last executing test programs: 3m32.586268015s ago: executing program 4 (id=391): sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000840)="28f71d3273fc931901a2d669e516b72e8ea4c835f046f6caec317d7911f27f22c2262bc0e5b8155f1700173bd1f75b8f3c76a7fc47bf52068891eafdccdb9c89a166a34f8a03137071081294c92eade53c35b732b6b1c95fc8496281c7c51e7578d80dd6c7c4e61c5118b2afd8658a0180d0e8dc9b60b52e6b317ac5f29710c7e45b6a0b53d80bcb6e7a9e5727e38b714ee3078b713714442290164049b38a00b00d4577bf2992899b707cbc028beb1dbca982", 0xb3}, {0x0}, {&(0x7f00000006c0)="d11a7ea0f3f7cc194fbd86fcf591543b1a8c4b43b43774d634d1149a27240834f43a99ffbd278f7ea3cfb6740fc12e012d5d0ab3ed7db57bdf1388fc9bdb612758b2b8102f51e31ea0b47135b8fdcb3311b8d2bac94970ec84331d184e985e9ea51ff6299e12635d709617db12bda96912be81b28a5cbe0602a289", 0x7b}, {&(0x7f0000000ac0)="c89ed146d934912290cf06b46bb87115e9e002baa13314057f626c7ec3ef7be6dd2af3d8", 0x24}], 0x4}}], 0x1, 0x200000c4) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3m31.746178533s ago: executing program 4 (id=393): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@delchain={0x24, 0x2e, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xffff}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3m31.453374459s ago: executing program 4 (id=395): openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c000780080006"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 3m31.246361413s ago: executing program 4 (id=397): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x400000000000159, 0x40840) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key$keyring(&(0x7f0000001600), &(0x7f0000001640)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x7c) r6 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000080)='*', 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r3, 0x36) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x1f}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) 3m29.961319011s ago: executing program 4 (id=399): setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000080), 0x4) r0 = socket$inet6(0xa, 0x1, 0x84) shutdown(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0x2, 0x3, 0xd) listen(0xffffffffffffffff, 0x0) setreuid(0x0, 0xee01) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) close(r0) 3m28.167612269s ago: executing program 4 (id=402): connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) creat(&(0x7f00000000c0)='./file1\x00', 0x24) socket$nl_generic(0x10, 0x3, 0x10) listen(0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) 3m12.146580751s ago: executing program 32 (id=402): connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) creat(&(0x7f00000000c0)='./file1\x00', 0x24) socket$nl_generic(0x10, 0x3, 0x10) listen(0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) 12.881210635s ago: executing program 5 (id=987): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = msgget$private(0x0, 0x508) msgrcv(r3, 0x0, 0x0, 0x1, 0x0) msgctl$IPC_RMID(r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) unshare(0x60000000) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) 9.630286624s ago: executing program 5 (id=999): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() prctl$PR_SET_TIMERSLACK(0x1d, 0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r5 = socket(0x15, 0x5, 0x0) r6 = syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) ioctl$VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@overlay={0xae, 0x3, 0x4, 0x800, 0x8008000, {0x0, 0x2710}, {0x1, 0x1, 0x9, 0x4, 0xeb, 0x4, "70d9a82b"}, 0x7ff, 0x3, {}, 0xfffff800}) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000280)={0x1, 0x92fd, 0x0, 0x4}, 0x10) sendto$inet6(r4, 0x0, 0x0, 0x200080c0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000180)={0x8001, 0xfff9, 0x8000, 0xc0e00000, 0x9, 0x142, 0x9, 0x1ec8}, 0x20) sendmmsg$sock(r4, 0x0, 0x0, 0x0) 8.44238655s ago: executing program 0 (id=1004): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x8}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0xb, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x59, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r7) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x1, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x20048040, &(0x7f00000001c0)={0x11, 0x4b71d3d28a13ff44, 0x0, 0x1, 0x26, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 8.084919517s ago: executing program 1 (id=1005): keyctl$session_to_parent(0x12) 7.95018751s ago: executing program 0 (id=1006): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) unshare(0x1e060c80) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_RANGEINFO(r3, 0x80106408, &(0x7f0000000280)={0xb, &(0x7f00000001c0)}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000340)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e23, 0xe76, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}}, 0x90) r4 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsmount(r4, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) acct(&(0x7f00000000c0)='./file1\x00') syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) 7.912004661s ago: executing program 1 (id=1007): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) inotify_init1(0x800) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) 6.390248984s ago: executing program 2 (id=1010): socket$tipc(0x1e, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e2d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r1) socket(0x8bd9f7952e3edb8f, 0x3, 0x5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r3, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000011125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 6.166691848s ago: executing program 5 (id=1011): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0xffff, 0x70bd27}, 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 5.831172775s ago: executing program 2 (id=1012): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') syz_emit_ethernet(0x36, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r0, 0x215eb000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@delchain={0x3c, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r6, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 5.750149447s ago: executing program 0 (id=1013): r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xe5c}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000001280), 0x1, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) r1 = syz_open_procfs(0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000800)={0x9}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0xfa2, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xf94, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @broadcast}, "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"}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip_vs_stats\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x11, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r6 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x2ed1, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 5.586055991s ago: executing program 1 (id=1014): r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x112}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe64, 0x1ff, @empty, 0x2}, 0x1c) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.564661111s ago: executing program 5 (id=1015): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000480)=""/79, 0x4f}], 0x1}, 0x3}], 0x1, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000600)="4cdea1bc185e204c8014521788d95cd7f06966f0bb0b5a4a02d0174059b3a8cea566722c424b7eb8cca4f30c3949f93930c9a9eaec562a3471cd00000000323419", 0x41}], 0x1}}], 0x1, 0x20e8086) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 4.506090044s ago: executing program 3 (id=1016): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x8}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0xb, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x59, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r7) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x1, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x20048040, &(0x7f00000001c0)={0x11, 0x4b71d3d28a13ff44, 0x0, 0x1, 0x26, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 4.418397265s ago: executing program 0 (id=1017): r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xe5c}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000001280), 0x1, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) r1 = syz_open_procfs(0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000800)={0x9}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0xfa2, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xf94, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @broadcast}, "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"}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip_vs_stats\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x11, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r6 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x2ed1, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) keyctl$session_to_parent(0x12) 4.341639067s ago: executing program 5 (id=1018): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r2, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 4.2381053s ago: executing program 1 (id=1019): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x3, 0x4}, {}, {0x8, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 4.23766132s ago: executing program 2 (id=1020): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000004000000040000000f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 3.934177816s ago: executing program 2 (id=1021): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() prctl$PR_SET_TIMERSLACK(0x1d, 0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r5 = socket(0x15, 0x5, 0x0) r6 = syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) ioctl$VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@overlay={0xae, 0x3, 0x4, 0x800, 0x8008000, {0x0, 0x2710}, {0x1, 0x1, 0x9, 0x4, 0xeb, 0x4, "70d9a82b"}, 0x7ff, 0x3, {}, 0xfffff800}) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000280)={0x1, 0x92fd, 0x0, 0x4}, 0x10) sendto$inet6(r4, 0x0, 0x0, 0x200080c0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000180)={0x8001, 0xfff9, 0x8000, 0xc0e00000, 0x9, 0x142, 0x9, 0x1ec8}, 0x20) sendmmsg$sock(r4, 0x0, 0x0, 0x0) 3.550669464s ago: executing program 3 (id=1022): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 3.24865197s ago: executing program 5 (id=1023): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x40000, @dev={0xfe, 0x80, '\x00', 0xc}, 0x3}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 3.041267635s ago: executing program 0 (id=1024): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) inotify_init1(0x800) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) 2.944848067s ago: executing program 3 (id=1025): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) 2.81838991s ago: executing program 1 (id=1026): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) creat(&(0x7f00000000c0)='./file1\x00', 0x24) socket$nl_generic(0x10, 0x3, 0x10) listen(0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000380)) getdents64(r4, &(0x7f0000004000)=""/4090, 0xffa) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 1.670157814s ago: executing program 3 (id=1027): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000040)="448bffffff7fc0cefe836005000000ec55236d5364d2456eed1ed9", 0x1b}], 0x2) 1.148194906s ago: executing program 2 (id=1028): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ppoll(&(0x7f0000000600)=[{r1, 0x1000}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 1.066270197s ago: executing program 3 (id=1029): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x84) 773.567653ms ago: executing program 3 (id=1030): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 332.218503ms ago: executing program 1 (id=1031): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x74, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbba, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x86, 0x3}, {0x5, 0x7}}}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x8, 0x1, 0x5}, {0xc, 0x0, 0x2, 0x1, 0x4}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket(0x400000000010, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001d80)="ca", 0x1}], 0x1}, 0x20004014) 6.30213ms ago: executing program 2 (id=1032): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x8}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0xb, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x59, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r7) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x1, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x20048040, &(0x7f00000001c0)={0x11, 0x4b71d3d28a13ff44, 0x0, 0x1, 0x26, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 0s ago: executing program 0 (id=1033): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) kernel console output (not intermixed with test programs): =3 [ 144.110507][ T127] usb 3-1: Product: syz [ 144.119512][ T127] usb 3-1: Manufacturer: syz [ 144.128710][ T127] usb 3-1: SerialNumber: syz [ 144.146443][ T4948] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 144.354315][ T127] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 144.430537][ T127] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 144.794952][ T4942] loop2: detected capacity change from 0 to 32768 [ 144.915584][ T127] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 145.016980][ T127] usb 3-1: media controller created [ 146.158093][ T127] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 146.602983][ T4967] overlayfs: overlapping lowerdir path [ 148.155463][ T127] zl10353_read_register: readreg error (reg=127, ret==-71) [ 149.044454][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 149.164404][ T127] dvb_usb_gl861: probe of 3-1:157.0 failed with error -5 [ 149.373799][ T127] usb 3-1: USB disconnect, device number 5 [ 152.023505][ T26] audit: type=1326 audit(1783148712.748:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5009 comm="syz.1.163" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e5a39de59 code=0x0 [ 152.669404][ T26] audit: type=1326 audit(1783148713.068:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5009 comm="syz.1.163" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e5a35e68e code=0x7ffc0000 [ 152.810605][ T26] audit: type=1326 audit(1783148713.068:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5009 comm="syz.1.163" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e5a35e68e code=0x7ffc0000 [ 152.923729][ T26] audit: type=1326 audit(1783148713.068:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5009 comm="syz.1.163" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e5a35e68e code=0x7ffc0000 [ 152.953901][ T4709] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 152.973642][ T26] audit: type=1326 audit(1783148713.078:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5009 comm="syz.1.163" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e5a35e68e code=0x7ffc0000 [ 153.034235][ T26] audit: type=1326 audit(1783148713.078:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5009 comm="syz.1.163" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5a39de59 code=0x7ffc0000 [ 153.083682][ T26] audit: type=1326 audit(1783148713.078:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5009 comm="syz.1.163" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e5a35e68e code=0x7ffc0000 [ 153.133775][ T26] audit: type=1326 audit(1783148713.078:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5009 comm="syz.1.163" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e5a35e68e code=0x7ffc0000 [ 153.165409][ T4709] usb 4-1: Using ep0 maxpacket: 8 [ 153.177613][ T4709] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.189768][ T26] audit: type=1326 audit(1783148713.088:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5009 comm="syz.1.163" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e5a35e68e code=0x7ffc0000 [ 153.200529][ T4709] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 153.237617][ T4709] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 153.255836][ T26] audit: type=1326 audit(1783148713.098:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5009 comm="syz.1.163" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e5a35e68e code=0x7ffc0000 [ 153.275777][ T4709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.314204][ T954] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 153.341540][ T4709] usb 4-1: config 0 descriptor?? [ 153.515268][ T954] usb 2-1: Using ep0 maxpacket: 16 [ 153.536096][ T954] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 153.581371][ T954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.610817][ T954] usb 2-1: Product: syz [ 153.624968][ T954] usb 2-1: Manufacturer: syz [ 153.636047][ T954] usb 2-1: SerialNumber: syz [ 153.714596][ T4709] usb 4-1: USB disconnect, device number 2 [ 153.874593][ T954] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 153.909668][ T954] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 153.933079][ T954] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 153.942212][ T954] usb 2-1: media controller created [ 153.977295][ T954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 153.993781][ T4320] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 154.183907][ T4320] usb 3-1: Using ep0 maxpacket: 8 [ 154.194474][ T4320] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 154.240822][ T4320] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 154.271589][ T4320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.351609][ T5023] loop1: detected capacity change from 0 to 32768 [ 154.367074][ T954] zl10353_read_register: readreg error (reg=127, ret==-110) [ 154.571598][ T5023] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 154.582583][ T5023] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 154.592101][ T5023] BTRFS info (device loop1): using free space tree [ 155.574247][ T954] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5 [ 157.275333][ T5023] BTRFS error (device loop1): open_ctree failed: -12 [ 157.815747][ T4709] usb 2-1: USB disconnect, device number 4 [ 157.878041][ T4702] usb 3-1: USB disconnect, device number 6 [ 158.179816][ T4732] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by udevd (4732) [ 159.149042][ T26] kauditd_printk_skb: 47 callbacks suppressed [ 159.149058][ T26] audit: type=1326 audit(1783148719.878:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5074 comm="syz.2.176" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b32b9de59 code=0x0 [ 159.491604][ T26] audit: type=1326 audit(1783148720.058:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5074 comm="syz.2.176" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b32b9de59 code=0x7ffc0000 [ 159.593658][ T26] audit: type=1326 audit(1783148720.058:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5074 comm="syz.2.176" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1b32b5e68e code=0x7ffc0000 [ 159.653849][ T26] audit: type=1326 audit(1783148720.058:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5074 comm="syz.2.176" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b32b9de59 code=0x7ffc0000 [ 159.758565][ T26] audit: type=1326 audit(1783148720.058:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5074 comm="syz.2.176" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1b32b5e68e code=0x7ffc0000 [ 159.852458][ T26] audit: type=1326 audit(1783148720.068:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5074 comm="syz.2.176" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1b32b5e68e code=0x7ffc0000 [ 159.950543][ T26] audit: type=1326 audit(1783148720.068:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5074 comm="syz.2.176" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1b32b5e68e code=0x7ffc0000 [ 160.033418][ T26] audit: type=1326 audit(1783148720.068:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5074 comm="syz.2.176" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1b32b5e68e code=0x7ffc0000 [ 160.088461][ T26] audit: type=1326 audit(1783148720.068:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5074 comm="syz.2.176" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1b32b5e68e code=0x7ffc0000 [ 160.174014][ T26] audit: type=1326 audit(1783148720.068:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5074 comm="syz.2.176" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1b32b5e68e code=0x7ffc0000 [ 160.287968][ T4324] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 160.473674][ T4324] usb 2-1: Using ep0 maxpacket: 8 [ 160.480916][ T4324] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.518614][ T4324] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 160.558265][ T4324] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 160.598769][ T4324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.690069][ T4324] usb 2-1: config 0 descriptor?? [ 162.130174][ T4353] usb 2-1: USB disconnect, device number 5 [ 163.960005][ T5102] loop2: detected capacity change from 0 to 32768 [ 163.977409][ T5102] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 163.987659][ T5102] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 163.998050][ T5102] BTRFS info (device loop2): using free space tree [ 164.160901][ T5102] BTRFS info (device loop2): enabling ssd optimizations [ 164.203815][ T4353] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 164.433926][ T4353] usb 2-1: Using ep0 maxpacket: 8 [ 164.447097][ T4353] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 164.472666][ T4353] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.492350][ T4353] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 164.511457][ T4353] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.541937][ T4353] usbtmc 2-1:16.0: bulk endpoints not found [ 167.082616][ T4281] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 167.335756][ T4320] usb 2-1: USB disconnect, device number 6 [ 167.400505][ T5147] netlink: 160 bytes leftover after parsing attributes in process `syz.4.192'. [ 167.439426][ T5154] Bluetooth: MGMT ver 1.22 [ 167.543663][ T4816] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 167.976749][ T5147] fuse: Unknown parameter 'fd0x0000000000000009' [ 168.038285][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 168.038332][ T26] audit: type=1326 audit(1783148728.758:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5150 comm="syz.2.191" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b32b9de59 code=0x0 [ 168.084090][ T4701] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 168.307989][ T4701] usb 4-1: unable to get BOS descriptor or descriptor too short [ 168.411450][ T4701] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.639333][ T4701] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 168.869813][ T4816] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 168.885603][ T4701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 169.152369][ T4701] usb 4-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 169.397400][ T4701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.644070][ T4701] usb 4-1: Product: syz [ 169.757775][ T4701] usb 4-1: Manufacturer: syz [ 169.860557][ T4701] usb 4-1: SerialNumber: syz [ 170.163235][ T4701] usb 4-1: config 0 descriptor?? [ 170.312437][ T5154] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 170.373939][ T4701] pn533_usb 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 170.400907][ T4816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.409034][ T4816] usb 1-1: Product: syz [ 170.413238][ T4816] usb 1-1: Manufacturer: syz [ 170.417937][ T4816] usb 1-1: SerialNumber: syz [ 170.425956][ T4816] usb 1-1: config 0 descriptor?? [ 170.480521][ T4816] usb 1-1: can't set config #0, error -71 [ 170.495383][ T4816] usb 1-1: USB disconnect, device number 2 [ 170.549291][ T5160] loop1: detected capacity change from 0 to 2048 [ 170.629021][ T4709] usb 4-1: USB disconnect, device number 3 [ 170.724669][ T5160] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 171.189912][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 172.286140][ T5181] loop1: detected capacity change from 0 to 32768 [ 172.296437][ T5181] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.201 (5181) [ 172.317658][ T5181] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 172.328007][ T5181] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 172.337532][ T5181] BTRFS info (device loop1): using free space tree [ 175.540556][ T26] audit: type=1326 audit(1783148736.268:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.3.206" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f27fd79de59 code=0x0 [ 175.670661][ T4283] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 175.731605][ T5181] BTRFS error (device loop1): open_ctree failed: -12 [ 175.782397][ T4504] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by udevd (4504) [ 175.886606][ T5221] netlink: 160 bytes leftover after parsing attributes in process `syz.1.209'. [ 175.923637][ T4283] usb 1-1: Using ep0 maxpacket: 8 [ 175.930544][ T4283] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 176.118496][ T4324] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 176.128925][ T4283] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.142571][ T4283] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 176.151740][ T4283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.172639][ T4283] usbtmc 1-1:16.0: bulk endpoints not found [ 176.273131][ T5227] fuse: Unknown parameter 'fd0x000000000000000b' [ 176.972059][ T4324] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 177.109886][ T4324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.263088][ T4324] usb 5-1: Product: syz [ 177.345420][ T4324] usb 5-1: Manufacturer: syz [ 177.433051][ T4324] usb 5-1: SerialNumber: syz [ 177.663467][ T4324] usb 5-1: config 0 descriptor?? [ 178.117874][ T4324] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 178.143792][ T4816] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 178.377562][ T4816] usb 3-1: unable to get BOS descriptor or descriptor too short [ 178.463688][ T4816] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.721830][ T4816] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 179.010060][ T4816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 179.186563][ T4283] usb 1-1: USB disconnect, device number 3 [ 179.250117][ T4816] usb 3-1: string descriptor 0 read error: -71 [ 179.289611][ T4816] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 179.339408][ T4816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.389509][ T4816] usb 3-1: config 0 descriptor?? [ 179.412260][ T4816] usb 3-1: can't set config #0, error -71 [ 179.464083][ T4816] usb 3-1: USB disconnect, device number 7 [ 179.563994][ T4324] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 179.603756][ T4324] usb 5-1: USB disconnect, device number 5 [ 180.044947][ T5254] overlayfs: overlapping lowerdir path [ 183.185322][ T5265] netlink: 160 bytes leftover after parsing attributes in process `syz.3.221'. [ 183.203677][ T4816] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 183.442599][ T5264] loop4: detected capacity change from 0 to 32768 [ 183.497195][ T5264] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 183.507535][ T5264] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 183.517050][ T5264] BTRFS info (device loop4): using free space tree [ 184.726987][ T5264] BTRFS info (device loop4): enabling ssd optimizations [ 185.003788][ T4816] usb 3-1: device descriptor read/64, error -71 [ 185.968098][ T4293] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 186.004581][ T4816] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 186.203770][ T4816] usb 3-1: Using ep0 maxpacket: 8 [ 186.216884][ T4816] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 186.333460][ T4816] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.346989][ T4816] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 186.356867][ T4816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.369303][ T4816] usbtmc 3-1:16.0: bulk endpoints not found [ 186.477429][ T5323] capability: warning: `syz.0.231' uses 32-bit capabilities (legacy support in use) [ 186.733803][ T4816] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 186.893210][ T5327] overlayfs: overlapping lowerdir path [ 188.201734][ T5331] netlink: 24 bytes leftover after parsing attributes in process `syz.1.234'. [ 188.254365][ T4368] usb 3-1: USB disconnect, device number 9 [ 188.501814][ T5334] netlink: 160 bytes leftover after parsing attributes in process `syz.2.236'. [ 189.153654][ T4816] usb 5-1: Using ep0 maxpacket: 8 [ 189.153660][ T4368] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 189.162718][ T4816] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.432965][ T4368] usb 4-1: device descriptor read/64, error -71 [ 189.605798][ T4816] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 189.723453][ T4816] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 189.732593][ T4816] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.829601][ T4816] usb 5-1: config 0 descriptor?? [ 189.845140][ T4816] usb 5-1: can't set config #0, error -71 [ 189.863842][ T4368] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 190.033730][ T4368] usb 4-1: device descriptor read/64, error -71 [ 190.217833][ T4368] usb usb4-port1: attempt power cycle [ 191.125611][ T4816] usb 5-1: USB disconnect, device number 6 [ 192.133491][ T4368] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 192.780793][ T4368] usb 4-1: device descriptor read/8, error -71 [ 193.244082][ T4816] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 193.480256][ T4816] usb 1-1: unable to get BOS descriptor or descriptor too short [ 193.540629][ T4816] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.717119][ T4816] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 193.783518][ T4816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 193.905892][ T4816] usb 1-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 193.963710][ T4816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.991573][ T4816] usb 1-1: Product: syz [ 194.026233][ T4816] usb 1-1: Manufacturer: syz [ 194.225619][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.231993][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.253428][ T4816] usb 1-1: SerialNumber: syz [ 194.724513][ T4816] usb 1-1: config 0 descriptor?? [ 196.022262][ T4814] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 196.243725][ T4814] usb 5-1: Using ep0 maxpacket: 8 [ 196.258467][ T4814] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 196.330313][ T4814] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 196.413278][ T5384] overlayfs: overlapping lowerdir path [ 198.129037][ T4816] usb 1-1: can't set config #0, error -71 [ 198.135034][ T4814] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 198.150534][ T4814] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 198.163567][ T4814] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 198.195358][ T4816] usb 1-1: USB disconnect, device number 4 [ 198.205717][ T4814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.217509][ T4814] usb 5-1: can't set config #16, error -71 [ 198.246993][ T4814] usb 5-1: USB disconnect, device number 7 [ 198.397654][ T5388] netlink: 160 bytes leftover after parsing attributes in process `syz.3.251'. [ 198.516598][ T26] audit: type=1326 audit(1783148759.248:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5389 comm="syz.2.252" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b32b9de59 code=0x0 [ 201.282082][ T4816] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 201.443642][ T4816] usb 2-1: device descriptor read/64, error -71 [ 201.565155][ T5418] netlink: 24 bytes leftover after parsing attributes in process `syz.4.260'. [ 204.283768][ T4702] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 204.543892][ T4702] usb 5-1: Using ep0 maxpacket: 8 [ 204.594741][ T4702] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 204.653849][ T4701] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 204.708981][ T4702] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 205.337108][ T4701] usb 1-1: unable to get BOS descriptor or descriptor too short [ 205.388640][ T4701] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.401231][ T4702] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 205.578365][ T4702] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 205.596172][ T4701] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 205.732698][ T4701] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 205.780318][ T4702] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 205.872450][ T4701] usb 1-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 205.903878][ T4702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.000020][ T4701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.130894][ T4702] usbtmc 5-1:16.0: bulk endpoints not found [ 206.165311][ T4701] usb 1-1: Product: syz [ 206.229240][ T4701] usb 1-1: Manufacturer: syz [ 206.329502][ T4701] usb 1-1: SerialNumber: syz [ 206.501955][ T4701] usb 1-1: config 0 descriptor?? [ 206.533658][ T4288] Bluetooth: hci1: command 0x0406 tx timeout [ 206.539739][ T4288] Bluetooth: hci3: command 0x0406 tx timeout [ 206.545875][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 206.551918][ T4282] Bluetooth: hci4: command 0x0406 tx timeout [ 206.558073][ T4292] Bluetooth: hci2: command 0x0406 tx timeout [ 206.561379][ T5437] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 206.617744][ T4701] pn533_usb 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 209.354477][ T4413] usb 5-1: USB disconnect, device number 8 [ 209.403263][ T4818] usb 1-1: USB disconnect, device number 5 [ 209.443449][ T5444] netlink: 160 bytes leftover after parsing attributes in process `syz.3.268'. [ 210.963860][ T4701] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 212.165829][ T4701] usb 1-1: device descriptor read/64, error -71 [ 213.656056][ T4701] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 216.433778][ T4701] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 216.647191][ T4701] usb 1-1: unable to get BOS descriptor or descriptor too short [ 216.697419][ T4701] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.847974][ T4701] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 217.017280][ T4701] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 217.140724][ T4816] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 217.196959][ T4701] usb 1-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 217.219718][ T5500] netlink: 160 bytes leftover after parsing attributes in process `syz.4.283'. [ 217.365992][ T4701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.588135][ T4701] usb 1-1: Product: syz [ 217.600864][ T4701] usb 1-1: Manufacturer: syz [ 217.605817][ T4701] usb 1-1: SerialNumber: syz [ 217.629720][ T4701] usb 1-1: config 0 descriptor?? [ 217.636352][ T4701] usb 1-1: can't set config #0, error -71 [ 217.643215][ T4701] usb 1-1: USB disconnect, device number 8 [ 218.818450][ T5530] overlayfs: overlapping lowerdir path [ 221.023730][ T4323] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 221.383799][ T4323] usb 5-1: device descriptor read/64, error -71 [ 222.511070][ T4323] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 222.863885][ T4709] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 222.872809][ T4323] usb 5-1: device descriptor read/64, error -71 [ 223.872587][ T4323] usb usb5-port1: attempt power cycle [ 223.973843][ T4709] usb 3-1: Using ep0 maxpacket: 8 [ 223.985370][ T4709] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 224.045927][ T4709] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 224.101116][ T4709] usb 3-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 224.140642][ T4709] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.187481][ T4709] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 224.220245][ T4709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.311314][ T4709] usbtmc 3-1:16.0: bulk endpoints not found [ 224.853683][ T4323] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 224.919634][ T4323] usb 5-1: unable to get BOS descriptor or descriptor too short [ 225.100498][ T4323] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.292514][ T4323] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 225.466145][ T4323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 225.658113][ T4323] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 225.818908][ T4323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.970466][ T4323] usb 5-1: Product: syz [ 226.037670][ T4323] usb 5-1: Manufacturer: syz [ 226.121328][ T4323] usb 5-1: SerialNumber: syz [ 226.227450][ T4709] usb 3-1: USB disconnect, device number 10 [ 226.366903][ T4323] usb 5-1: config 0 descriptor?? [ 226.471375][ T5560] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 226.512487][ T4323] pn533_usb 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 227.056539][ T5567] netlink: 24 bytes leftover after parsing attributes in process `syz.2.301'. [ 227.614409][ T4708] usb 5-1: USB disconnect, device number 11 [ 233.131971][ T4818] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 233.934545][ T4709] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 234.243649][ T4709] usb 1-1: Using ep0 maxpacket: 8 [ 234.250801][ T4709] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 234.280883][ T4709] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 234.307001][ T4709] usb 1-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 234.323036][ T4709] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.358994][ T4709] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 234.550583][ T4709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.617307][ T4709] usbtmc 1-1:16.0: bulk endpoints not found [ 235.389085][ T5630] netlink: 24 bytes leftover after parsing attributes in process `syz.1.320'. [ 238.293833][ T22] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 238.516835][ T22] usb 3-1: unable to get BOS descriptor or descriptor too short [ 238.569807][ T22] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.147378][ T22] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 240.157598][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 240.247242][ T4816] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 241.149982][ T4708] usb 1-1: USB disconnect, device number 9 [ 242.282322][ T22] usb 3-1: string descriptor 0 read error: -71 [ 242.297036][ T22] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 242.336669][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.392951][ T22] usb 3-1: config 0 descriptor?? [ 242.401828][ T22] usb 3-1: can't set config #0, error -71 [ 242.666863][ T22] usb 3-1: USB disconnect, device number 11 [ 243.597952][ T5667] loop1: detected capacity change from 0 to 2048 [ 243.638163][ T5667] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 243.783746][ T5667] UDF-fs: error (device loop1): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 243.845728][ T5667] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 248.320938][ T5688] loop0: detected capacity change from 0 to 256 [ 248.339801][ T5688] exfat: Deprecated parameter 'namecase' [ 248.346129][ T5688] exfat: Deprecated parameter 'namecase' [ 248.352228][ T5688] exfat: Deprecated parameter 'namecase' [ 248.709344][ T5688] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 248.764914][ T5686] binder: 5681:5686 ioctl c0306201 0 returned -14 [ 249.503822][ T4283] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 249.503879][ T4708] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 249.704121][ T4283] usb 5-1: Using ep0 maxpacket: 16 [ 249.717812][ T4283] usb 5-1: no configurations [ 249.822478][ T4283] usb 5-1: can't read configurations, error -22 [ 249.946583][ T4708] usb 4-1: unable to get BOS descriptor or descriptor too short [ 250.028379][ T4708] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.203807][ T4283] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 250.282880][ T4708] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 250.446421][ T4283] usb 5-1: Using ep0 maxpacket: 16 [ 250.481041][ T4283] usb 5-1: no configurations [ 250.559109][ T4708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 250.611688][ T4283] usb 5-1: can't read configurations, error -22 [ 250.767766][ T4283] usb usb5-port1: attempt power cycle [ 250.829537][ T4708] usb 4-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 251.075288][ T4708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.274597][ T4708] usb 4-1: Product: syz [ 251.333815][ T4283] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 251.387531][ T4708] usb 4-1: Manufacturer: syz [ 251.428297][ T4283] usb 5-1: Using ep0 maxpacket: 16 [ 251.514933][ T4708] usb 4-1: SerialNumber: syz [ 251.558080][ T4283] usb 5-1: no configurations [ 251.678805][ T4283] usb 5-1: can't read configurations, error -22 [ 251.774418][ T4708] usb 4-1: config 0 descriptor?? [ 251.907131][ T5701] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 251.964243][ T4708] pn533_usb 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 252.023628][ T4283] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 252.163268][ T4708] usb 4-1: USB disconnect, device number 11 [ 252.203991][ T4283] usb 5-1: device descriptor read/8, error -71 [ 252.476247][ T4283] usb usb5-port1: unable to enumerate USB device [ 253.739857][ T5732] loop0: detected capacity change from 0 to 128 [ 253.765460][ T5732] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 253.805715][ T5732] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 253.825134][ T5734] fuse: Bad value for 'fd' [ 253.888958][ T5736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.349'. [ 254.093160][ T4567] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 254.343861][ T4816] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 254.533726][ T4816] usb 3-1: Using ep0 maxpacket: 8 [ 254.541330][ T4816] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 254.572872][ T4816] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 254.600744][ T4816] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 254.633653][ T4816] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 254.666031][ T4816] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 254.696828][ T5741] loop0: detected capacity change from 0 to 32768 [ 254.703456][ T4816] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 254.724917][ T4816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.725972][ T5741] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.352 (5741) [ 254.767741][ T4816] usbtmc: probe of 3-1:16.0 failed with error -22 [ 254.815579][ T5741] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 254.830389][ T5741] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 254.843005][ T5741] BTRFS info (device loop0): using free space tree [ 254.983775][ T5741] BTRFS info (device loop0): enabling ssd optimizations [ 255.688469][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.694939][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.853829][ T22] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 256.086971][ T22] usb 5-1: unable to get BOS descriptor or descriptor too short [ 256.145803][ T22] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.385261][ T22] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 256.548314][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 256.723369][ T22] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 256.885617][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.999777][ T22] usb 5-1: Product: syz [ 257.058240][ T22] usb 5-1: Manufacturer: syz [ 257.579134][ T22] usb 5-1: SerialNumber: syz [ 257.712388][ T22] usb 5-1: config 0 descriptor?? [ 257.866029][ T5771] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 257.930807][ T22] pn533_usb 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 257.956406][ T4283] usb 3-1: USB disconnect, device number 12 [ 258.623242][ T4276] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 258.719519][ T4283] usb 5-1: USB disconnect, device number 16 [ 260.043768][ T5790] fuse: Bad value for 'fd' [ 261.583859][ T127] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 261.793784][ T127] usb 1-1: Using ep0 maxpacket: 8 [ 261.823388][ T127] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 262.000888][ T127] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 262.212900][ T127] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 262.268713][ T127] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 262.307389][ T127] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 262.540862][ T127] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 262.550732][ T127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.568827][ T127] usbtmc: probe of 1-1:16.0 failed with error -22 [ 263.433324][ T5806] loop2: detected capacity change from 0 to 32768 [ 263.482035][ T5806] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.367 (5806) [ 263.516638][ T5806] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 263.543891][ T5806] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 263.553400][ T5806] BTRFS info (device loop2): using free space tree [ 264.023723][ T22] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 264.035513][ T5806] BTRFS info (device loop2): enabling ssd optimizations [ 264.253947][ T22] usb 4-1: unable to get BOS descriptor or descriptor too short [ 264.320560][ T22] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.531679][ T22] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 264.738594][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 264.981977][ T22] usb 4-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 265.185134][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.345710][ T22] usb 4-1: Product: syz [ 265.453816][ T22] usb 4-1: Manufacturer: syz [ 265.588224][ T22] usb 4-1: SerialNumber: syz [ 265.819272][ T22] usb 4-1: config 0 descriptor?? [ 265.917719][ T5847] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 265.943202][ T3600] usb 1-1: USB disconnect, device number 10 [ 265.967597][ T22] pn533_usb 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 266.373982][ T4281] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 266.881796][ T4701] usb 4-1: USB disconnect, device number 12 [ 267.783634][ T4504] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 9 /dev/loop2 scanned by udevd (4504) [ 270.693637][ T22] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 270.903719][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 270.910803][ T22] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 270.973631][ T22] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 271.029814][ T22] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 271.080802][ T22] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 271.131864][ T22] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 271.263684][ T22] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 271.293135][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.353951][ T22] usbtmc: probe of 3-1:16.0 failed with error -22 [ 271.530907][ T5888] loop3: detected capacity change from 0 to 32768 [ 271.580883][ T5888] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 271.687043][ T5890] loop0: detected capacity change from 0 to 32768 [ 271.742135][ T5890] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.387 (5890) [ 271.807932][ T5890] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 271.869420][ T4504] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 271.923781][ T5890] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 271.949589][ T5890] BTRFS info (device loop0): setting nodatasum [ 271.983002][ T5890] BTRFS info (device loop0): force zlib compression, level 3 [ 272.041550][ T5890] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 272.064548][ T5890] BTRFS info (device loop0): use lzo compression, level 0 [ 272.072736][ T5890] BTRFS info (device loop0): turning on flush-on-commit [ 272.912613][ T5890] BTRFS info (device loop0): enabling auto defrag [ 272.953823][ T5890] BTRFS info (device loop0): max_inline at 4096 [ 272.960158][ T5890] BTRFS info (device loop0): force zlib compression, level 3 [ 272.983881][ T5890] BTRFS info (device loop0): using free space tree [ 273.683338][ T5890] BTRFS error (device loop0): open_ctree failed: -12 [ 274.053715][ T4732] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4732) [ 274.103768][ T4320] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 274.373779][ T4320] usb 2-1: unable to get BOS descriptor or descriptor too short [ 274.591480][ T4283] usb 3-1: USB disconnect, device number 13 [ 274.966243][ T4320] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.186741][ T4320] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 275.454101][ T4320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 275.685457][ T4320] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 275.866091][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.073704][ T4320] usb 2-1: Product: syz [ 276.077954][ T4320] usb 2-1: Manufacturer: syz [ 276.082591][ T4320] usb 2-1: SerialNumber: syz [ 276.336299][ T4320] usb 2-1: config 0 descriptor?? [ 276.383869][ T4320] usb 2-1: can't set config #0, error -71 [ 276.410300][ T4320] usb 2-1: USB disconnect, device number 9 [ 276.902364][ T5964] input input5: cannot allocate more than FF_MAX_EFFECTS effects [ 278.833657][ T4283] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 279.076952][ T4283] usb 2-1: unable to get BOS descriptor or descriptor too short [ 279.161120][ T4283] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.341049][ T4283] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 279.500678][ T4283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 279.718613][ T4283] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 279.900021][ T4283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.033249][ T4283] usb 2-1: Product: syz [ 280.092518][ T4283] usb 2-1: Manufacturer: syz [ 280.166507][ T4283] usb 2-1: SerialNumber: syz [ 280.342581][ T4283] usb 2-1: config 0 descriptor?? [ 280.442712][ T5981] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 280.476984][ T4283] pn533_usb 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 281.681795][ T4701] usb 2-1: USB disconnect, device number 10 [ 283.022843][ T6004] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 283.031175][ T6004] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 283.039652][ T6004] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 283.976470][ T6013] netlink: 160 bytes leftover after parsing attributes in process `syz.1.427'. [ 286.597166][ T6041] loop3: detected capacity change from 0 to 2048 [ 286.681642][ T6043] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 286.690098][ T6043] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 286.698779][ T6043] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 287.873200][ T4821] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 289.196943][ T6041] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 289.446152][ T4821] usb 2-1: unable to get BOS descriptor or descriptor too short [ 289.503027][ T4821] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.712248][ T4821] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 289.856667][ T4821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 289.912357][ T4821] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 289.931270][ T6059] netlink: 160 bytes leftover after parsing attributes in process `syz.2.440'. [ 289.955589][ T4821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.970953][ T4821] usb 2-1: Product: syz [ 289.995962][ T4821] usb 2-1: Manufacturer: syz [ 290.009119][ T4821] usb 2-1: SerialNumber: syz [ 290.041843][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 290.069780][ T4821] usb 2-1: config 0 descriptor?? [ 290.214453][ T6050] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 291.103612][ T4821] usb 2-1: can't set config #0, error -71 [ 291.123364][ T4821] usb 2-1: USB disconnect, device number 11 [ 293.938231][ T6087] netlink: 24 bytes leftover after parsing attributes in process `syz.2.449'. [ 294.048137][ T4282] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 294.062584][ T4282] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 294.104672][ T4282] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 294.112650][ T4282] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 294.194143][ T4282] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 294.203731][ T4292] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 294.294158][ T6095] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 294.302404][ T6095] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 294.310888][ T6095] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 295.525419][ T6106] capability: warning: `syz.3.454' uses deprecated v2 capabilities in a way that may be insecure [ 297.269762][ T4288] Bluetooth: hci5: command 0x0409 tx timeout [ 297.363776][ T22] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 297.955473][ T22] usb 2-1: device descriptor read/all, error -71 [ 300.750480][ T6090] chnl_net:caif_netlink_parms(): no params data found [ 300.812419][ T4288] Bluetooth: hci5: command 0x041b tx timeout [ 301.461559][ T6142] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 301.469844][ T6142] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 301.478373][ T6142] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 301.570317][ T6090] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.643908][ T6090] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.689371][ T6090] device bridge_slave_0 entered promiscuous mode [ 301.719644][ T6090] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.727973][ T6090] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.738062][ T6090] device bridge_slave_1 entered promiscuous mode [ 301.776288][ T6090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.788330][ T6090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.821641][ T6090] team0: Port device team_slave_0 added [ 301.831986][ T6090] team0: Port device team_slave_1 added [ 301.870173][ T6090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.880644][ T6090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.909856][ T6090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.932968][ T6090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.947505][ T6090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.974283][ T6090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.023680][ T6090] device hsr_slave_0 entered promiscuous mode [ 302.033295][ T6090] device hsr_slave_1 entered promiscuous mode [ 302.136424][ T6090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 302.179144][ T6090] Cannot create hsr debugfs directory [ 302.541365][ T5053] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 302.853784][ T4288] Bluetooth: hci5: command 0x040f tx timeout [ 303.979607][ T5053] usb 2-1: unable to get BOS descriptor or descriptor too short [ 304.020607][ T5053] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.166650][ T5053] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 304.317595][ T5053] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 304.391578][ T5053] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 304.434397][ T5053] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.476875][ T5053] usb 2-1: Product: syz [ 304.481133][ T5053] usb 2-1: Manufacturer: syz [ 304.503836][ T6090] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 304.516797][ T5053] usb 2-1: SerialNumber: syz [ 304.538955][ T5053] usb 2-1: config 0 descriptor?? [ 304.571055][ T6154] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 304.585991][ T5053] pn533_usb 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 304.609179][ T6160] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 304.615213][ T6090] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 304.637969][ T6162] loop2: detected capacity change from 0 to 1024 [ 304.661737][ T6090] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 304.847816][ T6090] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 304.910322][ T4325] usb 2-1: USB disconnect, device number 14 [ 305.122443][ T4288] Bluetooth: hci5: command 0x0419 tx timeout [ 305.942921][ T6090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.971929][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 305.986405][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 306.010021][ T6090] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.031964][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 306.048161][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 306.104835][ T4457] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.112029][ T4457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.171316][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 306.194511][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 306.203492][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 306.233685][ T4457] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.240830][ T4457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.348847][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 306.361930][ T6178] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 306.370339][ T6178] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 306.378955][ T6178] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 307.226770][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 307.296636][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 307.357185][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 307.366365][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 307.388764][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 307.429989][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 307.458233][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 307.486825][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 307.528189][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 307.564487][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 307.589802][ T6090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 308.690095][ T6188] loop0: detected capacity change from 0 to 32768 [ 308.727469][ T6188] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 308.894832][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 308.902369][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 308.924751][ T6090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.007647][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.488'. [ 309.038412][ T6212] netlink: 7 bytes leftover after parsing attributes in process `syz.1.488'. [ 309.102751][ T4504] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 310.987123][ T6222] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 311.243107][ T6222] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 311.253850][ T4709] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 311.362262][ T6222] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 311.474433][ T4709] usb 4-1: unable to get BOS descriptor or descriptor too short [ 311.532647][ T4709] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.711528][ T4709] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 311.874691][ T4709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 312.023848][ T4709] usb 4-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 312.209786][ T4709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.515770][ T4709] usb 4-1: Product: syz [ 312.626683][ T4709] usb 4-1: Manufacturer: syz [ 312.733479][ T4709] usb 4-1: SerialNumber: syz [ 313.076989][ T4709] usb 4-1: config 0 descriptor?? [ 313.272108][ T4709] usb 4-1: can't set config #0, error -71 [ 313.437669][ T4709] usb 4-1: USB disconnect, device number 13 [ 313.684302][ T6219] Process accounting resumed [ 313.979835][ T6251] loop3: detected capacity change from 0 to 512 [ 315.020452][ T5581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 315.056221][ T5581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 315.925640][ T5581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 315.937306][ T5581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 315.994612][ T6090] device veth0_vlan entered promiscuous mode [ 316.056496][ T5581] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 316.168618][ T5581] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 316.354271][ T5934] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 316.483191][ T6090] device veth1_vlan entered promiscuous mode [ 316.607096][ T5934] usb 3-1: unable to get BOS descriptor or descriptor too short [ 316.651673][ T5934] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.798502][ T5934] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 316.928315][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 316.963098][ T5934] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 316.973695][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.988298][ T5934] usb 3-1: Product: syz [ 316.992693][ T5934] usb 3-1: Manufacturer: syz [ 316.999511][ T5934] usb 3-1: SerialNumber: syz [ 317.057229][ T5934] usb 3-1: config 0 descriptor?? [ 317.100259][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.112442][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.168061][ T6269] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 317.209232][ T5934] pn533_usb 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 317.311019][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 317.413204][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 317.614322][ T6090] device veth0_macvtap entered promiscuous mode [ 318.407856][ T6090] device veth1_macvtap entered promiscuous mode [ 318.595192][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 319.002175][ T6090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.054891][ T5053] usb 3-1: USB disconnect, device number 14 [ 319.076556][ T6090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.163006][ T6090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.173942][ T6090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.203820][ T6090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.223674][ T6090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.267921][ T6090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.289162][ T6090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.309624][ T6090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.329407][ T6277] program syz.0.507 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 319.339859][ T6090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.362186][ T6090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.394893][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 319.409239][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 319.437429][ T6090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.483543][ T6090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.493425][ T6090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.551627][ T6090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.573641][ T6090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.604112][ T6090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.623610][ T6090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.644635][ T6090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.682508][ T6090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.750144][ T6090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.805217][ T6090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.816796][ T6283] netlink: 24 bytes leftover after parsing attributes in process `syz.0.509'. [ 319.839979][ T6287] loop2: detected capacity change from 0 to 512 [ 319.914609][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 319.937068][ T6285] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 319.954501][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 319.967782][ T6285] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 320.010319][ T6090] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.020607][ T6285] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 320.075875][ T6090] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.103782][ T6090] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.112559][ T6090] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.613950][ T6285] Process accounting resumed [ 323.063640][ T4702] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 323.277570][ T4702] usb 1-1: unable to get BOS descriptor or descriptor too short [ 323.319928][ T4702] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.492840][ T4702] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 323.619885][ T4702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 323.766076][ T4702] usb 1-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 323.853654][ T4702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.872476][ T4702] usb 1-1: Product: syz [ 323.877159][ T4702] usb 1-1: Manufacturer: syz [ 323.881812][ T4702] usb 1-1: SerialNumber: syz [ 323.909876][ T4702] usb 1-1: config 0 descriptor?? [ 323.926624][ T6301] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 323.969453][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.991870][ T4702] pn533_usb 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 324.019121][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.040496][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 324.090289][ T4337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.103641][ T4337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.121479][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 324.158043][ T5934] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 324.228099][ T4283] usb 1-1: USB disconnect, device number 11 [ 324.413690][ T5934] usb 4-1: Using ep0 maxpacket: 16 [ 324.420506][ T5934] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.441215][ T5934] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 324.615031][ T5934] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 324.624490][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.639982][ T5934] usb 4-1: Product: syz [ 324.644524][ T5934] usb 4-1: Manufacturer: syz [ 324.649162][ T5934] usb 4-1: SerialNumber: syz [ 324.721570][ T5050] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.006364][ T5934] usb 4-1: 0:2 : does not exist [ 325.022080][ T5934] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 325.148711][ T5050] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.168909][ T5934] usb 4-1: USB disconnect, device number 14 [ 325.361570][ T6318] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 325.422942][ T5050] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.454739][ T6318] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 325.837836][ T5050] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.135528][ T6332] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 326.144095][ T6332] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 326.152666][ T6332] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 326.968417][ T6332] Process accounting resumed [ 330.094555][ T6373] netlink: 24 bytes leftover after parsing attributes in process `syz.5.535'. [ 330.283962][ T5934] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 330.429117][ T6383] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 330.437724][ T6383] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 330.446310][ T6383] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 331.222878][ T6383] Process accounting resumed [ 331.367249][ T5934] usb 1-1: device descriptor read/all, error -71 [ 331.377858][ T6396] loop3: detected capacity change from 0 to 64 [ 331.490011][ T26] audit: type=1800 audit(1783148892.218:131): pid=6396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.544" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 331.887589][ T6408] loop0: detected capacity change from 0 to 164 [ 332.025486][ T6408] ISOFS: unable to read i-node block [ 332.063310][ T6408] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 333.361009][ T6426] sg_write: data in/out 96/136 bytes for SCSI command 0x0-- guessing data in; [ 333.361009][ T6426] program syz.0.552 not setting count and/or reply_len properly [ 334.267298][ T4824] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 334.516818][ T4824] usb 4-1: unable to get BOS descriptor or descriptor too short [ 334.588182][ T4824] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.782258][ T4824] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 334.943431][ T4824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 335.669670][ T4824] usb 4-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 335.869531][ T4824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.070694][ T4824] usb 4-1: Product: syz [ 336.156212][ T4824] usb 4-1: Manufacturer: syz [ 336.255177][ T4824] usb 4-1: SerialNumber: syz [ 336.458475][ T4824] usb 4-1: config 0 descriptor?? [ 336.548897][ T6439] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 336.577481][ T4824] pn533_usb 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 336.884690][ T4413] usb 4-1: USB disconnect, device number 15 [ 337.153610][ T5050] device hsr_slave_0 left promiscuous mode [ 337.212456][ T5050] device hsr_slave_1 left promiscuous mode [ 337.257640][ T5050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.283806][ T5050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.321020][ T5050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.359138][ T5050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.404830][ T5050] device bridge_slave_1 left promiscuous mode [ 337.412903][ T5050] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.483284][ T5050] device bridge_slave_0 left promiscuous mode [ 337.503729][ T5050] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.517690][ T6460] loop5: detected capacity change from 0 to 2048 [ 337.631703][ T6460] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 337.654329][ T5050] device veth1_macvtap left promiscuous mode [ 337.675770][ T5050] device veth0_macvtap left promiscuous mode [ 337.681966][ T5050] device veth1_vlan left promiscuous mode [ 337.688168][ T5050] device veth0_vlan left promiscuous mode [ 337.823595][ T4824] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 337.873886][ T6090] EXT4-fs (loop5): unmounting filesystem. [ 338.023584][ T4824] usb 4-1: Using ep0 maxpacket: 16 [ 338.036235][ T4824] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.171084][ T4824] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 338.320516][ T4824] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 338.430804][ T4824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.528455][ T4824] usb 4-1: Product: syz [ 338.578873][ T4824] usb 4-1: Manufacturer: syz [ 338.652849][ T4824] usb 4-1: SerialNumber: syz [ 339.003362][ T4824] usb 4-1: 0:2 : does not exist [ 339.023626][ T4320] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 339.129253][ T4824] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 339.266342][ T4320] usb 3-1: unable to get BOS descriptor or descriptor too short [ 339.313681][ T4320] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.458769][ T4320] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 339.573264][ T4824] usb 4-1: USB disconnect, device number 16 [ 339.639338][ T4320] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 339.803890][ T4320] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 339.997252][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.105352][ T4320] usb 3-1: Product: syz [ 340.146326][ T4504] udevd[4504]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 340.201469][ T4320] usb 3-1: Manufacturer: syz [ 340.250454][ T4320] usb 3-1: SerialNumber: syz [ 340.371958][ T4320] usb 3-1: config 0 descriptor?? [ 340.455593][ T6477] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 340.491274][ T4320] pn533_usb 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 341.119707][ T4320] usb 3-1: USB disconnect, device number 15 [ 341.883472][ T6496] loop2: detected capacity change from 0 to 2048 [ 341.974583][ T6496] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 342.000289][ T6496] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 342.261811][ T5050] team0 (unregistering): Port device team_slave_1 removed [ 342.419935][ T5050] team0 (unregistering): Port device team_slave_0 removed [ 342.597410][ T5050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.677199][ T5050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.823588][ T4824] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 343.017830][ T4824] usb 2-1: Using ep0 maxpacket: 16 [ 343.025270][ T4824] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 343.035792][ T4824] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 343.055342][ T4824] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 343.074075][ T4824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.090660][ T4824] usb 2-1: Product: syz [ 343.102155][ T4824] usb 2-1: Manufacturer: syz [ 343.112244][ T4824] usb 2-1: SerialNumber: syz [ 343.169304][ T5050] bond0 (unregistering): Released all slaves [ 343.332302][ T4824] usb 2-1: 0:2 : does not exist [ 343.353898][ T4824] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 343.395895][ T4824] usb 2-1: USB disconnect, device number 15 [ 343.695966][ T4504] udevd[4504]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 343.874896][ T6528] loop0: detected capacity change from 0 to 2048 [ 344.023699][ T6528] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 344.424848][ T4413] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 344.646576][ T4413] usb 6-1: unable to get BOS descriptor or descriptor too short [ 344.712351][ T4413] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.811361][ T6528] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 344.928848][ T4413] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 345.079229][ T4413] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 345.277069][ T4413] usb 6-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 345.410287][ T4413] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.531558][ T4413] usb 6-1: Product: syz [ 345.592661][ T4413] usb 6-1: Manufacturer: syz [ 345.648808][ T4413] usb 6-1: SerialNumber: syz [ 345.831861][ T4413] usb 6-1: config 0 descriptor?? [ 345.922413][ T6536] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 345.955720][ T4413] pn533_usb 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 347.710261][ T4706] usb 6-1: USB disconnect, device number 2 [ 349.182306][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 350.915312][ T6589] loop3: detected capacity change from 0 to 512 [ 351.052085][ T6589] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.3.601: corrupted xattr block 95 [ 351.595642][ T6589] EXT4-fs (loop3): Remounting filesystem read-only [ 351.690598][ T6589] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2802: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 352.229137][ T6589] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.601: bg 0: block 7: invalid block bitmap [ 352.333841][ T5934] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 352.393786][ T4413] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 352.532747][ T6589] EXT4-fs (loop3): Remounting filesystem read-only [ 352.553660][ T5934] usb 2-1: Using ep0 maxpacket: 32 [ 352.567175][ T5934] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 352.607031][ T4413] usb 3-1: unable to get BOS descriptor or descriptor too short [ 352.675262][ T4413] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.700232][ T6589] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 352.812601][ T5934] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 352.888389][ T6589] EXT4-fs (loop3): Remounting filesystem read-only [ 352.901340][ T4413] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 352.987470][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 353.017664][ T6589] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2918: inode #11: comm syz.3.601: corrupted xattr block 95 [ 353.070144][ T4413] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 353.115223][ T5934] usb 2-1: Product: syz [ 353.161051][ T5934] usb 2-1: Manufacturer: syz [ 353.194465][ T4413] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 353.236026][ T5934] usb 2-1: SerialNumber: syz [ 353.247589][ T6589] EXT4-fs (loop3): Remounting filesystem read-only [ 353.354412][ T4413] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.375893][ T6589] EXT4-fs warning (device loop3): ext4_evict_inode:301: xattr delete (err -117) [ 353.449134][ T5934] usb 2-1: config 0 descriptor?? [ 353.492565][ T4413] usb 3-1: Product: syz [ 353.517429][ T6600] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 353.529425][ T6589] EXT4-fs (loop3): 1 orphan inode deleted [ 353.574810][ T5934] hub 2-1:0.0: bad descriptor, ignoring hub [ 353.588030][ T4413] usb 3-1: Manufacturer: syz [ 353.632414][ T6589] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 353.659767][ T4413] usb 3-1: SerialNumber: syz [ 353.668969][ T5934] hub: probe of 2-1:0.0 failed with error -5 [ 353.793432][ T4413] usb 3-1: config 0 descriptor?? [ 353.936582][ T6598] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 353.991434][ T4413] pn533_usb 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 354.134803][ T5934] usb 2-1: USB disconnect, device number 16 [ 354.256755][ T4320] usb 3-1: USB disconnect, device number 16 [ 354.355649][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 354.603327][ T6612] loop3: detected capacity change from 0 to 4096 [ 354.658484][ T6612] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 354.684321][ T5934] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 354.883725][ T5934] usb 2-1: Using ep0 maxpacket: 32 [ 354.891175][ T6612] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 354.910542][ T5934] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 354.952704][ T5934] usb 2-1: string descriptor 0 read error: -22 [ 354.986462][ T5934] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 355.022125][ T6623] loop5: detected capacity change from 0 to 512 [ 355.031860][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 355.058326][ T6623] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 355.095060][ T5934] usb 2-1: config 0 descriptor?? [ 355.101001][ T6600] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 355.136889][ T6623] EXT4-fs (loop5): 1 truncate cleaned up [ 355.142659][ T6623] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 355.215290][ T5934] hub 2-1:0.0: bad descriptor, ignoring hub [ 355.221301][ T5934] hub: probe of 2-1:0.0 failed with error -5 [ 355.343896][ T4460] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 355.352677][ T4277] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 355.373054][ T4277] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 355.398964][ T4277] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 355.446458][ T4343] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 355.514965][ T4277] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 355.522789][ T4277] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22. [ 355.593834][ T5053] usb 2-1: USB disconnect, device number 17 [ 355.609097][ T6090] EXT4-fs (loop5): unmounting filesystem. [ 355.794892][ T6616] loop2: detected capacity change from 0 to 32768 [ 356.095852][ T6616] JBD2: Ignoring recovery information on journal [ 356.664083][ T6616] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 357.283740][ T5934] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 357.576666][ T5934] usb 6-1: unable to get BOS descriptor or descriptor too short [ 357.642357][ T5934] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.891040][ T5934] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 358.099534][ T5934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 358.326155][ T5934] usb 6-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 358.513345][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.680787][ T5934] usb 6-1: Product: syz [ 358.769591][ T5934] usb 6-1: Manufacturer: syz [ 358.861630][ T5934] usb 6-1: SerialNumber: syz [ 359.076506][ T5934] usb 6-1: config 0 descriptor?? [ 359.381583][ T4281] ocfs2: Unmounting device (7,2) on (node local) [ 359.396711][ T5934] usb 6-1: can't set config #0, error -71 [ 359.422422][ T5934] usb 6-1: USB disconnect, device number 3 [ 360.190382][ T6689] process 'syz.0.624' launched '/dev/fd/4' with NULL argv: empty string added [ 361.413787][ T4283] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 361.643594][ T4283] usb 1-1: Using ep0 maxpacket: 16 [ 361.660522][ T4283] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.697443][ T4283] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 361.728213][ T4283] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 361.782689][ T4283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.826023][ T4283] usb 1-1: Product: syz [ 361.852398][ T4283] usb 1-1: Manufacturer: syz [ 361.877801][ T4283] usb 1-1: SerialNumber: syz [ 362.273720][ T127] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 362.488464][ T127] usb 2-1: unable to get BOS descriptor or descriptor too short [ 362.542242][ T127] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.751374][ T127] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 362.898644][ T127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 363.569024][ T127] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 363.765620][ T127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.932587][ T127] usb 2-1: Product: syz [ 363.998968][ T127] usb 2-1: Manufacturer: syz [ 364.072975][ T127] usb 2-1: SerialNumber: syz [ 364.235613][ T127] usb 2-1: config 0 descriptor?? [ 364.318219][ T6722] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 364.351621][ T127] pn533_usb 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 364.895332][ T4283] usb 1-1: 0:2 : does not exist [ 365.223604][ T4821] usb 2-1: USB disconnect, device number 18 [ 365.255159][ T4283] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 365.289711][ T4283] usb 1-1: USB disconnect, device number 14 [ 365.524698][ T4504] udevd[4504]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 365.534589][ T6732] loop0: detected capacity change from 0 to 512 [ 365.588256][ T6732] EXT4-fs: Ignoring removed bh option [ 365.593903][ T6732] EXT4-fs: Ignoring removed bh option [ 365.599348][ T6732] EXT4-fs: Ignoring removed mblk_io_submit option [ 365.641782][ T6731] loop2: detected capacity change from 0 to 4096 [ 365.689469][ T6732] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 365.694303][ T6731] EXT4-fs: inline encryption not supported [ 365.791411][ T6732] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 365.846643][ T6732] EXT4-fs (loop0): orphan cleanup on readonly fs [ 365.858723][ T6732] Quota error (device loop0): do_insert_tree: Free block already used in tree: block 4 [ 365.869743][ T6732] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 365.881569][ T6732] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.633: Failed to acquire dquot type 1 [ 365.896141][ T6732] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.633: Invalid block bitmap block 0 in block_group 0 [ 365.922111][ T6732] Quota error (device loop0): write_blk: dquota write failed [ 365.941238][ T6732] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 365.956863][ T6732] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.633: Failed to acquire dquot type 1 [ 365.975304][ T6732] Quota error (device loop0): write_blk: dquota write failed [ 366.036189][ T6732] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 366.073039][ T6732] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.633: Failed to acquire dquot type 1 [ 366.111358][ T6732] EXT4-fs (loop0): 1 orphan inode deleted [ 366.150573][ T6732] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 366.438106][ T6731] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 366.480450][ T6731] EXT4-fs (loop2): Test dummy encryption mode enabled [ 366.528059][ T6731] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 366.556990][ T6731] System zones: 0-5 [ 366.574785][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 366.604688][ T6731] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 367.619764][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 368.308106][ T4821] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 369.038582][ T4821] usb 1-1: unable to get BOS descriptor or descriptor too short [ 369.202234][ T4821] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.431457][ T4821] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 369.649003][ T4821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 369.869544][ T4821] usb 1-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 370.021559][ T4821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.215124][ T4821] usb 1-1: Product: syz [ 370.300402][ T4821] usb 1-1: Manufacturer: syz [ 370.317931][ T6787] loop1: detected capacity change from 0 to 128 [ 370.411643][ T4821] usb 1-1: SerialNumber: syz [ 370.672554][ T4821] usb 1-1: config 0 descriptor?? [ 370.819869][ T6787] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 370.933904][ T6787] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.948040][ T4821] usb 1-1: can't set config #0, error -71 [ 370.958866][ T4821] usb 1-1: USB disconnect, device number 15 [ 371.019818][ T6787] fscrypt (loop1, inode 12): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS [ 371.331529][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 372.472280][ T6817] loop5: detected capacity change from 0 to 1024 [ 372.477820][ T6820] loop2: detected capacity change from 0 to 256 [ 372.565512][ T6820] exfat: Deprecated parameter 'utf8' [ 372.573084][ T6820] exfat: Deprecated parameter 'namecase' [ 372.673334][ T6820] exfat: Deprecated parameter 'namecase' [ 373.038299][ T6820] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 373.296099][ T26] audit: type=1326 audit(1783148934.028:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6824 comm="syz.1.661" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5a39de59 code=0x7ffc0000 [ 373.344786][ T4732] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 373.363612][ T26] audit: type=1326 audit(1783148934.058:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6824 comm="syz.1.661" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5a39de59 code=0x7ffc0000 [ 373.524476][ T26] audit: type=1326 audit(1783148934.058:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6824 comm="syz.1.661" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5a39de59 code=0x7ffc0000 [ 373.602275][ T26] audit: type=1326 audit(1783148934.058:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6824 comm="syz.1.661" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6e5a39de59 code=0x7ffc0000 [ 373.643555][ T26] audit: type=1326 audit(1783148934.058:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6824 comm="syz.1.661" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5a39de59 code=0x7ffc0000 [ 373.881604][ T26] audit: type=1326 audit(1783148934.058:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6824 comm="syz.1.661" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5a39de59 code=0x7ffc0000 [ 373.916654][ T26] audit: type=1326 audit(1783148934.058:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6824 comm="syz.1.661" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5a39de59 code=0x7ffc0000 [ 374.304168][ T4283] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 374.406431][ T26] audit: type=1326 audit(1783148934.068:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6824 comm="syz.1.661" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f6e5a39de59 code=0x7ffc0000 [ 374.558650][ T4283] usb 3-1: unable to get BOS descriptor or descriptor too short [ 374.626079][ T4283] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.882234][ T4283] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 375.031907][ T26] audit: type=1326 audit(1783148934.068:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6824 comm="syz.1.661" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5a39de59 code=0x7ffc0000 [ 375.154761][ T4283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 375.395523][ T4283] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 375.529150][ T26] audit: type=1326 audit(1783148934.068:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6824 comm="syz.1.661" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5a39de59 code=0x7ffc0000 [ 375.589447][ T4283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.734328][ T4283] usb 3-1: Product: syz [ 375.810098][ T4283] usb 3-1: Manufacturer: syz [ 375.889945][ T4283] usb 3-1: SerialNumber: syz [ 376.099805][ T4283] usb 3-1: config 0 descriptor?? [ 376.215968][ T6838] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 376.258648][ T4283] pn533_usb 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 377.383948][ T4283] usb 3-1: USB disconnect, device number 17 [ 378.600111][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.606505][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.011978][ T6876] loop5: detected capacity change from 0 to 1024 [ 379.115871][ T4504] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 379.534303][ T127] kernel write not supported for file /382/net/ip_vs_stats (pid: 127 comm: kworker/0:2) [ 382.233667][ T4706] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 383.716321][ T4706] usb 6-1: unable to get BOS descriptor or descriptor too short [ 383.820266][ T4706] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.077922][ T4706] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 384.293548][ T4706] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 384.363877][ T6965] netlink: 36 bytes leftover after parsing attributes in process `syz.1.685'. [ 384.423710][ T6965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.685'. [ 384.663700][ T6965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.685'. [ 384.983596][ T4706] usb 6-1: string descriptor 0 read error: -71 [ 384.989928][ T4706] usb 6-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 385.053632][ T6965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.685'. [ 385.153596][ T4706] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.221519][ T4706] usb 6-1: config 0 descriptor?? [ 385.305727][ T4706] usb 6-1: can't set config #0, error -71 [ 385.352306][ T4706] usb 6-1: USB disconnect, device number 4 [ 385.470401][ T6981] loop0: detected capacity change from 0 to 1024 [ 385.559020][ T4504] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 387.343979][ T4821] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 387.587772][ T4821] usb 6-1: unable to get BOS descriptor or descriptor too short [ 387.645036][ T4821] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.812105][ T4821] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 387.996759][ T4821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 388.208376][ T4821] usb 6-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 388.400751][ T4821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.582064][ T4821] usb 6-1: Product: syz [ 388.671070][ T4821] usb 6-1: Manufacturer: syz [ 388.752590][ T4821] usb 6-1: SerialNumber: syz [ 388.951728][ T4821] usb 6-1: config 0 descriptor?? [ 389.081217][ T7022] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 389.122372][ T4821] pn533_usb 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 389.522201][ T7027] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 389.530713][ T7027] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 389.540041][ T7027] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 390.361240][ T4705] usb 6-1: USB disconnect, device number 5 [ 390.661503][ T7039] loop5: detected capacity change from 0 to 1024 [ 390.757451][ T4504] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 391.260033][ T7057] loop5: detected capacity change from 0 to 736 [ 391.279476][ T4504] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 391.293302][ T7058] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 391.301673][ T7058] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 391.310143][ T7058] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 391.320369][ T4504] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 392.978316][ T4504] Buffer I/O error on dev loop5, logical block 0, async page read [ 393.453559][ T4705] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 394.235874][ T4705] usb 1-1: unable to get BOS descriptor or descriptor too short [ 394.479029][ T4705] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 394.499022][ T4705] usb 1-1: can't read configurations, error -71 [ 395.516238][ T7097] loop2: detected capacity change from 0 to 1024 [ 395.880224][ T7108] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 395.888622][ T7108] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 395.897109][ T7108] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 396.202909][ T7120] netlink: 36 bytes leftover after parsing attributes in process `syz.2.732'. [ 397.581319][ T7143] loop2: detected capacity change from 0 to 1024 [ 397.754917][ T7146] tipc: Started in network mode [ 397.965420][ T4504] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 398.180214][ T7146] tipc: Node identity 2e862a40daa1, cluster identity 4711 [ 398.294027][ T7146] tipc: Enabled bearer , priority 0 [ 398.415495][ T7139] tipc: Disabling bearer [ 399.787855][ T5934] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 399.910477][ T7180] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 399.918818][ T7180] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 399.927960][ T7180] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 400.003625][ T5934] usb 4-1: Using ep0 maxpacket: 16 [ 401.527994][ T5934] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 402.009909][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.019618][ T5934] usb 4-1: Product: syz [ 402.024491][ T5934] usb 4-1: Manufacturer: syz [ 402.029214][ T5934] usb 4-1: SerialNumber: syz [ 402.034621][ T7185] fuse: Bad value for 'fd' [ 402.114336][ T7181] Process accounting resumed [ 402.119180][ T5934] usb 4-1: can't set config #157, error -71 [ 402.128890][ T5934] usb 4-1: USB disconnect, device number 17 [ 403.636565][ T7212] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.645414][ T7212] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.173717][ T4705] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 404.403723][ T4706] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 404.416511][ T4705] usb 2-1: unable to get BOS descriptor or descriptor too short [ 404.479958][ T4705] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.633647][ T4706] usb 4-1: Using ep0 maxpacket: 16 [ 404.650276][ T4706] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.686421][ T4705] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 404.815764][ T4706] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 404.835250][ T4705] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 405.013142][ T4706] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 405.042590][ T4705] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 405.136438][ T4706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.173089][ T4705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.248864][ T4706] usb 4-1: Product: syz [ 405.292897][ T4705] usb 2-1: Product: syz [ 405.334938][ T4706] usb 4-1: Manufacturer: syz [ 405.368117][ T4705] usb 2-1: Manufacturer: syz [ 405.409151][ T4706] usb 4-1: SerialNumber: syz [ 405.446812][ T4705] usb 2-1: SerialNumber: syz [ 405.641085][ T4705] usb 2-1: config 0 descriptor?? [ 405.749985][ T7223] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 405.799522][ T4706] usb 4-1: 0:2 : does not exist [ 405.833897][ T4705] pn533_usb 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 405.919897][ T4706] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 406.529332][ T4706] usb 4-1: USB disconnect, device number 18 [ 406.653730][ T4702] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 406.903691][ T4702] usb 3-1: Using ep0 maxpacket: 16 [ 406.927920][ T4702] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 407.032047][ T4702] usb 3-1: config 0 has no interface number 0 [ 407.046083][ T5934] usb 2-1: USB disconnect, device number 19 [ 407.118609][ T4702] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 407.154632][ T4504] udevd[4504]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 407.213567][ T4702] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 407.251938][ T7235] loop3: detected capacity change from 0 to 1024 [ 407.272445][ T4702] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 407.302801][ T7238] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 407.311199][ T7238] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 407.319769][ T7238] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 407.342315][ T4702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.473354][ T7233] netlink: 24 bytes leftover after parsing attributes in process `syz.1.762'. [ 407.495436][ T4702] usb 3-1: Product: syz [ 407.511124][ T4702] usb 3-1: Manufacturer: syz [ 407.528662][ T4702] usb 3-1: SerialNumber: syz [ 407.556288][ T4702] usb 3-1: config 0 descriptor?? [ 407.577847][ T7226] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 407.592389][ T7226] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 407.760762][ T4702] asix: probe of 3-1:0.34 failed with error -71 [ 407.786666][ T4702] usb 3-1: USB disconnect, device number 18 [ 408.136600][ T7238] Process accounting resumed [ 409.172246][ T7272] netlink: 'syz.1.771': attribute type 1 has an invalid length. [ 409.482039][ T7272] 8021q: adding VLAN 0 to HW filter on device bond1 [ 409.515173][ T7278] bond1: (slave geneve2): making interface the new active one [ 409.528932][ T7278] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 409.600748][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 409.690970][ T7278] syz.1.771 (7278) used greatest stack depth: 20752 bytes left [ 409.698957][ T5053] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 409.905928][ T5053] usb 6-1: unable to get BOS descriptor or descriptor too short [ 409.931323][ T5053] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.961681][ T5053] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 409.996526][ T5053] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 410.039839][ T5053] usb 6-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 410.090624][ T5053] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.133422][ T5053] usb 6-1: Product: syz [ 410.138574][ T5053] usb 6-1: Manufacturer: syz [ 410.143215][ T5053] usb 6-1: SerialNumber: syz [ 410.187864][ T5053] usb 6-1: config 0 descriptor?? [ 410.193699][ T7270] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 410.244290][ T5053] pn533_usb 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 410.264642][ T7299] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 410.273175][ T7299] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 410.281676][ T7299] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 410.437260][ T5053] usb 6-1: USB disconnect, device number 6 [ 410.665797][ T7310] loop3: detected capacity change from 0 to 1024 [ 410.837667][ T4504] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 411.415343][ T7299] Process accounting resumed [ 411.768989][ T7321] siw: device registration error -23 [ 412.188330][ T7338] Zero length message leads to an empty skb [ 412.361226][ T7344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.795'. [ 412.471736][ T7347] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 412.480248][ T7347] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 412.488857][ T7347] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 413.033648][ T22] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 413.474467][ T7350] Process accounting resumed [ 413.592517][ T22] usb 4-1: unable to get BOS descriptor or descriptor too short [ 414.357834][ T22] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.552552][ T22] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 414.769184][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 415.020881][ T22] usb 4-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 415.072545][ T7361] netlink: 'syz.0.799': attribute type 1 has an invalid length. [ 415.146678][ T7361] 8021q: adding VLAN 0 to HW filter on device bond1 [ 415.167077][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.207685][ T22] usb 4-1: Product: syz [ 415.221929][ T22] usb 4-1: Manufacturer: syz [ 415.258086][ T22] usb 4-1: SerialNumber: syz [ 415.314287][ T22] usb 4-1: config 0 descriptor?? [ 415.324205][ T7354] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 415.355986][ T22] pn533_usb 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 415.369273][ T7361] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 415.382608][ T7361] bond1: (slave batadv1): making interface the new active one [ 415.392617][ T7361] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 415.404802][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 415.605124][ T5053] usb 4-1: USB disconnect, device number 19 [ 415.682024][ T7377] loop0: detected capacity change from 0 to 1024 [ 416.453531][ T4288] Bluetooth: hci5: command 0x0406 tx timeout [ 416.715307][ T7400] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 416.723898][ T7400] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 416.732325][ T7400] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 417.518601][ T7400] Process accounting resumed [ 417.805257][ T5053] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 418.027010][ T5053] usb 1-1: unable to get BOS descriptor or descriptor too short [ 418.080568][ T5053] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.296253][ T5053] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 418.448658][ T5053] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 418.606615][ T5053] usb 1-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 418.770086][ T5053] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.917395][ T5053] usb 1-1: Product: syz [ 418.999695][ T5053] usb 1-1: Manufacturer: syz [ 419.104374][ T5053] usb 1-1: SerialNumber: syz [ 419.255431][ T5053] usb 1-1: config 0 descriptor?? [ 419.340323][ T7423] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 419.426794][ T5053] pn533_usb 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 420.820634][ T4706] usb 1-1: USB disconnect, device number 18 [ 421.046517][ T7450] loop0: detected capacity change from 0 to 1024 [ 421.715671][ T5934] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 422.013772][ T5934] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.024920][ T5934] usb 4-1: config 0 has no interfaces? [ 422.049582][ T5934] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 422.058937][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.067374][ T5934] usb 4-1: Product: syz [ 422.071713][ T5934] usb 4-1: Manufacturer: syz [ 422.077255][ T5934] usb 4-1: SerialNumber: syz [ 422.091532][ T5934] usb 4-1: config 0 descriptor?? [ 424.606195][ T4823] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 426.012769][ T4823] usb 6-1: unable to get BOS descriptor or descriptor too short [ 426.051629][ T4823] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.218173][ T4823] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 426.380515][ T4823] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 426.481791][ T4823] usb 6-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 426.505726][ T4702] usb 4-1: USB disconnect, device number 20 [ 426.515724][ T4823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.556431][ T4823] usb 6-1: Product: syz [ 426.560682][ T4823] usb 6-1: Manufacturer: syz [ 426.580520][ T4823] usb 6-1: SerialNumber: syz [ 426.603364][ T4823] usb 6-1: config 0 descriptor?? [ 426.623895][ T7498] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 426.646178][ T4823] pn533_usb 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 426.885782][ T4702] usb 6-1: USB disconnect, device number 7 [ 427.113663][ T5934] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 427.323580][ T5934] usb 2-1: Using ep0 maxpacket: 16 [ 427.333147][ T5934] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 427.347810][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.362218][ T5934] usb 2-1: Product: syz [ 427.366509][ T5934] usb 2-1: Manufacturer: syz [ 427.371182][ T5934] usb 2-1: SerialNumber: syz [ 427.588592][ T5934] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 427.608873][ T5934] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 427.622403][ T5934] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 427.631183][ T5934] usb 2-1: media controller created [ 427.656269][ T5934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 427.874236][ T5934] zl10353_read_register: readreg error (reg=127, ret==-110) [ 427.921747][ T5934] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5 [ 428.042767][ T7512] loop1: detected capacity change from 0 to 32768 [ 428.058378][ T7512] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 428.088113][ T5934] usb 2-1: USB disconnect, device number 20 [ 428.414868][ T4504] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 429.395742][ T7483] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 429.404007][ T7483] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 429.412434][ T7483] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 429.436843][ T7483] Process accounting resumed [ 429.463998][ T7524] netlink: 24 bytes leftover after parsing attributes in process `syz.5.838'. [ 429.608148][ T7531] netlink: 24 bytes leftover after parsing attributes in process `syz.2.840'. [ 429.648246][ T7531] netlink: 24 bytes leftover after parsing attributes in process `syz.2.840'. [ 429.700850][ T7531] netlink: 'syz.2.840': attribute type 6 has an invalid length. [ 429.906966][ T5934] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 430.136679][ T5934] usb 4-1: Using ep0 maxpacket: 16 [ 430.152216][ T5934] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.181884][ T5934] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 430.200083][ T5934] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 430.229394][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.248570][ T5934] usb 4-1: Product: syz [ 430.262724][ T5934] usb 4-1: Manufacturer: syz [ 430.267522][ T5934] usb 4-1: SerialNumber: syz [ 430.519021][ T5934] usb 4-1: 0:2 : does not exist [ 430.628927][ T5934] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 431.082382][ T5934] usb 4-1: USB disconnect, device number 21 [ 431.183726][ T4320] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 431.407213][ T4320] usb 2-1: unable to get BOS descriptor or descriptor too short [ 431.470597][ T4320] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.718228][ T4320] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 431.824533][ T4504] udevd[4504]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 431.948324][ T4320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 432.209956][ T4320] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 432.399683][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.567674][ T4320] usb 2-1: Product: syz [ 432.651967][ T4320] usb 2-1: Manufacturer: syz [ 432.780556][ T4320] usb 2-1: SerialNumber: syz [ 432.970076][ T4320] usb 2-1: config 0 descriptor?? [ 433.068997][ T7553] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 433.119322][ T4320] pn533_usb 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 433.499939][ T4702] usb 2-1: USB disconnect, device number 21 [ 435.532811][ T7617] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 436.104167][ T4320] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 436.323736][ T4320] usb 2-1: Using ep0 maxpacket: 16 [ 436.350095][ T4320] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 436.391190][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.400342][ T4320] usb 2-1: Product: syz [ 436.406217][ T4320] usb 2-1: Manufacturer: syz [ 436.410875][ T4320] usb 2-1: SerialNumber: syz [ 436.640226][ T4320] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 436.684698][ T4320] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 436.736905][ T4320] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 436.770818][ T4320] usb 2-1: media controller created [ 437.089769][ T7624] loop1: detected capacity change from 0 to 32768 [ 437.102380][ T4320] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 437.111535][ T7624] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 437.159066][ T4320] zl10353_read_register: readreg error (reg=127, ret==-71) [ 437.241887][ T4320] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5 [ 437.265685][ T4320] usb 2-1: USB disconnect, device number 22 [ 437.573335][ T4732] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 439.086738][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802ee00400: rx timeout, send abort [ 439.098212][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802ee00400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 440.464145][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.515460][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.897'. [ 447.513602][ T4818] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 447.783813][ T4818] usb 4-1: Using ep0 maxpacket: 16 [ 447.837269][ T4818] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 448.046285][ T4818] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 448.141174][ T4818] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 448.218519][ T4818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.273740][ T4818] usb 4-1: Product: syz [ 448.288331][ T4818] usb 4-1: Manufacturer: syz [ 448.293004][ T4818] usb 4-1: SerialNumber: syz [ 448.574748][ T4818] usb 4-1: 0:2 : does not exist [ 448.600381][ T4818] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 448.694723][ T4818] usb 4-1: USB disconnect, device number 22 [ 448.964466][ T4504] udevd[4504]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 449.663912][ T4818] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 450.856887][ T4818] usb 4-1: unable to get BOS descriptor or descriptor too short [ 450.912130][ T4818] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.052965][ T4818] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 451.186681][ T4818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 451.365675][ T4818] usb 4-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 451.613213][ T4818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.726026][ T4818] usb 4-1: Product: syz [ 451.789993][ T4818] usb 4-1: Manufacturer: syz [ 451.859265][ T4818] usb 4-1: SerialNumber: syz [ 452.025331][ T4818] usb 4-1: config 0 descriptor?? [ 452.118491][ T7889] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 452.178964][ T4818] pn533_usb 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 452.509739][ T4818] usb 4-1: USB disconnect, device number 23 [ 452.747566][ T7909] IPv6: NLM_F_CREATE should be specified when creating new route [ 452.776976][ T7909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 452.784833][ T7909] IPv6: NLM_F_CREATE should be set when creating new route [ 452.832561][ T7909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 452.839930][ T7909] IPv6: NLM_F_CREATE should be set when creating new route [ 453.157589][ T7922] loop3: detected capacity change from 0 to 1024 [ 453.225522][ T4504] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 454.563752][ T4325] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 454.763614][ T4325] usb 4-1: Using ep0 maxpacket: 16 [ 454.773863][ T4325] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 454.794498][ T4325] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 454.820008][ T4325] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 454.831528][ T4325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.840106][ T4325] usb 4-1: Product: syz [ 454.844662][ T4325] usb 4-1: Manufacturer: syz [ 454.849389][ T4325] usb 4-1: SerialNumber: syz [ 455.074742][ T4325] usb 4-1: 0:2 : does not exist [ 455.092402][ T4325] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 455.164891][ T4325] usb 4-1: USB disconnect, device number 24 [ 455.421810][ T4504] udevd[4504]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 456.915234][ T4325] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 457.116067][ T4325] usb 3-1: unable to get BOS descriptor or descriptor too short [ 457.131860][ T4325] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.142489][ T4325] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 457.160917][ T4325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 457.184481][ T4325] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 457.199884][ T4325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.208309][ T4325] usb 3-1: Product: syz [ 457.212558][ T4325] usb 3-1: Manufacturer: syz [ 457.229909][ T4325] usb 3-1: SerialNumber: syz [ 457.258546][ T4325] usb 3-1: config 0 descriptor?? [ 457.267474][ T7956] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 457.279832][ T4325] pn533_usb 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 457.483185][ T4325] usb 3-1: USB disconnect, device number 19 [ 458.162628][ T7954] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 458.175034][ T7954] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 458.192343][ T7954] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 458.383665][ T4811] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 458.738146][ T4811] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 458.756021][ T4811] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 458.773468][ T4811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.803586][ T4811] usb 3-1: Product: syz [ 458.807825][ T4811] usb 3-1: Manufacturer: syz [ 458.832761][ T4811] usb 3-1: SerialNumber: syz [ 458.853992][ T4811] usb 3-1: config 0 descriptor?? [ 459.038811][ T7979] tipc: Enabled bearer , priority 0 [ 459.149871][ T7979] device syzkaller0 entered promiscuous mode [ 459.156753][ T7979] tipc: Resetting bearer [ 459.223930][ T7983] loop0: detected capacity change from 0 to 1024 [ 459.515543][ T7989] siw: device registration error -23 [ 459.566530][ T4457] tipc: Resetting bearer [ 459.579057][ T7978] tipc: Resetting bearer [ 460.033640][ T4818] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 460.223599][ T4818] usb 6-1: Using ep0 maxpacket: 16 [ 460.238252][ T4818] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 460.305753][ T4818] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 460.413240][ T4818] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 460.478437][ T4818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.583763][ T4818] usb 6-1: Product: syz [ 460.627518][ T4818] usb 6-1: Manufacturer: syz [ 460.662161][ T4818] usb 6-1: SerialNumber: syz [ 460.984650][ T4818] usb 6-1: 0:2 : does not exist [ 461.104752][ T4818] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 461.212623][ T4818] usb 6-1: USB disconnect, device number 8 [ 461.224259][ T4325] usb 3-1: USB disconnect, device number 20 [ 461.484617][ T4504] udevd[4504]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 464.085011][ T7978] tipc: Disabling bearer [ 464.099584][ T4702] tipc: Node number set to 4096207424 [ 464.178734][ T8013] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 464.223962][ T8013] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 464.247401][ T8013] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 464.531786][ T8042] loop0: detected capacity change from 0 to 1024 [ 464.617149][ T4504] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 465.995490][ T8036] netlink: 24 bytes leftover after parsing attributes in process `syz.1.961'. [ 466.450915][ T8076] device syzkaller0 entered promiscuous mode [ 467.291505][ T8095] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 467.300121][ T8095] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 467.308783][ T8095] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 468.739894][ T8113] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 468.753729][ T8113] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 468.796467][ T8113] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 469.418765][ T8113] Process accounting resumed [ 469.463892][ T8128] device syzkaller0 entered promiscuous mode [ 469.732056][ T8124] netlink: 24 bytes leftover after parsing attributes in process `syz.5.980'. [ 470.195303][ T8147] vxcan1 speed is unknown, defaulting to 1000 [ 470.224523][ T8147] vxcan1 speed is unknown, defaulting to 1000 [ 470.231172][ T8147] vxcan1 speed is unknown, defaulting to 1000 [ 470.294808][ T8144] device syzkaller0 entered promiscuous mode [ 471.705652][ T4702] vxcan1 speed is unknown, defaulting to 1000 [ 471.732726][ T8147] infiniband syz2: set active [ 471.753021][ T8147] infiniband syz2: added vxcan1 [ 471.768843][ T8147] rdma_rxe: unable to create cq [ 471.783742][ T8147] infiniband syz2: Couldn't create ib_mad CQ [ 471.797921][ T8147] infiniband syz2: Couldn't open port 1 [ 471.844915][ T8147] RDS/IB: syz2: added [ 471.856138][ T8147] smc: adding ib device syz2 with port count 1 [ 471.870046][ T8147] smc: ib device syz2 port 1 has pnetid [ 471.917499][ T4811] vxcan1 speed is unknown, defaulting to 1000 [ 471.939212][ T8147] vxcan1 speed is unknown, defaulting to 1000 [ 472.261410][ T8178] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 472.301769][ T8178] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 472.352923][ T8178] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 472.392958][ T8147] vxcan1 speed is unknown, defaulting to 1000 [ 472.490117][ T8184] device syzkaller0 entered promiscuous mode [ 472.830231][ T8178] Process accounting resumed [ 472.838921][ T8147] vxcan1 speed is unknown, defaulting to 1000 [ 473.301795][ T8147] vxcan1 speed is unknown, defaulting to 1000 [ 473.772656][ T8193] netlink: 24 bytes leftover after parsing attributes in process `syz.0.997'. [ 473.850374][ T8147] vxcan1 speed is unknown, defaulting to 1000 [ 473.933750][ T8202] device syzkaller0 entered promiscuous mode [ 474.106454][ T8147] vxcan1 speed is unknown, defaulting to 1000 [ 474.848618][ T8216] device syzkaller0 entered promiscuous mode [ 475.796518][ T8232] vxcan1 speed is unknown, defaulting to 1000 [ 476.570429][ T8225] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 476.613902][ T8225] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 476.658565][ T8225] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 476.808417][ T8236] device syzkaller0 entered promiscuous mode [ 477.302292][ T8225] Process accounting resumed [ 477.575611][ T8242] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1012'. [ 477.647524][ T4702] kernel write not supported for file /576/net/ip_vs_stats (pid: 4702 comm: kworker/1:12) [ 478.734883][ T8258] device syzkaller0 entered promiscuous mode [ 478.933726][ T4821] kernel write not supported for file /580/net/ip_vs_stats (pid: 4821 comm: kworker/0:16) [ 480.067985][ T8281] xt_hashlimit: size too large, truncated to 1048576 [ 480.314035][ T8285] netlink: 'syz.3.1025': attribute type 1 has an invalid length. [ 480.371612][ T8285] 8021q: adding VLAN 0 to HW filter on device bond1 [ 481.643869][ T8298] tipc: Started in network mode [ 481.648826][ T8298] tipc: Node identity deb316d364e7, cluster identity 4711 [ 481.715135][ T8298] tipc: Enabled bearer , priority 0 [ 481.788782][ T8297] tipc: Disabling bearer [ 482.928190][ T8310] device syzkaller0 entered promiscuous mode [ 483.047483][ T8308] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1030'. [ 483.072634][ T8308] ------------[ cut here ]------------ [ 483.078712][ T8308] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:853 (size 16) [ 483.153559][ T8308] WARNING: CPU: 1 PID: 8308 at net/sched/cls_u32.c:853 u32_change+0x1da2/0x2740 [ 483.162855][ T8308] Modules linked in: [ 483.166890][ T8308] CPU: 1 PID: 8308 Comm: syz.3.1030 Not tainted syzkaller #0 [ 483.174368][ T8308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 483.184549][ T8308] RIP: 0010:u32_change+0x1da2/0x2740 [ 483.189902][ T8308] Code: f9 eb 59 e8 e0 51 1b f9 c6 05 97 db a5 05 01 b9 10 00 00 00 48 c7 c7 00 c5 8e 8b 4c 89 fe 48 c7 c2 80 c5 8e 8b e8 3e e9 e6 f8 <0f> 0b e9 ee ee ff ff e8 b2 51 1b f9 eb 24 e8 ab 51 1b f9 c6 05 03 [ 483.209698][ T8308] RSP: 0018:ffffc9000d3aee60 EFLAGS: 00010246 [ 483.215872][ T8308] RAX: dccbde71ddd82e00 RBX: ffff888027504600 RCX: 0000000000080000 [ 483.223944][ T8308] RDX: ffffc9000dd2b000 RSI: 0000000000005495 RDI: 0000000000005496 [ 483.231964][ T8308] RBP: ffffc9000d3aeff8 R08: ffffc9000d3aeae7 R09: 1ffff92001a75d5c [ 483.240035][ T8308] R10: dffffc0000000000 R11: fffff52001a75d5d R12: ffff88805dc694e0 [ 483.248121][ T8308] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000020 [ 483.256184][ T8308] FS: 00007f27fe74b6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 483.265215][ T8308] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 483.271942][ T8308] CR2: 0000000000000000 CR3: 000000002ed6e000 CR4: 00000000003506e0 [ 483.280017][ T8308] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 483.288114][ T8308] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 483.296174][ T8308] Call Trace: [ 483.299502][ T8308] [ 483.302495][ T8308] ? u32_get+0x370/0x370 [ 483.306875][ T8308] ? u32_get+0x370/0x370 [ 483.311173][ T8308] tc_new_tfilter+0x1165/0x1920 [ 483.316235][ T8308] ? ____kasan_slab_free+0x126/0x1f0 [ 483.321662][ T8308] ? slab_free_freelist_hook+0x133/0x1b0 [ 483.327429][ T8308] ? kmem_cache_free+0xf7/0x2a0 [ 483.332353][ T8308] ? tcf_proto_signal_destroying+0x240/0x240 [ 483.338463][ T8308] ? rcu_read_unlock+0x8c/0xa0 [ 483.343321][ T8308] ? tcf_proto_signal_destroying+0x240/0x240 [ 483.349486][ T8308] ? tcf_proto_signal_destroying+0x240/0x240 [ 483.355565][ T8308] rtnetlink_rcv_msg+0x8b2/0xfb0 [ 483.360570][ T8308] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 483.365805][ T8308] ? rtnetlink_bind+0x80/0x80 [ 483.370544][ T8308] ? __local_bh_enable_ip+0x136/0x1c0 [ 483.376104][ T8308] ? lockdep_hardirqs_on+0x94/0x140 [ 483.381415][ T8308] ? __local_bh_enable_ip+0x136/0x1c0 [ 483.386908][ T8308] ? _local_bh_enable+0xa0/0xa0 [ 483.391838][ T8308] ? __dev_queue_xmit+0x281/0x3810 [ 483.397120][ T8308] ? __dev_queue_xmit+0x281/0x3810 [ 483.402279][ T8308] ? __dev_queue_xmit+0x1d84/0x3810 [ 483.407582][ T8308] ? __dev_queue_xmit+0x281/0x3810 [ 483.412765][ T8308] ? ref_tracker_free+0x682/0x830 [ 483.417920][ T8308] ? refcount_inc+0x70/0x70 [ 483.422477][ T8308] ? memcpy+0x3c/0x60 [ 483.426545][ T8308] ? __copy_skb_header+0x3ba/0x4f0 [ 483.431796][ T8308] ? __skb_clone+0x446/0x6c0 [ 483.436498][ T8308] netlink_rcv_skb+0x1ef/0x440 [ 483.441320][ T8308] ? rtnetlink_bind+0x80/0x80 [ 483.446096][ T8308] ? netlink_ack+0x1160/0x1160 [ 483.450938][ T8308] ? netlink_deliver_tap+0x2e/0x1b0 [ 483.456257][ T8308] netlink_unicast+0x7ad/0x920 [ 483.461115][ T8308] netlink_sendmsg+0x8ad/0xbd0 [ 483.466009][ T8308] ? netlink_getsockopt+0x550/0x550 [ 483.471273][ T8308] ? aa_sock_msg_perm+0x94/0x150 [ 483.476436][ T8308] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 483.481840][ T8308] ? security_socket_sendmsg+0x7c/0xa0 [ 483.487478][ T8308] ? netlink_getsockopt+0x550/0x550 [ 483.492743][ T8308] ____sys_sendmsg+0x5ed/0x9a0 [ 483.497640][ T8308] ? __sys_sendmsg_sock+0x30/0x30 [ 483.502743][ T8308] ? __import_iovec+0x306/0x510 [ 483.507797][ T8308] ? import_iovec+0x6f/0xa0 [ 483.512364][ T8308] ___sys_sendmsg+0x2a2/0x360 [ 483.517148][ T8308] ? __sched_text_start+0x8/0x8 [ 483.522155][ T8308] ? __sys_sendmsg+0x2a0/0x2a0 [ 483.527083][ T8308] __sys_sendmmsg+0x2c3/0x510 [ 483.531820][ T8308] ? __ia32_sys_sendmsg+0x80/0x80 [ 483.536987][ T8308] ? __ia32_sys_get_robust_list+0x100/0x100 [ 483.543023][ T8308] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 483.549187][ T8308] ? lock_chain_count+0x20/0x20 [ 483.554141][ T8308] __x64_sys_sendmmsg+0x9c/0xb0 [ 483.559074][ T8308] do_syscall_64+0x4c/0xa0 [ 483.563623][ T8308] ? clear_bhb_loop+0x60/0xb0 [ 483.568361][ T8308] ? clear_bhb_loop+0x60/0xb0 [ 483.573100][ T8308] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 483.579100][ T8308] RIP: 0033:0x7f27fd79de59 [ 483.583605][ T8308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.603327][ T8308] RSP: 002b:00007f27fe74b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 483.611863][ T8308] RAX: ffffffffffffffda RBX: 00007f27fda25fa0 RCX: 00007f27fd79de59 [ 483.619945][ T8308] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 483.628010][ T8308] RBP: 00007f27fd833e6f R08: 0000000000000000 R09: 0000000000000000 [ 483.636154][ T8308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 483.644212][ T8308] R13: 00007f27fda26038 R14: 00007f27fda25fa0 R15: 00007ffe3e7e21f8 [ 483.652270][ T8308] [ 483.655407][ T8308] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 483.662734][ T8308] CPU: 1 PID: 8308 Comm: syz.3.1030 Not tainted syzkaller #0 [ 483.670148][ T8308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 483.680326][ T8308] Call Trace: [ 483.683648][ T8308] [ 483.686624][ T8308] dump_stack_lvl+0x188/0x24e [ 483.691378][ T8308] ? memcpy+0x3c/0x60 [ 483.695406][ T8308] ? show_regs_print_info+0x12/0x12 [ 483.700669][ T8308] ? load_image+0x410/0x410 [ 483.705265][ T8308] panic+0x2d3/0x710 [ 483.709209][ T8308] ? bpf_jit_dump+0xd0/0xd0 [ 483.713778][ T8308] __warn+0x2f8/0x4f0 [ 483.717804][ T8308] ? u32_change+0x1da2/0x2740 [ 483.722540][ T8308] ? u32_change+0x1da2/0x2740 [ 483.727246][ T8308] report_bug+0x2ba/0x4f0 [ 483.731689][ T8308] ? u32_change+0x1da2/0x2740 [ 483.736401][ T8308] handle_bug+0x3a/0x70 [ 483.740595][ T8308] exc_invalid_op+0x16/0x40 [ 483.745133][ T8308] asm_exc_invalid_op+0x16/0x20 [ 483.750011][ T8308] RIP: 0010:u32_change+0x1da2/0x2740 [ 483.755319][ T8308] Code: f9 eb 59 e8 e0 51 1b f9 c6 05 97 db a5 05 01 b9 10 00 00 00 48 c7 c7 00 c5 8e 8b 4c 89 fe 48 c7 c2 80 c5 8e 8b e8 3e e9 e6 f8 <0f> 0b e9 ee ee ff ff e8 b2 51 1b f9 eb 24 e8 ab 51 1b f9 c6 05 03 [ 483.774951][ T8308] RSP: 0018:ffffc9000d3aee60 EFLAGS: 00010246 [ 483.781054][ T8308] RAX: dccbde71ddd82e00 RBX: ffff888027504600 RCX: 0000000000080000 [ 483.789042][ T8308] RDX: ffffc9000dd2b000 RSI: 0000000000005495 RDI: 0000000000005496 [ 483.797034][ T8308] RBP: ffffc9000d3aeff8 R08: ffffc9000d3aeae7 R09: 1ffff92001a75d5c [ 483.805050][ T8308] R10: dffffc0000000000 R11: fffff52001a75d5d R12: ffff88805dc694e0 [ 483.813046][ T8308] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000020 [ 483.821068][ T8308] ? u32_get+0x370/0x370 [ 483.825372][ T8308] ? u32_get+0x370/0x370 [ 483.829640][ T8308] tc_new_tfilter+0x1165/0x1920 [ 483.834551][ T8308] ? ____kasan_slab_free+0x126/0x1f0 [ 483.839953][ T8308] ? slab_free_freelist_hook+0x133/0x1b0 [ 483.845612][ T8308] ? kmem_cache_free+0xf7/0x2a0 [ 483.850499][ T8308] ? tcf_proto_signal_destroying+0x240/0x240 [ 483.856518][ T8308] ? rcu_read_unlock+0x8c/0xa0 [ 483.861323][ T8308] ? tcf_proto_signal_destroying+0x240/0x240 [ 483.867341][ T8308] ? tcf_proto_signal_destroying+0x240/0x240 [ 483.873351][ T8308] rtnetlink_rcv_msg+0x8b2/0xfb0 [ 483.878317][ T8308] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 483.883476][ T8308] ? rtnetlink_bind+0x80/0x80 [ 483.888180][ T8308] ? __local_bh_enable_ip+0x136/0x1c0 [ 483.893593][ T8308] ? lockdep_hardirqs_on+0x94/0x140 [ 483.898817][ T8308] ? __local_bh_enable_ip+0x136/0x1c0 [ 483.904225][ T8308] ? _local_bh_enable+0xa0/0xa0 [ 483.909105][ T8308] ? __dev_queue_xmit+0x281/0x3810 [ 483.914244][ T8308] ? __dev_queue_xmit+0x281/0x3810 [ 483.919394][ T8308] ? __dev_queue_xmit+0x1d84/0x3810 [ 483.924624][ T8308] ? __dev_queue_xmit+0x281/0x3810 [ 483.929765][ T8308] ? ref_tracker_free+0x682/0x830 [ 483.934820][ T8308] ? refcount_inc+0x70/0x70 [ 483.939354][ T8308] ? memcpy+0x3c/0x60 [ 483.943360][ T8308] ? __copy_skb_header+0x3ba/0x4f0 [ 483.948501][ T8308] ? __skb_clone+0x446/0x6c0 [ 483.953129][ T8308] netlink_rcv_skb+0x1ef/0x440 [ 483.957977][ T8308] ? rtnetlink_bind+0x80/0x80 [ 483.962680][ T8308] ? netlink_ack+0x1160/0x1160 [ 483.967499][ T8308] ? netlink_deliver_tap+0x2e/0x1b0 [ 483.972741][ T8308] netlink_unicast+0x7ad/0x920 [ 483.977544][ T8308] netlink_sendmsg+0x8ad/0xbd0 [ 483.982354][ T8308] ? netlink_getsockopt+0x550/0x550 [ 483.987584][ T8308] ? aa_sock_msg_perm+0x94/0x150 [ 483.992551][ T8308] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 483.997862][ T8308] ? security_socket_sendmsg+0x7c/0xa0 [ 484.003348][ T8308] ? netlink_getsockopt+0x550/0x550 [ 484.008576][ T8308] ____sys_sendmsg+0x5ed/0x9a0 [ 484.013375][ T8308] ? __sys_sendmsg_sock+0x30/0x30 [ 484.018427][ T8308] ? __import_iovec+0x306/0x510 [ 484.023315][ T8308] ? import_iovec+0x6f/0xa0 [ 484.027858][ T8308] ___sys_sendmsg+0x2a2/0x360 [ 484.032567][ T8308] ? __sched_text_start+0x8/0x8 [ 484.037458][ T8308] ? __sys_sendmsg+0x2a0/0x2a0 [ 484.042300][ T8308] __sys_sendmmsg+0x2c3/0x510 [ 484.047022][ T8308] ? __ia32_sys_sendmsg+0x80/0x80 [ 484.052090][ T8308] ? __ia32_sys_get_robust_list+0x100/0x100 [ 484.058042][ T8308] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 484.064058][ T8308] ? lock_chain_count+0x20/0x20 [ 484.068952][ T8308] __x64_sys_sendmmsg+0x9c/0xb0 [ 484.073840][ T8308] do_syscall_64+0x4c/0xa0 [ 484.078298][ T8308] ? clear_bhb_loop+0x60/0xb0 [ 484.083004][ T8308] ? clear_bhb_loop+0x60/0xb0 [ 484.087711][ T8308] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 484.093636][ T8308] RIP: 0033:0x7f27fd79de59 [ 484.098090][ T8308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.117764][ T8308] RSP: 002b:00007f27fe74b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 484.126204][ T8308] RAX: ffffffffffffffda RBX: 00007f27fda25fa0 RCX: 00007f27fd79de59 [ 484.134210][ T8308] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 484.142217][ T8308] RBP: 00007f27fd833e6f R08: 0000000000000000 R09: 0000000000000000 [ 484.150215][ T8308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.158211][ T8308] R13: 00007f27fda26038 R14: 00007f27fda25fa0 R15: 00007ffe3e7e21f8 [ 484.166221][ T8308] [ 484.169419][ T8308] Kernel Offset: disabled [ 484.173760][ T8308] Rebooting in 86400 seconds..