last executing test programs: 2m5.294773778s ago: executing program 1 (id=295): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x2, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000300c8"], 0x2c}}, 0x0) 2m4.408167904s ago: executing program 1 (id=291): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}}}, 0xe) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r0, &(0x7f0000000100)={0x1f, @any, 0x1}, 0x10) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000200)=0x2, 0x4) connect$bt_rfcomm(r0, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0x10) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x1, 0x8}, {0x40, 0x40}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000600)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xe}, @l2cap_cid_signaling={{0xa}, [@l2cap_conf_rsp={{0x5, 0x2, 0x6}, {0x40}}]}}, 0x13) syz_emit_vhci(&(0x7f0000000700)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_conf_req={{0x4, 0x3, 0x4}, {0x40}}]}}, 0x11) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x5, 0xc8}}}, 0x6) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) close(r0) 2m3.521843196s ago: executing program 1 (id=299): setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="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", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845) 2m3.395351679s ago: executing program 1 (id=302): syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x0, 0x2, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x85}, 0x81) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r3, &(0x7f0000007900)={0x0, 0x0, &(0x7f0000007840)=[{&(0x7f0000000000)={0x10, 0x1000, 0x100, 0x70bd27, 0x25dfdbfd}, 0x10}], 0x1, 0x0, 0x0, 0x40040}, 0x800) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}}) 2m3.337629795s ago: executing program 1 (id=303): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/tracing/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='e:my_eprobe sched/sched_switch\n\x00', 0x1f) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/kernel/tracing/instances/A\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/kernel/tracing/instances/B\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/kernel/tracing/instances/A/events/eprobes/my_eprobe/enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)='1\n\x00', 0x2) write(r1, &(0x7f0000000c00)='0\n\x00', 0x2) 2m2.913461103s ago: executing program 1 (id=305): write(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1000000, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000480)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x2d}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto(r1, 0x0, 0x0, 0x40000, &(0x7f0000002500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @empty}, 0x1, 0x2, 0x4, 0x81}}, 0x80) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x2a) 1m47.700113323s ago: executing program 32 (id=305): write(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1000000, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000480)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x2d}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto(r1, 0x0, 0x0, 0x40000, &(0x7f0000002500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @empty}, 0x1, 0x2, 0x4, 0x81}}, 0x80) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x2a) 1m44.043534006s ago: executing program 0 (id=327): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) fcntl$setlease(r2, 0x400, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) close(0x3) 1m43.38949654s ago: executing program 0 (id=342): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1m43.071225037s ago: executing program 0 (id=346): setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="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", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845) 1m42.918336306s ago: executing program 0 (id=349): setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="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", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845) 1m42.728247097s ago: executing program 0 (id=338): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/tracing/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='e:my_eprobe sched/sched_switch\n\x00', 0x1f) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/kernel/tracing/instances/A\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/kernel/tracing/instances/B\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/kernel/tracing/instances/A/events/eprobes/my_eprobe/enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)='1\n\x00', 0x2) write(r1, &(0x7f0000000c00)='0\n\x00', 0x2) 1m42.129190235s ago: executing program 0 (id=352): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}}}, 0xe) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r0, &(0x7f0000000100)={0x1f, @any, 0x1}, 0x10) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000200)=0x2, 0x4) connect$bt_rfcomm(r0, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0x10) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x1, 0x8}, {0x40, 0x40}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000600)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xe}, @l2cap_cid_signaling={{0xa}, [@l2cap_conf_rsp={{0x5, 0x2, 0x6}, {0x40}}]}}, 0x13) syz_emit_vhci(&(0x7f0000000700)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_conf_req={{0x4, 0x3, 0x4}, {0x40}}]}}, 0x11) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x5, 0xc8}}}, 0x6) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) close(r0) 1m39.310645825s ago: executing program 4 (id=357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1m39.155422256s ago: executing program 4 (id=358): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x57) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/70, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000500)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x4008af04, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000004100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x25000}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) 1m39.055133164s ago: executing program 4 (id=359): epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xd, &(0x7f0000000140)={[0x4]}, 0x8) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)='\\', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xaaf25) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0x80104132, &(0x7f0000000140)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x180800) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x74, 0x16, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'erspan0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m38.483148789s ago: executing program 4 (id=362): socket(0x10, 0x80002, 0x0) openat$uinput(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f00000001c0)='functionfs', 0xa) read(r0, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x6, 0x3, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f0000000440)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) 1m37.554793084s ago: executing program 4 (id=365): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/tracing/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='e:my_eprobe sched/sched_switch\n\x00', 0x1f) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/kernel/tracing/instances/A\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/kernel/tracing/instances/B\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/kernel/tracing/instances/A/events/eprobes/my_eprobe/enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)='1\n\x00', 0x2) write(r1, &(0x7f0000000c00)='0\n\x00', 0x2) 1m37.501961078s ago: executing program 4 (id=366): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) 1m26.679598931s ago: executing program 33 (id=352): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}}}, 0xe) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r0, &(0x7f0000000100)={0x1f, @any, 0x1}, 0x10) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000200)=0x2, 0x4) connect$bt_rfcomm(r0, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0x10) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x1, 0x8}, {0x40, 0x40}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000600)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xe}, @l2cap_cid_signaling={{0xa}, [@l2cap_conf_rsp={{0x5, 0x2, 0x6}, {0x40}}]}}, 0x13) syz_emit_vhci(&(0x7f0000000700)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_conf_req={{0x4, 0x3, 0x4}, {0x40}}]}}, 0x11) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x5, 0xc8}}}, 0x6) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) close(r0) 1m22.274926681s ago: executing program 34 (id=366): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) 4.280421691s ago: executing program 3 (id=993): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) ptrace(0x10, 0x0) setpgid(0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="080000002f1c060008001b"], 0x28}}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0xa0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c) 4.135883467s ago: executing program 3 (id=994): unshare(0x6a060000) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) openat$nvme_fabrics(0xffffff9c, 0x0, 0x1, 0x0) 3.872942766s ago: executing program 6 (id=997): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000305005b68fdce0afc5924000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 3.57044408s ago: executing program 6 (id=998): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000200)=0x7) syz_usb_disconnect(0xffffffffffffffff) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 2.165002143s ago: executing program 6 (id=999): mq_notify(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x40) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) r0 = syz_ublk_setup_io_uring(0x81d, &(0x7f0000000040)={0x0, 0x30b5, 0x100, 0x2, 0x373}, &(0x7f00000005c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x80, 0xffffffff, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb351, 0x400, 0x3, 0x12e, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x40000, 0x2, 0x36b}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r4, '\x00', {0xfff9, 0x5e8, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 2.164590491s ago: executing program 3 (id=1002): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c00000003"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x48}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0xffffff07, &(0x7f0000000540), 0x2}, 0x3b61}], 0x4000048, 0x0, 0x0) 2.130947082s ago: executing program 2 (id=1003): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) 1.702558108s ago: executing program 3 (id=1004): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 1.692515416s ago: executing program 2 (id=1014): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd, @flat=@weak_handle={0x77682a85, 0x1100, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x6}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1.229105567s ago: executing program 6 (id=1005): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000480)={0x0, 0x2, 0x1000, 0xfffffffe, 0x238, 0x0, r2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x4000, 0x1000000, 0x2033f, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x8000, 0x2, 0xdfffffff}}], 0x1, 0x0, 0x0) 1.228885188s ago: executing program 2 (id=1006): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0xffffffff, 0x2}, 0x10) write(r1, &(0x7f00000002c0)="04", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x0, 0x2}, 0x10) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000004c0)={0x0, 0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8) 1.228701795s ago: executing program 3 (id=1007): shmctl$IPC_RMID(0x0, 0x0) shmctl$SHM_STAT(0x0, 0xd, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x20042000) 1.222990577s ago: executing program 5 (id=1016): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000005180)={0x2020}, 0x2020) 1.134649275s ago: executing program 2 (id=1009): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x26000) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0}}], 0x1, 0x2040000, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x1, 0xc, 0x6, 0x0, 0xffffffaf, 0x9, 0x6, 0x40, 0x8, 0x4, 0x2, 0x87, 0x0, 0xffff, 0x649, 0x4, 0xb, 0x9, 0x7, '\x00', 0x5, 0x6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.096156458s ago: executing program 5 (id=1010): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x2b1e}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0xc0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semget$private(0x0, 0x1, 0x2) syz_open_dev$admmidi(0x0, 0x20, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000170a0101"], 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) 881.868416ms ago: executing program 2 (id=1011): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000040)=0x5, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x84, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0xc}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x5, 0x2, 0x0, 0x3, 0x4, 0x1}}, {0x6, 0x2, [0x8]}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 881.517761ms ago: executing program 5 (id=1012): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) ptrace(0x10, 0x0) setpgid(0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="080000002f1c060008001b"], 0x28}}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0xa0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c) 873.098465ms ago: executing program 6 (id=1015): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x1, 0xb}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240448a0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 846.913417ms ago: executing program 3 (id=1017): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0xffffffff, 0x4) 484.095072ms ago: executing program 5 (id=1018): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendto$inet6(0xffffffffffffffff, &(0x7f0000001300)="92", 0x1, 0x10, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000480)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000540)={0x11, 0x5, r1}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 354.713897ms ago: executing program 6 (id=1019): mq_notify(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x40) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) r0 = syz_ublk_setup_io_uring(0x81d, &(0x7f0000000040)={0x0, 0x30b5, 0x100, 0x2, 0x373}, &(0x7f00000005c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x80, 0xffffffff, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb351, 0x400, 0x3, 0x12e, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x40000, 0x2, 0x36b}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r4, '\x00', {0xfff9, 0x5e8, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 169.872999ms ago: executing program 5 (id=1020): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(0x0, 0x0) shmget(0x1, 0x2000, 0x34f4e8513fc433fe, &(0x7f0000ffc000/0x2000)=nil) shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ftruncate(r1, 0x81fd) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0xe, r0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x0, 0x3, r1}, &(0x7f0000000180)) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x80000001, 0xded, 0x1}}]}]}]}, 0x54}}, 0x80) 11.834973ms ago: executing program 2 (id=1021): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=1029): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0', 0xb) write(r0, &(0x7f00000002c0)='\n', 0x1) close(r0) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00', 0x0) rmdir(&(0x7f0000000340)='./config/usb_gadget/g1/functions/phonet.usb0\x00') rmdir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00') kernel console output (not intermixed with test programs): ci 0000:00:04.0: PCI bridge to [bus 01] [ 86.581899][ T6703] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 86.586834][ T6703] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff] [ 86.591140][ T6703] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 86.703814][ T6703] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 86.714780][ T6703] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 86.730040][ T61] Bluetooth: hci4: Frame reassembly failed (-84) [ 87.083819][ T1043] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 87.235272][ T1043] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 87.239319][ T1043] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 87.243634][ T1043] usb 8-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00 [ 87.247263][ T1043] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.256414][ T6710] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 87.262782][ T6710] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 87.403515][ T1350] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 87.515516][ T5769] Bluetooth: hci0: command 0x0c1a tx timeout [ 87.541492][ T5108] Bluetooth: hci5: Unsupported Intel hardware variant (0) [ 87.545770][ T5108] Bluetooth: hci5: Unsupported Intel hw variant (0) [ 87.556482][ T1350] usb 7-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 87.560290][ T1350] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 87.563542][ T1350] usb 7-1: Product: syz [ 87.565293][ T1350] usb 7-1: Manufacturer: syz [ 87.579463][ T1350] input: Samsung SUR40 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/input/input6 [ 87.595316][ T5108] Bluetooth: hci3: command 0x0c1a tx timeout [ 87.595379][ T5769] Bluetooth: hci1: command 0x0c1a tx timeout [ 87.747362][ T6720] Bluetooth: MGMT ver 1.23 [ 88.488157][ T24] usb 8-1: USB disconnect, device number 4 [ 88.786181][ T10] usb 7-1: USB disconnect, device number 2 [ 88.793329][ T5767] Bluetooth: hci4: command 0x1003 tx timeout [ 88.794534][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 89.252978][ T92] Bluetooth: hci4: Frame reassembly failed (-84) [ 89.673390][ T5767] Bluetooth: hci1: command 0x0c1a tx timeout [ 90.006168][ T6761] netlink: 24 bytes leftover after parsing attributes in process `syz.1.253'. [ 90.402845][ T6770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.257'. [ 90.441185][ T6773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.453740][ T6773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.487525][ T6770] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.499642][ T6770] bond2 (unregistering): Released all slaves [ 91.273337][ T5767] Bluetooth: hci4: command 0x1003 tx timeout [ 91.278552][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 92.011410][ T6804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.269'. [ 92.062344][ T6804] 8021q: adding VLAN 0 to HW filter on device bond2 [ 92.068821][ T6804] bond2 (unregistering): Released all slaves [ 92.216198][ T6809] batman_adv: batadv0: Adding interface: veth0 [ 92.218711][ T6809] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.228940][ T6809] batman_adv: batadv0: Interface activated: veth0 [ 92.285300][ T6810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.290410][ T6810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.295769][ T6810] batman_adv: batadv0: Interface deactivated: veth0 [ 92.298801][ T6810] batman_adv: batadv0: Removing interface: veth0 [ 94.713337][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 94.713361][ T5767] Bluetooth: hci4: command 0x1003 tx timeout [ 94.789621][ T6823] read descriptors [ 94.823962][ T5753] ffs_data_put(): freeing [ 95.071249][ T6837] netlink: 24 bytes leftover after parsing attributes in process `syz.2.280'. [ 96.492161][ T5769] Bluetooth: hci4: sending frame failed (-49) [ 96.497223][ T5767] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 96.698763][ T6864] read descriptors [ 96.734404][ T5751] ffs_data_put(): freeing [ 96.873296][ T5767] Bluetooth: hci1: command 0x0c1a tx timeout [ 97.232479][ T6870] netlink: 24 bytes leftover after parsing attributes in process `syz.3.293'. [ 97.306517][ T5767] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 97.311924][ T5767] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 97.315731][ T5767] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 97.384911][ T6880] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.388448][ T6880] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.480107][ T6880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.488864][ T6880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.594881][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.598799][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.602612][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.608924][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.184760][ T1028] Bluetooth: hci4: Frame reassembly failed (-84) [ 98.257499][ T34] kernel write not supported for file /191/clear_refs (pid: 34 comm: kworker/3:0) [ 98.373323][ T1483] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 98.529925][ T1483] usb 8-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 98.534591][ T1483] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 98.537962][ T1483] usb 8-1: Product: syz [ 98.539828][ T1483] usb 8-1: Manufacturer: syz [ 98.559594][ T1483] input: Samsung SUR40 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/input/input7 [ 98.572608][ T6898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.576683][ T6898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.953295][ T5769] Bluetooth: hci1: command 0x0c1a tx timeout [ 99.762453][ T10] usb 8-1: USB disconnect, device number 5 [ 100.154564][ T6903] netlink: 24 bytes leftover after parsing attributes in process `syz.0.306'. [ 100.233355][ T5767] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 100.235625][ T5769] Bluetooth: hci4: command 0x1003 tx timeout [ 100.356499][ T6909] netlink: 24 bytes leftover after parsing attributes in process `syz.2.315'. [ 100.545616][ T6912] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.548582][ T6912] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.556822][ T48] Bluetooth: hci4: Frame reassembly failed (-84) [ 100.630484][ T6912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.640121][ T6912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.823360][ T5804] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.833025][ T34] lo speed is unknown, defaulting to 1000 [ 100.839746][ T34] syz0: Port: 1 Link DOWN [ 100.843423][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.851485][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.857934][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.033408][ T5769] Bluetooth: hci1: command 0x0c1a tx timeout [ 102.633471][ T5769] Bluetooth: hci4: command 0x1003 tx timeout [ 102.633628][ T5767] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 103.726925][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.311'. [ 103.769883][ T6927] serio: Serial port ptm0 [ 103.789077][ T5767] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 103.791612][ T5767] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 103.794873][ T5767] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 104.923440][ T6950] batman_adv: batadv0: Adding interface: veth0 [ 104.926186][ T6950] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.937956][ T6950] batman_adv: batadv0: Interface activated: veth0 [ 104.997037][ T6953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.001228][ T6953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.004996][ T6953] batman_adv: batadv0: Interface deactivated: veth0 [ 105.007092][ T6953] batman_adv: batadv0: Removing interface: veth0 [ 114.037814][ T5769] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 114.046089][ T5769] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 114.051253][ T5769] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 114.065048][ T5769] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 114.077076][ T5769] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 114.524292][ T6957] lo speed is unknown, defaulting to 1000 [ 114.765427][ T6957] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.768633][ T6957] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.771796][ T6957] bridge_slave_0: entered allmulticast mode [ 114.775701][ T6957] bridge_slave_0: entered promiscuous mode [ 114.780816][ T6957] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.784129][ T6957] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.787341][ T6957] bridge_slave_1: entered allmulticast mode [ 114.791377][ T6957] bridge_slave_1: entered promiscuous mode [ 114.858310][ T6957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.866547][ T6957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.902360][ T6957] team0: Port device team_slave_0 added [ 114.906842][ T6957] team0: Port device team_slave_1 added [ 114.914858][ T12] bridge_slave_1: left allmulticast mode [ 114.917290][ T12] bridge_slave_1: left promiscuous mode [ 114.922536][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.936736][ T12] bridge_slave_0: left allmulticast mode [ 114.939262][ T12] bridge_slave_0: left promiscuous mode [ 114.942547][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.060220][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.065544][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.069073][ T12] bond0 (unregistering): Released all slaves [ 115.091875][ T6957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.097834][ T6957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.106426][ T6957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.112191][ T6957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.115118][ T6957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.125343][ T6957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.163234][ T6957] hsr_slave_0: entered promiscuous mode [ 115.166016][ T6957] hsr_slave_1: entered promiscuous mode [ 115.168373][ T6957] debugfs: 'hsr0' already exists in 'hsr' [ 115.170240][ T6957] Cannot create hsr debugfs directory [ 115.204639][ T12] tipc: Left network mode [ 115.351357][ T6957] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 115.379781][ T6957] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 115.407232][ T5461] 8021q: adding VLAN 0 to HW filter on device eth1 [ 115.413705][ T6957] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 115.420239][ T6957] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 115.424631][ T6957] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 115.430662][ T6957] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 115.452465][ T6957] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 115.457803][ T6957] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 115.562221][ T6957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.590989][ T6957] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.603230][ T92] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.606344][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.643010][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.646177][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.682884][ T12] hsr_slave_0: left promiscuous mode [ 115.686783][ T12] hsr_slave_1: left promiscuous mode [ 115.850642][ T12] team0 (unregistering): Port device team_slave_1 removed [ 115.859799][ T61] smc: removing ib device syz2 [ 115.872615][ T12] team0 (unregistering): Port device team_slave_0 removed [ 115.944791][ T5461] 8021q: adding VLAN 0 to HW filter on device eth2 [ 115.991346][ T61] smbdirect: ib_dev[syz2] removed [ 116.153391][ T5767] Bluetooth: hci4: command tx timeout [ 116.228038][ T5461] 8021q: adding VLAN 0 to HW filter on device eth3 [ 116.331054][ T6957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.489470][ T5461] 8021q: adding VLAN 0 to HW filter on device eth4 [ 116.537683][ T6957] veth0_vlan: entered promiscuous mode [ 116.551086][ T6957] veth1_vlan: entered promiscuous mode [ 116.587817][ T6957] veth0_macvtap: entered promiscuous mode [ 116.595815][ T6957] veth1_macvtap: entered promiscuous mode [ 116.613108][ T6957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.624468][ T6957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.717789][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.725692][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.748750][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.751776][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.773401][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.777235][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.781384][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.786654][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.903952][ T7030] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.907534][ T7030] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.971352][ T7030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.981059][ T7030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.123394][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.126527][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.131683][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.134659][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.303846][ T7044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.326'. [ 117.378304][ T7044] serio: Serial port ptm0 [ 117.659322][ T55] IPVS: starting estimator thread 0... [ 117.743335][ T7053] IPVS: using max 42 ests per chain, 100800 per kthread [ 118.228838][ T7056] netlink: 24 bytes leftover after parsing attributes in process `syz.3.329'. [ 118.233358][ T5767] Bluetooth: hci4: command tx timeout [ 118.250734][ T5767] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 118.535319][ T7068] CacheFiles: Failed to register: -95 [ 120.158911][ T7092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.341'. [ 120.220395][ T7092] serio: Serial port ptm0 [ 120.313329][ T5767] Bluetooth: hci4: command tx timeout [ 120.502210][ T7098] pci_bus 0000:01: busn_res: [bus 01] is released [ 120.558437][ T7099] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 120.574722][ T7099] pci 0000:00:04.0: PCI bridge to [bus 01] [ 120.580751][ T7099] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 120.587629][ T7099] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff] [ 120.601989][ T7099] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 120.606356][ T7099] pci 0000:00:04.0: enabling Extended Tags [ 120.642445][ T7099] pci 0000:00:04.0: Adding to iommu group 4 [ 120.657878][ T7099] pci 0000:00:04.0: PCI bridge to [bus 01] [ 120.663686][ T7099] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 120.669878][ T7099] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 120.675475][ T7099] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff]: assigned [ 120.679101][ T7099] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 120.683504][ T7099] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 120.686898][ T7099] pci 0000:00:04.0: PCI bridge to [bus 01] [ 120.689534][ T7099] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 120.695416][ T7099] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff] [ 120.700388][ T7099] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 120.781684][ T7099] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 120.790520][ T7099] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 120.881582][ T7113] netlink: 'syz.4.351': attribute type 10 has an invalid length. [ 120.884583][ T7113] syz_tun: entered promiscuous mode [ 120.889175][ T7113] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 121.908974][ T7119] infiniband syz2: set down [ 121.911143][ T7119] infiniband syz2: added team_slave_1 [ 121.926898][ T7119] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 121.931872][ T7119] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 121.937319][ T7119] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 121.964469][ T7119] RDS/IB: syz2: added [ 121.968945][ T7119] smc: adding ib device syz2 with port count 1 [ 121.983523][ T7119] smc: ib device syz2 port 1 has no pnetid [ 122.395118][ T5769] Bluetooth: hci4: command tx timeout [ 124.009314][ T6957] ffs_data_put(): freeing [ 124.203285][ T1350] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 124.370461][ T1350] usb 8-1: New USB device found, idVendor=abcd, idProduct=ef01, bcdDevice= 1.00 [ 124.383285][ T1350] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.386612][ T1350] usb 8-1: Product: syz [ 124.388303][ T1350] usb 8-1: Manufacturer: syz [ 124.392479][ T1350] usb 8-1: SerialNumber: syz [ 124.473475][ T5767] Bluetooth: hci4: command 0x0406 tx timeout [ 124.536116][ T1350] ushc 8-1:1.0: probe with driver ushc failed with error -110 [ 124.757663][ T7152] ushc 8-1:1.0: probe with driver ushc failed with error -110 [ 125.690791][ T10] usb 8-1: USB disconnect, device number 6 [ 132.634669][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.078062][ T5769] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 135.082811][ T7186] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 135.085864][ T5769] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 135.091700][ T5769] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 135.097836][ T5769] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 135.102549][ T5769] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 135.273307][ T1350] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 135.463530][ T1350] usb 8-1: Using ep0 maxpacket: 16 [ 135.468572][ T7185] lo speed is unknown, defaulting to 1000 [ 135.470688][ T1350] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.478517][ T1350] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 135.483140][ T1350] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 135.493579][ T1350] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 135.497517][ T1350] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 135.500215][ T1350] usb 8-1: Manufacturer: syz [ 135.507232][ T1350] usb 8-1: config 0 descriptor?? [ 135.560023][ T7200] sd 0:0:0:0: PR command failed: 1026 [ 135.562005][ T7200] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 135.565114][ T7200] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 135.865757][ T12] bridge_slave_1: left allmulticast mode [ 135.867625][ T12] bridge_slave_1: left promiscuous mode [ 135.870347][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.876146][ T12] bridge_slave_0: left allmulticast mode [ 135.877996][ T12] bridge_slave_0: left promiscuous mode [ 135.880294][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.079931][ T7211] netlink: 16 bytes leftover after parsing attributes in process `syz.3.371'. [ 136.337980][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.341394][ T12] bond0 (unregistering): Released all slaves [ 136.362561][ T12] bond1 (unregistering): Released all slaves [ 136.382920][ T7211] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 136.425241][ T7211] bond1 (unregistering): Released all slaves [ 136.592272][ T7185] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.595048][ T7185] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.597934][ T7185] bridge_slave_0: entered allmulticast mode [ 136.606460][ T7185] bridge_slave_0: entered promiscuous mode [ 136.615741][ T7185] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.623365][ T7185] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.629067][ T7185] bridge_slave_1: entered allmulticast mode [ 136.637121][ T7185] bridge_slave_1: entered promiscuous mode [ 136.700856][ T7185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.707640][ T7185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.735209][ T7185] team0: Port device team_slave_0 added [ 136.738571][ T7185] team0: Port device team_slave_1 added [ 136.741901][ T5461] 8021q: adding VLAN 0 to HW filter on device eth5 [ 136.768534][ T7185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.771326][ T7185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.782119][ T7185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.787990][ T7185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.790208][ T7185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.799717][ T7185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.864713][ T7185] hsr_slave_0: entered promiscuous mode [ 136.867399][ T7185] hsr_slave_1: entered promiscuous mode [ 136.870662][ T7185] debugfs: 'hsr0' already exists in 'hsr' [ 136.872901][ T7185] Cannot create hsr debugfs directory [ 137.011994][ T12] hsr_slave_0: left promiscuous mode [ 137.017349][ T12] hsr_slave_1: left promiscuous mode [ 137.193330][ T5767] Bluetooth: hci2: command tx timeout [ 137.616189][ T12] team0 (unregistering): Port device team_slave_1 removed [ 137.675894][ T12] team0 (unregistering): Port device team_slave_0 removed [ 138.036302][ T24] usb 8-1: USB disconnect, device number 7 [ 138.213825][ T7234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.378'. [ 138.387767][ T7185] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 138.393663][ T7185] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 138.396346][ T7185] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 138.400970][ T7185] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 138.406718][ T5461] 8021q: adding VLAN 0 to HW filter on device eth6 [ 138.411609][ T7185] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 138.418571][ T7185] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 138.421748][ T7185] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 138.423296][ T24] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 138.435800][ T7185] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 138.444318][ T12] IPVS: stop unused estimator thread 0... [ 138.509145][ T7185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.523319][ T7185] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.529902][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.532457][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.547719][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.550399][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.579783][ T7185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 138.585981][ T7185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.589903][ T24] usb 8-1: unable to get BOS descriptor or descriptor too short [ 138.590394][ T24] usb 8-1: not running at top speed; connect to a high speed hub [ 138.597462][ T24] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 138.601292][ T24] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 138.604828][ T24] usb 8-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 138.608715][ T24] usb 8-1: config 14 has no interface number 0 [ 138.611205][ T24] usb 8-1: config 14 has no interface number 1 [ 138.614761][ T24] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 138.619102][ T24] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 138.625123][ T24] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 138.628791][ T24] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 138.632630][ T24] usb 8-1: config 14 interface 57 has no altsetting 0 [ 138.633710][ T5461] 8021q: adding VLAN 0 to HW filter on device eth7 [ 138.636028][ T24] usb 8-1: config 14 interface 228 has no altsetting 0 [ 138.642231][ T24] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 138.646056][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.648692][ T24] usb 8-1: Product: syz [ 138.649962][ T24] usb 8-1: Manufacturer: syz [ 138.651374][ T24] usb 8-1: SerialNumber: syz [ 138.838824][ T7185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.886480][ T5461] 8021q: adding VLAN 0 to HW filter on device eth8 [ 139.070463][ T7185] veth0_vlan: entered promiscuous mode [ 139.077943][ T7185] veth1_vlan: entered promiscuous mode [ 139.089144][ T24] legousbtower 8-1:14.57: interrupt endpoints not found [ 139.101632][ T7185] veth0_macvtap: entered promiscuous mode [ 139.110638][ T7185] veth1_macvtap: entered promiscuous mode [ 139.130348][ T7185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.144736][ T7185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.184218][ T5831] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.193285][ T5831] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.213324][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.220189][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.241743][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.248156][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.269724][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.273333][ T5767] Bluetooth: hci2: command tx timeout [ 139.274371][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.440460][ T5769] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 139.448712][ T5769] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 139.458926][ T5769] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 139.463924][ T5769] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 139.467352][ T5769] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 139.492677][ T24] legousbtower 8-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 139.501656][ T24] legousbtower 8-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 139.600978][ T6957] bond0: (slave syz_tun): Releasing backup interface [ 139.762935][ T7288] lo speed is unknown, defaulting to 1000 [ 140.046453][ T7309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.051255][ T7309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.075767][ T7288] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.078080][ T7288] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.080379][ T7288] bridge_slave_0: entered allmulticast mode [ 140.083058][ T7288] bridge_slave_0: entered promiscuous mode [ 140.087021][ T7288] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.089376][ T7288] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.091633][ T7288] bridge_slave_1: entered allmulticast mode [ 140.095540][ T7288] bridge_slave_1: entered promiscuous mode [ 140.120048][ T7288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.126591][ T7288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.153639][ T7288] team0: Port device team_slave_0 added [ 140.163888][ T7288] team0: Port device team_slave_1 added [ 140.189205][ T7288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.191832][ T7288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.201916][ T7288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.208098][ T7288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.210937][ T7288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.220715][ T7288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.258659][ T7288] hsr_slave_0: entered promiscuous mode [ 140.261398][ T7288] hsr_slave_1: entered promiscuous mode [ 140.264682][ T7288] debugfs: 'hsr0' already exists in 'hsr' [ 140.267164][ T7288] Cannot create hsr debugfs directory [ 140.272893][ T844] usb 8-1: USB disconnect, device number 8 [ 140.295348][ T844] legousbtower 8-1:14.228: LEGO USB Tower #-160 now disconnected [ 140.454253][ T7288] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 140.461713][ T7288] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 140.466067][ T7288] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 140.471966][ T7288] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 140.476089][ T7288] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 140.485431][ T7288] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 140.489884][ T7288] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 140.496302][ T7288] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 140.579622][ T7288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.599961][ T7288] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.609031][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.611543][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.621967][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.624532][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.662992][ T7323] netlink: 24 bytes leftover after parsing attributes in process `syz.5.385'. [ 140.670539][ T7323] netlink: 4 bytes leftover after parsing attributes in process `syz.5.385'. [ 141.009675][ T7288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.118102][ T7350] netlink: 'syz.5.388': attribute type 11 has an invalid length. [ 141.344173][ T7288] veth0_vlan: entered promiscuous mode [ 141.352786][ T7288] veth1_vlan: entered promiscuous mode [ 141.363314][ T5769] Bluetooth: hci2: command tx timeout [ 141.387350][ T7288] veth0_macvtap: entered promiscuous mode [ 141.392910][ T7288] veth1_macvtap: entered promiscuous mode [ 141.406818][ T7288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.419044][ T7288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.464458][ T5804] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.473748][ T5804] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.494503][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.501072][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.513527][ T5769] Bluetooth: hci3: command tx timeout [ 141.549056][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.551608][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.590166][ T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.596040][ T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.681891][ T7372] netlink: 24 bytes leftover after parsing attributes in process `syz.3.396'. [ 141.729463][ T42] audit: type=1800 audit(1786058316.317:8): pid=7374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.381" name="device_path" dev="configfs" ino=18049 res=0 errno=0 [ 141.739298][ T42] audit: type=1800 audit(1786058316.317:9): pid=7374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.381" name="buffered_io" dev="configfs" ino=18050 res=0 errno=0 [ 141.878237][ T7384] evm: overlay not supported [ 142.014060][ T7391] Bluetooth: Error in BCSP hdr checksum [ 142.401246][ T7399] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 142.711259][ T7409] memory length for this resource is wrong [ 142.739454][ T7409] isp1760 0000:00:02.0: probe with driver isp1760 failed with error -12 [ 143.216848][ T7417] netlink: 20 bytes leftover after parsing attributes in process `syz.2.413'. [ 143.226722][ T7417] ip6gre1: entered promiscuous mode [ 143.228972][ T7417] ip6gre1: entered allmulticast mode [ 143.246107][ T7417] netlink: 'syz.2.413': attribute type 6 has an invalid length. [ 143.249251][ T7417] netlink: 72 bytes leftover after parsing attributes in process `syz.2.413'. [ 143.433366][ T5767] Bluetooth: hci2: command tx timeout [ 143.594253][ T5767] Bluetooth: hci3: command tx timeout [ 143.885425][ T7435] lo speed is unknown, defaulting to 1000 [ 144.073261][ T5769] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 144.076432][ T5767] Bluetooth: hci4: command 0x1003 tx timeout [ 144.650377][ T7462] netlink: 'syz.5.430': attribute type 1 has an invalid length. [ 144.991080][ T42] audit: type=1326 audit(1786058319.577:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7474 comm="syz.6.435" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25fec code=0x7ffc0000 [ 145.001221][ T42] audit: type=1326 audit(1786058319.577:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7474 comm="syz.6.435" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25fec code=0x7ffc0000 [ 145.009669][ T42] audit: type=1326 audit(1786058319.587:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7474 comm="syz.6.435" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25fec code=0x7ffc0000 [ 145.018391][ T42] audit: type=1326 audit(1786058319.587:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7474 comm="syz.6.435" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25fec code=0x7ffc0000 [ 145.027418][ T42] audit: type=1326 audit(1786058319.587:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7474 comm="syz.6.435" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25fec code=0x7ffc0000 [ 145.037348][ T42] audit: type=1326 audit(1786058319.587:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7474 comm="syz.6.435" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25fec code=0x7ffc0000 [ 145.046260][ T42] audit: type=1326 audit(1786058319.587:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7474 comm="syz.6.435" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7f25fec code=0x7ffc0000 [ 145.055586][ T42] audit: type=1326 audit(1786058319.587:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7474 comm="syz.6.435" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25fec code=0x7ffc0000 [ 145.083365][ T5859] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 145.233376][ T5859] usb 10-1: Using ep0 maxpacket: 8 [ 145.241168][ T5859] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 145.244878][ T5859] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.248917][ T5859] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 145.253011][ T5859] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.257470][ T5859] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.263074][ T5859] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 145.266932][ T5859] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.480873][ T5859] usb 10-1: usb_control_msg returned -32 [ 145.483023][ T5859] usbtmc 10-1:16.0: can't read capabilities [ 145.673314][ T5769] Bluetooth: hci3: command tx timeout [ 145.852718][ T7484] 9p: Bad value for 'wfdno' [ 146.011875][ T7498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.445'. [ 146.083614][ T7504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.445'. [ 146.200624][ T7513] netlink: 'syz.2.449': attribute type 8 has an invalid length. [ 146.277197][ T7516] read descriptors [ 146.304055][ T7288] ffs_data_put(): freeing [ 146.471105][ T7524] loop0: detected capacity change from 0 to 32768 [ 146.591720][ T7524] device-mapper: thin: Data device (loop1) discard unsupported: Disabling discard passdown. [ 146.887328][ T7541] netlink: 24 bytes leftover after parsing attributes in process `syz.2.459'. [ 147.535626][ T7549] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 147.565971][ T7551] 9p: Bad value for 'rfdno' [ 147.754139][ T5769] Bluetooth: hci3: command tx timeout [ 147.763389][ T34] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 147.839673][ T24] usb 10-1: USB disconnect, device number 2 [ 147.913841][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 147.920938][ T34] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.927701][ T34] usb 8-1: config 0 interface 0 has no altsetting 0 [ 147.930573][ T34] usb 8-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 147.934641][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.943540][ T34] usb 8-1: config 0 descriptor?? [ 147.959459][ T7556] create_pit_timer: 2 callbacks suppressed [ 147.959470][ T7556] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 147.984854][ T7556] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 147.988873][ T7556] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 147.991644][ T7556] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 147.994893][ T7556] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 147.997466][ T7556] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 148.000066][ T7556] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 148.002065][ T7560] sit0: entered promiscuous mode [ 148.004670][ T7556] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 148.007259][ T7556] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 148.008671][ T7560] netlink: 'syz.5.467': attribute type 1 has an invalid length. [ 148.009849][ T7556] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 148.012422][ T7560] netlink: 1 bytes leftover after parsing attributes in process `syz.5.467'. [ 148.117956][ T7565] uhci_hcd 0000:00:1d.0: remove, state 4 [ 148.120242][ T7565] usb usb1: USB disconnect, device number 1 [ 148.160539][ T7565] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 148.292675][ T7568] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 148.302017][ T7568] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 148.305998][ T7568] uhci_hcd 0000:00:1d.0: detected 2 ports [ 148.309002][ T7568] uhci_hcd 0000:00:1d.0: irq 16, io port 0x0000c0e0 [ 148.319527][ T7568] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 148.323616][ T7568] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 148.327311][ T7568] usb usb1: Product: UHCI Host Controller [ 148.327554][ T7576] bridge_slave_0: left allmulticast mode [ 148.330953][ T7568] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 148.331978][ T7576] bridge_slave_0: left promiscuous mode [ 148.334213][ T7568] usb usb1: SerialNumber: 0000:00:1d.0 [ 148.341265][ T7576] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.350516][ T7576] bridge_slave_1: left allmulticast mode [ 148.352523][ T7576] bridge_slave_1: left promiscuous mode [ 148.355737][ T7576] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.355816][ T7568] hub 1-0:1.0: USB hub found [ 148.365021][ T7568] hub 1-0:1.0: 2 ports detected [ 148.369830][ T7576] bond0: (slave bond_slave_0): Releasing backup interface [ 148.378921][ T7576] bond0: (slave bond_slave_1): Releasing backup interface [ 148.387479][ T7576] team0: Port device team_slave_0 removed [ 148.398225][ T7576] team0: Port device team_slave_1 removed [ 148.400986][ T7576] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 148.417739][ T7577] team0: Port device xfrm0 added [ 148.429776][ T7576] tipc: Started in network mode [ 148.431520][ T7576] tipc: Node identity 82afbef5a70a, cluster identity 4711 [ 148.434474][ T7576] tipc: Enabled bearer , priority 0 [ 149.387152][ T5769] Bluetooth: hci0: adv larger than maximum supported [ 149.387195][ T5769] Bluetooth: hci0: Malformed LE Event: 0x0d [ 149.413859][ T7592] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 149.557578][ T5859] tipc: Node number set to 631619317 [ 149.855281][ T7616] kernel read not supported for file /eth0 (pid: 7616 comm: syz.6.483) [ 149.861008][ T42] kauditd_printk_skb: 45 callbacks suppressed [ 149.861023][ T42] audit: type=1800 audit(1786058324.447:63): pid=7616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.483" name="eth0" dev="mqueue" ino=20626 res=0 errno=0 [ 150.597475][ T34] usbhid 8-1:0.0: can't add hid device: -71 [ 150.602417][ T34] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 150.619434][ T34] usb 8-1: USB disconnect, device number 9 [ 150.853249][ T5852] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 150.963357][ T34] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 151.003449][ T5852] usb 11-1: Using ep0 maxpacket: 16 [ 151.007113][ T5852] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 151.013537][ T5852] usb 11-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 151.016944][ T5852] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.019667][ T5852] usb 11-1: Product: syz [ 151.021011][ T5852] usb 11-1: Manufacturer: syz [ 151.022730][ T5852] usb 11-1: SerialNumber: syz [ 151.029483][ T5852] usb 11-1: config 0 descriptor?? [ 151.035139][ T5852] em28xx 11-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 151.039599][ T5852] em28xx 11-1:0.0: DVB interface 0 found: bulk [ 151.096069][ T7665] syzkaller0: entered promiscuous mode [ 151.098434][ T7665] syzkaller0: entered allmulticast mode [ 151.136115][ T34] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 151.140936][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 151.144458][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 151.148027][ T34] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 151.152375][ T34] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 151.155418][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.161298][ T34] usb 8-1: config 0 descriptor?? [ 151.259698][ T7669] bridge0: entered allmulticast mode [ 151.527619][ T7684] VFS: file-max limit 0 reached [ 151.595985][ T34] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 151.641689][ T5852] em28xx 11-1:0.0: unknown em28xx chip ID (0) [ 152.050820][ T5852] em28xx 11-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 152.054993][ T5852] em28xx 11-1:0.0: board has no eeprom [ 152.386014][ T7688] fuse: fd is not a fuse device [ 152.391384][ T5839] usb 8-1: USB disconnect, device number 10 [ 152.577617][ T7701] netlink: 'syz.2.501': attribute type 4 has an invalid length. [ 152.589829][ T7701] netlink: 'syz.2.501': attribute type 4 has an invalid length. [ 152.595537][ T5859] lo speed is unknown, defaulting to 1000 [ 152.598990][ T5859] syz0: Port: 1 Link ACTIVE [ 152.936824][ T7707] tipc: Enabling of bearer rejected, failed to enable media [ 153.121835][ T7649] em28xx 11-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 153.183882][ T5852] em28xx 11-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 153.187314][ T5852] em28xx 11-1:0.0: dvb set to bulk mode. [ 153.189871][ T7640] em28xx 11-1:0.0: Binding DVB extension [ 153.204511][ T5852] usb 11-1: USB disconnect, device number 2 [ 153.216615][ T5852] em28xx 11-1:0.0: Disconnecting em28xx [ 153.245498][ T7640] em28xx 11-1:0.0: Registering input extension [ 153.248943][ T5852] em28xx 11-1:0.0: Closing input extension [ 153.297688][ T7725] fuse: fd is not a fuse device [ 153.306321][ T5852] em28xx 11-1:0.0: Freeing device [ 153.520968][ T7735] netlink: 1320 bytes leftover after parsing attributes in process `syz.2.513'. [ 153.702290][ T42] audit: type=1804 audit(1786058328.287:64): pid=7743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.518" name="bus" dev="ramfs" ino=18880 res=1 errno=0 [ 153.711374][ T42] audit: type=1804 audit(1786058328.287:65): pid=7743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.518" name="bus" dev="ramfs" ino=18880 res=1 errno=0 [ 153.863713][ T7746] create_pit_timer: 27 callbacks suppressed [ 153.863731][ T7746] kvm: requested 131581 ns i8254 timer period limited to 200000 ns [ 153.903352][ T7746] kvm: requested 134095 ns i8254 timer period limited to 200000 ns [ 153.909891][ T7746] kvm: requested 172647 ns i8254 timer period limited to 200000 ns [ 153.916189][ T7746] kvm: requested 142476 ns i8254 timer period limited to 200000 ns [ 153.920490][ T7746] kvm: requested 98895 ns i8254 timer period limited to 200000 ns [ 154.090832][ T7754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.521'. [ 154.097272][ T7754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.521'. [ 154.101848][ T7754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.521'. [ 154.106609][ T7754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.521'. [ 154.111187][ T7754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.521'. [ 154.478560][ T7771] veth0: entered promiscuous mode [ 154.482200][ T7771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.529'. [ 154.540980][ T7770] veth0: left promiscuous mode 5wC  /dev/fusefd=0x0000000000000004,rootmode=00000000000000000040000,user_id=00000000000000000000,group_id=00000000000000000000P)HL@[ 155.922715][ T7809] fuse: fd is not a fuse device ./file0/file0./file0fuse.Gfile0ރm#։!f۪y&jAcaAC|D9 ^瀘hyfH8fC2l%S`-$mRFZ|H7M[ >Q,EGXIQ5J?V9g4aS3% FhM^6)Q7:L]>]bHYv€r8`)5ݺŦ.=W&W!s.)#>01A'^䮅nȈgQR~UvCD/p%E:b& Zq`CJjM37`xl!Xۀv`6o{FН,gIKL,gPe[^++ǀ bQ=䌸+?0?Znv?60EFy#H5LⅯ unK"qYBfQdiq kxcK]۠y18_MQAİ"Ϸ RUZWlˌ[dtgvb-Bl\[;ΑŏqM?Xdr ]O "?]:n6Sq\R`V U]Q\@|ή)tP3H8dh.gjo9j|:5yX566 ڔX$ogX?q=w2H*xxBaubrx;21#[v#U~vv'1A T!kmzMxqFQe[ԙcS[K@|ZYŸ 'ĩÊU^B0Sd ;޻p) 5G~M(ylU ou&&3+ 1u䦗fCU-mΖQ0qD"^._g|t>ˊ6y[ 156.280910][ T7811] netlink: 24 bytes leftover after parsing attributes in process `syz.5.543'. #!rb6hԘki$әhN.v^wkXȔn; 6#< ޏ*t\^M9y [qU7f!:; Nѫ.a w*uU@m`K|0e)^ޔ8c~)$Kt^x,Q ;*5'e\ݖ~sq :,D)0RP=1HT{OM,᐀x(P6M4>s~z͡]y"inkP&;t(v>%`lOsZO6qԑ]8G\{E_Q;CLa M&Fn67I4W֘E-&xܥKJR[hCB:n 8ȿAr'J4-g qĕQQo!˱&]sLr])U;:y]-`Bxo rI?ǒvCfJ52 о j$l6Wƹ܃zCީH`cs̄"M3"Bȕ@uqg86ʹaUj`dfSEz֮"IFBxH`"s٠ϠڎrG^ND(7QI4G>ն>@HMUK?.x?L:5dPU:}"BWXYyTՌt*lv2knRsd$MC?ȁ? *$3Ij{ E* r=ڏem!{U4+\<|뻝OLf]EMҋ!~a1x^ڼH&q}ZX6;K9/PHto^FPByF FN9SM3Ke5)h* mF/.X{7.b!HqqW]Dž^zg1ZFhd`ڷjc̀&:IUkHz X_-LAFg|J,K^Jtk~oKqKp(I (wk¨|ao 2G?';[:@Ic}̼/ zfq|YlV h^ޖ{>拌YVL;k,X8~08,QEe QkyVj g?ت`w7WIDQzh$PFG$wbAr"mf+$>]ܨ(|WQ @,6 4}KI^/xɥ;cd>dGnh[;-͉<hhI&}o+N{iu*Jgh4/B$|R|+ `dPz-&7YF*hh C㖹t5a%GТ'7 6oCKI/]b0|6oԅ|@IXqU5/R$mF.p2vdMŘo'?9Q!B@EƼ6bs <'C"L5p})dn u|eM;)oz$VQ6*YVZƱث̔Ƴ;1OnP`WdU]O@,~%ˤ"9IXuC:"\BwFv}z:Je:f?*;&^i"pX*K\!,4_O~$fOs|`gd_]KlFK<~rŵˮsd!<F׸ln;^(+|n{Ѱ!0̯zY)Qdut<]ɁK;%bGy50~nÀ q0³UHSIVS%sn|$\)Z=^:ra(5 j0) u=u)-+6iY ^@}ދĖq#&jvk@$a)gmGwBn>Im.q(r֮3 yȶNز L,K 0K{ݜf@"0Al_~A)GRa?J((HR̫.axzݨ<wH׵$8HC-Y.aq,/qC*#IU$@#44L{j/''dϕxF.;>bCZg^%65ߪh>օA?[Q ЦFt,娇FLF $Q-(՗. I۾gc"N2;ԽTDR.#14>fbj:r^C9`@#|K^tӮ|DVpT7q,nQc*LMoÄ#ո( 5Ad*kpPPu/OkC߃ h*ogzL[;{cʦ{q1UU,q88a] {%Js?%&3b]=C K{Z ;6 {5y, _ u(;8\ rB^Q D<^Ő؝`t* ,/E}] kO].ox"VO/N^^1e7LΎxrc8'g0b;*p!qzKqKr9ľ ]9d4A ;Mgz8ke=ݮ[0ג>4!Y!)d]n!]SkNb:C^ A K,I{~>✌ &d66LHQOU6$A\_704x¬;E(O| } 76%8gTtwyMfJ'dsuc0LlIdThR3JVXDA|u ;hhkVmw%0&q;ɑ3̼'7AoRB :Fj O-м/Ƕ6(~hF-s[ 156.546800][ T7814] syzkaller0: entered promiscuous mode [ 156.549198][ T7814] syzkaller0: entered allmulticast mode [ 158.509309][ T7831] lo speed is unknown, defaulting to 1000 [ 159.110858][ T7854] netlink: 4 bytes leftover after parsing attributes in process `syz.5.558'. [ 159.238265][ T7858] netlink: 24 bytes leftover after parsing attributes in process `syz.2.560'. [ 159.422379][ T7863] tipc: Enabling of bearer rejected, failed to enable media [ 159.596939][ T7875] netlink: 'syz.5.567': attribute type 4 has an invalid length. [ 159.636570][ T7875] netlink: 'syz.5.567': attribute type 4 has an invalid length. [ 159.713277][ T7877] netlink: 216 bytes leftover after parsing attributes in process `syz.2.568'. [ 159.723876][ T7877] netlink: 216 bytes leftover after parsing attributes in process `syz.2.568'. [ 159.730474][ T5769] Bluetooth: hci0: unexpected event for opcode 0x080e [ 159.863339][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.571'. [ 159.873959][ T7884] overlayfs: failed to resolve './cgroup': -2 [ 159.927461][ T7886] netlink: 'syz.2.572': attribute type 12 has an invalid length. [ 160.066075][ T7892] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 160.279595][ T42] audit: type=1800 audit(1786058334.867:66): pid=7873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.564" name="/" dev="fuse" ino=1 res=0 errno=0 [ 160.382948][ T7906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.581'. [ 160.452719][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.581'. [ 161.651426][ T7929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.589'. [ 162.297439][ T42] audit: type=1800 audit(1786058336.887:67): pid=7950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.596" name="file0" dev="overlay" ino=273 res=0 errno=0 [ 162.510923][ T7953] dvmrp0: entered allmulticast mode [ 163.061616][ T42] audit: type=1804 audit(1786058337.647:68): pid=7962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.601" name="/newroot/50/file0" dev="tmpfs" ino=294 res=1 errno=0 [ 163.078198][ T7962] uprobe: syz.6.601:7962 failed to unregister, leaking uprobe [ 164.239052][ T7998] binder: 7997:7998 ioctl c0306201 80000680 returned -14 [ 164.288901][ T8000] syzkaller0: entered promiscuous mode [ 164.293805][ T8000] syzkaller0: entered allmulticast mode [ 164.297519][ T8002] tipc: Failed to remove unknown binding: 66,0,0/0:183947759/183947761 [ 164.300264][ T8002] tipc: Failed to remove unknown binding: 66,0,0/0:183947759/183947760 [ 164.306836][ T8002] tipc: Failed to remove unknown binding: 66,0,0/0:183947759/183947761 [ 164.310139][ T8002] tipc: Failed to remove unknown binding: 66,0,0/0:183947759/183947760 [ 164.362517][ T8005] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 164.566401][ T8016] netlink: 8 bytes leftover after parsing attributes in process `syz.5.619'. [ 164.973705][ T7640] libceph: connect (1)[c::]:6789 error -101 [ 164.977613][ T7640] libceph: mon0 (1)[c::]:6789 connect error [ 164.990150][ T8036] ceph: No mds server is up or the cluster is laggy [ 165.237392][ T5769] Bluetooth: hci0: unexpected event for opcode 0x2007 [ 166.446228][ T8067] netlink: 'syz.3.636': attribute type 1 has an invalid length. [ 166.482667][ T8067] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.510311][ T8067] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 167.550093][ T8084] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 169.455968][ T8111] netlink: 'syz.2.650': attribute type 10 has an invalid length. [ 170.923873][ T8128] netlink: 24 bytes leftover after parsing attributes in process `syz.5.657'. [ 171.367974][ T24] IPVS: starting estimator thread 0... [ 171.403228][ T7640] usb 11-1: new full-speed USB device number 3 using dummy_hcd [ 171.432372][ T8147] netlink: 'syz.2.663': attribute type 11 has an invalid length. [ 171.453377][ T8143] IPVS: using max 42 ests per chain, 100800 per kthread [ 171.485420][ T8145] sd 0:0:0:0: PR command failed: 1026 [ 171.487882][ T8145] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 171.490745][ T8145] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 171.492207][ T8147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.499012][ T8147] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.551324][ T8147] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 171.555216][ T7640] usb 11-1: unable to get BOS descriptor or descriptor too short [ 171.555879][ T8147] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.558898][ T7640] usb 11-1: not running at top speed; connect to a high speed hub [ 171.566806][ T7640] usb 11-1: config 14 has an invalid interface number: 57 but max is 1 [ 171.568630][ T8147] veth1_vlan: left promiscuous mode [ 171.570182][ T7640] usb 11-1: config 14 has an invalid interface number: 228 but max is 1 [ 171.574319][ T8147] veth0_vlan: left promiscuous mode [ 171.575351][ T7640] usb 11-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 171.579879][ T8147] veth0_vlan: entered promiscuous mode [ 171.580712][ T7640] usb 11-1: config 14 has no interface number 0 [ 171.585300][ T7640] usb 11-1: config 14 has no interface number 1 [ 171.585310][ T8147] veth1_vlan: entered promiscuous mode [ 171.587666][ T7640] usb 11-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 171.594200][ T8147] veth1_macvtap: left promiscuous mode [ 171.594577][ T7640] usb 11-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 171.597704][ T8147] veth0_macvtap: left promiscuous mode [ 171.600652][ T7640] usb 11-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 171.605134][ T8147] veth0_macvtap: entered promiscuous mode [ 171.607391][ T7640] usb 11-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 171.610783][ T8147] veth1_macvtap: entered promiscuous mode [ 171.613792][ T7640] usb 11-1: config 14 interface 57 has no altsetting 0 [ 171.619252][ T7640] usb 11-1: config 14 interface 228 has no altsetting 0 [ 171.624270][ T7640] usb 11-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 171.628252][ T7640] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.629565][ T8147] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 171.631582][ T7640] usb 11-1: Product: syz [ 171.635002][ T8147] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 171.636158][ T7640] usb 11-1: Manufacturer: syz [ 171.640369][ T8147] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 171.640482][ T7640] usb 11-1: SerialNumber: syz [ 171.648270][ T8147] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 171.657604][ T8147] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.783441][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.787122][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.790604][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.794676][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.931146][ T8155] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 172.062535][ T7640] legousbtower 11-1:14.57: interrupt endpoints not found [ 172.468523][ T7640] legousbtower 11-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 172.470520][ T7640] legousbtower 11-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 172.867731][ T8166] netlink: 'syz.2.669': attribute type 1 has an invalid length. [ 172.890285][ T8166] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.914189][ T8166] bond2: (slave veth0_to_bond): making interface the new active one [ 172.917718][ T8166] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 173.021948][ T8171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.026852][ T8171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.110601][ T7640] IPVS: starting estimator thread 0... [ 173.168570][ T8178] bridge0: port 3(syz_tun) entered blocking state [ 173.171551][ T8178] bridge0: port 3(syz_tun) entered disabled state [ 173.174734][ T8178] syz_tun: entered allmulticast mode [ 173.178802][ T8178] syz_tun: entered promiscuous mode [ 173.181708][ T8178] bridge0: port 3(syz_tun) entered blocking state [ 173.184710][ T8178] bridge0: port 3(syz_tun) entered forwarding state [ 173.194744][ T8176] IPVS: using max 27 ests per chain, 64800 per kthread [ 173.226308][ T8178] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 173.241510][ T844] usb 11-1: USB disconnect, device number 3 [ 173.253738][ T844] legousbtower 11-1:14.228: LEGO USB Tower #-160 now disconnected [ 174.023377][ T7640] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 174.173759][ T7640] usb 8-1: Using ep0 maxpacket: 8 [ 174.177690][ T7640] usb 8-1: config 0 has no interfaces? [ 174.180172][ T7640] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 174.186136][ T7640] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.191695][ T7640] usb 8-1: config 0 descriptor?? [ 174.276805][ T8198] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 174.517226][ T24] usb 8-1: USB disconnect, device number 11 [ 175.321408][ T8221] netlink: 20 bytes leftover after parsing attributes in process `syz.5.684'. [ 175.327998][ T8221] ip6gre1: entered promiscuous mode [ 175.329692][ T8221] ip6gre1: entered allmulticast mode [ 175.341120][ T8221] netlink: 'syz.5.684': attribute type 6 has an invalid length. [ 175.343824][ T8221] netlink: 72 bytes leftover after parsing attributes in process `syz.5.684'. [ 175.492847][ T8227] netlink: 24 bytes leftover after parsing attributes in process `syz.3.689'. [ 175.514194][ T8229] netlink: 'syz.6.688': attribute type 1 has an invalid length. [ 175.552006][ T8229] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.587022][ T8229] bond1: (slave veth0_to_bond): making interface the new active one [ 175.613353][ T8229] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 175.653468][ T7640] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 175.805493][ T7640] usb 10-1: unable to get BOS descriptor or descriptor too short [ 175.809350][ T7640] usb 10-1: not running at top speed; connect to a high speed hub [ 175.813996][ T7640] usb 10-1: config 14 has an invalid interface number: 57 but max is 1 [ 175.818386][ T7640] usb 10-1: config 14 has an invalid interface number: 228 but max is 1 [ 175.822140][ T7640] usb 10-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 175.826379][ T7640] usb 10-1: config 14 has no interface number 0 [ 175.828924][ T7640] usb 10-1: config 14 has no interface number 1 [ 175.831430][ T7640] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 175.836007][ T7640] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 175.840625][ T7640] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 175.846076][ T7640] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 175.850433][ T7640] usb 10-1: config 14 interface 57 has no altsetting 0 [ 175.852835][ T7640] usb 10-1: config 14 interface 228 has no altsetting 0 [ 175.858157][ T7640] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 175.863487][ T7640] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.868527][ T7640] usb 10-1: Product: syz [ 175.870699][ T7640] usb 10-1: Manufacturer: syz [ 175.873387][ T7640] usb 10-1: SerialNumber: syz [ 176.293323][ T1478] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 176.308604][ T7640] legousbtower 10-1:14.57: interrupt endpoints not found [ 176.443322][ T1478] usb 11-1: Using ep0 maxpacket: 8 [ 176.448461][ T1478] usb 11-1: config 0 has no interfaces? [ 176.450358][ T1478] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 176.454046][ T1478] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.465691][ T1478] usb 11-1: config 0 descriptor?? [ 176.709461][ T7640] legousbtower 10-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 176.714357][ T7640] legousbtower 10-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 176.774979][ T5859] usb 11-1: USB disconnect, device number 4 [ 177.266634][ T8242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.270617][ T8242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.484485][ T5859] usb 10-1: USB disconnect, device number 3 [ 177.501652][ T5859] legousbtower 10-1:14.228: LEGO USB Tower #-160 now disconnected [ 178.049318][ T8263] netlink: 4 bytes leftover after parsing attributes in process `syz.5.703'. [ 178.056077][ T8263] netlink: 4 bytes leftover after parsing attributes in process `syz.5.703'. [ 178.174265][ T24] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 178.211676][ T8265] netlink: 12 bytes leftover after parsing attributes in process `syz.5.704'. [ 178.319139][ T8268] fuse: fd is not a fuse device [ 178.326930][ T24] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.332043][ T24] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.336187][ T24] usb 11-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 178.339705][ T24] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.349474][ T24] usb 11-1: config 0 descriptor?? [ 178.769236][ T24] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 178.772356][ T24] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 178.773321][ T5839] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 178.775895][ T24] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 178.782429][ T24] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 178.785627][ T24] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 178.791796][ T24] playstation 0003:054C:0DF2.0004: hidraw1: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.6-1/input0 [ 178.924961][ T5839] usb 10-1: config 0 has no interfaces? [ 178.926883][ T5839] usb 10-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 178.929774][ T5839] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.934384][ T5839] usb 10-1: config 0 descriptor?? [ 179.176945][ T34] usb 10-1: USB disconnect, device number 4 [ 179.219604][ T8283] syzkaller0: entered promiscuous mode [ 179.221750][ T8283] syzkaller0: entered allmulticast mode [ 179.369511][ T8261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.372644][ T8261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.392131][ T24] playstation 0003:054C:0DF2.0004: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 179.397737][ T24] playstation 0003:054C:0DF2.0004: Invalid accelerometer calibration data for axis (1), disabling calibration. [ 179.401471][ T24] playstation 0003:054C:0DF2.0004: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 179.408748][ T8285] gadgetfs: bound to dummy_udc driver [ 179.410481][ T24] input: HID 054c:0df2 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:054C:0DF2.0004/input/input10 [ 179.446437][ T24] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:054C:0DF2.0004/input/input11 [ 179.462441][ T24] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:054C:0DF2.0004/input/input12 [ 179.507394][ T24] input: HID 054c:0df2 Headset Jack as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:054C:0DF2.0004/input/input13 [ 179.593644][ T24] playstation 0003:054C:0DF2.0004: Registered DualSense controller hw_version=0x00000000 fw_version=0x00000000 [ 179.761386][ T1478] usb 11-1: USB disconnect, device number 5 [ 181.790238][ T42] audit: type=1326 audit(1786058356.377:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8307 comm="syz.2.726" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x0 [ 181.804749][ T8312] netlink: 'syz.5.716': attribute type 8 has an invalid length. [ 181.870636][ T8314] syzkaller0: entered promiscuous mode [ 181.872553][ T8314] syzkaller0: entered allmulticast mode [ 181.952705][ T8317] netlink: 108 bytes leftover after parsing attributes in process `syz.2.726'. [ 181.963281][ T8317] netlink: 108 bytes leftover after parsing attributes in process `syz.2.726'. [ 183.363456][ T5767] Bluetooth: hci3: command 0x0405 tx timeout [ 183.537066][ T8354] loop5: detected capacity change from 0 to 7 [ 183.811956][ T8354] Dev loop5: unable to read RDB block 7 [ 183.817070][ T8354] loop5: unable to read partition table [ 183.819809][ T42] audit: type=1800 audit(1786058358.407:70): pid=8361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.737" name="serialnumber" dev="configfs" ino=22233 res=0 errno=0 [ 183.820509][ T42] audit: type=1800 audit(1786058358.407:71): pid=8361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.737" name="product" dev="configfs" ino=22234 res=0 errno=0 [ 183.840425][ T8354] loop5: partition table beyond EOD, truncated [ 183.846663][ T8354] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 183.923476][ T8367] binder_alloc: 8366: binder_alloc_buf, no vma [ 184.002508][ T8369] cifs: Unknown parameter 'timeo' [ 184.022847][ T8372] netlink: 'syz.3.741': attribute type 1 has an invalid length. [ 184.048553][ T42] audit: type=1326 audit(1786058358.637:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8374 comm="syz.2.742" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 184.062177][ T42] audit: type=1326 audit(1786058358.637:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8374 comm="syz.2.742" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 184.070120][ T42] audit: type=1326 audit(1786058358.637:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8374 comm="syz.2.742" exe="/syz-executor" sig=0 arch=40000003 syscall=186 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 184.078639][ T42] audit: type=1326 audit(1786058358.637:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8374 comm="syz.2.742" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 184.082922][ T8377] netlink: 12 bytes leftover after parsing attributes in process `syz.5.743'. [ 184.083572][ T8372] bond2: entered promiscuous mode [ 184.084124][ T8372] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.086035][ T42] audit: type=1326 audit(1786058358.637:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8374 comm="syz.2.742" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 184.086061][ T42] audit: type=1326 audit(1786058358.637:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8374 comm="syz.2.742" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 184.107736][ T42] audit: type=1326 audit(1786058358.637:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8374 comm="syz.2.742" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 184.108689][ T8379] netlink: 236 bytes leftover after parsing attributes in process `syz.2.742'. [ 184.118364][ T8378] bond2: (slave bridge1): making interface the new active one [ 184.122462][ T8378] bridge1: entered promiscuous mode [ 184.129410][ T8378] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 184.206899][ T8377] bond1: entered promiscuous mode [ 184.209180][ T8377] bond1: entered allmulticast mode [ 184.222933][ T8372] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 184.229213][ T8372] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 184.300113][ T8383] syzkaller0: entered promiscuous mode [ 184.303768][ T8383] syzkaller0: entered allmulticast mode [ 184.565440][ T8387] kvm: pic: single mode not supported [ 184.571337][ T8387] kvm: pic: level sensitive irq not supported [ 185.152857][ T8411] syzkaller0: entered promiscuous mode [ 185.158348][ T8411] syzkaller0: entered allmulticast mode [ 185.163370][ T8414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.758'. [ 185.166669][ T8411] tipc: Started in network mode [ 185.169128][ T8411] tipc: Node identity 124ba9df3bd4, cluster identity 4711 [ 185.169970][ T8414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.758'. [ 185.172288][ T8411] tipc: Enabled bearer , priority 0 [ 185.188707][ T8410] tipc: Resetting bearer [ 185.218874][ T8410] tipc: Disabling bearer [ 185.259353][ T8417] lo speed is unknown, defaulting to 1000 [ 185.462914][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz.6.762'. [ 185.784442][ T8430] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 185.906761][ T8437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.766'. [ 185.942990][ T8437] team0: Port device team_slave_0 removed [ 187.347105][ T8472] netlink: 12 bytes leftover after parsing attributes in process `syz.3.778'. [ 187.389649][ T8472] bond3: entered promiscuous mode [ 187.392338][ T8472] 8021q: adding VLAN 0 to HW filter on device bond3 [ 187.424103][ T8472] 8021q: adding VLAN 0 to HW filter on device bond3 [ 187.424336][ T8477] netlink: 24 bytes leftover after parsing attributes in process `syz.2.781'. [ 187.427353][ T8472] bond3: (slave sit1): The slave device specified does not support setting the MAC address [ 187.434684][ T8472] bond3: (slave sit1): Error -95 calling set_mac_address [ 187.793347][ T1478] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 187.929368][ T8497] netlink: 12 bytes leftover after parsing attributes in process `syz.6.789'. [ 187.963275][ T1478] usb 8-1: Using ep0 maxpacket: 8 [ 187.969252][ T1478] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 187.977511][ T1478] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 187.983900][ T1478] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 187.989956][ T1478] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.997110][ T8497] bridge1: port 1(veth3) entered blocking state [ 187.999223][ T8497] bridge1: port 1(veth3) entered disabled state [ 188.001324][ T8497] veth3: entered allmulticast mode [ 188.004255][ T8497] veth3: entered promiscuous mode [ 188.004843][ T1478] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 188.011617][ T1478] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.045922][ T8501] bridge1: port 2(veth5) entered blocking state [ 188.048401][ T8501] bridge1: port 2(veth5) entered disabled state [ 188.050803][ T8501] veth5: entered allmulticast mode [ 188.054365][ T8501] veth5: entered promiscuous mode [ 188.231224][ T1478] usb 8-1: GET_CAPABILITIES returned 0 [ 188.234283][ T1478] usbtmc 8-1:16.0: can't read capabilities [ 188.439221][ T844] usb 8-1: USB disconnect, device number 12 [ 188.859076][ T7640] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 188.859159][ T844] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 188.859306][ T1043] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 188.871862][ T844] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 189.052082][ T8539] CIFS: Attempting to mount //127.0.0.1/share [ 189.083621][ T8535] kvm: kvm [8534]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xffffffffffffffff [ 189.115149][ T7640] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 189.116305][ T1043] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 189.133864][ T844] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 189.339393][ T8546] bridge0: entered allmulticast mode [ 189.625094][ T7640] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 189.626019][ T1043] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 189.642688][ T8521] ceph: No mds server is up or the cluster is laggy [ 189.642768][ T8524] ceph: No mds server is up or the cluster is laggy [ 189.642769][ T8522] ceph: No mds server is up or the cluster is laggy [ 189.649922][ T844] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 189.791246][ T8553] syzkaller0: entered promiscuous mode [ 189.803306][ T8553] syzkaller0: entered allmulticast mode [ 189.805997][ T8555] netlink: 4 bytes leftover after parsing attributes in process `syz.5.808'. [ 189.808837][ T8553] tipc: Started in network mode [ 189.811400][ T8553] tipc: Node identity 3207b452dfbd, cluster identity 4711 [ 189.814874][ T8553] tipc: Enabled bearer , priority 0 [ 189.829816][ T8552] tipc: Resetting bearer [ 189.845430][ T8552] tipc: Disabling bearer [ 189.857425][ T8556] openvswitch: netlink: ct_state flags 0001010a unsupported [ 189.874543][ T8539] CIFS: VFS: Error connecting to socket. Aborting operation. [ 189.878142][ T8539] CIFS: VFS: cifs_mount failed w/return code = -4 [ 190.050661][ T8565] ceph: No mds server is up or the cluster is laggy [ 190.053919][ T7640] libceph: connect (1)[c::]:6789 error -101 [ 190.056741][ T7640] libceph: mon0 (1)[c::]:6789 connect error [ 190.588442][ T8589] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 190.599747][ T8589] CIFS: Attempting to mount //127.0.0.1/test [ 190.609366][ T8586] macsec1: entered promiscuous mode [ 190.614452][ T8586] virt_wifi0: entered promiscuous mode [ 190.785528][ T8601] ceph: No mds server is up or the cluster is laggy [ 190.788029][ T55] libceph: connect (1)[c::]:6789 error -101 [ 190.790195][ T55] libceph: mon0 (1)[c::]:6789 connect error [ 191.411648][ T8589] CIFS: VFS: Error connecting to socket. Aborting operation. [ 191.415292][ T8589] CIFS: VFS: cifs_mount failed w/return code = -4 [ 191.467359][ T5852] libceph: connect (1)[c::]:6789 error -101 [ 191.469658][ T5852] libceph: mon0 (1)[c::]:6789 connect error [ 191.500266][ T8613] bridge0: entered allmulticast mode [ 191.727288][ T8607] ceph: No mds server is up or the cluster is laggy [ 191.736559][ T5852] libceph: connect (1)[c::]:6789 error -101 [ 191.741513][ T5852] libceph: mon0 (1)[c::]:6789 connect error [ 191.764986][ T8622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.826'. [ 191.926381][ T8621] netlink: 'syz.6.836': attribute type 4 has an invalid length. [ 192.134881][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.6.829'. [ 192.139813][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.6.829'. [ 192.212727][ T8634] Driver unsupported XDP return value 0 on prog (id 61) dev N/A, expect packet loss! [ 192.258243][ T8636] tipc: Started in network mode [ 192.259925][ T8636] tipc: Node identity ac14140f, cluster identity 4711 [ 192.262702][ T8636] tipc: New replicast peer: 255.255.255.255 [ 192.265813][ T8636] tipc: Enabled bearer , priority 10 [ 192.515701][ T8642] netlink: 'syz.3.835': attribute type 1 has an invalid length. [ 192.545998][ T8642] 8021q: adding VLAN 0 to HW filter on device bond5 [ 192.549588][ T8642] bond4: (slave bond5): making interface the new active one [ 192.552324][ T8642] bond4: (slave bond5): Enslaving as an active interface with an up link [ 192.568355][ T8642] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 192.838597][ T8652] kvm: kvm [8651]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xffffffffffffffff [ 192.892238][ T8658] netlink: 'syz.2.844': attribute type 1 has an invalid length. [ 192.952593][ T8658] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.045868][ T8660] bond3: (slave veth15): Enslaving as an active interface with a down link [ 193.428599][ T8660] netlink: 'syz.2.844': attribute type 10 has an invalid length. [ 193.434819][ T8660] netlink: 40 bytes leftover after parsing attributes in process `syz.2.844'. [ 193.450704][ T8658] bond3: (slave dummy0): making interface the new active one [ 193.462786][ T8658] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 193.471545][ T8660] dummy0: entered promiscuous mode [ 193.486197][ T8660] bond3: (slave dummy0): Releasing active interface [ 193.604289][ T1478] tipc: Node number set to 2886997007 [ 193.618709][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.5.848'. [ 193.916374][ T8686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.852'. [ 193.982109][ T8686] bond4: entered promiscuous mode [ 193.986828][ T8686] 8021q: adding VLAN 0 to HW filter on device bond4 [ 194.066144][ T8693] fuse: fd is not a fuse device [ 194.076486][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.144003][ T8698] fuse: fd is not a fuse device [ 194.152856][ T8698] fuse: fd is not a fuse device [ 194.413818][ T8706] netlink: 4 bytes leftover after parsing attributes in process `syz.5.859'. [ 194.439020][ T8706] team0: Port device team_slave_0 removed [ 194.564951][ T844] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 194.627402][ T8712] syzkaller0: entered promiscuous mode [ 194.629771][ T8712] syzkaller0: entered allmulticast mode [ 194.724252][ T844] usb 11-1: Using ep0 maxpacket: 8 [ 194.733603][ T844] usb 11-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.738308][ T844] usb 11-1: config 0 interface 0 has no altsetting 0 [ 194.741082][ T844] usb 11-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 194.746698][ T844] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.757173][ T844] usb 11-1: config 0 descriptor?? [ 194.855751][ T8719] binder_alloc: 8718: binder_alloc_buf size 1024 failed, no address space [ 194.860494][ T8719] binder_alloc: allocated: 12288 (num: 2 largest: 12280), free: 0 (num: 0 largest: 0) [ 196.244147][ T8749] lo speed is unknown, defaulting to 1000 [ 196.719733][ T8755] netlink: 28 bytes leftover after parsing attributes in process `syz.3.872'. [ 197.356194][ T844] usbhid 11-1:0.0: can't add hid device: -71 [ 197.358468][ T844] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 197.367943][ T844] usb 11-1: USB disconnect, device number 6 [ 198.063528][ T1478] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 198.235358][ T1478] usb 8-1: Using ep0 maxpacket: 8 [ 198.241620][ T1478] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 198.246516][ T1478] usb 8-1: config 0 has no interface number 0 [ 198.249537][ T1478] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 198.254055][ T1478] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 198.259230][ T1478] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 198.264438][ T1478] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 198.269869][ T1478] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 198.273677][ T1478] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.281665][ T1478] usb 8-1: config 0 descriptor?? [ 198.292512][ T1478] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 198.576910][ C0] ldusb 8-1:0.55: usb_submit_urb failed (-19) [ 198.576918][ T1478] usb 8-1: USB disconnect, device number 13 [ 198.597998][ T1478] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 198.598112][ T8779] ldusb: No device or device unplugged -19 [ 198.720067][ T8796] comedi comedi0: comedi_bond: 4:2 attached, 32 channels from 1 devices [ 199.522219][ T8802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.890'. [ 199.577234][ T8806] openvswitch: netlink: ct_state flags 0001010a unsupported [ 200.719718][ T8843] tipc: New replicast peer: 255.255.255.255 [ 200.722210][ T8843] tipc: Enabled bearer , priority 10 [ 200.782049][ T8845] random: crng reseeded on system resumption [ 201.009914][ T8845] IPVS: length: 4096 != 8 [ 201.027551][ T8848] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.030617][ T8848] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.051389][ T8854] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 201.066759][ T8833] ceph: No mds server is up or the cluster is laggy [ 201.067332][ T8835] ceph: No mds server is up or the cluster is laggy [ 201.067348][ T8834] ceph: No mds server is up or the cluster is laggy [ 201.298737][ T8848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.323953][ T8848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.548242][ T8848] virt_wifi0: left promiscuous mode [ 201.563308][ T13] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.566687][ T13] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.569978][ T13] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.573564][ T13] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.663492][ T5852] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 201.814751][ T5852] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.818404][ T5852] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 201.821407][ T5852] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.827157][ T5852] usb 10-1: config 0 descriptor?? [ 201.833518][ T1043] tipc: Node number set to 698329567 [ 202.172145][ T8861] ceph: No mds server is up or the cluster is laggy [ 202.172152][ T8859] ceph: No mds server is up or the cluster is laggy [ 202.172207][ T8863] ceph: No mds server is up or the cluster is laggy [ 202.338497][ T5852] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 202.382680][ T5852] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:0926:3333.0005/input/input14 [ 202.523128][ T5852] keytouch 0003:0926:3333.0005: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 202.803504][ T5839] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 202.852163][ T5852] usb 10-1: USB disconnect, device number 5 [ 202.953333][ T5839] usb 11-1: Using ep0 maxpacket: 8 [ 202.958998][ T5839] usb 11-1: config 0 has an invalid interface number: 55 but max is 0 [ 202.962678][ T5839] usb 11-1: config 0 has no interface number 0 [ 202.965838][ T5839] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 202.970410][ T5839] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 202.975706][ T5839] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 202.980366][ T5839] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 202.986394][ T5839] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 202.990265][ T5839] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.997859][ T5839] usb 11-1: config 0 descriptor?? [ 203.026362][ T5839] ldusb 11-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 203.307896][ T1478] usb 11-1: USB disconnect, device number 7 [ 203.308045][ C0] ldusb 11-1:0.55: usb_submit_urb failed (-19) [ 203.335759][ T1478] ldusb 11-1:0.55: LD USB Device #0 now disconnected [ 203.336021][ T8886] ldusb: No device or device unplugged -19 [ 204.754613][ T8928] lo speed is unknown, defaulting to 1000 [ 205.033317][ T55] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 205.203328][ T55] usb 11-1: Using ep0 maxpacket: 8 [ 205.207548][ T55] usb 11-1: config 0 has no interfaces? [ 205.209609][ T55] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 205.212985][ T55] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.218021][ T55] usb 11-1: config 0 descriptor?? [ 205.488024][ T55] usb 11-1: USB disconnect, device number 8 [ 206.123986][ T1043] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 206.273342][ T1043] usb 10-1: Using ep0 maxpacket: 8 [ 206.276376][ T1043] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 206.278946][ T1043] usb 10-1: config 0 has no interface number 0 [ 206.280831][ T1043] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 206.285643][ T1043] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 206.290403][ T1043] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 206.295630][ T1043] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 206.300027][ T1043] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 206.302892][ T1043] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.316820][ T1043] usb 10-1: config 0 descriptor?? [ 206.332971][ T1043] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 206.624506][ C2] ldusb 10-1:0.55: usb_submit_urb failed (-19) [ 206.626653][ T1043] usb 10-1: USB disconnect, device number 6 [ 206.638634][ T1043] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 206.638642][ T8933] ldusb: No device or device unplugged -19 [ 206.976820][ T8946] netlink: 36 bytes leftover after parsing attributes in process `syz.2.924'. [ 206.982636][ T8947] netlink: 'syz.6.923': attribute type 1 has an invalid length. [ 207.002105][ T8947] 8021q: adding VLAN 0 to HW filter on device bond2 [ 207.056593][ T8947] bond2: (slave veth7): Enslaving as an active interface with a down link [ 207.097863][ T8947] bond2: (slave dummy0): making interface the new active one [ 207.105800][ T8947] dummy0: entered promiscuous mode [ 207.109295][ T8947] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 207.128438][ T8947] netlink: 'syz.6.923': attribute type 10 has an invalid length. [ 207.131444][ T8947] netlink: 40 bytes leftover after parsing attributes in process `syz.6.923'. [ 207.135968][ T8947] bond2: (slave dummy0): Releasing active interface [ 207.182964][ T8955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.928'. [ 208.333318][ T55] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 208.504365][ T55] usb 10-1: Using ep0 maxpacket: 8 [ 208.514775][ T55] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 208.519669][ T55] usb 10-1: config 0 has no interface number 0 [ 208.522364][ T55] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 208.529537][ T55] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 208.535150][ T55] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 208.545324][ T55] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 208.555844][ T55] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 208.560761][ T55] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.571426][ T55] usb 10-1: config 0 descriptor?? [ 208.617413][ T55] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 208.898510][ T844] usb 10-1: USB disconnect, device number 7 [ 208.898610][ C1] ldusb 10-1:0.55: usb_submit_urb failed (-19) [ 208.927676][ T844] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 208.927775][ T8971] ldusb: No device or device unplugged -19 [ 209.197725][ T8997] netlink: 12 bytes leftover after parsing attributes in process `syz.5.940'. [ 209.259013][ T8997] bridge1: port 1(veth7) entered blocking state [ 209.261685][ T8997] bridge1: port 1(veth7) entered disabled state [ 209.265577][ T8997] veth7: entered allmulticast mode [ 209.269558][ T8997] veth7: entered promiscuous mode [ 209.350054][ T8997] bridge1: port 2(veth9) entered blocking state [ 209.353808][ T8997] bridge1: port 2(veth9) entered disabled state [ 209.356760][ T8997] veth9: entered allmulticast mode [ 209.361201][ T8997] veth9: entered promiscuous mode [ 209.954673][ T9001] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 210.133948][ T9005] batman_adv: batadv0: Adding interface: dummy0 [ 210.149750][ T9007] netlink: 'syz.3.942': attribute type 1 has an invalid length. [ 210.173385][ T9005] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.189077][ T9005] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 210.204683][ T9007] 8021q: adding VLAN 0 to HW filter on device bond6 [ 210.227265][ T9005] netlink: 'syz.6.944': attribute type 10 has an invalid length. [ 210.280773][ T9007] bond6: (slave veth11): Enslaving as an active interface with a down link [ 210.285379][ T9005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.289091][ T9005] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 210.298463][ T9010] bond6: (slave dummy0): making interface the new active one [ 210.302448][ T9010] dummy0: entered promiscuous mode [ 210.305267][ T9010] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 210.349493][ T9007] netlink: 'syz.3.942': attribute type 10 has an invalid length. [ 210.352055][ T9007] netlink: 40 bytes leftover after parsing attributes in process `syz.3.942'. [ 210.356588][ T9007] bond6: (slave dummy0): Releasing active interface [ 215.591062][ T9103] syz.3.974: vmalloc error: size 1768304430, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 215.597106][ T9103] CPU: 1 UID: 0 PID: 9103 Comm: syz.3.974 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.597128][ T9103] Tainted: [L]=SOFTLOCKUP [ 215.597132][ T9103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 215.597140][ T9103] Call Trace: [ 215.597145][ T9103] [ 215.597151][ T9103] dump_stack_lvl+0x100/0x190 [ 215.597202][ T9103] warn_alloc.cold+0x94/0xa8 [ 215.597222][ T9103] ? __pfx_warn_alloc+0x10/0x10 [ 215.597260][ T9103] __vmalloc_node_range_noprof+0x136c/0x1630 [ 215.597283][ T9103] ? do_raw_spin_unlock+0x145/0x1e0 [ 215.597308][ T9103] ? irqentry_exit+0x24d/0xa00 [ 215.597342][ T9103] ? ip_set_sockfn_get+0x18e/0xd20 [ 215.597365][ T9103] ? __lock_acquire+0x49f/0x1a40 [ 215.597387][ T9103] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 215.597411][ T9103] ? rcu_is_watching+0x12/0xc0 [ 215.597430][ T9103] ? ip_set_sockfn_get+0x18e/0xd20 [ 215.597447][ T9103] __vmalloc_node_noprof+0xad/0xf0 [ 215.597464][ T9103] ? ip_set_sockfn_get+0x18e/0xd20 [ 215.597484][ T9103] ip_set_sockfn_get+0x18e/0xd20 [ 215.597503][ T9103] ? __pfx_ip_set_sockfn_get+0x10/0x10 [ 215.597522][ T9103] ? nf_sockopt_find.isra.0+0x222/0x290 [ 215.597539][ T9103] nf_getsockopt+0x7c/0xe0 [ 215.597555][ T9103] ip_getsockopt+0x192/0x1e0 [ 215.597573][ T9103] ? __pfx_ip_getsockopt+0x10/0x10 [ 215.597594][ T9103] raw_getsockopt+0x4d/0x1f0 [ 215.597613][ T9103] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 215.597636][ T9103] do_sock_getsockopt+0x50a/0x6e0 [ 215.597649][ T9103] ? __lock_acquire+0x49f/0x1a40 [ 215.597669][ T9103] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 215.597687][ T9103] ? find_held_lock+0x2b/0x80 [ 215.597706][ T9103] ? __fget_files+0x21f/0x3d0 [ 215.597735][ T9103] __sys_getsockopt+0x133/0x1d0 [ 215.597757][ T9103] ? __ia32_sys_getsockopt+0xbc/0x160 [ 215.597774][ T9103] __ia32_sys_getsockopt+0xbc/0x160 [ 215.597792][ T9103] ? __do_fast_syscall_32+0x98/0x970 [ 215.597810][ T9103] ? lockdep_hardirqs_on+0x78/0x100 [ 215.597827][ T9103] __do_fast_syscall_32+0xe7/0x970 [ 215.597845][ T9103] ? lockdep_hardirqs_on+0x78/0x100 [ 215.597863][ T9103] do_fast_syscall_32+0x32/0x70 [ 215.597880][ T9103] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 215.597895][ T9103] RIP: 0023:0xf6ffefec [ 215.597904][ T9103] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 215.597915][ T9103] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 000000000000016d [ 215.597926][ T9103] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 215.597933][ T9103] RDX: 0000000000000053 RSI: 0000000080000000 RDI: 0000000080000080 [ 215.597940][ T9103] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 215.597946][ T9103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.597952][ T9103] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 215.597966][ T9103] [ 215.597970][ T9103] Mem-Info: [ 215.705567][ T9103] active_anon:12989 inactive_anon:49 isolated_anon:0 [ 215.705567][ T9103] active_file:6864 inactive_file:40932 isolated_file:0 [ 215.705567][ T9103] unevictable:1768 dirty:500 writeback:0 [ 215.705567][ T9103] slab_reclaimable:7930 slab_unreclaimable:64616 [ 215.705567][ T9103] mapped:26974 shmem:9276 pagetables:1132 [ 215.705567][ T9103] sec_pagetables:302 bounce:0 [ 215.705567][ T9103] kernel_misc_reclaimable:0 [ 215.705567][ T9103] free:22079 free_pcp:13724 free_cma:0 [ 215.730998][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.976'. [ 215.735566][ T9103] Node 0 active_anon:260kB inactive_anon:80kB active_file:4kB inactive_file:1568kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:724kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8448kB pagetables:1424kB sec_pagetables:1136kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 215.750530][ T9103] Node 1 active_anon:51696kB inactive_anon:116kB active_file:27452kB inactive_file:162160kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:107172kB dirty:1996kB writeback:0kB shmem:33568kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5976kB pagetables:3104kB sec_pagetables:72kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 215.766407][ T9103] Node 0 DMA free:2872kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:568kB local_pcp:200kB free_cma:0kB [ 215.777567][ T9103] lowmem_reserve[]: 0 280 280 280 280 [ 215.779745][ T9103] Node 0 DMA32 free:15124kB boost:0kB min:12768kB low:15960kB high:19152kB reserved_highatomic:0KB free_highatomic:0KB active_anon:260kB inactive_anon:80kB active_file:4kB inactive_file:1568kB unevictable:3536kB writepending:4kB zspages:0kB present:1032196kB managed:286908kB mlocked:0kB bounce:0kB free_pcp:15148kB local_pcp:3692kB free_cma:0kB [ 215.791087][ T9103] lowmem_reserve[]: 0 0 0 0 0 [ 215.793549][ T9103] Node 1 DMA32 free:70192kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:51796kB inactive_anon:116kB active_file:27452kB inactive_file:162160kB unevictable:3536kB writepending:1996kB zspages:1872kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:38768kB local_pcp:12052kB free_cma:0kB [ 215.802853][ T9111] fuse: fd is not a fuse device [ 215.807804][ T9103] lowmem_reserve[]: 0 0 0 0 0 [ 215.811579][ T9103] Node 0 DMA: 100*4kB (UM) 19*8kB (UM) 9*16kB (UM) 20*32kB (UM) 6*64kB (UM) 3*128kB (M) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2872kB [ 215.817830][ T9103] Node 0 DMA32: 519*4kB (UE) 59*8kB (UME) 12*16kB (UE) 81*32kB (UE) 43*64kB (UE) 17*128kB (UME) 7*256kB (UME) 4*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 15124kB [ 215.823657][ T9103] Node 1 DMA32: 96*4kB (UM) 29*8kB (UME) 156*16kB (UME) 39*32kB (ME) 46*64kB (UME) 35*128kB (UME) 30*256kB (UME) 11*512kB (UE) 6*1024kB (UM) 3*2048kB (UM) 8*4096kB (UM) = 70152kB [ 215.830623][ T9103] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 215.835215][ T9103] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 215.839036][ T9103] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 215.843091][ T9103] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 215.847367][ T9103] 57416 total pagecache pages [ 215.849400][ T9103] 347 pages in swap cache [ 215.851176][ T9103] Free swap = 120676kB [ 215.852815][ T9103] Total swap = 124996kB [ 215.859260][ T9103] 524155 pages RAM [ 215.860873][ T9103] 0 pages HighMem/MovableOnly [ 215.863533][ T9103] 211535 pages reserved [ 215.865403][ T9103] 0 pages cma reserved [ 216.263884][ T9126] netlink: 4 bytes leftover after parsing attributes in process `syz.6.985'. [ 216.521750][ T9137] random: crng reseeded on system resumption [ 216.905332][ T9137] IPVS: length: 4096 != 8 [ 217.373422][ T55] libceph: connect (1)[c::]:6789 error -101 [ 217.376177][ T55] libceph: mon0 (1)[c::]:6789 connect error [ 217.527157][ T9159] lo speed is unknown, defaulting to 1000 [ 217.529048][ T9153] ceph: No mds server is up or the cluster is laggy [ 217.763867][ T9170] netlink: 'syz.6.997': attribute type 1 has an invalid length. [ 217.777234][ T9170] bond3: entered promiscuous mode [ 217.779020][ T9170] 8021q: adding VLAN 0 to HW filter on device bond3 [ 217.808529][ T9170] bond3: (slave bridge2): making interface the new active one [ 217.812810][ T9170] bridge2: entered promiscuous mode [ 217.816276][ T9170] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 217.837661][ T9170] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 217.841148][ T9170] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 217.933301][ T5852] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 218.020754][ T9174] netlink: 12 bytes leftover after parsing attributes in process `syz.6.998'. [ 218.103315][ T5852] usb 8-1: Using ep0 maxpacket: 8 [ 218.107623][ T5852] usb 8-1: config 0 has no interfaces? [ 218.110275][ T5852] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 218.114211][ T5852] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.120346][ T5852] usb 8-1: config 0 descriptor?? [ 218.425129][ T844] usb 8-1: USB disconnect, device number 14 [ 218.533353][ T5852] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 218.685168][ T5852] usb 11-1: config 0 has no interfaces? [ 218.687460][ T5852] usb 11-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 218.691196][ T5852] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.698012][ T5852] usb 11-1: config 0 descriptor?? [ 218.910660][ T844] usb 11-1: USB disconnect, device number 9 [ 219.454447][ T9179] fuse: fd is not a fuse device [ 219.489174][ T9181] netlink: 'syz.5.1008': attribute type 9 has an invalid length. [ 219.492549][ T9181] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1008'. [ 220.468653][ T9213] bridge_slave_0: left allmulticast mode [ 220.471233][ T9213] bridge_slave_0: left promiscuous mode [ 220.475779][ T9213] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.499683][ T9213] bridge_slave_1: left allmulticast mode [ 220.505040][ T9213] bridge_slave_1: left promiscuous mode [ 220.517226][ T9213] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.565815][ T9213] bond1: (slave veth0_to_bond): Releasing active interface [ 220.594702][ T9213] bond0: (slave bond_slave_0): Releasing backup interface [ 220.616457][ T9213] bond0: (slave bond_slave_1): Releasing backup interface [ 220.616886][ T9224] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1010'. [ 220.647320][ T9213] team0: Port device team_slave_1 removed [ 220.661994][ T9213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.669157][ T9213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.675008][ T9213] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 220.687017][ T9219] team0: Port device xfrm0 added [ 220.691397][ T9223] tipc: Enabled bearer , priority 0 [ 220.748778][ T42] kauditd_printk_skb: 5355 callbacks suppressed [ 220.748789][ T42] audit: type=1326 audit(1786058395.337:5434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9225 comm="syz.2.1011" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70cefec code=0x0 [ 220.815264][ T9227] bridge0: port 3(syz_tun) entered disabled state [ 220.826994][ T9227] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.830846][ T9227] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.917679][ T9227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.925946][ T9227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.033312][ T5831] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.039040][ T5831] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.059717][ T9239] syzkaller0: entered promiscuous mode [ 221.061982][ T9239] syzkaller0: entered allmulticast mode [ 221.093382][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.096332][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.470453][ T9249] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 221.474362][ T9249] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 221.707898][ T34] usb 5-1: USB disconnect, device number 3 [ 221.725976][ T34] rndis_host 5-1:1.2 usb1: unregister 'rndis_host' usb-dummy_hcd.0-1, RNDIS device [ 221.774516][ T9254] [ 221.776117][ T9254] ====================================================== [ 221.778313][ T9254] WARNING: possible circular locking dependency detected [ 221.780491][ T9254] syzkaller #0 Tainted: G L [ 221.782526][ T9254] ------------------------------------------------------ [ 221.784699][ T9254] syz.5.1029/9254 is trying to acquire lock: [ 221.786583][ T9254] ffff8880796b1c70 (&p->frag_sem){++++}-{4:4}, at: configfs_rmdir+0x3fa/0x950 [ 221.789338][ T9254] [ 221.789338][ T9254] but task is already holding lock: [ 221.791693][ T9254] ffff88801317f340 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 221.794728][ T9254] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 221.794728][ T9254] which lock already depends on the new lock. [ 221.794728][ T9254] [ 221.798276][ T9254] [ 221.798276][ T9254] the existing dependency chain (in reverse order) is: [ 221.801074][ T9254] [ 221.801074][ T9254] -> #3 (&sb->s_type->i_mutex_key#24){++++}-{4:4}: [ 221.803781][ T9254] lock_acquire+0x1b9/0x370 [ 221.805382][ T9254] down_write+0x8b/0x1f0 [ 221.806927][ T9254] configfs_depend_item_unlocked+0xf3/0x6a0 [ 221.808932][ T9254] usbg_make_tpg+0x261/0x620 [ 221.810603][ T9254] target_fabric_make_tpg+0xab/0x8c0 [ 221.812485][ T9254] configfs_mkdir+0x51e/0xb70 [ 221.814160][ T9254] vfs_mkdir+0x361/0x850 [ 221.816045][ T9254] filename_mkdirat+0x48b/0x5e0 [ 221.818109][ T9254] __ia32_sys_mkdir+0x6a/0x90 [ 221.820161][ T9254] __do_fast_syscall_32+0xe7/0x970 [ 221.822380][ T9254] do_fast_syscall_32+0x32/0x70 [ 221.824508][ T9254] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 221.827189][ T9254] [ 221.827189][ T9254] -> #2 (&opts->dep_lock){+.+.}-{4:4}: [ 221.830187][ T9254] lock_acquire+0x1b9/0x370 [ 221.832180][ T9254] __mutex_lock+0x1a4/0x1bd0 [ 221.834204][ T9254] tcm_set_name+0x29/0xb0 [ 221.836112][ T9254] function_make+0x21c/0x3f0 [ 221.838153][ T9254] configfs_mkdir+0x51e/0xb70 [ 221.840226][ T9254] vfs_mkdir+0x361/0x850 [ 221.842121][ T9254] filename_mkdirat+0x48b/0x5e0 [ 221.844260][ T9254] __ia32_sys_mkdir+0x6a/0x90 [ 221.846359][ T9254] __do_fast_syscall_32+0xe7/0x970 [ 221.848566][ T9254] do_fast_syscall_32+0x32/0x70 [ 221.850692][ T9254] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 221.853392][ T9254] [ 221.853392][ T9254] -> #1 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 221.856631][ T9254] lock_acquire+0x1b9/0x370 [ 221.858627][ T9254] __mutex_lock+0x1a4/0x1bd0 [ 221.860588][ T9254] uvcg_frame_dw_frame_interval_store+0xdf/0x4b0 [ 221.862746][ T9254] configfs_write_iter+0x302/0x4e0 [ 221.864498][ T9254] vfs_write+0x6ac/0x1050 [ 221.866049][ T9254] ksys_write+0x12a/0x250 [ 221.867650][ T9254] __do_fast_syscall_32+0xe7/0x970 [ 221.869440][ T9254] do_fast_syscall_32+0x32/0x70 [ 221.871139][ T9254] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 221.873334][ T9254] [ 221.873334][ T9254] -> #0 (&p->frag_sem){++++}-{4:4}: [ 221.875685][ T9254] check_prev_add+0xeb/0xe60 [ 221.877287][ T9254] __lock_acquire+0x136c/0x1a40 [ 221.878983][ T9254] lock_acquire+0x1b9/0x370 [ 221.880592][ T9254] down_write_killable+0x93/0x250 [ 221.882374][ T9254] configfs_rmdir+0x3fa/0x950 [ 221.884031][ T9254] vfs_rmdir+0x328/0x8a0 [ 221.885563][ T9254] filename_rmdir+0x31a/0x5c0 [ 221.887232][ T9254] __ia32_sys_rmdir+0x45/0x60 [ 221.888898][ T9254] __do_fast_syscall_32+0xe7/0x970 [ 221.890683][ T9254] do_fast_syscall_32+0x32/0x70 [ 221.892391][ T9254] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 221.894521][ T9254] [ 221.894521][ T9254] other info that might help us debug this: [ 221.894521][ T9254] [ 221.897727][ T9254] Chain exists of: [ 221.897727][ T9254] &p->frag_sem --> &opts->dep_lock --> &sb->s_type->i_mutex_key#24 [ 221.897727][ T9254] [ 221.902087][ T9254] Possible unsafe locking scenario: [ 221.902087][ T9254] [ 221.904451][ T9254] CPU0 CPU1 [ 221.906156][ T9254] ---- ---- [ 221.907868][ T9254] lock(&sb->s_type->i_mutex_key#24); [ 221.909596][ T9254] lock(&opts->dep_lock); [ 221.911902][ T9254] lock(&sb->s_type->i_mutex_key#24); [ 221.914411][ T9254] lock(&p->frag_sem); [ 221.915792][ T9254] [ 221.915792][ T9254] *** DEADLOCK *** [ 221.915792][ T9254] [ 221.918380][ T9254] 3 locks held by syz.5.1029/9254: [ 221.920026][ T9254] #0: ffff8880224aa450 (sb_writers#12){.+.+}-{0:0}, at: filename_rmdir+0x1ff/0x5c0 [ 221.923219][ T9254] #1: ffff8880130356c0 (&default_group_class[depth - 1]#2/1){+.+.}-{4:4}, at: filename_rmdir+0x258/0x5c0 [ 221.926839][ T9254] #2: ffff88801317f340 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 221.930316][ T9254] [ 221.930316][ T9254] stack backtrace: [ 221.932230][ T9254] CPU: 0 UID: 0 PID: 9254 Comm: syz.5.1029 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.932250][ T9254] Tainted: [L]=SOFTLOCKUP [ 221.932255][ T9254] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 221.932262][ T9254] Call Trace: [ 221.932272][ T9254] [ 221.932278][ T9254] dump_stack_lvl+0x100/0x190 [ 221.932298][ T9254] print_circular_bug.cold+0x178/0x1c7 [ 221.932320][ T9254] check_noncircular+0x146/0x160 [ 221.932343][ T9254] check_prev_add+0xeb/0xe60 [ 221.932361][ T9254] __lock_acquire+0x136c/0x1a40 [ 221.932381][ T9254] lock_acquire+0x1b9/0x370 [ 221.932397][ T9254] ? configfs_rmdir+0x3fa/0x950 [ 221.932410][ T9254] ? __pfx___might_resched+0x10/0x10 [ 221.932427][ T9254] down_write_killable+0x93/0x250 [ 221.932445][ T9254] ? configfs_rmdir+0x3fa/0x950 [ 221.932457][ T9254] ? __pfx_down_write_killable+0x10/0x10 [ 221.932472][ T9254] ? configfs_rmdir+0x3be/0x950 [ 221.932485][ T9254] configfs_rmdir+0x3fa/0x950 [ 221.932499][ T9254] ? __pfx_configfs_rmdir+0x10/0x10 [ 221.932511][ T9254] ? __pfx_down_write+0x10/0x10 [ 221.932527][ T9254] vfs_rmdir+0x328/0x8a0 [ 221.932543][ T9254] filename_rmdir+0x31a/0x5c0 [ 221.932555][ T9254] ? __pfx_filename_rmdir+0x10/0x10 [ 221.932569][ T9254] ? do_getname+0x191/0x390 [ 221.932582][ T9254] __ia32_sys_rmdir+0x45/0x60 [ 221.932594][ T9254] __do_fast_syscall_32+0xe7/0x970 [ 221.932610][ T9254] do_fast_syscall_32+0x32/0x70 [ 221.932625][ T9254] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 221.932639][ T9254] RIP: 0023:0xf6ffefec [ 221.932656][ T9254] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 221.932661][ T9254] RSP: 002b:00000000f53cc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000028 [ 221.932672][ T9254] RAX: ffffffffffffffda RBX: 0000000080000340 RCX: 0000000000000000 [ 221.932679][ T9254] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 221.932685][ T9254] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 221.932691][ T9254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.932698][ T9254] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 221.932707][ T9254] [ 222.167944][ T5839] tipc: Node number set to 3988436050 [ 222.273264][ T7185] syz_tun (unregistering): left allmulticast mode [ 222.285012][ T7185] syz_tun (unregistering): left promiscuous mode [ 222.288933][ T7185] bridge0: port 3(syz_tun) entered disabled state [ 222.704052][ T13] bridge0: left allmulticast mode [ 222.738576][ T13] team0: Port device xfrm0 removed [ 222.780124][ T13] bond4 (unregistering): (slave gretap1): Releasing backup interface [ 222.802499][ T13] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 222.805559][ T13] bridge1 (unregistering): left promiscuous mode [ 222.809556][ T13] bond0 (unregistering): Released all slaves [ 222.812760][ T13] bond1 (unregistering): Released all slaves [ 222.817085][ T13] bond2 (unregistering): Released all slaves [ 222.821217][ T13] bond3 (unregistering): Released all slaves [ 222.826648][ T13] bond4 (unregistering): (slave bond5): Releasing backup interface [ 222.829607][ T13] bond4 (unregistering): Released all slaves [ 222.833807][ T13] bond5 (unregistering): Released all slaves [ 222.839236][ T13] bond6 (unregistering): (slave veth11): Releasing active interface [ 222.842388][ T13] bond6 (unregistering): Released all slaves [ 222.935402][ T13] tipc: Disabling bearer [ 222.944684][ T13] tipc: Left network mode [ 223.176398][ T5461] 8021q: adding VLAN 0 to HW filter on device eth9 [ 223.230118][ T13] hsr_slave_0: left promiscuous mode [ 223.232323][ T13] hsr_slave_1: left promiscuous mode [ 223.300101][ T1163] smc: removing ib device syz2 [ 223.353108][ T5461] 8021q: adding VLAN 0 to HW filter on device eth10 [ 223.357527][ T1163] smbdirect: ib_dev[syz2] removed [ 223.496433][ T5461] 8021q: adding VLAN 0 to HW filter on device eth11 [ 223.635855][ T5461] 8021q: adding VLAN 0 to HW filter on device eth12 [ 223.756278][ T13] IPVS: stop unused estimator thread 0... [ 224.224005][ T13] bridge_slave_1: left allmulticast mode [ 224.226334][ T13] bridge_slave_1: left promiscuous mode [ 224.228749][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.232827][ T13] bridge_slave_0: left allmulticast mode [ 224.235226][ T13] bridge_slave_0: left promiscuous mode [ 224.237628][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.242511][ T13] veth5: left allmulticast mode [ 224.245625][ T13] veth5: left promiscuous mode [ 224.247923][ T13] bridge1: port 2(veth5) entered disabled state [ 224.251798][ T13] veth3: left allmulticast mode [ 224.254002][ T13] veth3: left promiscuous mode [ 224.256194][ T13] bridge1: port 1(veth3) entered disabled state [ 224.261547][ T13] bridge0: left allmulticast mode [ 224.263848][ T13] dvmrp0: left allmulticast mode [ 224.364414][ T13] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 224.367646][ T13] bridge2 (unregistering): left promiscuous mode [ 224.374564][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.379311][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.385004][ T13] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 224.389567][ T13] bond0 (unregistering): Released all slaves [ 224.395023][ T13] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 224.399322][ T13] bond1 (unregistering): Released all slaves [ 224.406492][ T13] bond2 (unregistering): (slave veth7): Releasing active interface [ 224.410865][ T13] bond2 (unregistering): Released all slaves [ 224.417691][ T13] bond3 (unregistering): Released all slaves [ 224.506699][ T13] tipc: Disabling bearer [ 224.508569][ T13] tipc: Left network mode [ 224.555003][ T5461] 8021q: adding VLAN 0 to HW filter on device eth13 [ 224.676533][ T5461] 8021q: adding VLAN 0 to HW filter on device eth14 [ 224.738717][ T13] hsr_slave_0: left promiscuous mode [ 224.741052][ T13] hsr_slave_1: left promiscuous mode [ 224.743100][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.746368][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.749517][ T13] batman_adv: batadv0: Removing interface: dummy0 [ 224.839984][ T13] team0 (unregistering): Port device team_slave_1 removed [ 224.848116][ T13] team0 (unregistering): Port device team_slave_0 removed [ 224.892196][ T5461] 8021q: adding VLAN 0 to HW filter on device eth15 [ 225.015993][ T5461] 8021q: adding VLAN 0 to HW filter on device eth16 [ 225.634284][ T13] bridge_slave_1: left allmulticast mode [ 225.636156][ T13] bridge_slave_1: left promiscuous mode [ 225.638080][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.641205][ T13] bridge_slave_0: left allmulticast mode [ 225.643019][ T13] bridge_slave_0: left promiscuous mode [ 225.644920][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.648366][ T13] veth9: left allmulticast mode [ 225.649986][ T13] veth9: left promiscuous mode [ 225.651570][ T13] bridge1: port 2(veth9) entered disabled state [ 225.654347][ T13] veth7: left allmulticast mode [ 225.655925][ T13] veth7: left promiscuous mode [ 225.657564][ T13] bridge1: port 1(veth7) entered disabled state [ 225.660683][ T13] bridge0: left allmulticast mode [ 225.731827][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.736022][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.739178][ T13] bond0 (unregistering): Released all slaves [ 225.743068][ T13] bond1 (unregistering): Released all slaves [ 225.819159][ T13] tipc: Disabling bearer [ 225.821701][ T13] tipc: Left network mode [ 225.866158][ T5461] 8021q: adding VLAN 0 to HW filter on device eth17 [ 225.974533][ T13] hsr_slave_0: left promiscuous mode [ 225.976835][ T13] hsr_slave_1: left promiscuous mode [ 225.978839][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.981487][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.040724][ T13] team0 (unregistering): Port device team_slave_1 removed [ 226.068291][ T5461] 8021q: adding VLAN 0 to HW filter on device eth18 [ 226.209606][ T5461] 8021q: adding VLAN 0 to HW filter on device eth19 [ 226.333028][ T5461] 8021q: adding VLAN 0 to HW filter on device eth20 [ 226.450504][ T13] IPVS: stop unused estimator thread 0... [ 230.227908][ T13] bridge_slave_1: left allmulticast mode [ 230.230266][ T13] bridge_slave_1: left promiscuous mode [ 230.232879][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.237314][ T13] bridge_slave_0: left allmulticast mode [ 230.239748][ T13] bridge_slave_0: left promiscuous mode [ 230.242227][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.310639][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.316614][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.320952][ T13] bond0 (unregistering): Released all slaves [ 230.445979][ T5461] 8021q: adding VLAN 0 to HW filter on device eth21 [ 230.567116][ T5461] 8021q: adding VLAN 0 to HW filter on device eth22 [ 230.600001][ T13] hsr_slave_0: left promiscuous mode [ 230.602785][ T13] hsr_slave_1: left promiscuous mode [ 230.605528][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.609012][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.671586][ T13] team0 (unregistering): Port device team_slave_1 removed [ 230.676619][ T13] team0 (unregistering): Port device team_slave_0 removed [ 230.708467][ T5461] 8021q: adding VLAN 0 to HW filter on device eth23 [ 230.867079][ T5461] 8021q: adding VLAN 0 to HW filter on device eth24