] bridge_slave_1: left promiscuous mode [ 631.455844][ T2835] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.466650][ T2835] bridge_slave_0: left allmulticast mode [ 631.480222][ T2835] bridge_slave_0: left promiscuous mode [ 631.504312][ T2835] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.561265][T12440] usb 2-1: config 0 has an invalid interface number: 48 but max is 1 [ 631.602262][T12440] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 631.650851][T12440] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 631.716356][T12440] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 631.796983][T12440] usb 2-1: config 0 has no interface number 0 [ 631.915767][T12440] usb 2-1: config 0 interface 48 altsetting 192 has an invalid endpoint descriptor of length 5, skipping [ 632.154007][T12440] usb 2-1: config 0 interface 48 altsetting 192 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 632.373510][T12440] usb 2-1: config 0 interface 48 has no altsetting 0 [ 632.425314][T12440] usb 2-1: New USB device found, idVendor=0499, idProduct=103b, bcdDevice=54.6e [ 632.498432][T12440] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.506533][T12440] usb 2-1: Product: syz [ 632.595800][T12440] usb 2-1: Manufacturer: syz [ 632.600726][T12440] usb 2-1: SerialNumber: syz [ 632.626989][T12440] usb 2-1: config 0 descriptor?? [ 632.833543][ T29] audit: type=1326 audit(1719535888.281:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13840 comm="syz.0.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302e975b29 code=0x7ffc0000 [ 632.909979][ T29] audit: type=1326 audit(1719535888.281:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13840 comm="syz.0.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f302e975b29 code=0x7ffc0000 [ 633.005675][ T29] audit: type=1326 audit(1719535888.281:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13840 comm="syz.0.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302e975b29 code=0x7ffc0000 [ 633.012804][T12440] snd-usb-audio 2-1:0.48: probe with driver snd-usb-audio failed with error -2 [ 633.085430][ T29] audit: type=1326 audit(1719535888.309:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13840 comm="syz.0.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f302e975b29 code=0x7ffc0000 [ 633.103718][T12440] usb 2-1: USB disconnect, device number 66 [ 633.108190][ T929] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 633.299782][ T929] usb 5-1: device descriptor read/64, error -71 [ 633.375106][ T55] Bluetooth: hci0: command tx timeout [ 633.429872][ T5140] udevd[5140]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.48/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 633.599270][ T929] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 633.781080][ T929] usb 5-1: device descriptor read/64, error -71 [ 633.871220][ T2835] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 633.909606][ T929] usb usb5-port1: attempt power cycle [ 633.978606][ T2835] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 634.016867][ T2835] bond0 (unregistering): Released all slaves [ 634.166127][ T5094] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 634.396234][T13828] ip6gretap0 speed is unknown, defaulting to 1000 [ 635.105145][ T929] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 635.160680][ T929] usb 5-1: device descriptor read/8, error -71 [ 635.170765][ T5094] usb 2-1: device descriptor read/64, error -71 [ 635.235104][ T55] Bluetooth: Wrong link type (-71) [ 635.461410][ T5094] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 635.469329][ T929] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 635.552133][ T929] usb 5-1: device descriptor read/8, error -71 [ 635.610076][ T55] Bluetooth: hci0: command tx timeout [ 635.638789][ T2835] hsr_slave_0: left promiscuous mode [ 635.656023][ T2835] hsr_slave_1: left promiscuous mode [ 635.673298][ T5094] usb 2-1: device descriptor read/64, error -71 [ 635.684201][ T929] usb usb5-port1: unable to enumerate USB device [ 635.703334][ T2835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.732786][ T2835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.812924][ T5094] usb usb2-port1: attempt power cycle [ 635.831848][ T2835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.858839][ T2835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.945319][ T2835] veth0_macvtap: left promiscuous mode [ 635.972598][ T2835] veth1_vlan: left promiscuous mode [ 635.983619][ T2835] veth0_vlan: left promiscuous mode [ 636.261040][ T5094] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 636.316546][ T5094] usb 2-1: device descriptor read/8, error -71 [ 636.624638][ T5094] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 636.689158][ T5094] usb 2-1: device descriptor read/8, error -71 [ 636.823647][ T5094] usb usb2-port1: unable to enumerate USB device [ 637.836140][ T55] Bluetooth: hci0: command tx timeout [ 638.958843][ T2835] team0 (unregistering): Port device team_slave_1 removed [ 639.129638][ T2835] team0 (unregistering): Port device team_slave_0 removed [ 639.201217][T13896] loop1: detected capacity change from 0 to 764 [ 639.220451][T13896] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 640.997074][ T5147] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 641.078970][ T55] Bluetooth: hci0: command tx timeout [ 641.221568][ T5147] usb 2-1: Using ep0 maxpacket: 16 [ 641.296797][ T5147] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.317147][ T5147] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 641.328316][ C1] DEBUG: waiting rtnl_mutex for 534 jiffies. [ 641.334348][ C1] task:syz-executor state:D stack:24608 pid:13828 tgid:13828 ppid:13813 flags:0x00004002 [ 641.344637][ C1] Call Trace: [ 641.347958][ C1] [ 641.349836][ T5147] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 641.350963][ C1] __schedule+0x17e8/0x4a20 [ 641.359941][ T5147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.372573][ C1] ? __pfx___schedule+0x10/0x10 [ 641.377487][ C1] ? __pfx_lock_release+0x10/0x10 [ 641.382627][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 641.388418][ C1] ? schedule+0x90/0x320 [ 641.392765][ C1] schedule+0x14b/0x320 [ 641.396973][ C1] schedule_preempt_disabled+0x13/0x30 [ 641.402581][ C1] __mutex_lock+0x6a4/0xd70 [ 641.407208][ C1] ? __mutex_lock+0x527/0xd70 [ 641.411935][ C1] ? rtnl_lock_killable+0x113/0x200 [ 641.415643][ T5147] usb 2-1: config 0 descriptor?? [ 641.417226][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 641.427227][ C1] ? __xdp_rxq_info_reg+0x142/0x290 [ 641.432477][ C1] rtnl_lock_killable+0x113/0x200 [ 641.437703][ C1] register_netdev+0x13/0x50 [ 641.442355][ C1] ip6gre_init_net+0x228/0x300 [ 641.447239][ C1] ops_init+0x359/0x610 [ 641.451461][ C1] setup_net+0x515/0xca0 [ 641.455753][ C1] ? __pfx_down_read_killable+0x10/0x10 [ 641.461413][ C1] ? __pfx_setup_net+0x10/0x10 [ 641.466242][ C1] copy_net_ns+0x4e2/0x7b0 [ 641.470768][ C1] create_new_namespaces+0x425/0x7b0 [ 641.476193][ C1] ? bpf_lsm_capable+0x9/0x10 [ 641.480984][ C1] unshare_nsproxy_namespaces+0x124/0x180 [ 641.486758][ C1] ksys_unshare+0x619/0xc10 [ 641.491376][ C1] ? __pfx_ksys_unshare+0x10/0x10 [ 641.496451][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 641.502541][ C1] ? do_syscall_64+0x100/0x230 [ 641.507361][ C1] __x64_sys_unshare+0x38/0x40 [ 641.512234][ C1] do_syscall_64+0xf3/0x230 [ 641.516780][ C1] ? clear_bhb_loop+0x35/0x90 [ 641.521548][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.527521][ C1] RIP: 0033:0x7fb8af177287 [ 641.532032][ C1] RSP: 002b:00007ffcc8fc55a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 641.540507][ C1] RAX: ffffffffffffffda RBX: 00007fb8af303f60 RCX: 00007fb8af177287 [ 641.548588][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 641.556652][ C1] RBP: 00007fb8af3049f8 R08: 0000000000000000 R09: 0000000000000000 [ 641.564720][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 641.572801][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 641.580920][ C1] [ 641.583978][ C1] DEBUG: holding rtnl_mutex for 557 jiffies. [ 641.590053][ C1] task:kworker/u8:10 state:R running task stack:20600 pid:2835 tgid:2835 ppid:2 flags:0x00004000 [ 641.601896][ C1] Workqueue: netns cleanup_net [ 641.606777][ C1] Call Trace: [ 641.610101][ C1] [ 641.613073][ C1] __schedule+0x17e8/0x4a20 [ 641.617718][ C1] ? __pfx___schedule+0x10/0x10 [ 641.622644][ C1] ? __pfx_lock_release+0x10/0x10 [ 641.627781][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 641.633732][ C1] ? kthread_data+0x52/0xd0 [ 641.638359][ C1] ? wq_worker_sleeping+0x66/0x240 [ 641.643527][ C1] ? schedule+0x90/0x320 [ 641.647820][ C1] schedule+0x14b/0x320 [ 641.652068][ C1] synchronize_rcu_expedited+0x684/0x830 [ 641.657763][ C1] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 641.664048][ C1] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 641.669393][ C1] ? __pfx___might_resched+0x10/0x10 [ 641.674794][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 641.680841][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 641.687014][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 641.693439][ C1] synchronize_rcu+0x11b/0x360 [ 641.698284][ C1] ? __pfx_synchronize_rcu+0x10/0x10 [ 641.703709][ C1] lockdep_unregister_key+0x556/0x610 [ 641.709155][ C1] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 641.715161][ C1] ? rcu_is_watching+0x15/0xb0 [ 641.720002][ C1] ? qdisc_reset+0x3bf/0x5b0 [ 641.724705][ C1] __qdisc_destroy+0x165/0x410 [ 641.729524][ C1] dev_shutdown+0x357/0x440 [ 641.734089][ C1] unregister_netdevice_many_notify+0x977/0x16b0 [ 641.740551][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 641.747420][ C1] ? unregister_netdevice_queue+0x26b/0x370 [ 641.753376][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 641.759906][ C1] ? batadv_softif_destroy_netlink+0x1e0/0x270 [ 641.766120][ C1] default_device_exit_batch+0xa0f/0xa90 [ 641.771880][ C1] ? __pfx___might_resched+0x10/0x10 [ 641.777227][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 641.783501][ C1] ? cfg802154_pernet_exit+0xc3/0xe0 [ 641.788897][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 641.795120][ C1] cleanup_net+0x89d/0xcc0 [ 641.799673][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 641.804683][ C1] ? process_scheduled_works+0x945/0x1830 [ 641.810515][ C1] process_scheduled_works+0xa2c/0x1830 [ 641.816161][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 641.822439][ C1] ? assign_work+0x364/0x3d0 [ 641.827087][ C1] worker_thread+0x86d/0xd40 [ 641.831804][ C1] ? __kthread_parkme+0x169/0x1d0 [ 641.837063][ C1] ? __pfx_worker_thread+0x10/0x10 [ 641.842315][ C1] kthread+0x2f0/0x390 [ 641.846457][ C1] ? __pfx_worker_thread+0x10/0x10 [ 641.851636][ C1] ? __pfx_kthread+0x10/0x10 [ 641.856337][ C1] ret_from_fork+0x4b/0x80 [ 641.860816][ C1] ? __pfx_kthread+0x10/0x10 [ 641.865511][ C1] ret_from_fork_asm+0x1a/0x30 [ 641.870359][ C1] [ 641.873426][ C1] DEBUG: waiting rtnl_mutex for 536 jiffies. [ 641.879578][ C1] task:dhcpcd state:D stack:20672 pid:4762 tgid:4762 ppid:4761 flags:0x00000002 [ 641.889847][ C1] Call Trace: [ 641.893179][ C1] [ 641.896197][ C1] __schedule+0x17e8/0x4a20 [ 641.900793][ C1] ? __pfx___schedule+0x10/0x10 [ 641.905751][ C1] ? __pfx_lock_release+0x10/0x10 [ 641.910833][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 641.916409][ C1] ? schedule+0x90/0x320 [ 641.920716][ C1] schedule+0x14b/0x320 [ 641.924926][ C1] schedule_preempt_disabled+0x13/0x30 [ 641.930488][ C1] __mutex_lock+0x6a4/0xd70 [ 641.935055][ C1] ? __mutex_lock+0x527/0xd70 [ 641.939838][ C1] ? devinet_ioctl+0x2ce/0x1bc0 [ 641.944837][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 641.949980][ C1] ? bpf_lsm_capable+0x9/0x10 [ 641.954712][ C1] ? security_capable+0x90/0xb0 [ 641.959671][ C1] ? rtnl_lock+0xe7/0x130 [ 641.964058][ C1] devinet_ioctl+0x2ce/0x1bc0 [ 641.968784][ C1] ? get_user_ifreq+0x1bb/0x200 [ 641.973709][ C1] inet_ioctl+0x3d7/0x4f0 [ 641.978110][ C1] ? __pfx_inet_ioctl+0x10/0x10 [ 641.983119][ C1] sock_do_ioctl+0x158/0x460 [ 641.987769][ C1] ? __pfx_sock_do_ioctl+0x10/0x10 [ 641.992988][ C1] ? __pfx_lock_release+0x10/0x10 [ 641.998076][ C1] sock_ioctl+0x629/0x8e0 [ 642.002514][ C1] ? __pfx_sock_ioctl+0x10/0x10 [ 642.007449][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 642.013633][ C1] ? bpf_lsm_file_ioctl+0x9/0x10 [ 642.018624][ C1] ? security_file_ioctl+0x87/0xb0 [ 642.023851][ C1] ? __pfx_sock_ioctl+0x10/0x10 [ 642.028759][ C1] __se_sys_ioctl+0xfc/0x170 [ 642.033427][ C1] do_syscall_64+0xf3/0x230 [ 642.038021][ C1] ? clear_bhb_loop+0x35/0x90 [ 642.042757][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.048780][ C1] RIP: 0033:0x7f79b2cfad49 [ 642.053243][ C1] RSP: 002b:00007ffeb5c43528 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 642.061767][ C1] RAX: ffffffffffffffda RBX: 00007f79b2c2c6c0 RCX: 00007f79b2cfad49 [ 642.070160][ C1] RDX: 00007ffeb5c53718 RSI: 0000000000008914 RDI: 000000000000000e [ 642.078243][ C1] RBP: 00007ffeb5c638d8 R08: 00007ffeb5c536d8 R09: 00007ffeb5c53688 [ 642.086258][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 642.094316][ C1] R13: 00007ffeb5c53718 R14: 0000000000000028 R15: 0000000000008914 [ 642.102387][ C1] [ 642.105445][ C1] DEBUG: waiting rtnl_mutex for 552 jiffies. [ 642.111508][ C1] task:syz.4.2633 state:D stack:26800 pid:13886 tgid:13885 ppid:10869 flags:0x00000004 [ 642.121770][ C1] Call Trace: [ 642.125088][ C1] [ 642.128061][ C1] __schedule+0x17e8/0x4a20 [ 642.132698][ C1] ? __pfx___schedule+0x10/0x10 [ 642.137607][ C1] ? __pfx_lock_release+0x10/0x10 [ 642.142742][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 642.148271][ C1] ? schedule+0x90/0x320 [ 642.152619][ C1] schedule+0x14b/0x320 [ 642.156825][ C1] schedule_preempt_disabled+0x13/0x30 [ 642.162393][ C1] __mutex_lock+0x6a4/0xd70 [ 642.166965][ C1] ? __mutex_lock+0x527/0xd70 [ 642.171705][ C1] ? rtnetlink_rcv_msg+0x839/0x1170 [ 642.177013][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 642.182104][ C1] ? rtnl_lock+0xe7/0x130 [ 642.186551][ C1] rtnetlink_rcv_msg+0x839/0x1170 [ 642.191645][ C1] ? rtnetlink_rcv_msg+0x208/0x1170 [ 642.196957][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 642.202475][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 642.207955][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 642.213210][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 642.218711][ C1] ? dev_hard_start_xmit+0x773/0x7e0 [ 642.224047][ C1] ? __dev_queue_xmit+0x2da/0x3e90 [ 642.229282][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 642.235060][ C1] ? __dev_queue_xmit+0x2da/0x3e90 [ 642.240270][ C1] ? __dev_queue_xmit+0x1763/0x3e90 [ 642.245523][ C1] ? kasan_save_track+0x51/0x80 [ 642.250479][ C1] ? do_syscall_64+0xf3/0x230 [ 642.255204][ C1] ? __dev_queue_xmit+0x2da/0x3e90 [ 642.260428][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 642.265881][ C1] ? ref_tracker_free+0x643/0x7e0 [ 642.271013][ C1] netlink_rcv_skb+0x1e3/0x430 [ 642.275830][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 642.281392][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 642.286755][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 642.292058][ C1] netlink_unicast+0x7f0/0x990 [ 642.296880][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 642.302258][ C1] ? __virt_addr_valid+0x183/0x530 [ 642.307438][ C1] ? __check_object_size+0x49c/0x900 [ 642.312831][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 642.318091][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 642.322982][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 642.328321][ C1] ? __import_iovec+0x536/0x820 [ 642.333269][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 642.338266][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 642.343619][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 642.349171][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 642.354531][ C1] __sock_sendmsg+0x221/0x270 [ 642.359320][ C1] ____sys_sendmsg+0x525/0x7d0 [ 642.364154][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 642.369575][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 642.374227][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 642.379502][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 642.385895][ C1] ? do_syscall_64+0x100/0x230 [ 642.390763][ C1] ? do_syscall_64+0xb6/0x230 [ 642.395492][ C1] do_syscall_64+0xf3/0x230 [ 642.400107][ C1] ? clear_bhb_loop+0x35/0x90 [ 642.404839][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.410854][ C1] RIP: 0033:0x7f61e8375b29 [ 642.415314][ C1] RSP: 002b:00007f61e9069048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 642.423839][ C1] RAX: ffffffffffffffda RBX: 00007f61e8503fa0 RCX: 00007f61e8375b29 [ 642.431890][ C1] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 642.439917][ C1] RBP: 00007f61e83f6756 R08: 0000000000000000 R09: 0000000000000000 [ 642.448077][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 642.456128][ C1] R13: 000000000000000b R14: 00007f61e8503fa0 R15: 00007fffca23cbd8 [ 642.464229][ C1] [ 642.467375][ C1] DEBUG: waiting rtnl_mutex for 560 jiffies. [ 642.473448][ C1] task:kworker/1:3 state:D stack:19792 pid:5144 tgid:5144 ppid:2 flags:0x00004000 [ 642.483701][ C1] Workqueue: events linkwatch_event [ 642.488967][ C1] Call Trace: [ 642.492279][ C1] [ 642.495302][ C1] __schedule+0x17e8/0x4a20 [ 642.499884][ C1] ? __pfx___schedule+0x10/0x10 [ 642.504844][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 642.510879][ C1] ? __pfx_lock_release+0x10/0x10 [ 642.516021][ C1] ? kick_pool+0x1bd/0x620 [ 642.520543][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 642.525836][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 642.531096][ C1] ? schedule+0x90/0x320 [ 642.535393][ C1] schedule+0x14b/0x320 [ 642.539660][ C1] schedule_preempt_disabled+0x13/0x30 [ 642.545171][ C1] __mutex_lock+0x6a4/0xd70 [ 642.549790][ C1] ? __mutex_lock+0x527/0xd70 [ 642.554698][ C1] ? linkwatch_event+0xe/0x60 [ 642.559485][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 642.564675][ C1] ? process_scheduled_works+0x945/0x1830 [ 642.570513][ C1] ? rtnl_lock+0xe7/0x130 [ 642.575168][ C1] ? process_scheduled_works+0x945/0x1830 [ 642.580991][ C1] linkwatch_event+0xe/0x60 [ 642.585555][ C1] process_scheduled_works+0xa2c/0x1830 [ 642.591235][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 642.597283][ C1] ? assign_work+0x364/0x3d0 [ 642.601996][ C1] worker_thread+0x86d/0xd40 [ 642.606663][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 642.612670][ C1] ? __kthread_parkme+0x169/0x1d0 [ 642.617756][ C1] ? __pfx_worker_thread+0x10/0x10 [ 642.622988][ C1] kthread+0x2f0/0x390 [ 642.627118][ C1] ? __pfx_worker_thread+0x10/0x10 [ 642.632297][ C1] ? __pfx_kthread+0x10/0x10 [ 642.636995][ C1] ret_from_fork+0x4b/0x80 [ 642.641462][ C1] ? __pfx_kthread+0x10/0x10 [ 642.646173][ C1] ret_from_fork_asm+0x1a/0x30 [ 642.651016][ C1] [ 642.654133][ C1] [ 642.654133][ C1] Showing all locks held in the system: [ 642.661913][ C1] 5 locks held by kworker/u8:10/2835: [ 642.667375][ C1] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 642.678383][ C1] #1: ffffc90009ca7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 642.689058][ C1] #2: ffffffff8f5eee50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 642.698605][ C1] #3: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 642.708802][ C1] #4: ffffffff8e33abb8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 642.719836][ C1] 1 lock held by dhcpcd/4762: [ 642.724553][ C1] #0: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2ce/0x1bc0 [ 642.733831][ C1] 2 locks held by getty/4850: [ 642.738547][ C1] #0: ffff88802f5200a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 642.748444][ C1] #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 642.758683][ C1] 3 locks held by kworker/1:3/5144: [ 642.763955][ C1] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 642.775053][ C1] #1: ffffc900038dfd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 642.786149][ C1] #2: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 642.795266][ C1] 2 locks held by syz-executor/13828: [ 642.800672][ C1] #0: ffffffff8f5eee50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 642.810278][ C1] #1: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock_killable+0x113/0x200 [ 642.819990][ C1] 5 locks held by syz.2.2627/13865: [ 642.825275][ C1] #0: ffff88802f5b4420 (sb_writers#4){.+.+}-{0:0}, at: do_coredump+0x1adc/0x2a30 [ 642.834590][ C1] #1: ffff88807ad449c0 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0x97/0x350 [ 642.845983][ C1] #2: ffffc90000a18c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 642.856162][ C1] #3: ffffffff8e3357e0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0 [ 642.865967][ C1] #4: ffffffff8e3357e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 642.875906][ C1] 1 lock held by syz.0.2631/13891: [ 642.881076][ C1] #0: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 642.890699][ C1] 1 lock held by syz.4.2633/13886: [ 642.895833][ C1] #0: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170 [ 642.905405][ C1] 2 locks held by syz.1.2638/13902: [ 642.910844][ C1] 3 locks held by syz.1.2639/13914: [ 642.916102][ C1] #0: ffffffff8f6650f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 642.924456][ C1] #1: ffffffff8f664fa8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 642.933549][ C1] #2: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: nl802154_pre_doit+0xb5/0xac0 [ 642.943083][ C1] 1 lock held by syz.2.2640/13907: [ 642.948218][ C1] #0: ffffffff8e33abb8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 642.959237][ C1] 1 lock held by syz.2.2640/13909: [ 642.964395][ C1] #0: ffffffff8f5fb948 (rtnl_mutex){+.+.}-{3:3}, at: do_ip_getsockopt+0x10f5/0x2940 [ 642.973912][ C1] [ 642.976291][ C1] ============================================= [ 642.976291][ C1] [ 643.153863][T13891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2631'. [ 643.573622][ T5144] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 643.756525][ T5144] usb 3-1: device descriptor read/64, error -71 [ 644.020219][ T929] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 644.047904][T13828] chnl_net:caif_netlink_parms(): no params data found [ 644.068657][ T5144] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 644.236224][ T929] usb 1-1: Using ep0 maxpacket: 16 [ 644.273180][ T929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 644.278754][ T5144] usb 3-1: device descriptor read/64, error -71 [ 644.287159][ T929] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 644.300013][ T929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.311487][ T929] usb 1-1: config 0 descriptor?? [ 644.480287][ T5144] usb usb3-port1: attempt power cycle [ 644.545368][T12440] usb 2-1: USB disconnect, device number 71 [ 644.696513][T13828] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.703809][T13828] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.737267][T13828] bridge_slave_0: entered allmulticast mode [ 644.762771][T13828] bridge_slave_0: entered promiscuous mode [ 644.802602][T13828] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.824447][T13828] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.831833][T13828] bridge_slave_1: entered allmulticast mode [ 644.864072][T13828] bridge_slave_1: entered promiscuous mode [ 644.931804][ T5144] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 644.969118][ T929] usbhid 1-1:0.0: can't add hid device: -71 [ 644.989743][ T929] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 645.017276][ T929] usb 1-1: USB disconnect, device number 71 [ 645.033548][ T5144] usb 3-1: device descriptor read/8, error -71 [ 645.149703][T13828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.216923][T13828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.359255][ T5144] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 645.418377][ T5144] usb 3-1: device descriptor read/8, error -71 [ 645.467037][T13828] team0: Port device team_slave_0 added [ 645.496629][T13828] team0: Port device team_slave_1 added [ 645.564749][ T5144] usb usb3-port1: unable to enumerate USB device [ 645.668846][T13828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.675856][T13828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.721960][T13828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 645.789446][T13828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 645.799914][T13828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.840634][T13828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 646.025332][T13828] hsr_slave_0: entered promiscuous mode [ 646.065383][T13828] hsr_slave_1: entered promiscuous mode [ 646.084081][T13828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 646.092585][T13828] Cannot create hsr debugfs directory [ 647.109932][T13968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2652'. [ 647.219784][T13977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2654'. [ 647.367459][T13975] ip6gretap0 speed is unknown, defaulting to 1000 [ 647.409110][T13982] loop2: detected capacity change from 0 to 764 [ 647.467942][T13982] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 648.406260][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 648.412614][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 649.307575][T14002] xt_CT: No such helper "netbios-ns" [ 650.290000][T13828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 650.352898][T13828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 650.480314][T13828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 650.492733][T13828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 650.664773][ T5094] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 650.912291][ T5094] usb 1-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=94.10 [ 650.943378][ T5094] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.039813][T14031] fuse: Bad value for 'fd' [ 651.620755][T14032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2665'. [ 651.683565][ T5094] usb 1-1: Product: syz [ 651.687939][ T5094] usb 1-1: Manufacturer: syz [ 651.692597][ T5094] usb 1-1: SerialNumber: syz [ 651.700439][ T5094] usb 1-1: config 0 descriptor?? [ 651.713642][ T5094] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input26 [ 651.923923][ T4533] bcm5974 1-1:0.0: could not read from device [ 651.948523][ T4533] bcm5974 1-1:0.0: could not read from device [ 651.958588][ T5094] usb 1-1: USB disconnect, device number 72 [ 652.016991][T14044] loop4: detected capacity change from 0 to 764 [ 652.024301][ T4533] bcm5974 1-1:0.0: could not read from device [ 652.230258][T14044] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 652.539317][T13828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.373704][T13828] 8021q: adding VLAN 0 to HW filter on device team0 [ 653.506388][T12440] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.513649][T12440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.607363][T12440] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.614497][ T5146] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 653.622272][T12440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.820325][ T5146] usb 1-1: Using ep0 maxpacket: 32 [ 653.837979][ T5146] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.866240][ T5146] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.891429][ T5146] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 653.910697][ T5146] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 653.943477][ T5146] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 653.962054][ T5146] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 654.006075][ T5146] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 654.022822][ T5146] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.034741][ T5146] usb 1-1: Product: syz [ 654.038976][ T5146] usb 1-1: Manufacturer: syz [ 654.050567][ T5146] usb 1-1: SerialNumber: syz [ 654.328986][ T5146] cdc_ncm 1-1:1.0: bind() failure [ 654.372907][ T5146] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 654.391969][ T5146] cdc_ncm 1-1:1.1: bind() failure [ 654.427417][ T5146] usb 1-1: USB disconnect, device number 73 [ 656.000216][T13828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.060501][ T5144] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 656.139819][ T29] audit: type=1326 audit(1719535910.085:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14120 comm="syz.1.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d6175b29 code=0x7ffc0000 [ 656.223888][ T29] audit: type=1326 audit(1719535910.085:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14120 comm="syz.1.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d6175b29 code=0x7ffc0000 [ 656.299215][ T29] audit: type=1326 audit(1719535910.085:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14120 comm="syz.1.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f41d6175b29 code=0x7ffc0000 [ 656.322309][ T5144] usb 5-1: Using ep0 maxpacket: 32 [ 656.351408][ T5144] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 656.369336][ T5144] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 656.385849][ T29] audit: type=1326 audit(1719535910.085:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14120 comm="syz.1.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d6175b29 code=0x7ffc0000 [ 656.408930][T13828] veth0_vlan: entered promiscuous mode [ 656.418934][ T5144] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 656.429431][ T5144] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.438157][ T29] audit: type=1326 audit(1719535910.085:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14120 comm="syz.1.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f41d6175b29 code=0x7ffc0000 [ 656.472320][ T5144] usb 5-1: config 0 descriptor?? [ 656.495358][T14114] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 656.510254][ T5144] hub 5-1:0.0: USB hub found [ 656.518567][T13828] veth1_vlan: entered promiscuous mode [ 656.718765][T13828] veth0_macvtap: entered promiscuous mode [ 656.753120][T14114] loop4: detected capacity change from 0 to 256 [ 656.813865][T13828] veth1_macvtap: entered promiscuous mode [ 656.953303][ T5144] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 656.985293][T13828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.002561][ T5144] usbhid 5-1:0.0: can't add hid device: -71 [ 657.010719][ T5144] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 657.025843][T13828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.041575][T13828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.055830][T13828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.105233][T13828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.121169][ T5144] usb 5-1: USB disconnect, device number 58 [ 657.161386][T13828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.215567][T13828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.239260][T13828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.252862][T13828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.307099][T13828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.337322][T13828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.372863][T13828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.406155][T13828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.429017][T13828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.471252][ T5147] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 657.477307][T13828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.510624][T13828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.532126][T13828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.564331][T14140] loop2: detected capacity change from 0 to 764 [ 657.565073][T13828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.615588][T14140] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 657.660050][T13828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.685036][T13828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.737854][T13828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.764303][T13828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.901969][ T5147] usb 2-1: Using ep0 maxpacket: 16 [ 657.910208][ T5147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 657.929799][ T5147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 657.952285][ T5147] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 657.961456][ T5147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.980349][ T5147] usb 2-1: config 0 descriptor?? [ 658.824946][T14134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.878666][T14134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.667536][ T2806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.705171][ T2806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.746650][ T5147] hid-generic 0003:0158:0100.0024: unknown main item tag 0x1 [ 659.772058][ T5147] hid-generic 0003:0158:0100.0024: unexpected long global item [ 659.792639][ T5147] hid-generic 0003:0158:0100.0024: probe with driver hid-generic failed with error -22 [ 659.824605][ T5147] usb 2-1: USB disconnect, device number 72 [ 660.025332][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.059213][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.293646][ T29] audit: type=1800 audit(1719535913.902:298): pid=14173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2690" name="bus" dev="sda1" ino=2030 res=0 errno=0 [ 660.497306][ T5147] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 660.638785][ T29] audit: type=1326 audit(1719535914.294:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14177 comm="syz.4.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e8375b29 code=0x7ffc0000 [ 660.705883][ T29] audit: type=1326 audit(1719535914.294:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14177 comm="syz.4.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f61e8375b29 code=0x7ffc0000 [ 660.742585][ T5147] usb 2-1: Using ep0 maxpacket: 32 [ 660.756594][ T5147] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.762331][ T29] audit: type=1326 audit(1719535914.294:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14177 comm="syz.4.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e8375b29 code=0x7ffc0000 [ 660.801492][ T5147] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.870523][ T5147] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 660.903122][ T29] audit: type=1326 audit(1719535914.294:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14177 comm="syz.4.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e8375b29 code=0x7ffc0000 [ 660.942172][ T5147] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 660.963295][ T5147] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 660.984431][ T5147] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 661.034311][ T5147] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 661.052599][ T5147] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.063442][ T5147] usb 2-1: Product: syz [ 661.068356][ T5147] usb 2-1: Manufacturer: syz [ 661.081903][ T5147] usb 2-1: SerialNumber: syz [ 661.340476][ T5147] cdc_ncm 2-1:1.0: bind() failure [ 661.367627][ T5147] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 661.380424][ T5147] cdc_ncm 2-1:1.1: bind() failure [ 661.423247][ T5147] usb 2-1: USB disconnect, device number 73 [ 662.773994][ T5146] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 662.981697][ T5146] usb 2-1: Using ep0 maxpacket: 16 [ 663.016395][ T5146] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 663.054595][ T5146] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 663.083991][ T5146] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 663.104185][ T5146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.143112][ T5146] usb 2-1: config 0 descriptor?? [ 663.752959][T14198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.794988][T14198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.891198][ T5146] hid-generic 0003:0158:0100.0025: unknown main item tag 0x1 [ 663.898794][ T5146] hid-generic 0003:0158:0100.0025: unexpected long global item [ 663.907618][ T5146] hid-generic 0003:0158:0100.0025: probe with driver hid-generic failed with error -22 [ 664.514168][ T5146] usb 2-1: USB disconnect, device number 74 [ 664.555081][ T5096] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 664.568677][ T5096] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 664.600992][ T5096] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 664.615831][ T5096] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 664.624137][ T5096] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 664.631716][ T5096] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 664.713739][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.058336][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.271642][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.421282][T14212] ip6gretap0 speed is unknown, defaulting to 1000 [ 665.518789][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.679247][ T53] bridge_slave_1: left allmulticast mode [ 666.685106][ T53] bridge_slave_1: left promiscuous mode [ 666.710404][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.730299][ T53] bridge_slave_0: left allmulticast mode [ 666.736024][ T53] bridge_slave_0: left promiscuous mode [ 666.778605][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.816055][ T5096] Bluetooth: hci0: command tx timeout [ 668.831110][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 668.831131][ T29] audit: type=1326 audit(1719535921.946:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14248 comm="syz.4.2715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e8375b29 code=0x7ffc0000 [ 669.040820][ T5096] Bluetooth: hci0: command tx timeout [ 669.111767][ T29] audit: type=1326 audit(1719535921.946:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14248 comm="syz.4.2715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f61e8375b29 code=0x7ffc0000 [ 669.210210][ T929] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 669.247505][ T29] audit: type=1326 audit(1719535921.946:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14248 comm="syz.4.2715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e8375b29 code=0x7ffc0000 [ 669.405292][ T29] audit: type=1326 audit(1719535921.965:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14248 comm="syz.4.2715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f61e8375b29 code=0x7ffc0000 [ 669.443914][ T929] usb 3-1: Using ep0 maxpacket: 32 [ 669.478099][ T929] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 669.535769][ T929] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 669.633654][ T929] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 669.724335][ T929] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 669.799833][ T929] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 669.858994][ T929] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 669.906431][ T929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 669.962512][ T929] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 670.002401][ T929] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 670.023166][ T929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.031261][ T929] usb 3-1: Product: В [ 670.038441][ T929] usb 3-1: Manufacturer: 놱橹䓸곦瘾砆䵂鷓쬡謆譖ꈶⰕ颍वㇳ︔ [ 670.049632][ T929] usb 3-1: SerialNumber: syz [ 670.065750][ T929] usb 3-1: config 0 descriptor?? [ 670.081562][ T929] pvrusb2: Hardware description: Terratec Grabster AV400 [ 670.094104][ T929] pvrusb2: ********** [ 670.100256][ T929] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 670.116216][ T929] pvrusb2: Important functionality might not be entirely working. [ 670.138706][ T929] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 670.168984][ T929] pvrusb2: ********** [ 670.222918][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 670.250025][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 670.270273][ T53] bond0 (unregistering): Released all slaves [ 670.309554][ T1977] pvrusb2: Invalid write control endpoint [ 670.437683][ T1977] pvrusb2: Invalid write control endpoint [ 670.471371][ T1977] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 670.512950][ T1977] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 670.555069][ T1977] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 670.585051][ T1977] pvrusb2: Device being rendered inoperable [ 670.606386][ T1977] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 670.625409][ T1977] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 670.645583][ T1977] pvrusb2: Attached sub-driver cx25840 [ 670.651283][ T1977] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 670.666893][ T1977] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 671.262127][ T5096] Bluetooth: hci0: command tx timeout [ 671.804447][T14278] 9pnet_fd: Insufficient options for proto=fd [ 671.853935][ T5146] usb 3-1: USB disconnect, device number 73 [ 671.902854][ T5144] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 671.988475][T14212] chnl_net:caif_netlink_parms(): no params data found [ 672.170818][ T5144] usb 1-1: Using ep0 maxpacket: 16 [ 672.178319][ T5144] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 672.211899][ T5144] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 672.242363][ T5144] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.256794][ T5144] usb 1-1: config 0 descriptor?? [ 672.336784][ T53] hsr_slave_0: left promiscuous mode [ 672.342749][ T5145] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 672.370865][ T53] hsr_slave_1: left promiscuous mode [ 672.476373][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 672.521442][T14270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.595915][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 672.648661][ T5145] usb 2-1: Using ep0 maxpacket: 16 [ 672.721958][T14270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.795419][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 672.815052][T14291] loop2: detected capacity change from 0 to 764 [ 672.829777][ T5145] usb 2-1: config 50 has too many interfaces: 75, using maximum allowed: 32 [ 672.949031][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 673.021170][T14291] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 673.132123][ T5145] usb 2-1: config 50 contains an unexpected descriptor of type 0x2, skipping [ 673.141716][ T5145] usb 2-1: config 50 has an invalid descriptor of length 0, skipping remainder of the config [ 673.153087][ T5145] usb 2-1: config 50 has 0 interfaces, different from the descriptor's value: 75 [ 673.166749][ T5145] usb 2-1: New USB device found, idVendor=12d1, idProduct=c09d, bcdDevice=21.0d [ 673.176230][ T5145] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.186801][ T5144] usbhid 1-1:0.0: can't add hid device: -71 [ 673.196171][ T5145] usb 2-1: Product: syz [ 673.200949][ T5144] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 673.250619][ T5145] usb 2-1: Manufacturer: syz [ 673.282733][ T5145] usb 2-1: SerialNumber: syz [ 673.308801][ T5144] usb 1-1: USB disconnect, device number 74 [ 673.381411][ T53] veth1_macvtap: left promiscuous mode [ 673.387053][ T53] veth0_macvtap: left promiscuous mode [ 675.041666][ T5096] Bluetooth: hci0: command tx timeout [ 675.228387][ T53] veth1_vlan: left promiscuous mode [ 675.265538][ T53] veth0_vlan: left promiscuous mode [ 675.524949][ T29] audit: type=1326 audit(1719535928.213:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14304 comm="syz.4.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e8375b29 code=0x7ffc0000 [ 675.682612][ T29] audit: type=1326 audit(1719535928.241:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14304 comm="syz.4.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f61e8375b29 code=0x7ffc0000 [ 675.756928][ T5145] usb 2-1: USB disconnect, device number 75 [ 675.833497][ T29] audit: type=1326 audit(1719535928.241:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14304 comm="syz.4.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e8375b29 code=0x7ffc0000 [ 675.867653][ T29] audit: type=1326 audit(1719535928.251:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14304 comm="syz.4.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f61e8375b29 code=0x7ffc0000 [ 675.943688][ T29] audit: type=1804 audit(1719535928.363:312): pid=14313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2731" name="/root/syzkaller.3h1gJa/184/bus" dev="sda1" ino=2034 res=1 errno=0 [ 676.046465][ T29] audit: type=1804 audit(1719535928.391:313): pid=14313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2731" name="/root/syzkaller.3h1gJa/184/bus" dev="sda1" ino=2034 res=1 errno=0 [ 676.212073][ T5144] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 676.425663][ T5144] usb 1-1: Using ep0 maxpacket: 8 [ 676.459863][ T5144] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 676.480892][ T5144] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 676.508188][ T5144] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 676.520296][ T5144] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 676.550247][ T5144] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 676.563751][ T5144] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 676.591570][ T5144] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.849885][ T5144] usb 1-1: usb_control_msg returned -32 [ 676.857834][ T5144] usbtmc 1-1:16.0: can't read capabilities [ 677.218233][ T53] team0 (unregistering): Port device team_slave_1 removed [ 677.333630][ T53] team0 (unregistering): Port device team_slave_0 removed [ 678.692977][ T5146] usb 1-1: USB disconnect, device number 75 [ 679.227190][T14212] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.379463][T14212] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.495109][T14212] bridge_slave_0: entered allmulticast mode [ 679.602647][T14212] bridge_slave_0: entered promiscuous mode [ 679.670773][T14212] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.707928][T14212] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.743675][T14212] bridge_slave_1: entered allmulticast mode [ 679.771186][T14212] bridge_slave_1: entered promiscuous mode [ 680.148328][T14212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.188366][T14212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.188758][T12440] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 680.437011][T12440] usb 2-1: Using ep0 maxpacket: 16 [ 680.451368][T12440] usb 2-1: config 50 has too many interfaces: 75, using maximum allowed: 32 [ 680.484397][T14212] team0: Port device team_slave_0 added [ 680.491313][T12440] usb 2-1: config 50 contains an unexpected descriptor of type 0x2, skipping [ 680.517951][T12440] usb 2-1: config 50 has an invalid descriptor of length 0, skipping remainder of the config [ 680.540719][T12440] usb 2-1: config 50 has 0 interfaces, different from the descriptor's value: 75 [ 680.560332][T12440] usb 2-1: New USB device found, idVendor=12d1, idProduct=c09d, bcdDevice=21.0d [ 680.572663][T12440] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.591854][T12440] usb 2-1: Product: syz [ 680.596523][T12440] usb 2-1: Manufacturer: syz [ 680.601160][T12440] usb 2-1: SerialNumber: syz [ 680.693829][T14212] team0: Port device team_slave_1 added [ 680.863702][T12440] usb 2-1: USB disconnect, device number 76 [ 680.923081][T14212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 680.939120][T14212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.025046][T14212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.088832][T14212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.128457][T14212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.199584][T14212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 681.701261][T14212] hsr_slave_0: entered promiscuous mode [ 681.756459][T14212] hsr_slave_1: entered promiscuous mode [ 681.792586][T14212] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 681.811272][T14212] Cannot create hsr debugfs directory [ 682.785856][ T29] audit: type=1326 audit(1719535935.004:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14382 comm="syz.0.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302e975b29 code=0x7ffc0000 [ 682.843016][ T29] audit: type=1326 audit(1719535935.004:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14382 comm="syz.0.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f302e975b29 code=0x7ffc0000 [ 682.903271][ T29] audit: type=1326 audit(1719535935.004:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14382 comm="syz.0.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302e975b29 code=0x7ffc0000 [ 682.961888][ T29] audit: type=1326 audit(1719535935.004:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14382 comm="syz.0.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f302e975b29 code=0x7ffc0000 [ 683.872432][T14402] netlink: 'syz.0.2750': attribute type 10 has an invalid length. [ 683.931225][T14402] veth1_macvtap: left promiscuous mode [ 683.981563][T14405] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 684.089933][T14212] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 684.134225][T14212] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 684.157096][ T5145] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 684.209479][T14212] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 684.297445][T14212] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 684.369037][ T5094] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 684.371146][ T5145] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 684.405451][ T5145] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.427646][ T5145] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.448634][ T5145] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 684.487527][ T5145] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 684.510396][ T5145] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 684.529309][ T5145] usb 5-1: Manufacturer: syz [ 684.542449][ T5145] usb 5-1: config 0 descriptor?? [ 684.572183][ T5094] usb 1-1: Using ep0 maxpacket: 16 [ 684.588867][ T5094] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 684.617822][ T5094] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 684.640271][ T5094] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.675904][ T5094] usb 1-1: config 0 descriptor?? [ 684.979534][T14212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.999193][ T5145] usbhid 5-1:0.0: can't add hid device: -71 [ 685.007990][ T5145] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 685.032625][ T5145] usb 5-1: USB disconnect, device number 59 [ 685.160212][ T5094] usbhid 1-1:0.0: can't add hid device: -71 [ 685.179324][ T5094] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 685.206586][T14212] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.211926][ T5094] usb 1-1: USB disconnect, device number 76 [ 685.267253][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.274501][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.331605][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.338961][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 686.149101][T14212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.445280][ T2875] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.633636][ T2875] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.750502][T14212] veth0_vlan: entered promiscuous mode [ 686.764471][ T5144] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 686.844643][ T2875] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.927169][T14461] netlink: 'syz.1.2765': attribute type 10 has an invalid length. [ 686.946920][T14461] veth1_macvtap: left promiscuous mode [ 686.995183][T14463] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 687.021594][T14212] veth1_vlan: entered promiscuous mode [ 687.031082][ T5144] usb 5-1: Using ep0 maxpacket: 8 [ 687.048751][ T5144] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 687.071158][ T5144] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 687.097455][ T5144] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.137803][ T2875] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.300389][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 687.312361][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 687.321457][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 687.334120][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 687.369274][T14446] netlink: 'syz.4.2760': attribute type 4 has an invalid length. [ 687.381327][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 687.389001][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 687.403605][ T5144] usb 5-1: string descriptor 0 read error: -71 [ 687.462061][ T5144] hub 5-1:32.0: USB hub found [ 687.480737][ T5145] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 687.504447][ T5144] hub 5-1:32.0: config failed, can't read hub descriptor (err -22) [ 687.694415][ T5145] usb 2-1: Using ep0 maxpacket: 16 [ 687.705032][ T5145] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 687.718114][ T5144] usb 5-1: USB disconnect, device number 60 [ 687.739811][ T5145] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 687.759965][ T5145] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.803609][T14212] veth0_macvtap: entered promiscuous mode [ 687.827029][ T5145] usb 2-1: config 0 descriptor?? [ 687.887021][ T2875] bridge_slave_1: left allmulticast mode [ 687.907382][ T2875] bridge_slave_1: left promiscuous mode [ 687.913253][ T2875] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.976099][ T2875] bridge_slave_0: left allmulticast mode [ 687.997078][ T2875] bridge_slave_0: left promiscuous mode [ 688.026607][ T2875] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.047842][ T5140] udevd[5140]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 688.318126][ T5145] usbhid 2-1:0.0: can't add hid device: -71 [ 688.335595][ T5145] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 688.367999][ T5145] usb 2-1: USB disconnect, device number 77 [ 688.422623][ T5144] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 688.645137][ T5144] usb 5-1: Using ep0 maxpacket: 16 [ 688.655178][ T5144] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 688.677080][ T5144] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 688.697916][ T5144] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 688.718680][ T5144] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.732529][ T5144] usb 5-1: config 0 descriptor?? [ 689.251798][T14513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.266048][T14513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.326635][ T5144] hid-generic 0003:0158:0100.0026: unknown main item tag 0x1 [ 689.341351][ T5144] hid-generic 0003:0158:0100.0026: unexpected long global item [ 689.349879][ T5144] hid-generic 0003:0158:0100.0026: probe with driver hid-generic failed with error -22 [ 689.382443][T14524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2774'. [ 689.392636][ T2875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 689.425928][ T2875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 689.447617][ T2875] bond0 (unregistering): Released all slaves [ 689.465224][T14470] ip6gretap0 speed is unknown, defaulting to 1000 [ 689.474878][T14212] veth1_macvtap: entered promiscuous mode [ 689.582815][ T55] Bluetooth: hci3: command tx timeout [ 689.619814][ T5144] usb 5-1: USB disconnect, device number 61 [ 689.689522][T14522] ip6gretap0 speed is unknown, defaulting to 1000 [ 690.125988][T14212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.138776][T14212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.149140][T14212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.170237][T14212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.190546][T14212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.201207][T14212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.216576][T14212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.233183][T14212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.245403][T14212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 690.419141][T14212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 690.450422][T14212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.476960][T14212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 690.502857][T14212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.532279][T14212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 690.544299][ T5096] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 690.563493][T14212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.574074][ T5096] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 690.583047][T14212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 690.593952][ T5096] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 690.601246][T14212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.613906][T14212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 690.621743][ T5096] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 690.632304][ T5096] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 690.642322][ T5096] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 690.704482][ T2875] hsr_slave_0: left promiscuous mode [ 690.711160][ T2875] hsr_slave_1: left promiscuous mode [ 690.717694][ T2875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 690.733053][ T2875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.746957][ T2875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.761140][ T2875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.799392][ T2875] veth0_macvtap: left promiscuous mode [ 690.805290][ T2875] veth1_vlan: left promiscuous mode [ 690.810671][ T2875] veth0_vlan: left promiscuous mode [ 691.647602][ T2875] team0 (unregistering): Port device team_slave_1 removed [ 691.726754][ T2875] team0 (unregistering): Port device team_slave_0 removed [ 691.804383][ T5096] Bluetooth: hci3: command tx timeout [ 691.970295][T12440] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 692.187944][T12440] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.198508][T12440] usb 5-1: config 0 has no interfaces? [ 692.206274][T12440] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 692.215738][T12440] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 692.223785][T12440] usb 5-1: SerialNumber: syz [ 692.248704][T12440] usb 5-1: config 0 descriptor?? [ 692.376376][T14212] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.386158][T14212] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.396327][T14212] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.405138][T14212] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.536827][T14551] kernel profiling enabled (shift: 8) [ 692.561457][ T5094] usb 5-1: USB disconnect, device number 62 [ 692.622284][ C1] ================================================================== [ 692.630442][ C1] BUG: KASAN: stack-out-of-bounds in profile_pc+0xd2/0x170 [ 692.637673][ C1] Read of size 8 at addr ffffc90000187ba0 by task rcu_exp_gp_kthr/19 [ 692.645819][ C1] [ 692.648173][ C1] CPU: 1 UID: 0 PID: 19 Comm: rcu_exp_gp_kthr Not tainted 6.10.0-rc5-next-20240627-syzkaller #0 [ 692.658597][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 692.668666][ C1] Call Trace: [ 692.671958][ C1] [ 692.674814][ C1] dump_stack_lvl+0x241/0x360 [ 692.679508][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 692.684718][ C1] ? __pfx__printk+0x10/0x10 [ 692.689345][ C1] ? _printk+0xd5/0x120 [ 692.693551][ C1] print_report+0x169/0x550 [ 692.698124][ C1] ? __virt_addr_valid+0xbd/0x530 [ 692.703193][ C1] ? profile_pc+0xd2/0x170 [ 692.707635][ C1] kasan_report+0x143/0x180 [ 692.712183][ C1] ? profile_pc+0xd2/0x170 [ 692.716647][ C1] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 692.722586][ C1] profile_pc+0xd2/0x170 [ 692.726877][ C1] profile_tick+0xd7/0x150 [ 692.731335][ C1] tick_nohz_handler+0x386/0x500 [ 692.736326][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 692.741914][ C1] __hrtimer_run_queues+0x551/0xd50 [ 692.747148][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 692.753179][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 692.758934][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 692.765047][ C1] hrtimer_interrupt+0x396/0x990 [ 692.770040][ C1] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 692.776076][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 692.781759][ C1] [ 692.784721][ C1] [ 692.787681][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 692.793708][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 692.800261][ C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 4e 92 5f f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 33 de c7 f5 65 8b 05 74 21 69 74 85 c0 74 43 48 c7 04 24 0e 36 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 692.819914][ C1] RSP: 0018:ffffc