last executing test programs: 6m11.005281609s ago: executing program 3 (id=2134): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 6m10.62914183s ago: executing program 0 (id=2139): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, 0x0, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000480)=ANY=[], 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd0500070088000000060005"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 6m10.54876061s ago: executing program 0 (id=2140): ioperm(0x0, 0x2, 0x7e) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6m10.075900104s ago: executing program 3 (id=2141): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000740)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, {[@generic={0x8, 0x2}]}}}}}}}}, 0x0) 6m10.075309378s ago: executing program 3 (id=2142): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028"], 0x120}, 0x1, 0x0, 0x0, 0x20000810}, 0x10) 6m10.008997044s ago: executing program 3 (id=2143): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) recvmmsg(r0, &(0x7f0000004280)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1}, 0xff}], 0x1, 0x1a2, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) 6m9.679076823s ago: executing program 0 (id=2146): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 6m9.678713655s ago: executing program 0 (id=2147): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1/file0\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1002, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, 0x0) 6m9.608744141s ago: executing program 0 (id=2149): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d40)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x7c}}, @qdisc_kind_options=@q_qfg={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004001}, 0x4000000) 6m9.358903374s ago: executing program 0 (id=2155): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000003c0)={0x40, r1, 0x805, 0x70bd22, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac09]}, @NL80211_ATTR_PMK={0x4}, @NL80211_ATTR_AKM_SUITES={0x10, 0x4c, [0xfac13, 0xfac0b, 0xfac0b]}], @NL80211_ATTR_SSID={0x5, 0x34, @random='v'}]}, 0x40}}, 0x810) 6m9.286955119s ago: executing program 32 (id=2155): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000003c0)={0x40, r1, 0x805, 0x70bd22, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac09]}, @NL80211_ATTR_PMK={0x4}, @NL80211_ATTR_AKM_SUITES={0x10, 0x4c, [0xfac13, 0xfac0b, 0xfac0b]}], @NL80211_ATTR_SSID={0x5, 0x34, @random='v'}]}, 0x40}}, 0x810) 6m9.11903598s ago: executing program 3 (id=2158): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1/file0\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1002, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 6m9.11866378s ago: executing program 3 (id=2159): syz_io_uring_setup(0xec6, &(0x7f00000008c0)={0x0, 0x0, 0x3000}, 0x0, 0x0) r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r1, &(0x7f0000000340)=""/170, 0xaa) pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0) 6m8.237982367s ago: executing program 2 (id=2164): unshare(0x200) io_setup(0x222, 0x0) syz_emit_vhci(0x0, 0x0) 6m8.178083287s ago: executing program 2 (id=2165): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20048000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000027000100000000000000000a01"], 0x50}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0xc0, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x90, 0x2, {{0x3, 0x0, 0x3, 0xe, 0x2, 0xff}, [@TCA_NETEM_LOSS={0x74, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffff9, 0x7, 0x1, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x6, 0x2, 0xe, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0xfffffffc, 0x492c, 0x0, 0xffffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x2c, 0x0, 0x1, 0x8, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x4, 0xc1b, 0x4, 0x8cbb, 0x1}}]}]}}}]}, 0xc0}}, 0x4000010) 6m8.087530258s ago: executing program 2 (id=2166): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) 6m8.007761851s ago: executing program 2 (id=2167): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000002c0)={0x400002, r2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6m7.821230988s ago: executing program 2 (id=2168): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1/file0\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1002, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 6m7.758081586s ago: executing program 2 (id=2169): prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(0x0, &(0x7f0000000080)=ANY=[@ANYRES8], 0x0, 0x0) 5m53.956970559s ago: executing program 33 (id=2159): syz_io_uring_setup(0xec6, &(0x7f00000008c0)={0x0, 0x0, 0x3000}, 0x0, 0x0) r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r1, &(0x7f0000000340)=""/170, 0xaa) pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0) 5m52.66436588s ago: executing program 34 (id=2169): prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(0x0, &(0x7f0000000080)=ANY=[@ANYRES8], 0x0, 0x0) 5m43.398970549s ago: executing program 4 (id=2406): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x13, r2, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000000)=0x2) 5m41.748640866s ago: executing program 4 (id=2410): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x64, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x200}, @device_b, @device_a, @from_mac=@broadcast, {0x3, 0xfe}}, 0x8f8c, 0x3ff, @device_a, {}, @val, @val={0x2d, 0x1a, {0x1000, 0x0, 0x2, 0x0, {0x0, 0x8, 0x0, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x1, 0x2, 0x5}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 5m41.658547098s ago: executing program 4 (id=2411): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xc463f262, 0x10, &(0x7f0000000040)}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r0, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000740)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, {[@generic={0x8, 0x2}]}}}}}}}}, 0x0) 5m41.59859459s ago: executing program 4 (id=2414): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(0x0, 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1/file0\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1002, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 5m41.518493779s ago: executing program 4 (id=2416): r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000280)={0x2020}, 0x2020) write$apparmor_exec(r0, &(0x7f0000000380)=ANY=[@ANYBLOB='stack '], 0xf6) 5m41.247253509s ago: executing program 4 (id=2427): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x50, 0x0, 0x5, 0xfffffffd}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/76, 0x4c, 0x7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0xfffffa9e}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000400)={r3, @in6={{0xa, 0x4e23, 0xd0, @private1, 0xe}}}, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@delchain={0xb0, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x80, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x64, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x21, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfffe}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x80}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xc0}]}]}, @TCA_FLOWER_KEY_MPLS_BOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x5}, @TCA_FLOWER_KEY_IP_TOS_MASK={0x5, 0x4a, 0xfb}]}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d484"], 0x340a) 5m41.161262737s ago: executing program 35 (id=2427): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x50, 0x0, 0x5, 0xfffffffd}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/76, 0x4c, 0x7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0xfffffa9e}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000400)={r3, @in6={{0xa, 0x4e23, 0xd0, @private1, 0xe}}}, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@delchain={0xb0, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x80, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x64, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x21, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfffe}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x80}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xc0}]}]}, @TCA_FLOWER_KEY_MPLS_BOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x5}, @TCA_FLOWER_KEY_IP_TOS_MASK={0x5, 0x4a, 0xfb}]}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d484"], 0x340a) 2.71654595s ago: executing program 5 (id=5195): socket$nl_route(0x10, 0x3, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.646062783s ago: executing program 5 (id=5197): r0 = semget(0x1, 0x1, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x3]) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050ff85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xb, 0x0, &(0x7f00000003c0)="fdfc19f52a929e03000000", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) lseek(r3, 0xa3c, 0x1) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, 0x0) r5 = socket(0x10, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2010}, 0x8000) connect$inet6(r6, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, '\x00', "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "23bfbc65", "ffff0033057e00f4"}, 0x38) write$binfmt_script(r6, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r5, r6, 0x0) 2.645086671s ago: executing program 6 (id=5198): socket$inet6(0xa, 0xa, 0xffffffff) 2.556570921s ago: executing program 5 (id=5199): r0 = syz_open_dev$dri(0x0, 0x3, 0x54b601) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) socket(0x10, 0x803, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0xd0) mmap$xdp(&(0x7f0000344000/0x1000)=nil, 0x1000, 0x1000000, 0x13, r1, 0x100000000) 2.556367864s ago: executing program 6 (id=5200): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe0200108500000007000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35b", 0x6) symlink(0x0, &(0x7f0000000240)='./file0\x00') bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], &(0x7f0000000240), 0x0, 0x1}}, 0x40) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) 2.477398474s ago: executing program 6 (id=5201): openat$kvm(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) 2.407776936s ago: executing program 5 (id=5202): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) 2.407412894s ago: executing program 5 (id=5203): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)}], 0x1}}], 0x1, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000100)=""/95) 1.487210812s ago: executing program 7 (id=5209): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35b", 0x6) symlink(0x0, &(0x7f0000000240)='./file0\x00') bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], &(0x7f0000000240), 0x0, 0x1}}, 0x40) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) 1.407750176s ago: executing program 7 (id=5210): r0 = syz_open_dev$dri(0x0, 0x3, 0x54b601) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) socket(0x10, 0x803, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0xd0) mmap$xdp(&(0x7f0000344000/0x1000)=nil, 0x1000, 0x1000000, 0x13, r1, 0x100000000) 1.295646287s ago: executing program 7 (id=5211): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0}}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 1.29549218s ago: executing program 7 (id=5212): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000004e40)={0xfb, 0x11, 0x0, 0x2ff, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"}) 1.137641228s ago: executing program 5 (id=5213): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r3}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000e40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000800}], 0x1, 0x20004050) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f00000000c0)) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0x9, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000340)={0x20, 0x22, 0x77, {0x77, 0x2, "b792783c57964ba7a8349e195be5d6f33fad9523bc3cd88d47704816be91de3ccc2e302482930bb03d2b40eb2f0062d35ef0a137607f6d88722cd80796d71fd5875cecfad92c135d6b07052bae2a0971e6135a5357cc3438b14d6296fef3a808352afd574d59b11c9ec15e97b367b84c978dd67fa1"}}, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003660000006603749bfaf50acb8065e6492b07000000000000009194f9bd441048511a17d86d2ff910f1aa05cc941c9a472f637ab7edd8e88e6c7537cfa82d0416cb0e11c4376dfb25f11b5acdd1bf2e"], &(0x7f00000002c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xac, "7ef74f3bde675fdc67bea074edfef6fb"}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "0bb3d778dd7b53c1f2394678a7d631d4"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x7bd, 0xf00, 0x5}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x18, 0x6, 0x0, "488bb8fd", "e1f5c948"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4a, 0x0, 0x0, 0x6, 0xc, 0x998d, 0x5}}}, &(0x7f0000000c40)={0x84, 0x0, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, 0x0, 0x0, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x200, 0x8}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0xf912}, &(0x7f00000009c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000a00)={0x40, 0xb, 0x2, 'TA'}, &(0x7f0000000a40)={0x40, 0xf, 0x2, 0xa6c2}, 0x0, &(0x7f0000000ac0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000b00)={0x40, 0x19, 0x2, "8b2c"}, &(0x7f0000000b40)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000b80)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000bc0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000c00)={0x40, 0x21, 0x1, 0x85}}) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="ec0100005c8baebf10a8bf51d93734c417180010022bbd7000fbdbdf2500000000000000000000ffffac1e0001000000000000000000000000000000014e21c64b4e2200070a0000b02b000000", @ANYRES32=0x0, @ANYRES32], 0x1ec}, 0x1, 0x0, 0x0, 0x80}, 0x0) 716.615093ms ago: executing program 7 (id=5220): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000800)={0x1, 0x0, [{0x122, 0x0, 0xfffffffffffff991}]}) 716.358262ms ago: executing program 7 (id=5221): r0 = open(0x0, 0x60840, 0xa2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000f43000/0x3000)=nil, 0x3000, 0x16) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000340)={'pcmmio\x00', [0x8005, 0x5, 0x0, 0x100, 0x27, 0xcc7, 0x8, 0x7, 0x3, 0xff, 0x0, 0x0, 0xa, 0x2, 0x7, 0x2009, 0xfffffffe, 0x40ed, 0x43, 0x40000003, 0x89, 0x6beab93e, 0xf27, 0x6, 0x800b, 0x4, 0x2, 0x0, 0x4fa7f95b, 0x5, 0x5149]}) ioctl$COMEDI_DEVINFO(0xffffffffffffffff, 0x80b06401, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x80000001}, 0x31) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc) syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000040), &(0x7f0000000080)) syz_clone(0x50104100, 0x0, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/consoles\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x2f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) fcntl$setlease(r0, 0x400, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x5c, 0x8b, 0x6a, 0x8, 0x1286, 0x1fa4, 0x9f7a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) 427.202493ms ago: executing program 1 (id=5225): r0 = semget(0x1, 0x1, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x5bb1, 0x3]) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050ff85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xb, 0x0, &(0x7f00000003c0)="fdfc19f52a929e03000000", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) lseek(r3, 0xa3c, 0x1) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, 0x0) r5 = socket(0x10, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2010}, 0x8000) connect$inet6(r6, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, '\x00', "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "23bfbc65", "ffff0033057e00f4"}, 0x38) write$binfmt_script(r6, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r5, r6, 0x0) 337.510627ms ago: executing program 1 (id=5226): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x3b0341, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) 284.802047ms ago: executing program 1 (id=5227): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x10}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000040)={0x53, 0x0, [{0x48, 0x0, 0x3}]}) 207.558247ms ago: executing program 6 (id=5228): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r0, @ANYRES32=r2], 0x44}}, 0x0) 207.446558ms ago: executing program 1 (id=5229): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0xfffffffffffffffe, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0xa0, 0x6, 0x321, 0x3, 0x0, 0x101, 0x0}) 207.307211ms ago: executing program 6 (id=5230): r0 = syz_open_dev$dri(0x0, 0x3, 0x54b601) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x214000, 0x800}, 0x1c) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) socket(0x10, 0x803, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0xd0) mmap$xdp(&(0x7f0000344000/0x1000)=nil, 0x1000, 0x1000000, 0x13, r1, 0x100000000) 146.92773ms ago: executing program 1 (id=5231): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000240)={0x3, @null, 0xee00}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null]}, 0x48) 146.75639ms ago: executing program 1 (id=5232): r0 = socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x1f00, 0x300, 0x300, 0x8, 0x300}}) syz_clone3(&(0x7f00000016c0)={0xa4281200, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) signalfd4(0xffffffffffffffff, &(0x7f0000000240)={[0x60f]}, 0x8, 0x800) openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 0s ago: executing program 6 (id=5233): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x81f}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_TSC_KHZ_cpu(r6, 0xaea2, 0x5) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x2c, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r7, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) kernel console output (not intermixed with test programs): 09][ T211] veth1_vlan: left promiscuous mode [ 461.116316][ T211] veth0_vlan: left promiscuous mode [ 461.477763][ T211] team0 (unregistering): Port device team_slave_1 removed [ 461.501016][ T211] team0 (unregistering): Port device team_slave_0 removed [ 461.779574][T17919] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 461.798145][T17919] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 461.816380][T17919] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 461.827183][T17919] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 461.953831][ T211] IPVS: stop unused estimator thread 0... [ 462.021732][T17919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.050507][T17919] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.066894][ T1182] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.069370][ T1182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.086011][T14180] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.088994][T14180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.392306][T17919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.565529][T17919] veth0_vlan: entered promiscuous mode [ 462.570472][T17919] veth1_vlan: entered promiscuous mode [ 462.606284][T17919] veth0_macvtap: entered promiscuous mode [ 462.623184][T17919] veth1_macvtap: entered promiscuous mode [ 462.637676][T17919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.647346][T17919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.655459][ T70] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.658424][ T70] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.682469][ T70] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.686947][ T70] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.715002][T18026] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4418'. [ 462.723338][T18026] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4418'. [ 462.730093][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.742554][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.755625][ T1182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.773646][ T1182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.912539][ T5947] Bluetooth: hci2: command tx timeout [ 463.052629][T18045] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4426'. [ 463.056873][T18045] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4426'. [ 463.142485][ T39] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 463.220105][ T40] audit: type=1326 audit(1774990418.301:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18048 comm="syz.6.4428" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6f6c code=0x7ffc0000 [ 463.227090][ T40] audit: type=1326 audit(1774990418.301:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18048 comm="syz.6.4428" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6f6c code=0x7ffc0000 [ 463.239602][ T40] audit: type=1326 audit(1774990418.311:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18048 comm="syz.6.4428" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fc6f6c code=0x7ffc0000 [ 463.246916][ T40] audit: type=1326 audit(1774990418.311:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18048 comm="syz.6.4428" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6f6c code=0x7ffc0000 [ 463.253764][ T40] audit: type=1326 audit(1774990418.311:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18048 comm="syz.6.4428" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6f6c code=0x7ffc0000 [ 463.260629][ T40] audit: type=1326 audit(1774990418.321:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18048 comm="syz.6.4428" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7fc6f6c code=0x7ffc0000 [ 463.267476][ T40] audit: type=1326 audit(1774990418.321:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18048 comm="syz.6.4428" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6f6c code=0x7ffc0000 [ 463.274897][ T40] audit: type=1326 audit(1774990418.321:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18048 comm="syz.6.4428" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7fc6f6c code=0x7ffc0000 [ 463.281974][ T40] audit: type=1326 audit(1774990418.321:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18048 comm="syz.6.4428" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6f6c code=0x7ffc0000 [ 463.289599][ T40] audit: type=1326 audit(1774990418.321:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18048 comm="syz.6.4428" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7fc6f6c code=0x7ffc0000 [ 463.302439][ T39] usb 10-1: Using ep0 maxpacket: 16 [ 463.314143][ T39] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.318234][ T39] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.321905][ T39] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 463.337459][ T39] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 463.340805][ T39] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.353093][ T39] usb 10-1: config 0 descriptor?? [ 463.977043][ T39] hid (null): invalid report_size 2022881026 [ 463.983348][ T39] shield 0003:0955:7214.002C: invalid report_size 2022881026 [ 463.985791][ T39] shield 0003:0955:7214.002C: item 0 4 1 7 parsing failed [ 463.988621][ T39] shield 0003:0955:7214.002C: Parse failed [ 463.995639][ T39] shield 0003:0955:7214.002C: probe with driver shield failed with error -22 [ 464.180543][ T39] usb 10-1: USB disconnect, device number 41 [ 464.997051][ T5947] Bluetooth: hci2: command tx timeout [ 465.682537][ T29] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 465.832495][ T29] usb 10-1: Using ep0 maxpacket: 16 [ 465.836488][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.840997][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.844945][ T29] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 465.849103][ T29] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 465.852072][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.856919][ T29] usb 10-1: config 0 descriptor?? [ 466.155567][T18113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.229029][T18115] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4449'. [ 466.466065][ T29] hid (null): invalid report_size 2022881026 [ 466.488756][ T29] shield 0003:0955:7214.002D: invalid report_size 2022881026 [ 466.491381][ T29] shield 0003:0955:7214.002D: item 0 4 1 7 parsing failed [ 466.494573][ T29] shield 0003:0955:7214.002D: Parse failed [ 466.496563][ T29] shield 0003:0955:7214.002D: probe with driver shield failed with error -22 [ 466.670802][ T6030] usb 10-1: USB disconnect, device number 42 [ 466.885263][T18123] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4454'. [ 467.074452][ T5947] Bluetooth: hci2: command tx timeout [ 467.502492][ T39] usb 10-1: new full-speed USB device number 43 using dummy_hcd [ 467.639984][T18142] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 467.684103][ T39] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.692430][ T39] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 467.696268][ T39] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 467.699895][ T39] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 467.703108][ T39] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 467.711370][ T39] usb 10-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 467.714651][ T39] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 467.717424][ T39] usb 10-1: Product: syz [ 467.718902][ T39] usb 10-1: Manufacturer: syz [ 467.720621][ T39] usb 10-1: SerialNumber: syz [ 467.724148][ T39] usb 10-1: config 0 descriptor?? [ 467.947822][ T39] radio-si470x 10-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 467.960080][ T39] radio-si470x 10-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 468.148522][ T39] radio-si470x 10-1:0.0: software version 0, hardware version 0 [ 468.151743][ T39] radio-si470x 10-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 468.156882][ T39] radio-si470x 10-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 468.355885][ T39] radio-si470x 10-1:0.0: submitting int urb failed (-90) [ 468.579569][ T39] radio-si470x 10-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 468.614533][ T39] radio-si470x 10-1:0.0: probe with driver radio-si470x failed with error -22 [ 468.672126][ T39] usb 10-1: USB disconnect, device number 43 [ 469.860438][T18185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4477'. [ 469.865209][T18185] openvswitch: netlink: Flow actions attr not present in new flow. [ 469.875109][T18185] bridge6: entered promiscuous mode [ 470.850223][T18216] qnx4: no qnx4 filesystem (no root dir). [ 472.132452][T12522] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 472.288574][T12522] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 472.354797][T12522] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 472.359482][T12522] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 472.363637][T12522] usb 6-1: Product: syz [ 472.366361][T12522] usb 6-1: Manufacturer: syz [ 472.368672][T12522] usb 6-1: SerialNumber: syz [ 472.583652][T12522] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 72 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 472.839836][ T29] usb 6-1: USB disconnect, device number 72 [ 472.844913][ T29] usblp0: removed [ 473.512949][T12522] usb 10-1: new full-speed USB device number 44 using dummy_hcd [ 473.627623][T18274] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4508'. [ 473.663570][T12522] usb 10-1: device descriptor read/64, error -71 [ 473.998307][T12522] usb 10-1: new full-speed USB device number 45 using dummy_hcd [ 474.182657][T12522] usb 10-1: device descriptor read/64, error -71 [ 474.292756][T12522] usb usb10-port1: attempt power cycle [ 474.632452][T12522] usb 10-1: new full-speed USB device number 46 using dummy_hcd [ 474.653199][T12522] usb 10-1: device descriptor read/8, error -71 [ 474.765018][ T5947] Bluetooth: hci3: Dropping invalid advertising data [ 474.768586][ T5947] Bluetooth: hci3: Malformed LE Event: 0x02 [ 474.814375][T18303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 474.872608][ T29] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 474.877861][T18304] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4518'. [ 474.972652][T12522] usb 10-1: new full-speed USB device number 47 using dummy_hcd [ 475.012881][T12522] usb 10-1: device descriptor read/8, error -71 [ 475.077820][ T29] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 475.086084][ T29] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 475.090240][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 475.093718][ T29] usb 6-1: Product: syz [ 475.095117][ T29] usb 6-1: Manufacturer: syz [ 475.097104][ T29] usb 6-1: SerialNumber: syz [ 475.122674][T12522] usb usb10-port1: unable to enumerate USB device [ 475.331929][ T29] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 73 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 475.593534][ T29] usb 6-1: USB disconnect, device number 73 [ 475.596910][ T29] usblp0: removed [ 476.326624][T18334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4530'. [ 476.412704][T12522] usb 10-1: new low-speed USB device number 48 using dummy_hcd [ 476.555463][T18336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.573870][T12522] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 476.577097][T12522] usb 10-1: config 0 has no interface number 0 [ 476.579245][T12522] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 476.587658][T12522] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 476.593000][T12522] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 476.598134][T12522] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 476.614506][T12522] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 476.621728][T12522] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 476.627298][T12522] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 476.630309][T12522] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.634804][T12522] usb 10-1: config 0 descriptor?? [ 476.644828][T18328] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 476.652612][T18328] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 476.658866][T12522] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 476.808601][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 476.808618][ T40] audit: type=1326 audit(1774990431.891:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18359 comm="syz.7.4540" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 476.820127][ T40] audit: type=1326 audit(1774990431.891:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18359 comm="syz.7.4540" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 476.827190][ T40] audit: type=1326 audit(1774990431.891:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18359 comm="syz.7.4540" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 476.839882][ T40] audit: type=1326 audit(1774990431.891:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18359 comm="syz.7.4540" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 476.850023][ T40] audit: type=1326 audit(1774990431.891:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18359 comm="syz.7.4540" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 476.862492][ T34] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 476.869875][ T9908] usb 10-1: USB disconnect, device number 48 [ 476.873859][ T9908] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 477.032517][ T34] usb 6-1: Using ep0 maxpacket: 16 [ 477.036469][ T34] usb 6-1: config 251 has an invalid interface number: 202 but max is 0 [ 477.040599][ T34] usb 6-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 477.052429][ T34] usb 6-1: config 251 has no interface number 0 [ 477.055116][ T34] usb 6-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 477.059629][ T34] usb 6-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 477.069033][ T34] usb 6-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 477.079223][ T34] usb 6-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 477.084146][ T34] usb 6-1: config 251 interface 202 has no altsetting 0 [ 477.088985][ T34] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 477.093541][ T34] usb 6-1: New USB device strings: Mfr=0, Product=8, SerialNumber=3 [ 477.097639][ T34] usb 6-1: Product: syz [ 477.099976][ T34] usb 6-1: SerialNumber: syz [ 477.315451][ T34] gspca_main: spca501-2.14.0 probing 0000:0000 [ 477.317766][ T34] gspca_spca501: reg write: error -71 [ 477.319443][ T34] spca501 6-1:251.202: Reg write failed for 0x02,0x0f,0x05 [ 477.321850][ T34] spca501 6-1:251.202: probe with driver spca501 failed with error -22 [ 477.334290][ T34] usb 6-1: USB disconnect, device number 74 [ 478.304695][T18395] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.4554' sets config #-1 [ 479.185999][T18414] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4560'. [ 480.106201][T18441] netlink: 'syz.6.4570': attribute type 51 has an invalid length. [ 480.110582][T18441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.114067][T18441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.120012][T18441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.123678][T18441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.128044][T18441] batman_adv: batadv0: Removing interface: gretap2 [ 480.131718][T18441] batman_adv: batadv0: Interface deactivated: macvtap1 [ 480.135610][T18441] batman_adv: batadv0: Removing interface: macvtap1 [ 480.804368][T18483] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.4587' sets config #-1 [ 481.631136][T18518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 481.843018][T18523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4596'. [ 482.562499][ T9908] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 482.594058][T18550] binder: 18543:18550 ioctl c0306201 0 returned -14 [ 482.732471][ T9908] usb 6-1: Using ep0 maxpacket: 8 [ 482.737651][ T9908] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 482.742000][ T9908] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 482.746119][ T9908] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 482.750491][ T9908] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 482.754997][ T9908] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 482.761560][ T9908] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 482.765516][ T9908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.983486][ T9908] usb 6-1: GET_CAPABILITIES returned 0 [ 482.985571][ T9908] usbtmc 6-1:16.0: can't read capabilities [ 483.113402][T18560] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4614'. [ 483.116952][T18560] openvswitch: netlink: Flow actions attr not present in new flow. [ 483.128496][T18560] bridge5: entered promiscuous mode [ 483.193628][ T9908] usb 6-1: USB disconnect, device number 75 [ 483.439004][T18576] overlayfs: missing 'lowerdir' [ 483.661880][T18580] vxcan1 speed is unknown, defaulting to 1000 [ 483.665982][T18580] vxcan1 speed is unknown, defaulting to 1000 [ 483.669499][T18580] vxcan1 speed is unknown, defaulting to 1000 [ 483.718937][ T40] audit: type=1326 audit(1774990438.801:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18577 comm="syz.7.4621" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 483.722461][T11633] usb 10-1: new full-speed USB device number 49 using dummy_hcd [ 483.738589][ T40] audit: type=1326 audit(1774990438.801:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18577 comm="syz.7.4621" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 483.762324][ T40] audit: type=1326 audit(1774990438.821:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18577 comm="syz.7.4621" exe="/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 483.773065][ T40] audit: type=1326 audit(1774990438.821:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18577 comm="syz.7.4621" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 483.782223][ T40] audit: type=1326 audit(1774990438.821:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18577 comm="syz.7.4621" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 483.790567][ T40] audit: type=1326 audit(1774990438.821:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18577 comm="syz.7.4621" exe="/syz-executor" sig=0 arch=40000003 syscall=271 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 483.797786][ T40] audit: type=1326 audit(1774990438.821:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18577 comm="syz.7.4621" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 483.805064][ T40] audit: type=1326 audit(1774990438.821:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18577 comm="syz.7.4621" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 483.812148][ T40] audit: type=1326 audit(1774990438.821:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18577 comm="syz.7.4621" exe="/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 483.819611][ T40] audit: type=1326 audit(1774990438.821:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18577 comm="syz.7.4621" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 483.845579][ T9908] vxcan1 speed is unknown, defaulting to 1000 [ 483.851592][T18580] infiniband syz2: set active [ 483.862431][T18580] infiniband syz2: added vxcan1 [ 483.899122][T11633] usb 10-1: unable to get BOS descriptor or descriptor too short [ 483.902101][T11633] usb 10-1: not running at top speed; connect to a high speed hub [ 483.926686][T11633] usb 10-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40 [ 483.938511][T11633] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.968982][T11633] usb 10-1: Product: syz [ 483.971625][T11633] usb 10-1: Manufacturer: syz [ 483.974501][T11633] usb 10-1: SerialNumber: syz [ 483.978004][T18580] RDS/IB: syz2: added [ 483.979604][T18580] smc: adding ib device syz2 with port count 1 [ 483.985950][T18580] smc: ib device syz2 port 1 has no pnetid [ 483.988040][ T9908] vxcan1 speed is unknown, defaulting to 1000 [ 483.990921][T18580] vxcan1 speed is unknown, defaulting to 1000 [ 484.427287][T18580] vxcan1 speed is unknown, defaulting to 1000 [ 484.619904][T18580] vxcan1 speed is unknown, defaulting to 1000 [ 484.717576][T18580] vxcan1 speed is unknown, defaulting to 1000 [ 485.275461][T18618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.337842][T18621] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4627'. [ 485.988388][T11633] usb 10-1: can't set first interface for hiFace device. [ 485.993735][T11633] snd-usb-hiface 10-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 486.000434][T11633] usb 10-1: can't set first interface for hiFace device. [ 486.003576][T11633] snd-usb-hiface 10-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 486.015203][T11633] usb 10-1: USB disconnect, device number 49 [ 486.027661][T18636] udevd[18636]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 486.999434][ T5300] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 487.013313][ T5300] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 487.017233][ T5300] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 487.021190][ T5300] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 487.028637][ T5300] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 487.093037][ T29] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 487.093789][ T1150] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.197327][T18661] vxcan1 speed is unknown, defaulting to 1000 [ 487.252504][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 487.255694][ T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.259081][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 487.272407][ T29] usb 6-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 487.275547][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.280816][ T29] usb 6-1: config 0 descriptor?? [ 487.284572][ T29] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 487.334925][ T1150] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.410554][ T1150] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.440727][T18661] chnl_net:caif_netlink_parms(): no params data found [ 487.532211][ T1150] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.703481][T18661] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.710658][T18661] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.722604][T18661] bridge_slave_0: entered allmulticast mode [ 487.731792][T18661] bridge_slave_0: entered promiscuous mode [ 487.745785][T18661] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.748253][T18661] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.754525][T18661] bridge_slave_1: entered allmulticast mode [ 487.758909][T18661] bridge_slave_1: entered promiscuous mode [ 487.856453][ T1150] bridge_slave_1: left allmulticast mode [ 487.861418][ T1150] bridge_slave_1: left promiscuous mode [ 487.865049][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.872278][ T1150] bridge_slave_0: left allmulticast mode [ 487.874681][ T1150] bridge_slave_0: left promiscuous mode [ 487.876887][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.023748][ T1150] bond2 (unregistering): (slave gretap1): Releasing active interface [ 488.026745][ T1150] gretap1 (unregistering): left allmulticast mode [ 488.107008][ T1150] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 488.422114][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.432772][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.441171][ T1150] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 488.445872][ T1150] bond0 (unregistering): Released all slaves [ 488.451191][ T1150] bond1 (unregistering): Released all slaves [ 488.470101][ T1150] bond2 (unregistering): Released all slaves [ 488.534784][T18661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.548015][T18661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.586923][ T1150] tipc: Disabling bearer [ 488.590516][ T1150] tipc: Left network mode [ 488.597157][T18661] team0: Port device team_slave_0 added [ 488.601572][T18661] team0: Port device team_slave_1 added [ 488.658808][T18661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.661343][T18661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.673050][T18661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.691352][T18692] trusted_key: encrypted_key: insufficient parameters specified [ 488.767875][T18661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.770314][T18661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.779036][T18661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.974620][T18661] hsr_slave_0: entered promiscuous mode [ 488.979439][T18661] hsr_slave_1: entered promiscuous mode [ 489.082487][ T5947] Bluetooth: hci1: command tx timeout [ 489.652213][T12522] usb 6-1: USB disconnect, device number 76 [ 489.660153][ T1150] batadv_slave_0: left promiscuous mode [ 489.662110][ T1150] veth1_macvtap: left promiscuous mode [ 489.683769][ T1150] veth0_macvtap: left promiscuous mode [ 489.685679][ T1150] veth1_vlan: left promiscuous mode [ 489.687484][ T1150] veth0_vlan: left promiscuous mode [ 489.768313][T18711] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4654'. [ 489.933886][T18716] loop2: detected capacity change from 0 to 7 [ 489.943165][T18636] Dev loop2: unable to read RDB block 7 [ 489.945109][T18636] loop2: AHDI p1 p2 p3 [ 489.946557][T18636] loop2: partition table partially beyond EOD, truncated [ 489.954768][T18636] loop2: p1 start 1601398130 is beyond EOD, truncated [ 489.957209][T18636] loop2: p2 start 1702059890 is beyond EOD, truncated [ 489.963629][T18716] Dev loop2: unable to read RDB block 7 [ 489.966095][T18716] loop2: AHDI p1 p2 p3 [ 489.967636][T18716] loop2: partition table partially beyond EOD, truncated [ 489.970793][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 489.978739][T18716] loop2: p1 start 1601398130 is beyond EOD, truncated [ 489.981206][T18716] loop2: p2 start 1702059890 is beyond EOD, truncated [ 489.987505][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 490.051952][ T5348] Dev loop2: unable to read RDB block 7 [ 490.057392][ T5348] loop2: AHDI p1 p2 p3 [ 490.062467][ T5348] loop2: partition table partially beyond EOD, truncated [ 490.068381][ T5348] loop2: p1 start 1601398130 is beyond EOD, truncated [ 490.071306][ T5348] loop2: p2 start 1702059890 is beyond EOD, truncated [ 490.332732][T18661] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 490.368184][T18661] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 490.372784][T18661] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 490.377129][T18661] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 490.417562][T18732] overlayfs: missing 'lowerdir' [ 490.480049][T18661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.494410][T18661] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.527098][T18661] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 490.532829][T18661] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 490.586615][T18743] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4662'. [ 490.626535][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.628813][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.634719][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.637237][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.914432][ T1150] IPVS: stop unused estimator thread 0... [ 491.055758][T18661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.116482][T18762] loop2: detected capacity change from 0 to 7 [ 491.120168][T18636] Dev loop2: unable to read RDB block 7 [ 491.122049][T18636] loop2: AHDI p1 p2 p3 [ 491.123754][T18636] loop2: partition table partially beyond EOD, truncated [ 491.126458][T18636] loop2: p1 start 1601398130 is beyond EOD, truncated [ 491.129778][T18636] loop2: p2 start 1702059890 is beyond EOD, truncated [ 491.222936][ T5947] Bluetooth: hci1: command tx timeout [ 491.275458][T18762] Dev loop2: unable to read RDB block 7 [ 491.281295][T18762] loop2: AHDI p1 p2 p3 [ 491.287021][T18762] loop2: partition table partially beyond EOD, truncated [ 491.292752][T18762] loop2: p1 start 1601398130 is beyond EOD, truncated [ 491.302620][T18762] loop2: p2 start 1702059890 is beyond EOD, truncated [ 492.018978][T18661] veth0_vlan: entered promiscuous mode [ 492.038830][T18661] veth1_vlan: entered promiscuous mode [ 492.079139][T18661] veth0_macvtap: entered promiscuous mode [ 492.093922][T18661] veth1_macvtap: entered promiscuous mode [ 492.102640][T18661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.110341][T18661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.127092][ T59] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.132188][ T59] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.146975][ T59] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.151103][ T59] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.220818][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.223672][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.245809][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.248504][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.340256][T18736] syz.7.4660 (18736) used greatest stack depth: 19632 bytes left [ 492.500077][T18781] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 492.706143][ T6012] libceph: connect (1)[c::]:6789 error -101 [ 492.708939][ T6012] libceph: mon0 (1)[c::]:6789 connect error [ 492.714975][ T6012] libceph: connect (1)[c::]:6789 error -101 [ 492.717873][ T6012] libceph: mon0 (1)[c::]:6789 connect error [ 492.857560][T18788] ceph: No mds server is up or the cluster is laggy [ 492.962625][ T6012] usb 11-1: new low-speed USB device number 38 using dummy_hcd [ 493.024800][T18799] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.4673' sets config #-1 [ 493.134570][ T6012] usb 11-1: config 0 has an invalid interface number: 55 but max is 0 [ 493.137472][ T6012] usb 11-1: config 0 has no interface number 0 [ 493.140086][ T6012] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 493.153579][ T6012] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 493.157443][ T6012] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 493.162097][ T6012] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 493.165467][T18804] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4675'. [ 493.168410][ T6012] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 493.175449][ T6012] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 493.180536][ T6012] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 493.184938][ T6012] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.191405][ T6012] usb 11-1: config 0 descriptor?? [ 493.194944][T18792] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 493.197544][T18792] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 493.202614][ T6012] ldusb 11-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 493.242903][ T5947] Bluetooth: hci1: command tx timeout [ 493.410722][ T50] usb 11-1: USB disconnect, device number 38 [ 493.414496][ T50] ldusb 11-1:0.55: LD USB Device #0 now disconnected [ 493.536242][T18826] loop6: detected capacity change from 0 to 2640 [ 493.541429][T18636] buffer_io_error: 43 callbacks suppressed [ 493.541447][T18636] Buffer I/O error on dev loop6, logical block 0, async page read [ 493.547550][T18636] Buffer I/O error on dev loop6, logical block 0, async page read [ 493.551175][T18636] Buffer I/O error on dev loop6, logical block 0, async page read [ 493.554010][T18636] Buffer I/O error on dev loop6, logical block 0, async page read [ 493.557373][T18636] Buffer I/O error on dev loop6, logical block 0, async page read [ 493.560429][T18636] Buffer I/O error on dev loop6, logical block 0, async page read [ 493.564207][T18636] Buffer I/O error on dev loop6, logical block 0, async page read [ 493.567439][T18636] Buffer I/O error on dev loop6, logical block 0, async page read [ 493.569985][T18636] ldm_validate_partition_table(): Disk read failed. [ 493.574685][T18636] Buffer I/O error on dev loop6, logical block 0, async page read [ 493.577967][T18636] Buffer I/O error on dev loop6, logical block 0, async page read [ 493.580825][T18636] Dev loop6: unable to read RDB block 0 [ 493.583325][T18636] loop6: unable to read partition table [ 493.607330][T18826] ldm_validate_partition_table(): Disk read failed. [ 493.637606][T18826] Dev loop6: unable to read RDB block 0 [ 493.694500][T18826] loop6: unable to read partition table [ 493.706764][T18826] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 493.942009][ T5348] ldm_validate_partition_table(): Disk read failed. [ 493.945173][ T5348] Dev loop6: unable to read RDB block 0 [ 493.947718][ T5348] loop6: unable to read partition table [ 494.031044][T18846] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 495.322884][ T5947] Bluetooth: hci1: command tx timeout [ 495.992213][T18892] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4708'. [ 497.782252][T18940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4731'. [ 497.871700][T18949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 497.979785][T18951] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4729'. [ 498.000957][T18955] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4734'. [ 498.001355][T18955] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4734'. [ 498.324166][ T6012] usb 6-1: new low-speed USB device number 77 using dummy_hcd [ 498.474162][ T6012] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 498.478188][ T6012] usb 6-1: config 0 has no interface number 0 [ 498.481273][ T6012] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 498.486712][ T6012] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 498.491305][ T6012] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 498.497570][ T6012] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 498.502314][ T6012] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 498.507358][ T6012] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 498.511595][ T6012] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 498.516846][ T6012] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.522008][ T6012] usb 6-1: config 0 descriptor?? [ 498.525310][T18960] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 498.527629][T18960] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 498.536334][ T6012] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 498.676297][T11633] libceph: connect (1)[c::]:6789 error -101 [ 498.679025][T11633] libceph: mon0 (1)[c::]:6789 connect error [ 498.729070][T18970] ceph: No mds server is up or the cluster is laggy [ 498.735487][ T6012] usb 6-1: USB disconnect, device number 77 [ 498.746547][ T6012] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 499.932505][ T6012] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 500.105948][ T6012] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 500.115025][ T6012] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 500.119626][ T6012] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 500.124133][ T6012] usb 6-1: Product: syz [ 500.127512][ T6012] usb 6-1: Manufacturer: syz [ 500.129827][ T6012] usb 6-1: SerialNumber: syz [ 500.361759][ T6012] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 78 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 500.613708][ T9908] usb 6-1: USB disconnect, device number 78 [ 500.618482][ T9908] usblp0: removed [ 500.796377][T19002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.868009][T19003] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4747'. [ 501.163273][T19008] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4748'. [ 501.519734][T19019] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4752'. [ 501.524729][T19019] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4752'. [ 501.563557][T19020] overlayfs: missing 'lowerdir' [ 502.368968][T19029] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4756'. [ 502.471398][T19038] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4757'. [ 502.493924][T19037] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4758'. [ 503.536328][T19081] usb usb7: usbfs: process 19081 (syz.5.4767) did not claim interface 0 before use [ 503.594632][T19083] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4768'. [ 503.909411][ T5300] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 503.914852][ T5300] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 503.920050][ T5300] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 503.925558][ T5300] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 503.928163][ T5300] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 503.965532][T19092] vxcan1 speed is unknown, defaulting to 1000 [ 504.501314][T19092] chnl_net:caif_netlink_parms(): no params data found [ 504.610450][T19092] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.622463][T19092] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.624715][T19092] bridge_slave_0: entered allmulticast mode [ 504.627654][T19092] bridge_slave_0: entered promiscuous mode [ 504.643320][T19092] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.645983][T19092] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.648588][T19092] bridge_slave_1: entered allmulticast mode [ 504.651548][T19092] bridge_slave_1: entered promiscuous mode [ 504.698192][T19092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.705656][T19092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.809593][T19092] team0: Port device team_slave_0 added [ 504.814527][T19092] team0: Port device team_slave_1 added [ 505.009904][T19092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.013241][T19092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.025030][T19092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.031486][T19092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.036121][T19092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.048011][T19092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.105671][T19092] hsr_slave_0: entered promiscuous mode [ 505.110779][T19092] hsr_slave_1: entered promiscuous mode [ 505.116205][T19092] debugfs: 'hsr0' already exists in 'hsr' [ 505.120201][T19092] Cannot create hsr debugfs directory [ 505.212560][ T29] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 505.384619][ T29] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 505.404111][ T29] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 505.408026][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 505.411497][ T29] usb 10-1: Product: syz [ 505.422815][ T29] usb 10-1: Manufacturer: syz [ 505.425023][ T29] usb 10-1: SerialNumber: syz [ 505.487726][T19092] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.628784][T19092] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.652406][ T29] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 50 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 505.719650][T19092] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.745346][T19123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4777'. [ 505.854542][T19092] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.913743][ T29] usb 10-1: USB disconnect, device number 50 [ 505.917401][ T29] usblp0: removed [ 505.954865][ T5947] Bluetooth: hci3: command tx timeout [ 505.961820][ T13] bridge_slave_1: left allmulticast mode [ 505.964438][ T13] bridge_slave_1: left promiscuous mode [ 505.967445][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.974291][ T13] bridge_slave_0: left allmulticast mode [ 505.976580][ T13] bridge_slave_0: left promiscuous mode [ 505.979093][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.035594][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.037988][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.220474][T19135] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4782'. [ 506.360950][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.379013][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.387580][ T13] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 506.392021][ T13] bond0 (unregistering): Released all slaves [ 506.462167][T19092] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 506.511804][T19092] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 506.544070][ T13] IPVS: stopping master sync thread 14994 ... [ 506.546242][T19092] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 506.608689][T19092] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 506.795976][T19092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.796248][T19152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.811308][T19092] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.819797][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.822506][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.847549][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.850613][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.893767][T19153] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4784'. [ 507.011140][ T13] hsr_slave_0: left promiscuous mode [ 507.018810][ T13] hsr_slave_1: left promiscuous mode [ 507.020907][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.092399][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.099602][ T13] veth1_macvtap: left promiscuous mode [ 507.101374][ T13] veth0_macvtap: left promiscuous mode [ 507.241582][ T13] team_slave_1 (unregistering): left promiscuous mode [ 507.245671][ T13] team0 (unregistering): Port device team_slave_1 removed [ 507.261403][ T13] C (unregistering): left promiscuous mode [ 507.298678][ T13] team0 (unregistering): Port device C removed [ 507.340805][ T211] smc: removing ib device syz2 [ 507.432868][T12537] vxcan1 speed is unknown, defaulting to 1000 [ 507.434978][T12537] syz2: Port: 1 Link DOWN [ 507.522441][T19169] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4785'. [ 507.581039][T19092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.756381][T19171] overlayfs: missing 'lowerdir' [ 507.971543][T19186] loop2: detected capacity change from 0 to 7 [ 507.979836][T19186] Dev loop2: unable to read RDB block 7 [ 507.988689][T19186] loop2: AHDI p1 p2 p3 [ 507.995987][T19186] loop2: partition table partially beyond EOD, truncated [ 507.999277][T19186] loop2: p1 start 1601398130 is beyond EOD, truncated [ 508.012576][T19186] loop2: p2 start 1702059890 is beyond EOD, truncated [ 508.042525][ T5947] Bluetooth: hci3: command tx timeout [ 508.212417][ T1929] usb 10-1: new full-speed USB device number 51 using dummy_hcd [ 508.357789][T19092] veth0_vlan: entered promiscuous mode [ 508.364968][ T1929] usb 10-1: unable to get BOS descriptor or descriptor too short [ 508.371720][ T1929] usb 10-1: not running at top speed; connect to a high speed hub [ 508.374351][T19092] veth1_vlan: entered promiscuous mode [ 508.379885][ T1929] usb 10-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40 [ 508.386588][ T1929] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.395035][ T1929] usb 10-1: Product: syz [ 508.399226][ T1929] usb 10-1: Manufacturer: syz [ 508.403906][ T1929] usb 10-1: SerialNumber: syz [ 508.420401][T19092] veth0_macvtap: entered promiscuous mode [ 508.430314][T19092] veth1_macvtap: entered promiscuous mode [ 508.451323][T19092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.462129][T19092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.480809][ T1182] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.485902][ T1182] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.492502][ T1182] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.495538][ T1182] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.025311][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.032165][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.094046][ T133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.132815][ T133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.342464][T12537] usb 11-1: new high-speed USB device number 39 using dummy_hcd [ 509.535537][T12537] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 509.546981][T12537] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 509.551189][T12537] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 509.561761][T12537] usb 11-1: Product: syz [ 509.564936][T12537] usb 11-1: Manufacturer: syz [ 509.567368][T12537] usb 11-1: SerialNumber: syz [ 509.632043][ T1929] usb 10-1: can't set first interface for hiFace device. [ 509.642544][ T1929] snd-usb-hiface 10-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 509.654956][ T1929] usb 10-1: can't set first interface for hiFace device. [ 509.657794][ T1929] snd-usb-hiface 10-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 509.664068][ T1929] usb 10-1: USB disconnect, device number 51 [ 509.690719][T18636] udevd[18636]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 509.810086][T12537] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 39 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 510.096758][ T6011] usb 11-1: USB disconnect, device number 39 [ 510.104949][ T6011] usblp0: removed [ 510.112743][ T5947] Bluetooth: hci3: command tx timeout [ 510.592684][T19202] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4794'. [ 510.667560][T19210] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.745901][T19214] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4793'. [ 510.883468][T19218] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4798'. [ 511.036105][ T5300] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 511.040344][ T5300] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 511.044338][ T5300] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 511.049348][ T5300] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 511.060776][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 511.060791][ T40] audit: type=1326 audit(1774990465.145:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19225 comm="syz.7.4800" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70bef6c code=0x0 [ 511.061250][ T5300] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 511.267102][T19222] chnl_net:caif_netlink_parms(): no params data found [ 511.361556][T19222] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.364554][T19222] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.368919][T19222] bridge_slave_0: entered allmulticast mode [ 511.383483][T19222] bridge_slave_0: entered promiscuous mode [ 511.393940][T19222] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.397138][T19222] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.400182][T19222] bridge_slave_1: entered allmulticast mode [ 511.423607][T19222] bridge_slave_1: entered promiscuous mode [ 511.438577][T19222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.443307][T19222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.463569][T19222] team0: Port device team_slave_0 added [ 511.466855][T19222] team0: Port device team_slave_1 added [ 511.484175][T19222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.486716][T19222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.495709][T19222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.500746][T19222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.503186][T19222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.512107][T19222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.547469][T19222] hsr_slave_0: entered promiscuous mode [ 511.551001][T19222] hsr_slave_1: entered promiscuous mode [ 511.553681][T19222] debugfs: 'hsr0' already exists in 'hsr' [ 511.555755][T19222] Cannot create hsr debugfs directory [ 511.580096][ T40] audit: type=1326 audit(1774990465.665:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19240 comm="syz.5.4804" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 511.592475][ T40] audit: type=1326 audit(1774990465.675:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19240 comm="syz.5.4804" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 511.602471][ T40] audit: type=1326 audit(1774990465.675:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19240 comm="syz.5.4804" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 511.612959][ T40] audit: type=1326 audit(1774990465.675:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19240 comm="syz.5.4804" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 511.623508][ T40] audit: type=1326 audit(1774990465.685:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19240 comm="syz.5.4804" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 511.633735][ T40] audit: type=1326 audit(1774990465.685:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19240 comm="syz.5.4804" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 511.645256][ T40] audit: type=1326 audit(1774990465.685:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19240 comm="syz.5.4804" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 511.655886][ T40] audit: type=1326 audit(1774990465.685:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19240 comm="syz.5.4804" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 511.664137][ T40] audit: type=1326 audit(1774990465.685:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19240 comm="syz.5.4804" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 511.805589][T19222] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.924566][T19222] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.053353][T19247] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4805'. [ 512.065792][T19222] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.080916][T19247] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4805'. [ 512.192619][ T5300] Bluetooth: hci3: command tx timeout [ 512.199016][T19222] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.439557][T19222] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 512.455883][T19222] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 512.461099][T19222] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 512.469222][T19251] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4807'. [ 512.480811][T19222] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 512.537322][T19257] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4806'. [ 512.615414][T19222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.642625][T19222] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.649255][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.652454][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.670933][ T133] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.673490][ T133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.856110][T19222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.879389][T19278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.879876][T19222] veth0_vlan: entered promiscuous mode [ 512.888779][T19222] veth1_vlan: entered promiscuous mode [ 512.909785][T19222] veth0_macvtap: entered promiscuous mode [ 512.915453][T19222] veth1_macvtap: entered promiscuous mode [ 512.925744][T19222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.934637][T19222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 512.942654][T19281] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4810'. [ 512.948094][ T133] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.955188][ T133] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.960674][ T133] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.974980][ T133] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.074001][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.076820][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.107297][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.110672][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.152589][ T5300] Bluetooth: hci0: command tx timeout [ 513.523450][ T6012] usb 6-1: new low-speed USB device number 79 using dummy_hcd [ 513.763681][ T6012] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 513.766275][ T6012] usb 6-1: config 0 has no interface number 0 [ 513.768232][ T6012] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 513.773009][ T6012] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 513.780047][ T6012] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 513.783936][ T6012] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 513.787451][ T6012] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 513.792733][ T6012] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 513.798863][ T6012] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 513.802526][ T6012] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.809437][ T6012] usb 6-1: config 0 descriptor?? [ 513.813353][T19289] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 513.816301][T19289] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 513.834662][ T6012] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 514.050300][ T6012] usb 6-1: USB disconnect, device number 79 [ 514.067012][ T6012] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 514.382586][T12537] usb 11-1: new high-speed USB device number 40 using dummy_hcd [ 514.532555][T12537] usb 11-1: Using ep0 maxpacket: 8 [ 514.629747][T12537] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 514.638082][T12537] usb 11-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 514.645852][T12537] usb 11-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=9f.7a [ 514.650113][T12537] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.655829][T12537] usb 11-1: Product: syz [ 514.657951][T12537] usb 11-1: Manufacturer: syz [ 514.659984][T12537] usb 11-1: SerialNumber: syz [ 514.666971][T12537] usb 11-1: config 0 descriptor?? [ 514.923787][ T34] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 515.083595][ T34] usb 6-1: Using ep0 maxpacket: 16 [ 515.086896][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.089305][T19312] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4821'. [ 515.090511][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.096692][T19312] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4821'. [ 515.098053][ T34] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 515.106967][ T34] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 515.110022][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.114746][ T34] usb 6-1: config 0 descriptor?? [ 515.232483][ T5300] Bluetooth: hci0: command tx timeout [ 515.415363][T19324] random: crng reseeded on system resumption [ 515.522291][ T34] shield 0003:0955:7214.002E: unknown main item tag 0x0 [ 515.524848][ T34] shield 0003:0955:7214.002E: unknown main item tag 0x0 [ 515.527223][ T34] shield 0003:0955:7214.002E: unknown main item tag 0x0 [ 515.529602][ T34] shield 0003:0955:7214.002E: unknown main item tag 0x0 [ 515.532464][ T34] shield 0003:0955:7214.002E: unknown main item tag 0x0 [ 515.537222][ T34] input: HID 0955:7214 Haptics as /devices/virtual/input/input28 [ 515.576771][ T34] shield 0003:0955:7214.002E: Registered Thunderstrike controller [ 515.581040][ T34] shield 0003:0955:7214.002E: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 515.951632][ T1929] shield 0003:0955:7214.002E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 515.951896][ T6011] usb 6-1: USB disconnect, device number 80 [ 515.955849][ T1929] shield 0003:0955:7214.002E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 515.961778][ T1929] shield 0003:0955:7214.002E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 516.742407][ T1929] usb 10-1: new low-speed USB device number 52 using dummy_hcd [ 516.746401][T19342] loop2: detected capacity change from 0 to 7 [ 516.750550][T18636] Dev loop2: unable to read RDB block 7 [ 516.754207][T18636] loop2: AHDI p1 p2 p3 [ 516.756100][T18636] loop2: partition table partially beyond EOD, truncated [ 516.759311][T18636] loop2: p1 start 1601398130 is beyond EOD, truncated [ 516.762222][T18636] loop2: p2 start 1702059890 is beyond EOD, truncated [ 516.773674][T19342] Dev loop2: unable to read RDB block 7 [ 516.775773][T19342] loop2: AHDI p1 p2 p3 [ 516.777160][T19342] loop2: partition table partially beyond EOD, truncated [ 516.779614][T19342] loop2: p1 start 1601398130 is beyond EOD, truncated [ 516.782229][T19342] loop2: p2 start 1702059890 is beyond EOD, truncated [ 516.915807][ T1929] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 516.918297][ T1929] usb 10-1: config 0 has no interface number 0 [ 516.920194][ T1929] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 516.925038][ T1929] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 516.932557][ T1929] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 516.940877][T19344] vxcan1 speed is unknown, defaulting to 1000 [ 516.943241][ T1929] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 516.950574][T19344] vxcan1 speed is unknown, defaulting to 1000 [ 516.954815][T19344] vxcan1 speed is unknown, defaulting to 1000 [ 516.969362][ T1929] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 516.973884][ T1929] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 516.978386][ T1929] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 516.981448][ T1929] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.988616][ T1929] usb 10-1: config 0 descriptor?? [ 516.991126][T19330] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 517.001755][T19330] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 517.005282][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 517.005292][ T40] audit: type=1326 audit(1774990471.095:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19339 comm="syz.1.4831" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02f6c code=0x7ffc0000 [ 517.011634][ T1929] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 517.108783][ T40] audit: type=1326 audit(1774990471.195:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19339 comm="syz.1.4831" exe="/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf7f02f6c code=0x7ffc0000 [ 517.129276][ T40] audit: type=1326 audit(1774990471.195:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19339 comm="syz.1.4831" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02f6c code=0x7ffc0000 [ 517.136644][ T40] audit: type=1326 audit(1774990471.195:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19339 comm="syz.1.4831" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02f6c code=0x7ffc0000 [ 517.144507][ T40] audit: type=1326 audit(1774990471.195:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19339 comm="syz.1.4831" exe="/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf7f02f6c code=0x7ffc0000 [ 517.153690][ T50] usb 11-1: USB disconnect, device number 40 [ 517.186228][ T40] audit: type=1326 audit(1774990471.195:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19339 comm="syz.1.4831" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02f6c code=0x7ffc0000 [ 517.197256][ T40] audit: type=1326 audit(1774990471.195:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19339 comm="syz.1.4831" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02f6c code=0x7ffc0000 [ 517.211574][ T40] audit: type=1326 audit(1774990471.195:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19339 comm="syz.1.4831" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f02f6c code=0x7ffc0000 [ 517.212923][ T1929] usb 10-1: USB disconnect, device number 52 [ 517.219744][ T40] audit: type=1326 audit(1774990471.195:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19339 comm="syz.1.4831" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02f6c code=0x7ffc0000 [ 517.221147][T19348] netlink: 'syz.6.4832': attribute type 1 has an invalid length. [ 517.227990][ T40] audit: type=1326 audit(1774990471.195:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19339 comm="syz.1.4831" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02f6c code=0x7ffc0000 [ 517.239861][T19348] netlink: 'syz.6.4832': attribute type 1 has an invalid length. [ 517.245779][ T1929] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 517.278495][T19344] infiniband syz2: set active [ 517.280526][T19350] bridge0: port 3(syz_tun) entered blocking state [ 517.281871][T19344] infiniband syz2: added vxcan1 [ 517.286641][T19350] bridge0: port 3(syz_tun) entered disabled state [ 517.289117][T19350] syz_tun: entered allmulticast mode [ 517.291868][T19350] syz_tun: entered promiscuous mode [ 517.296267][T19350] bridge0: port 3(syz_tun) entered blocking state [ 517.298474][T19350] bridge0: port 3(syz_tun) entered forwarding state [ 517.302568][T19344] RDS/IB: syz2: added [ 517.304434][T19344] smc: adding ib device syz2 with port count 1 [ 517.306948][T19344] smc: ib device syz2 port 1 has no pnetid [ 517.313128][ T5300] Bluetooth: hci0: command tx timeout [ 517.315311][T12522] vxcan1 speed is unknown, defaulting to 1000 [ 517.317721][T12537] vxcan1 speed is unknown, defaulting to 1000 [ 517.322705][T19344] vxcan1 speed is unknown, defaulting to 1000 [ 517.477619][T19344] vxcan1 speed is unknown, defaulting to 1000 [ 517.645393][T19344] vxcan1 speed is unknown, defaulting to 1000 [ 517.731643][T19344] vxcan1 speed is unknown, defaulting to 1000 [ 517.860125][T19344] vxcan1 speed is unknown, defaulting to 1000 [ 517.863761][T19370] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4836'. [ 517.915853][T19371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.976588][T19373] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4835'. [ 519.058812][T19409] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4849'. [ 519.064706][T19409] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4849'. [ 519.402480][ T5300] Bluetooth: hci0: command tx timeout [ 519.634477][T19431] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.704195][T19435] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4851'. [ 519.836335][T19437] sd 0:0:0:0: PR command failed: 1026 [ 519.838390][T19437] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 519.840834][T19437] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 520.061373][T19441] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4858'. [ 520.065717][T19441] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4858'. [ 520.545636][T19456] netlink: 15678 bytes leftover after parsing attributes in process `syz.1.4863'. [ 520.645122][T19458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.647812][T19458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.657600][T19458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.660727][T19458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.473094][ T50] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 521.634731][ T50] usb 10-1: unable to get BOS descriptor or descriptor too short [ 521.639069][ T50] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 521.643620][ T50] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 521.649884][ T50] usb 10-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 521.653885][ T50] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.657491][ T50] usb 10-1: Product: syz [ 521.659417][ T50] usb 10-1: Manufacturer: syz [ 521.661486][ T50] usb 10-1: SerialNumber: syz [ 521.702439][ T29] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 521.748512][T19475] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4868'. [ 521.753068][T19475] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4868'. [ 521.852449][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 521.855413][ T29] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 521.858631][ T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 521.863130][ T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 521.867207][ T29] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 521.872460][ T29] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 521.875862][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.964319][T19480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.076397][ T50] usb 10-1: USB disconnect, device number 53 [ 522.086035][ T29] usb 6-1: GET_CAPABILITIES returned 0 [ 522.088771][ T29] usbtmc 6-1:16.0: can't read capabilities [ 522.286211][ T34] usb 6-1: USB disconnect, device number 81 [ 522.978603][T19490] overlayfs: failed to resolve './file1': -2 [ 522.982216][T19501] bridge1: entered promiscuous mode [ 524.452455][T11633] usb 6-1: new low-speed USB device number 82 using dummy_hcd [ 524.607547][T11633] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 524.616263][T11633] usb 6-1: config 0 has no interface number 0 [ 524.618900][T11633] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 524.623668][T11633] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 524.628277][T11633] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 524.634337][T11633] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 524.639301][T11633] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 524.644239][T11633] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 524.650030][T11633] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 524.654448][T11633] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.683025][T11633] usb 6-1: config 0 descriptor?? [ 524.693045][T19513] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 524.695454][T19513] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 524.703264][T11633] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 524.928606][T12537] usb 6-1: USB disconnect, device number 82 [ 524.932304][T12537] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 525.628005][T19540] bridge1: entered promiscuous mode [ 526.192552][T11633] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 526.343645][T19556] __nla_validate_parse: 1 callbacks suppressed [ 526.343663][T19556] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4888'. [ 526.351317][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 526.351330][ T40] audit: type=1326 audit(1774990480.435:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19553 comm="syz.7.4888" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 526.362505][T11633] usb 10-1: Using ep0 maxpacket: 16 [ 526.365681][ T40] audit: type=1326 audit(1774990480.455:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19553 comm="syz.7.4888" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 526.367238][T11633] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.375455][ T40] audit: type=1326 audit(1774990480.455:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19553 comm="syz.7.4888" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 526.380797][T11633] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.395727][T11633] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 526.401762][T11633] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 526.412406][T11633] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.418556][T11633] usb 10-1: config 0 descriptor?? [ 526.836568][T11633] shield 0003:0955:7214.002F: unknown main item tag 0x0 [ 526.840864][T11633] shield 0003:0955:7214.002F: unknown main item tag 0x0 [ 526.844193][T11633] shield 0003:0955:7214.002F: unknown main item tag 0x0 [ 526.846636][T11633] shield 0003:0955:7214.002F: unknown main item tag 0x0 [ 526.850867][T11633] shield 0003:0955:7214.002F: unknown main item tag 0x0 [ 526.856983][T11633] input: HID 0955:7214 Haptics as /devices/virtual/input/input30 [ 526.940200][T11633] shield 0003:0955:7214.002F: Registered Thunderstrike controller [ 526.950033][T11633] shield 0003:0955:7214.002F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 527.045974][T19550] random: crng reseeded on system resumption [ 527.169678][T19575] syz_tun: entered promiscuous mode [ 527.172291][T19575] macvtap1: entered promiscuous mode [ 527.255619][ T34] shield 0003:0955:7214.002F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 527.259574][ T34] shield 0003:0955:7214.002F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 527.263747][ T1929] usb 10-1: USB disconnect, device number 54 [ 527.266019][ T34] shield 0003:0955:7214.002F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 527.273062][T11633] thermal thermal_zone0: Temperature check failed (-19) [ 528.102483][ T50] usb 6-1: new low-speed USB device number 83 using dummy_hcd [ 528.264451][ T50] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 528.268303][ T50] usb 6-1: config 0 has no interface number 0 [ 528.271306][ T50] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 528.277023][ T50] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 528.281483][ T50] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 528.286592][ T50] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 528.301510][ T50] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 528.306509][ T50] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 528.313632][ T50] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 528.318029][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.325470][ T50] usb 6-1: config 0 descriptor?? [ 528.328603][T19592] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 528.331821][T19592] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 528.344340][ T50] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 528.542862][T11633] usb 6-1: USB disconnect, device number 83 [ 528.549140][T11633] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 528.884927][T19610] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4905'. [ 529.262477][ T50] usb 11-1: new high-speed USB device number 41 using dummy_hcd [ 529.414224][ T50] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 529.417181][ T50] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.421617][ T50] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 529.426327][ T50] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.432650][ T50] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 529.436853][ T50] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 529.440609][ T50] usb 11-1: Product: syz [ 529.442793][ T50] usb 11-1: Manufacturer: syz [ 529.449150][ T50] cdc_wdm 11-1:1.0: skipping garbage [ 529.451402][ T50] cdc_wdm 11-1:1.0: skipping garbage [ 529.454829][ T50] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 529.457117][ T50] cdc_wdm 11-1:1.0: Unknown control protocol [ 529.660557][ T50] usb 11-1: USB disconnect, device number 41 [ 530.021373][T19643] netlink: 256 bytes leftover after parsing attributes in process `syz.7.4914'. [ 530.102486][T11633] usb 11-1: new high-speed USB device number 42 using dummy_hcd [ 530.254062][T11633] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 530.257258][T11633] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 530.261139][T11633] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 530.264351][T11633] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.270281][T11633] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 530.274355][T11633] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 530.277336][T11633] usb 11-1: Product: syz [ 530.278902][T11633] usb 11-1: Manufacturer: syz [ 530.285037][T11633] cdc_wdm 11-1:1.0: skipping garbage [ 530.286785][T11633] cdc_wdm 11-1:1.0: skipping garbage [ 530.291637][T11633] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 530.293889][T11633] cdc_wdm 11-1:1.0: Unknown control protocol [ 530.799917][T19656] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4920'. [ 530.901269][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 530.903977][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 530.906841][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 530.909708][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 530.913153][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 530.915949][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 530.918430][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 530.921082][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 530.923723][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 530.925926][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 530.929426][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 530.932381][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 530.936456][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 530.939115][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 530.942016][T11633] usb 11-1: USB disconnect, device number 42 [ 530.944550][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 530.944571][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 530.944586][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 531.013498][ T1929] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 531.173789][ T1929] usb 6-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 531.176596][ T1929] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 531.181064][ T1929] usb 6-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 531.184132][ T1929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.187262][ T1929] usb 6-1: Product: syz [ 531.188806][ T1929] usb 6-1: Manufacturer: syz [ 531.190469][ T1929] usb 6-1: SerialNumber: syz [ 531.193835][ T1929] usb 6-1: config 0 descriptor?? [ 531.260490][T19675] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4924'. [ 531.552153][T19681] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4927'. [ 531.557173][T19681] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4927'. [ 531.680829][T19690] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4930'. [ 531.805964][ T1929] mos7840 6-1:0.0: required endpoints missing [ 531.812823][T19688] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4931'. [ 531.814289][ T1929] usb 6-1: USB disconnect, device number 84 [ 532.112719][T19722] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4939'. [ 532.116845][T19722] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4939'. [ 532.614092][T19734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4942'. [ 533.028162][T19743] loop2: detected capacity change from 0 to 7 [ 533.031586][T19743] Dev loop2: unable to read RDB block 7 [ 533.034228][T19743] loop2: AHDI p1 p2 p3 [ 533.036061][T19743] loop2: partition table partially beyond EOD, truncated [ 533.038610][T19743] loop2: p1 start 1601398130 is beyond EOD, truncated [ 533.041447][T19743] loop2: p2 start 1702059890 is beyond EOD, truncated [ 533.239998][T19752] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4948'. [ 533.273332][T19752] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4948'. [ 533.639161][T19763] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4951'. [ 533.792623][ T5348] Dev loop2: unable to read RDB block 7 [ 533.794813][ T5348] loop2: AHDI p1 p2 p3 [ 533.796399][ T5348] loop2: partition table partially beyond EOD, truncated [ 533.799413][ T5348] loop2: p1 start 1601398130 is beyond EOD, truncated [ 533.801880][ T5348] loop2: p2 start 1702059890 is beyond EOD, truncated [ 534.112527][ T6011] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 534.272563][ T6011] usb 6-1: Using ep0 maxpacket: 32 [ 534.278685][ T6011] usb 6-1: config 0 has an invalid descriptor of length 115, skipping remainder of the config [ 534.285465][ T6011] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 534.295698][ T6011] usb 6-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 534.307373][ T6011] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.333335][ T6011] usb 6-1: config 0 descriptor?? [ 534.741310][T19792] netlink: 'syz.5.4958': attribute type 2 has an invalid length. [ 534.747967][T19792] netlink: 'syz.5.4958': attribute type 1 has an invalid length. [ 534.751828][T19792] netlink: 'syz.5.4958': attribute type 1 has an invalid length. [ 535.672511][T12537] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 535.832419][T12537] usb 10-1: Using ep0 maxpacket: 8 [ 535.844926][T12537] usb 10-1: unable to get BOS descriptor or descriptor too short [ 535.849386][T12537] usb 10-1: config 127 has an invalid interface number: 127 but max is 0 [ 535.858456][T12537] usb 10-1: config 127 has no interface number 0 [ 535.861289][T12537] usb 10-1: config 127 interface 127 has no altsetting 0 [ 535.875074][T12537] usb 10-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=df.89 [ 535.879803][T12537] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.883654][T12537] usb 10-1: Product: syz [ 535.885686][T12537] usb 10-1: Manufacturer: syz [ 535.887707][T12537] usb 10-1: SerialNumber: syz [ 536.023141][T19819] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 536.243926][T12537] redrat3 10-1:127.127: Couldn't find all endpoints [ 536.252057][T12537] usb 10-1: USB disconnect, device number 55 [ 536.289028][ T6011] usb 6-1: string descriptor 0 read error: -71 [ 536.296833][ T6011] usb 6-1: USB disconnect, device number 85 [ 536.723996][T19822] __nla_validate_parse: 2 callbacks suppressed [ 536.724011][T19822] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4967'. [ 537.342385][T19840] loop2: detected capacity change from 0 to 7 [ 537.345539][T18636] Dev loop2: unable to read RDB block 7 [ 537.347328][T18636] loop2: AHDI p1 p2 p3 [ 537.348765][T18636] loop2: partition table partially beyond EOD, truncated [ 537.351734][T18636] loop2: p1 start 1601398130 is beyond EOD, truncated [ 537.356546][T18636] loop2: p2 start 1702059890 is beyond EOD, truncated [ 537.395742][T19840] Dev loop2: unable to read RDB block 7 [ 537.398115][T19840] loop2: AHDI p1 p2 p3 [ 537.400075][T19840] loop2: partition table partially beyond EOD, truncated [ 537.421027][T19840] loop2: p1 start 1601398130 is beyond EOD, truncated [ 537.423678][T19840] loop2: p2 start 1702059890 is beyond EOD, truncated [ 537.912510][T12537] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 538.063236][T12537] usb 10-1: Using ep0 maxpacket: 16 [ 538.074381][T12537] usb 10-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.078801][T12537] usb 10-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.083415][T12537] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 538.087480][T12537] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.109971][T19855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4976'. [ 538.185755][T19857] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4977'. [ 538.190037][T19857] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4977'. [ 538.472559][ T9908] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 538.501491][T12537] mcp2221 0003:04D8:00DD.0030: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 538.642497][ T9908] usb 6-1: Using ep0 maxpacket: 8 [ 538.647448][ T9908] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 538.650852][ T9908] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 538.655278][ T9908] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 538.659382][ T9908] usb 6-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 538.666641][ T9908] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 538.671797][ T9908] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 538.679449][ T9908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.694775][ T9908] usbtmc 6-1:16.0: bulk endpoints not found [ 538.709545][T19846] i2c i2c-1: Invalid block write size 153 [ 538.713012][ T34] usb 10-1: USB disconnect, device number 56 [ 539.320365][T19880] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4986'. [ 539.325151][T19880] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4986'. [ 541.228718][T19908] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4996'. [ 541.237996][T19908] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4996'. [ 541.250211][ T6012] usb 6-1: USB disconnect, device number 86 [ 542.186459][T19934] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5006'. [ 542.206315][T19934] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5006'. [ 542.313896][T19938] overlayfs: missing 'lowerdir' [ 542.493569][T19949] random: crng reseeded on system resumption [ 543.762711][T19966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5016'. [ 543.953351][T19972] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5017'. [ 544.422461][ T50] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 544.595745][ T50] usb 10-1: Using ep0 maxpacket: 32 [ 544.603703][ T50] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 544.608929][ T50] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 544.620514][ T50] usb 10-1: config 0 has no interface number 0 [ 544.625813][ T50] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 544.628963][ T50] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.635460][ T50] usb 10-1: Product: syz [ 544.637791][ T50] usb 10-1: Manufacturer: syz [ 544.641301][ T50] usb 10-1: SerialNumber: syz [ 544.648973][ T50] usb 10-1: config 0 descriptor?? [ 544.652813][ T50] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 544.724944][T19985] overlayfs: missing 'lowerdir' [ 544.871046][ T50] usb 10-1: qt2_setup_urbs - submit read urb failed -8 [ 544.879615][ T50] quatech2 10-1:0.51: probe with driver quatech2 failed with error -8 [ 545.192401][T19980] tipc: Started in network mode [ 545.194007][T19980] tipc: Node identity bec4fda0f3f5, cluster identity 4711 [ 545.197068][T19980] tipc: Enabled bearer , priority 0 [ 545.225836][T19980] syzkaller0: entered promiscuous mode [ 545.227939][T19980] syzkaller0: entered allmulticast mode [ 545.230743][T19980] tipc: Resetting bearer [ 545.243146][T19979] tipc: Resetting bearer [ 547.112563][ T29] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 547.262457][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 547.267320][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.272056][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.275852][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 547.280244][ T29] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 547.285184][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.289645][ T29] usb 6-1: config 0 descriptor?? [ 547.297343][T19979] tipc: Disabling bearer [ 547.321494][T11633] tipc: Node number set to 1295121824 [ 547.376550][ T6012] usb 10-1: USB disconnect, device number 57 [ 547.499096][T20026] overlayfs: missing 'lowerdir' [ 547.663629][T20037] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.5031'. [ 547.707935][ T29] shield 0003:0955:7214.0031: unknown main item tag 0x0 [ 547.710952][ T29] shield 0003:0955:7214.0031: unknown main item tag 0x0 [ 547.718256][ T29] shield 0003:0955:7214.0031: unknown main item tag 0x0 [ 547.721739][ T29] shield 0003:0955:7214.0031: unknown main item tag 0x0 [ 547.744597][ T29] shield 0003:0955:7214.0031: unknown main item tag 0x0 [ 547.750727][ T29] input: HID 0955:7214 Haptics as /devices/virtual/input/input31 [ 547.789822][ T29] shield 0003:0955:7214.0031: Registered Thunderstrike controller [ 547.797653][ T29] shield 0003:0955:7214.0031: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 548.133465][ T29] shield 0003:0955:7214.0031: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 548.133804][T12522] usb 6-1: USB disconnect, device number 87 [ 548.139093][ T29] shield 0003:0955:7214.0031: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 548.146669][ T29] shield 0003:0955:7214.0031: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 548.694055][ T40] audit: type=1326 audit(1774990502.785:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20053 comm="syz.1.5041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02f6c code=0x7ffc0000 [ 548.704765][ T40] audit: type=1326 audit(1774990502.785:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20053 comm="syz.1.5041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02f6c code=0x7ffc0000 [ 548.718371][ T40] audit: type=1326 audit(1774990502.795:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20053 comm="syz.1.5041" exe="/syz-executor" sig=0 arch=40000003 syscall=241 compat=1 ip=0xf7f02f6c code=0x7ffc0000 [ 548.727439][ T40] audit: type=1326 audit(1774990502.795:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20053 comm="syz.1.5041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02f6c code=0x7ffc0000 [ 548.737939][ T40] audit: type=1326 audit(1774990502.795:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20053 comm="syz.1.5041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02f6c code=0x7ffc0000 [ 548.747152][ T40] audit: type=1326 audit(1774990502.805:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20053 comm="syz.1.5041" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f02f6c code=0x7ffc0000 [ 548.756789][ T40] audit: type=1326 audit(1774990502.805:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20053 comm="syz.1.5041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02f6c code=0x7ffc0000 [ 548.757591][ T29] libceph: connect (1)[c::]:6789 error -101 [ 548.766963][ T40] audit: type=1326 audit(1774990502.805:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20053 comm="syz.1.5041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02f6c code=0x7ffc0000 [ 548.774301][ T40] audit: type=1326 audit(1774990502.805:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20053 comm="syz.1.5041" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf7f02f6c code=0x7ffc0000 [ 548.776574][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 548.781971][ T40] audit: type=1326 audit(1774990502.805:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20053 comm="syz.1.5041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02f6c code=0x7ffc0000 [ 548.910802][T20054] ceph: No mds server is up or the cluster is laggy [ 549.799376][ T60] libceph: connect (1)[c::]:6789 error -101 [ 549.805615][ T60] libceph: mon0 (1)[c::]:6789 connect error [ 549.811501][ T60] libceph: connect (1)[c::]:6789 error -101 [ 549.815348][ T60] libceph: mon0 (1)[c::]:6789 connect error [ 549.822583][ T50] usb 11-1: new high-speed USB device number 43 using dummy_hcd [ 549.946554][T20090] ceph: No mds server is up or the cluster is laggy [ 550.005084][ T50] usb 11-1: Using ep0 maxpacket: 16 [ 550.012887][ T50] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.017101][ T50] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.021427][ T50] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 550.028474][ T50] usb 11-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 550.033125][ T50] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.039735][ T50] usb 11-1: config 0 descriptor?? [ 550.361391][T20121] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 550.365474][T20121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 550.412523][ T60] usb 10-1: new low-speed USB device number 58 using dummy_hcd [ 550.448361][ T50] shield 0003:0955:7214.0032: unknown main item tag 0x0 [ 550.450522][ T50] shield 0003:0955:7214.0032: unknown main item tag 0x0 [ 550.452821][ T50] shield 0003:0955:7214.0032: unknown main item tag 0x0 [ 550.455700][ T50] shield 0003:0955:7214.0032: unknown main item tag 0x0 [ 550.458054][ T50] shield 0003:0955:7214.0032: unknown main item tag 0x0 [ 550.462763][ T50] input: HID 0955:7214 Haptics as /devices/virtual/input/input32 [ 550.482031][ T50] shield 0003:0955:7214.0032: Registered Thunderstrike controller [ 550.486950][ T50] shield 0003:0955:7214.0032: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0 [ 550.564347][ T60] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 550.568276][ T60] usb 10-1: config 0 has no interface number 0 [ 550.570875][ T60] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 550.575453][ T60] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 550.580138][ T60] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 550.586119][ T60] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 550.590823][ T60] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 550.595576][ T60] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 550.601378][ T60] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 550.605364][ T60] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.611564][ T60] usb 10-1: config 0 descriptor?? [ 550.615071][T20112] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 550.618254][T20112] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 550.624410][ T60] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 550.830086][ T50] usb 10-1: USB disconnect, device number 58 [ 550.839046][ T50] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 550.857484][ T9908] shield 0003:0955:7214.0032: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 550.862081][ T9908] shield 0003:0955:7214.0032: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 550.866748][T12537] usb 11-1: USB disconnect, device number 43 [ 550.873394][ T9908] shield 0003:0955:7214.0032: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 551.093842][ T60] libceph: connect (1)[c::]:6789 error -101 [ 551.096434][ T60] libceph: mon0 (1)[c::]:6789 connect error [ 551.352929][ T60] libceph: connect (1)[c::]:6789 error -101 [ 551.355592][ T60] libceph: mon0 (1)[c::]:6789 connect error [ 551.862977][ T60] libceph: connect (1)[c::]:6789 error -101 [ 551.865987][ T60] libceph: mon0 (1)[c::]:6789 connect error [ 551.907967][T20128] ceph: No mds server is up or the cluster is laggy [ 552.230651][T20158] ALSA: mixer_oss: invalid OSS volume 'MO' [ 552.891189][ T29] libceph: connect (1)[c::]:6789 error -101 [ 552.907225][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 553.172938][ T29] libceph: connect (1)[c::]:6789 error -101 [ 553.175525][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 553.282443][T11633] usb 6-1: new low-speed USB device number 88 using dummy_hcd [ 553.454087][T11633] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 553.456974][T11633] usb 6-1: config 0 has no interface number 0 [ 553.459136][T11633] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 553.463713][T11633] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 553.467263][T11633] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 553.470900][T11633] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 553.474867][T11633] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 553.478489][T11633] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 553.483144][T11633] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 553.486740][T11633] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.491687][T11633] usb 6-1: config 0 descriptor?? [ 553.498024][T20185] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 553.500398][T20185] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 553.506047][T11633] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 553.579988][T20177] ceph: No mds server is up or the cluster is laggy [ 553.715921][T12522] usb 6-1: USB disconnect, device number 88 [ 553.722870][T12522] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 553.820512][T20192] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5092'. [ 553.825118][T20192] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5092'. [ 554.212996][T20206] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5097'. [ 554.533567][ T40] kauditd_printk_skb: 137 callbacks suppressed [ 554.533582][ T40] audit: type=1326 audit(1774990508.625:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20215 comm="syz.6.5100" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 554.544085][ T40] audit: type=1326 audit(1774990508.625:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20215 comm="syz.6.5100" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 554.551475][ T40] audit: type=1326 audit(1774990508.625:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20215 comm="syz.6.5100" exe="/syz-executor" sig=0 arch=40000003 syscall=241 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 554.557604][ T29] libceph: connect (1)[c::]:6789 error -101 [ 554.560110][ T40] audit: type=1326 audit(1774990508.625:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20215 comm="syz.6.5100" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 554.560454][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 554.567819][ T40] audit: type=1326 audit(1774990508.625:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20215 comm="syz.6.5100" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 554.577852][ T40] audit: type=1326 audit(1774990508.625:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20215 comm="syz.6.5100" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 554.585726][ T40] audit: type=1326 audit(1774990508.625:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20215 comm="syz.6.5100" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 554.593717][ T40] audit: type=1326 audit(1774990508.625:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20215 comm="syz.6.5100" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 554.600954][ T40] audit: type=1326 audit(1774990508.625:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20215 comm="syz.6.5100" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 554.607978][ T40] audit: type=1326 audit(1774990508.625:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20215 comm="syz.6.5100" exe="/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 554.823112][ T29] libceph: connect (1)[c::]:6789 error -101 [ 554.825281][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 555.068441][T20232] bridge3: entered promiscuous mode [ 555.332718][ T29] libceph: connect (1)[c::]:6789 error -101 [ 555.334857][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 555.361294][T20216] ceph: No mds server is up or the cluster is laggy [ 556.087648][T20245] loop2: detected capacity change from 0 to 7 [ 556.099017][T20245] Dev loop2: unable to read RDB block 7 [ 556.106865][T20245] loop2: AHDI p1 p2 p3 [ 556.116565][T20245] loop2: partition table partially beyond EOD, truncated [ 556.123123][T20245] loop2: p1 start 1601398130 is beyond EOD, truncated [ 556.125946][T20245] loop2: p2 start 1702059890 is beyond EOD, truncated [ 556.228264][T20248] openvswitch: netlink: IP tunnel TTL not specified. [ 556.823721][T20259] netlink: 4096 bytes leftover after parsing attributes in process `syz.6.5113'. [ 556.884896][T12537] libceph: connect (1)[c::]:6789 error -101 [ 556.887578][T12537] libceph: mon0 (1)[c::]:6789 connect error [ 557.122422][ T6011] usb 11-1: new high-speed USB device number 44 using dummy_hcd [ 557.152869][T12537] libceph: connect (1)[c::]:6789 error -101 [ 557.155438][T12537] libceph: mon0 (1)[c::]:6789 connect error [ 557.292389][ T6011] usb 11-1: Using ep0 maxpacket: 16 [ 557.304422][ T6011] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 557.307104][ T6011] usb 11-1: config 0 has no interface number 0 [ 557.321147][ T6011] usb 11-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 557.326273][ T6011] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.330617][ T6011] usb 11-1: Product: syz [ 557.333591][ T6011] usb 11-1: Manufacturer: syz [ 557.336808][ T6011] usb 11-1: SerialNumber: syz [ 557.345461][ T6011] usb 11-1: config 0 descriptor?? [ 557.354680][ T6011] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 557.672843][T12537] libceph: connect (1)[c::]:6789 error -101 [ 557.674849][T12537] libceph: mon0 (1)[c::]:6789 connect error [ 557.713537][T20261] ceph: No mds server is up or the cluster is laggy [ 557.806157][ T6011] gspca_spca1528: reg_w err -71 [ 557.813310][T20280] netlink: 'syz.7.5118': attribute type 10 has an invalid length. [ 557.817032][T20280] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.820496][T20280] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.829474][T20280] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.831753][T20280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 557.834571][T20280] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.837604][T20280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 557.841105][ T6011] spca1528 11-1:0.1: probe with driver spca1528 failed with error -71 [ 557.846835][ T6011] usb 11-1: USB disconnect, device number 44 [ 557.850824][T20280] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 557.869161][T20280] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5118'. [ 557.873885][T20280] bridge_slave_1: left allmulticast mode [ 557.881040][T20280] bridge_slave_1: left promiscuous mode [ 557.884511][T20280] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.890715][T20280] bridge_slave_0: left allmulticast mode [ 557.892653][T20280] bridge_slave_0: left promiscuous mode [ 557.895048][T20280] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.908222][T20280] bond0: (slave bridge0): Releasing backup interface [ 558.705469][T20293] loop2: detected capacity change from 0 to 7 [ 558.772729][T20293] Dev loop2: unable to read RDB block 7 [ 558.786931][T20293] loop2: AHDI p1 p2 p3 [ 558.789891][T20293] loop2: partition table partially beyond EOD, truncated [ 558.793970][T20293] loop2: p1 start 1601398130 is beyond EOD, truncated [ 558.802502][T20293] loop2: p2 start 1702059890 is beyond EOD, truncated [ 559.273748][T20302] binder: 20299:20302 ioctl c0306201 0 returned -14 [ 559.285193][ T29] libceph: connect (1)[c::]:6789 error -101 [ 559.287433][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 559.390956][ T5348] Dev loop2: unable to read RDB block 7 [ 559.393629][ T5348] loop2: AHDI p1 p2 p3 [ 559.399915][ T5348] loop2: partition table partially beyond EOD, truncated [ 559.412507][ T5348] loop2: p1 start 1601398130 is beyond EOD, truncated [ 559.414874][ T5348] loop2: p2 start 1702059890 is beyond EOD, truncated [ 559.542705][ T29] libceph: connect (1)[c::]:6789 error -101 [ 559.544785][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 559.773740][T20314] overlayfs: failed to resolve './file0': -2 [ 560.102650][T20304] ceph: No mds server is up or the cluster is laggy [ 560.172743][T20330] gfs2: not a GFS2 filesystem [ 560.188170][T20330] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5134'. [ 561.094790][T11633] libceph: connect (1)[c::]:6789 error -101 [ 561.097417][T11633] libceph: mon0 (1)[c::]:6789 connect error [ 561.352857][T11633] libceph: connect (1)[c::]:6789 error -101 [ 561.355363][T11633] libceph: mon0 (1)[c::]:6789 connect error [ 561.362473][T12537] usb 11-1: new full-speed USB device number 45 using dummy_hcd [ 561.526011][T12537] usb 11-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 561.530872][T12537] usb 11-1: config 0 interface 0 has no altsetting 0 [ 561.536371][T12537] usb 11-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 561.540300][T12537] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.546876][T12537] usb 11-1: config 0 descriptor?? [ 561.549712][T20355] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 561.862965][T11633] libceph: connect (1)[c::]:6789 error -101 [ 561.865385][T11633] libceph: mon0 (1)[c::]:6789 connect error [ 561.923012][T20350] ceph: No mds server is up or the cluster is laggy [ 561.956497][T12537] hid (null): invalid report_size 27745 [ 561.969536][T12537] creative-sb0540 0003:041E:3100.0033: unknown main item tag 0x0 [ 561.971989][T12537] creative-sb0540 0003:041E:3100.0033: unknown main item tag 0x0 [ 561.974813][T12537] creative-sb0540 0003:041E:3100.0033: unknown main item tag 0x0 [ 561.977297][T12537] creative-sb0540 0003:041E:3100.0033: unknown main item tag 0x0 [ 561.980001][T12537] creative-sb0540 0003:041E:3100.0033: unknown main item tag 0x0 [ 561.983629][T12537] creative-sb0540 0003:041E:3100.0033: unknown main item tag 0x0 [ 561.987024][T12537] creative-sb0540 0003:041E:3100.0033: unknown main item tag 0x2 [ 561.989602][T12537] creative-sb0540 0003:041E:3100.0033: unknown main item tag 0x5 [ 561.992265][T12537] creative-sb0540 0003:041E:3100.0033: unknown main item tag 0x5 [ 561.995787][T12537] creative-sb0540 0003:041E:3100.0033: unknown main item tag 0x6 [ 561.998301][T12537] creative-sb0540 0003:041E:3100.0033: invalid report_size 27745 [ 562.000719][T12537] creative-sb0540 0003:041E:3100.0033: item 0 2 1 7 parsing failed [ 562.003765][T12537] creative-sb0540 0003:041E:3100.0033: parse failed [ 562.006009][T12537] creative-sb0540 0003:041E:3100.0033: probe with driver creative-sb0540 failed with error -22 [ 562.163944][T12537] usb 11-1: USB disconnect, device number 45 [ 562.530236][T20387] loop2: detected capacity change from 0 to 7 [ 562.534969][T20387] Dev loop2: unable to read RDB block 7 [ 562.538128][T20387] loop2: AHDI p1 p2 p3 [ 562.540396][T20387] loop2: partition table partially beyond EOD, truncated [ 562.545107][T20387] loop2: p1 start 1601398130 is beyond EOD, truncated [ 562.548619][T20387] loop2: p2 start 1702059890 is beyond EOD, truncated [ 562.956986][T20390] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5155'. [ 562.990550][T20376] syz.5.5147 (20376) used greatest stack depth: 19088 bytes left [ 563.166986][T20403] netlink: 19 bytes leftover after parsing attributes in process `syz.6.5159'. [ 563.314661][T20408] overlayfs: missing 'lowerdir' [ 563.322570][T12537] usb 10-1: new low-speed USB device number 59 using dummy_hcd [ 563.330011][T20414] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5163'. [ 563.478090][T20423] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.481329][T20423] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.484184][T12537] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 563.487434][T12537] usb 10-1: config 0 has no interface number 0 [ 563.489671][T12537] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 563.494347][T12537] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 563.497962][T12537] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 563.505272][T12537] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 563.510350][T12537] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 563.514704][T12537] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 563.519136][T12537] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 563.522122][T12537] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.527188][T12537] usb 10-1: config 0 descriptor?? [ 563.533574][T20401] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 563.536495][T20401] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 563.542512][T12537] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 563.716837][T20433] geneve2: entered promiscuous mode [ 563.752399][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.753614][T20401] ldusb 10-1:0.55: Write buffer overflow, 1 bytes dropped [ 563.755433][ T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 563.755466][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.763834][ T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 563.766648][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.769601][ T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 563.773162][ T6011] vxcan1 speed is unknown, defaulting to 1000 [ 563.775614][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.778807][ T6011] syz2: Port: 1 Link DOWN [ 563.779872][ T34] usb 10-1: USB disconnect, device number 59 [ 563.780455][ T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 563.784502][ T34] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 563.786156][ T6011] vxcan1 speed is unknown, defaulting to 1000 [ 563.984891][T20446] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5173'. [ 564.261345][T20452] overlayfs: missing 'lowerdir' [ 564.524960][T20470] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5182'. [ 564.610607][T20481] ip6_vti0: entered promiscuous mode [ 564.674939][T20486] overlayfs: missing 'lowerdir' [ 564.817851][T20493] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5190'. [ 564.842552][ T1929] usb 6-1: new low-speed USB device number 89 using dummy_hcd [ 564.875309][T20498] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 564.882270][T12537] IPVS: starting estimator thread 0... [ 564.922460][T20503] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5194'. [ 564.972453][T20499] IPVS: using max 42 ests per chain, 100800 per kthread [ 565.004158][ T1929] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 565.007136][ T1929] usb 6-1: config 0 has no interface number 0 [ 565.009185][ T1929] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 565.014408][ T1929] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 565.018890][ T1929] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 565.022868][ T1929] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 565.027203][ T1929] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 565.031606][ T1929] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 565.036608][ T1929] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 565.039569][ T1929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.057830][ T1929] usb 6-1: config 0 descriptor?? [ 565.060233][T20479] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 565.063155][T20479] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 565.068004][ T1929] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 565.185176][T20514] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5199'. [ 565.275067][ T1929] usb 6-1: USB disconnect, device number 89 [ 565.283120][ T1929] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 565.542442][ T6011] usb 10-1: new full-speed USB device number 60 using dummy_hcd [ 565.704513][ T6011] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.709440][ T6011] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 565.714253][ T6011] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 565.719155][ T6011] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.727045][ T6011] usb 10-1: config 0 descriptor?? [ 565.740182][ T6011] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 565.743795][ T6011] dvb-usb: bulk message failed: -22 (3/0) [ 565.751319][ T6011] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 565.756690][ T6011] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 565.762480][ T6011] usb 10-1: media controller created [ 565.767454][ T6011] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 565.785742][ T6011] dvb-usb: bulk message failed: -22 (6/0) [ 565.788637][ T6011] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 565.796847][ T6011] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input33 [ 565.810139][ T6011] dvb-usb: schedule remote query interval to 150 msecs. [ 565.813019][ T6011] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 565.966790][ T6011] usb 10-1: USB disconnect, device number 60 [ 566.024440][ T6011] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 566.058032][T20536] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5206'. [ 566.310997][T20544] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5210'. [ 566.742496][ T29] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 566.859640][T20523] Set syz1 is full, maxelem 65536 reached [ 566.904279][ T29] usb 10-1: Using ep0 maxpacket: 16 [ 566.907265][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.911166][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.915974][ T29] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 566.920574][ T29] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 566.925368][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.933087][ T29] usb 10-1: config 0 descriptor?? [ 566.973555][T20566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5219'. [ 567.213155][T14180] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 567.215989][T14180] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 567.229751][T14180] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 567.232706][T14180] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 567.342677][ T29] hid_parser_main: 1 callbacks suppressed [ 567.342691][ T29] shield 0003:0955:7214.0034: unknown main item tag 0x0 [ 567.346875][ T29] shield 0003:0955:7214.0034: unknown main item tag 0x0 [ 567.349045][ T29] shield 0003:0955:7214.0034: unknown main item tag 0x0 [ 567.351192][ T29] shield 0003:0955:7214.0034: unknown main item tag 0x0 [ 567.373365][ T29] shield 0003:0955:7214.0034: unknown main item tag 0x0 [ 567.376939][ T29] input: HID 0955:7214 Haptics as /devices/virtual/input/input34 [ 567.406831][ T29] shield 0003:0955:7214.0034: Registered Thunderstrike controller [ 567.409843][ T29] shield 0003:0955:7214.0034: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 567.486776][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.488870][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.544080][T20554] random: crng reseeded on system resumption [ 567.583423][T20595] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5230'. [ 567.756884][T12537] usb 10-1: USB disconnect, device number 61 [ 567.764702][T12537] ------------[ cut here ]------------ [ 567.766694][T12537] workqueue: work disable count underflowed [ 567.768588][T12537] WARNING: kernel/workqueue.c:4410 at enable_work+0x2d1/0x320, CPU#2: kworker/2:5/12537 [ 567.771646][T12537] Modules linked in: [ 567.773256][T12537] CPU: 2 UID: 0 PID: 12537 Comm: kworker/2:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 567.776671][T12537] Tainted: [L]=SOFTLOCKUP [ 567.778045][T12537] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 567.781126][T12537] Workqueue: usb_hub_wq hub_event [ 567.782834][T12537] RIP: 0010:enable_work+0x2d1/0x320 [ 567.785105][T12537] Code: ff e8 f3 9d 38 00 e8 2e 94 be 09 e9 61 ff ff ff e8 e4 9d 38 00 90 0f 0b 90 e9 17 fe ff ff e8 d6 9d 38 00 48 8d 3d 0f 4f 0d 0f <67> 48 0f b9 3a 45 31 f6 e9 36 fe ff ff 48 89 ef e8 ea 34 a4 00 e9 [ 567.791897][T12537] RSP: 0000:ffffc90003a0f2e0 EFLAGS: 00010093 [ 567.793908][ T29] shield 0003:0955:7214.0034: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 567.793967][T12537] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81cfa420 [ 567.797588][ T29] shield 0003:0955:7214.0034: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 567.799824][T12537] RDX: ffff8880298d24c0 RSI: ffffffff81cfa5ea RDI: ffffffff90dcf500 [ 567.804910][ T29] shield 0003:0955:7214.0034: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 567.806233][T12537] RBP: ffff888000cba780 R08: 0000000000000007 R09: 0000000000000000 [ 567.806245][T12537] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 567.814857][T12537] R13: 1ffff92000741e5d R14: ffff888000cba6e0 R15: 000000007fffffff [ 567.817451][T12537] FS: 0000000000000000(0000) GS:ffff888097343000(0000) knlGS:0000000000000000 [ 567.820384][T12537] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 567.822554][T12537] CR2: 0000000034e1fffe CR3: 0000000064487000 CR4: 0000000000352ef0 [ 567.825128][T12537] Call Trace: [ 567.826216][T12537] [ 567.827177][T12537] ? __pfx_enable_work+0x10/0x10 [ 567.828826][T12537] ? __pfx___might_resched+0x10/0x10 [ 567.830600][T12537] cancel_delayed_work_sync+0x96/0xf0 [ 567.832395][T12537] thermal_zone_device_unregister+0x28e/0x4e0 [ 567.834486][T12537] ? __pfx_shield_remove+0x10/0x10 [ 567.836114][T12537] power_supply_unregister+0x10a/0x150 [ 567.837853][T12537] shield_remove+0x75/0x130 [ 567.839331][T12537] ? __pfx_shield_remove+0x10/0x10 [ 567.840971][T12537] hid_device_remove+0xd1/0x270 [ 567.842571][T12537] ? __pfx_hid_device_remove+0x10/0x10 [ 567.844325][T12537] device_remove+0xcb/0x180 [ 567.846277][T12537] device_release_driver_internal+0x44e/0x620 [ 567.848918][T12537] bus_remove_device+0x2bc/0x560 [ 567.851120][T12537] ? __pfx_bus_remove_device+0x10/0x10 [ 567.853596][T12537] ? __pfx_device_remove_attrs+0x10/0x10 [ 567.855632][T12537] ? up_write+0x290/0x4f0 [ 567.857130][T12537] device_del+0x376/0x9b0 [ 567.858537][T12537] ? __pfx_device_del+0x10/0x10 [ 567.860097][T12537] ? do_raw_spin_lock+0x128/0x260 [ 567.861739][T12537] hid_destroy_device+0x19c/0x240 [ 567.863602][T12537] usbhid_disconnect+0xa0/0xe0 [ 567.865626][T12537] usb_unbind_interface+0x1dd/0x9e0 [ 567.867788][T12537] ? kernfs_remove_by_name_ns+0x9f/0xf0 [ 567.869950][T12537] ? __pfx_usb_unbind_interface+0x10/0x10 [ 567.872074][T12537] device_remove+0x12a/0x180 [ 567.874113][T12537] device_release_driver_internal+0x44e/0x620 [ 567.876646][T12537] bus_remove_device+0x2bc/0x560 [ 567.878358][T12537] ? __pfx_bus_remove_device+0x10/0x10 [ 567.880198][T12537] ? __pfx_device_remove_attrs+0x10/0x10 [ 567.882029][T12537] ? up_write+0x290/0x4f0 [ 567.883566][T12537] device_del+0x376/0x9b0 [ 567.885072][T12537] ? __pfx_device_del+0x10/0x10 [ 567.886670][T12537] ? kobject_put+0xb9/0x640 [ 567.888134][T12537] usb_disable_device+0x367/0x810 [ 567.889853][T12537] usb_disconnect+0x2e2/0x9a0 [ 567.891407][T12537] hub_event+0x1d0c/0x4af0 [ 567.892907][T12537] ? __lock_acquire+0x4a5/0x2630 [ 567.894519][T12537] ? do_raw_spin_unlock+0x145/0x1e0 [ 567.896229][T12537] ? __pfx_hub_event+0x10/0x10 [ 567.897852][T12537] ? debug_object_deactivate+0x2e4/0x3b0 [ 567.899852][T12537] ? trace_sched_waking+0x90/0x180 [ 567.901615][T12537] ? rcu_is_watching+0x12/0xc0 [ 567.903186][T12537] process_one_work+0xa23/0x19a0 [ 567.904803][T12537] ? __pfx_process_one_work+0x10/0x10 [ 567.906526][T12537] ? __pfx_hub_event+0x10/0x10 [ 567.908090][T12537] worker_thread+0x5ef/0xe50 [ 567.909581][T12537] ? __pfx_worker_thread+0x10/0x10 [ 567.911214][T12537] ? kthread+0x13a/0x450 [ 567.912750][T12537] ? __pfx_worker_thread+0x10/0x10 [ 567.914563][T12537] kthread+0x370/0x450 [ 567.916000][T12537] ? __pfx_kthread+0x10/0x10 [ 567.917685][T12537] ret_from_fork+0x754/0xd80 [ 567.919206][T12537] ? __pfx_ret_from_fork+0x10/0x10 [ 567.920928][T12537] ? __switch_to+0x7b4/0x1120 [ 567.922487][T12537] ? __pfx_kthread+0x10/0x10 [ 567.924069][T12537] ret_from_fork_asm+0x1a/0x30 [ 567.925662][T12537] [ 567.926690][T12537] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 567.929118][T12537] CPU: 2 UID: 0 PID: 12537 Comm: kworker/2:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 567.932835][T12537] Tainted: [L]=SOFTLOCKUP [ 567.934309][T12537] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 567.937573][T12537] Workqueue: usb_hub_wq hub_event [ 567.939205][T12537] Call Trace: [ 567.940290][T12537] [ 567.941292][T12537] dump_stack_lvl+0x100/0x190 [ 567.942833][T12537] vpanic+0x552/0x970 [ 567.944328][T12537] ? __pfx_vpanic+0x10/0x10 [ 567.945882][T12537] panic+0xd1/0xe0 [ 567.947124][T12537] ? __pfx_panic+0x10/0x10 [ 567.948636][T12537] ? check_panic_on_warn+0x1f/0x90 [ 567.950360][T12537] check_panic_on_warn.cold+0x19/0x34 [ 567.952186][T12537] ? enable_work+0x2d1/0x320 [ 567.953808][T12537] __warn.cold+0x191/0x348 [ 567.955254][T12537] __report_bug+0x296/0x3d0 [ 567.956663][T12537] ? enable_work+0x2d1/0x320 [ 567.958258][T12537] ? __pfx___report_bug+0x10/0x10 [ 567.959897][T12537] ? __pfx_debug_object_free+0x10/0x10 [ 567.961762][T12537] ? enable_work+0x2ca/0x320 [ 567.963344][T12537] ? enable_work+0x100/0x320 [ 567.965044][T12537] ? find_held_lock+0x2b/0x80 [ 567.966693][T12537] ? __flush_work+0x928/0xcb0 [ 567.968425][T12537] ? __flush_work+0x928/0xcb0 [ 567.970275][T12537] report_bug_entry+0xe1/0x290 [ 567.972141][T12537] ? enable_work+0x2d1/0x320 [ 567.973935][T12537] handle_bug+0x1cd/0x2a0 [ 567.975502][T12537] exc_invalid_op+0x17/0x50 [ 567.976925][T12537] asm_exc_invalid_op+0x1a/0x20 [ 567.978513][T12537] RIP: 0010:enable_work+0x2d1/0x320 [ 567.980233][T12537] Code: ff e8 f3 9d 38 00 e8 2e 94 be 09 e9 61 ff ff ff e8 e4 9d 38 00 90 0f 0b 90 e9 17 fe ff ff e8 d6 9d 38 00 48 8d 3d 0f 4f 0d 0f <67> 48 0f b9 3a 45 31 f6 e9 36 fe ff ff 48 89 ef e8 ea 34 a4 00 e9 [ 567.988019][T12537] RSP: 0000:ffffc90003a0f2e0 EFLAGS: 00010093 [ 567.990102][T12537] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81cfa420 [ 567.992698][T12537] RDX: ffff8880298d24c0 RSI: ffffffff81cfa5ea RDI: ffffffff90dcf500 [ 567.995377][T12537] RBP: ffff888000cba780 R08: 0000000000000007 R09: 0000000000000000 [ 567.997998][T12537] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 568.000663][T12537] R13: 1ffff92000741e5d R14: ffff888000cba6e0 R15: 000000007fffffff [ 568.003563][T12537] ? enable_work+0x100/0x320 [ 568.005190][T12537] ? enable_work+0x2ca/0x320 [ 568.006797][T12537] ? __pfx_enable_work+0x10/0x10 [ 568.008465][T12537] ? __pfx___might_resched+0x10/0x10 [ 568.010212][T12537] cancel_delayed_work_sync+0x96/0xf0 [ 568.011949][T12537] thermal_zone_device_unregister+0x28e/0x4e0 [ 568.014054][T12537] ? __pfx_shield_remove+0x10/0x10 [ 568.015875][T12537] power_supply_unregister+0x10a/0x150 [ 568.017841][T12537] shield_remove+0x75/0x130 [ 568.019420][T12537] ? __pfx_shield_remove+0x10/0x10 [ 568.021108][T12537] hid_device_remove+0xd1/0x270 [ 568.022743][T12537] ? __pfx_hid_device_remove+0x10/0x10 [ 568.024532][T12537] device_remove+0xcb/0x180 [ 568.026080][T12537] device_release_driver_internal+0x44e/0x620 [ 568.028109][T12537] bus_remove_device+0x2bc/0x560 [ 568.029846][T12537] ? __pfx_bus_remove_device+0x10/0x10 [ 568.031704][T12537] ? __pfx_device_remove_attrs+0x10/0x10 [ 568.033568][T12537] ? up_write+0x290/0x4f0 [ 568.035060][T12537] device_del+0x376/0x9b0 [ 568.036476][T12537] ? __pfx_device_del+0x10/0x10 [ 568.038113][T12537] ? do_raw_spin_lock+0x128/0x260 [ 568.039849][T12537] hid_destroy_device+0x19c/0x240 [ 568.041607][T12537] usbhid_disconnect+0xa0/0xe0 [ 568.043351][T12537] usb_unbind_interface+0x1dd/0x9e0 [ 568.045241][T12537] ? kernfs_remove_by_name_ns+0x9f/0xf0 [ 568.047042][T12537] ? __pfx_usb_unbind_interface+0x10/0x10 [ 568.048980][T12537] device_remove+0x12a/0x180 [ 568.050493][T12537] device_release_driver_internal+0x44e/0x620 [ 568.052503][T12537] bus_remove_device+0x2bc/0x560 [ 568.054154][T12537] ? __pfx_bus_remove_device+0x10/0x10 [ 568.055927][T12537] ? __pfx_device_remove_attrs+0x10/0x10 [ 568.057884][T12537] ? up_write+0x290/0x4f0 [ 568.059475][T12537] device_del+0x376/0x9b0 [ 568.061139][T12537] ? __pfx_device_del+0x10/0x10 [ 568.062888][T12537] ? kobject_put+0xb9/0x640 [ 568.064496][T12537] usb_disable_device+0x367/0x810 [ 568.066219][T12537] usb_disconnect+0x2e2/0x9a0 [ 568.067844][T12537] hub_event+0x1d0c/0x4af0 [ 568.069359][T12537] ? __lock_acquire+0x4a5/0x2630 [ 568.070985][T12537] ? do_raw_spin_unlock+0x145/0x1e0 [ 568.072733][T12537] ? __pfx_hub_event+0x10/0x10 [ 568.074336][T12537] ? debug_object_deactivate+0x2e4/0x3b0 [ 568.076239][T12537] ? trace_sched_waking+0x90/0x180 [ 568.078163][T12537] ? rcu_is_watching+0x12/0xc0 [ 568.079993][T12537] process_one_work+0xa23/0x19a0 [ 568.081793][T12537] ? __pfx_process_one_work+0x10/0x10 [ 568.083639][T12537] ? __pfx_hub_event+0x10/0x10 [ 568.085251][T12537] worker_thread+0x5ef/0xe50 [ 568.086856][T12537] ? __pfx_worker_thread+0x10/0x10 [ 568.088567][T12537] ? kthread+0x13a/0x450 [ 568.090030][T12537] ? __pfx_worker_thread+0x10/0x10 [ 568.091722][T12537] kthread+0x370/0x450 [ 568.093305][T12537] ? __pfx_kthread+0x10/0x10 [ 568.095253][T12537] ret_from_fork+0x754/0xd80 [ 568.097109][T12537] ? __pfx_ret_from_fork+0x10/0x10 [ 568.098927][T12537] ? __switch_to+0x7b4/0x1120 [ 568.100626][T12537] ? __pfx_kthread+0x10/0x10 [ 568.102277][T12537] ret_from_fork_asm+0x1a/0x30 [ 568.103940][T12537] [ 568.105819][T12537] Kernel Offset: disabled [ 568.107168][T12537] Rebooting in 86400 seconds..