last executing test programs: 3m50.618584561s ago: executing program 1 (id=702): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, 0x0) unshare(0x60000600) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r0 = socket(0x18, 0x800, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000440)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x24) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4ea1, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) get_mempolicy(0x0, &(0x7f0000001640), 0x3ff, &(0x7f0000400000/0xc00000)=nil, 0x1) msync(&(0x7f0000f0b000/0x3000)=nil, 0x3000, 0x0) 3m46.933481183s ago: executing program 1 (id=713): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 3m46.464965592s ago: executing program 1 (id=716): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1, 0x2}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000400)={0x100, 0x1, &(0x7f0000000200)=[r1], &(0x7f0000000300)=[0x7fff, 0x4, 0x3, 0x6], &(0x7f0000000340), &(0x7f00000003c0)=[0x6, 0xf13], 0x0, 0x5}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000000)={0x4}) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000000)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, r5}, 0x50) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000a80)={0x1, 0x0, @pic={0x96, 0x9, 0xe5, 0x80, 0x9, 0xa, 0x4, 0x7, 0x81, 0x39, 0x0, 0x8, 0xfd, 0x4, 0x0, 0x2}}) syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x6, 0xfc, 0x1, 0x9, 0x1, 0x4, 0x9, 0x9, 0x1, 0x3, 0x9, 0x1, 0x9b, 0x9, 0x5, 0x7}}) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendto$packet(r6, 0x0, 0x0, 0x40000, &(0x7f0000000240)={0x11, 0xf7, r7, 0x1, 0x20, 0x6, @remote}, 0x14) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 3m42.668725454s ago: executing program 1 (id=729): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000980)=r2, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) 3m41.266778023s ago: executing program 1 (id=736): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000000600)={0x0, 0x3, 0x12, @string={0x12, 0x3, "caaffc62ed4546068b844abe706cadae"}}, 0x0, 0x0, 0x0}, 0x0) 3m37.308277476s ago: executing program 1 (id=748): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0xa, 0x801, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 3m21.489145296s ago: executing program 32 (id=748): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0xa, 0x801, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 22.467466218s ago: executing program 3 (id=1366): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000300)="fc0000004a000700ab092500090007000aab80ff020000000000369321000100fc0000000000000000ff000000000000008656aaa79bb94b46fe00000007ec020800008c0100036c6c256f1a272f2e117c22ebc205214000000080008934d07326ade01720e6cd5ed6e4e9bfcd772c74fb32c56ce1f0f156272f5b000000", 0x7e) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 19.445147564s ago: executing program 3 (id=1370): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r1, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x4000) 18.694091239s ago: executing program 3 (id=1374): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x24, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) 17.431237677s ago: executing program 2 (id=1380): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000300)="fc0000004a000700ab092500090007000aab80ff020000000000369321000100fc0000000000000000ff000000000000008656aaa79bb94b46fe00000007ec020800008c0100036c6c256f1a272f2e117c22ebc205214000000080008934d07326ade01720e6cd5ed6e4e9bfcd772c74fb32c56ce1f0f156272f5b000000", 0x7e) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15.220116254s ago: executing program 4 (id=1384): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r1, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x4000) 14.557258103s ago: executing program 0 (id=1386): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 14.467899795s ago: executing program 4 (id=1387): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xc, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_getattr(r0, &(0x7f0000000080)={0x38}, 0x38, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000088a820008100000086dd605f106000062f00fc000000000000000000000000000000ff020000000000000000000000000001000088be"], 0x0) 14.40340281s ago: executing program 2 (id=1388): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="700703"], 0xfe80) 11.664075637s ago: executing program 0 (id=1389): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) 11.483539624s ago: executing program 5 (id=1390): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, 0x0) unshare(0x60000600) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) unshare(0x22020600) r0 = socket(0x18, 0x800, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000440)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x24) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4ea1, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) get_mempolicy(0x0, &(0x7f0000001640), 0x3ff, &(0x7f0000400000/0xc00000)=nil, 0x1) msync(&(0x7f0000f0b000/0x3000)=nil, 0x3000, 0x0) 11.242997212s ago: executing program 4 (id=1391): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000780)=""/193, 0xc1}], 0x2, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) 10.969188022s ago: executing program 2 (id=1392): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, 0x0, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xd8}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r2, {0xffff}, {}, {0x2, 0x6}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x2f, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x40054) 10.968998264s ago: executing program 3 (id=1393): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) 10.785604162s ago: executing program 0 (id=1394): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20000880) r2 = socket(0x10, 0x3, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080), 0xc) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 10.534868313s ago: executing program 5 (id=1395): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd000000100001000908080078af327640d1e2ec", 0x58}], 0x1) 10.095598038s ago: executing program 0 (id=1396): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000001c0)={@val={0x0, 0x22f0}, @void, @eth={@local, @remote, @val={@void, {0x8100, 0x2, 0x0, 0x404}}, {@ipv6={0x86dd, @generic={0x1, 0x6, "5efdc2", 0x38, 0x29, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, {[@srh={0x2c, 0x6, 0x4, 0x3, 0x0, 0x0, 0x4, [@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local]}]}}}}}}, 0x76) 10.083123365s ago: executing program 4 (id=1397): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 9.891561278s ago: executing program 5 (id=1398): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000300)="fc0000004a000700ab092500090007000aab80ff020000000000369321000100fc0000000000000000ff000000000000008656aaa79bb94b46fe00000007ec020800008c0100036c6c256f1a272f2e117c22ebc205214000000080008934d07326ade01720e6cd5ed6e4e9bfcd772c74fb32c56ce1f0f156272f5b000000", 0x7e) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 9.379959522s ago: executing program 2 (id=1399): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000009f440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 6.853044779s ago: executing program 5 (id=1400): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 6.732417112s ago: executing program 3 (id=1401): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') fsopen(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x400000000000, 0x4, 0x4c869, 0x2, 0x2, 0x80000001, 0x7, 0xe1, 0x820000e4}) 6.284643805s ago: executing program 2 (id=1402): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x1000, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00), 0xae, 0xf00) 6.129512465s ago: executing program 0 (id=1403): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$radio(0x0, 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f0000000080)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) 6.079909202s ago: executing program 4 (id=1404): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(0x0, 0x800) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, 0x0, 0x2) readv(r4, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000320081184e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600040001", 0x37}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000080)='ocfs2\x00', 0x1) syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x34}, {[@generic={0x83, 0x2}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x1}}}}}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 5.889912164s ago: executing program 3 (id=1405): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, 0x0) unshare(0x60000600) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) unshare(0x22020600) r0 = socket(0x18, 0x800, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000440)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x24) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4ea1, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) get_mempolicy(0x0, &(0x7f0000001640), 0x3ff, &(0x7f0000400000/0xc00000)=nil, 0x1) msync(&(0x7f0000f0b000/0x3000)=nil, 0x3000, 0x0) 3.539861556s ago: executing program 5 (id=1406): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x68}}, 0x20000880) r2 = socket(0x10, 0x3, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080), 0xc) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3.232940758s ago: executing program 4 (id=1407): msgctl$IPC_SET(0x0, 0x1, 0x0) msgsnd(0x0, &(0x7f0000000000)={0x3}, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, 0x0, 0x40000c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000000)={0xefb8, 0x1, 0x2, 0x3, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0xee01, 0x10}, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1000ff, 0x2, 0x0, 0x0, 0x4}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r5, 0xc02064a4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x4, {{0xa, 0x0, 0x10000000, @mcast1={0xff, 0x7}, 0xfffffffe}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}}, 0x108) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)=""/4104, 0x440000}], 0x1f77) socket$inet6(0xa, 0x1, 0x0) 696.039841ms ago: executing program 0 (id=1408): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) fcntl$lock(r0, 0x25, &(0x7f0000000280)) 48.686143ms ago: executing program 5 (id=1409): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f022}) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x200000000000026f, 0x1}}, 0x40) syz_clone(0x600, 0x0, 0x69, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x8000000, 0x3000, 0x1}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x6040, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 0s ago: executing program 2 (id=1410): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) unshare(0x2c020400) write$nci(r0, &(0x7f0000000680)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x2, {0x9, 0x10, "c4dc"}}, 0x7) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.101' (ED25519) to the list of known hosts. [ 156.367544][ T5759] cgroup: Unknown subsys name 'net' [ 156.497207][ T5759] cgroup: Unknown subsys name 'cpuset' [ 156.512925][ T5759] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 161.925132][ T5759] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 166.113459][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 166.122387][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 166.132476][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 166.145571][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 166.156605][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 166.169791][ T5072] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 166.179571][ T5072] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 166.193703][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 166.213702][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 166.227998][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 166.236879][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 166.245967][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 166.282757][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 166.303046][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 166.316878][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 166.344826][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 166.355572][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 166.364719][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 166.382702][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 166.400173][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 166.403347][ T5789] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 166.438768][ T5783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 166.449635][ T5783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 166.465859][ T5783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 166.476595][ T5783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 167.589737][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 167.684094][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 168.111572][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 168.135777][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 168.248118][ T5783] Bluetooth: hci0: command tx timeout [ 168.412037][ T5072] Bluetooth: hci2: command tx timeout [ 168.418459][ T5783] Bluetooth: hci1: command tx timeout [ 168.485633][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.493511][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.500932][ T5783] Bluetooth: hci3: command tx timeout [ 168.509839][ T5781] bridge_slave_0: entered allmulticast mode [ 168.519435][ T5781] bridge_slave_0: entered promiscuous mode [ 168.533577][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 168.568239][ T5783] Bluetooth: hci4: command tx timeout [ 168.584465][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.597697][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.605213][ T5781] bridge_slave_1: entered allmulticast mode [ 168.615005][ T5781] bridge_slave_1: entered promiscuous mode [ 168.841282][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.858484][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.865938][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.898650][ T5777] bridge_slave_0: entered allmulticast mode [ 168.907736][ T5777] bridge_slave_0: entered promiscuous mode [ 168.954131][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.967489][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.977057][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.988827][ T5777] bridge_slave_1: entered allmulticast mode [ 168.999137][ T5777] bridge_slave_1: entered promiscuous mode [ 169.191178][ T5781] team0: Port device team_slave_0 added [ 169.232795][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.240568][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.248839][ T5784] bridge_slave_0: entered allmulticast mode [ 169.256935][ T5784] bridge_slave_0: entered promiscuous mode [ 169.289072][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.296512][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.304217][ T5785] bridge_slave_0: entered allmulticast mode [ 169.312311][ T5785] bridge_slave_0: entered promiscuous mode [ 169.330195][ T5781] team0: Port device team_slave_1 added [ 169.357523][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.365804][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.373484][ T5784] bridge_slave_1: entered allmulticast mode [ 169.381489][ T5784] bridge_slave_1: entered promiscuous mode [ 169.400127][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.409794][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.417215][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.425169][ T5785] bridge_slave_1: entered allmulticast mode [ 169.433339][ T5785] bridge_slave_1: entered promiscuous mode [ 169.520169][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.576361][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.583915][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.610174][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.690223][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.699307][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.706624][ T5788] bridge_slave_0: entered allmulticast mode [ 169.715206][ T5788] bridge_slave_0: entered promiscuous mode [ 169.727331][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.734725][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.761144][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.781487][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.823045][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.832859][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.869269][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.876814][ T5788] bridge_slave_1: entered allmulticast mode [ 169.901506][ T5788] bridge_slave_1: entered promiscuous mode [ 169.940506][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.958561][ T5777] team0: Port device team_slave_0 added [ 169.971464][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.060587][ T5777] team0: Port device team_slave_1 added [ 170.120920][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.203706][ T5785] team0: Port device team_slave_0 added [ 170.216447][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.255551][ T5784] team0: Port device team_slave_0 added [ 170.270780][ T5784] team0: Port device team_slave_1 added [ 170.328829][ T5783] Bluetooth: hci0: command tx timeout [ 170.329380][ T5785] team0: Port device team_slave_1 added [ 170.415634][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.423118][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.450901][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.474986][ T5781] hsr_slave_0: entered promiscuous mode [ 170.483355][ T5781] hsr_slave_1: entered promiscuous mode [ 170.489635][ T5072] Bluetooth: hci2: command tx timeout [ 170.495357][ T5783] Bluetooth: hci1: command tx timeout [ 170.531507][ T5788] team0: Port device team_slave_0 added [ 170.563094][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.570579][ T5783] Bluetooth: hci3: command tx timeout [ 170.576337][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.603080][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.637223][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.644477][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.670936][ T5783] Bluetooth: hci4: command tx timeout [ 170.673049][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.696018][ T5788] team0: Port device team_slave_1 added [ 170.704164][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.711664][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.738025][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.792682][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.799861][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.827041][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.864117][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.871242][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.897623][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.989816][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.996855][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.023156][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.040102][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.047120][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.074761][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.240352][ T5777] hsr_slave_0: entered promiscuous mode [ 171.249222][ T5777] hsr_slave_1: entered promiscuous mode [ 171.256650][ T5777] debugfs: 'hsr0' already exists in 'hsr' [ 171.262629][ T5777] Cannot create hsr debugfs directory [ 171.384139][ T5784] hsr_slave_0: entered promiscuous mode [ 171.392400][ T5784] hsr_slave_1: entered promiscuous mode [ 171.400309][ T5784] debugfs: 'hsr0' already exists in 'hsr' [ 171.406134][ T5784] Cannot create hsr debugfs directory [ 171.513857][ T5785] hsr_slave_0: entered promiscuous mode [ 171.522102][ T5785] hsr_slave_1: entered promiscuous mode [ 171.530000][ T5785] debugfs: 'hsr0' already exists in 'hsr' [ 171.535809][ T5785] Cannot create hsr debugfs directory [ 171.622835][ T5788] hsr_slave_0: entered promiscuous mode [ 171.631215][ T5788] hsr_slave_1: entered promiscuous mode [ 171.639438][ T5788] debugfs: 'hsr0' already exists in 'hsr' [ 171.645281][ T5788] Cannot create hsr debugfs directory [ 172.408084][ T5783] Bluetooth: hci0: command tx timeout [ 172.568253][ T5783] Bluetooth: hci1: command tx timeout [ 172.573829][ T5783] Bluetooth: hci2: command tx timeout [ 172.648700][ T5783] Bluetooth: hci3: command tx timeout [ 172.664888][ T5781] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 172.697126][ T5781] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 172.715064][ T5781] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 172.739160][ T5783] Bluetooth: hci4: command tx timeout [ 172.754187][ T5781] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 172.856680][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 172.884322][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 172.903621][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 172.924389][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 173.116680][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 173.155581][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 173.184353][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 173.261791][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 173.394346][ T5785] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 173.460622][ T5785] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 173.482149][ T5785] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 173.507491][ T5785] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 173.794124][ T5788] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 173.843564][ T5788] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 173.865430][ T5788] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 173.896562][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.916100][ T5788] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 174.125952][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.139606][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.227293][ T704] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.234696][ T704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.294582][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.302042][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.390834][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.488271][ T5783] Bluetooth: hci0: command tx timeout [ 174.504052][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.511448][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.559018][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.602392][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.609900][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.650642][ T5783] Bluetooth: hci2: command tx timeout [ 174.656256][ T5072] Bluetooth: hci1: command tx timeout [ 174.728855][ T5783] Bluetooth: hci3: command tx timeout [ 174.770080][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.809235][ T5783] Bluetooth: hci4: command tx timeout [ 174.837564][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.911528][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.918986][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.962182][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.041048][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.048579][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.115931][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.123488][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.192742][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.200283][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.375630][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.800422][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.972229][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.979755][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.055213][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.135249][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.142795][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.711969][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.215505][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.306496][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.550041][ T5784] veth0_vlan: entered promiscuous mode [ 177.689106][ T5784] veth1_vlan: entered promiscuous mode [ 177.789466][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.856680][ T5777] veth0_vlan: entered promiscuous mode [ 177.921999][ T5785] veth0_vlan: entered promiscuous mode [ 177.967081][ T5777] veth1_vlan: entered promiscuous mode [ 178.069966][ T5785] veth1_vlan: entered promiscuous mode [ 178.115636][ T5781] veth0_vlan: entered promiscuous mode [ 178.135032][ T5784] veth0_macvtap: entered promiscuous mode [ 178.173820][ T5784] veth1_macvtap: entered promiscuous mode [ 178.280231][ T5777] veth0_macvtap: entered promiscuous mode [ 178.309361][ T5781] veth1_vlan: entered promiscuous mode [ 178.365136][ T5777] veth1_macvtap: entered promiscuous mode [ 178.390510][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.402054][ T5788] veth0_vlan: entered promiscuous mode [ 178.487022][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.514855][ T5788] veth1_vlan: entered promiscuous mode [ 178.571646][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.581283][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.593403][ T5785] veth0_macvtap: entered promiscuous mode [ 178.623747][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.635239][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.673011][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.732378][ T5785] veth1_macvtap: entered promiscuous mode [ 178.801491][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.826485][ T5781] veth0_macvtap: entered promiscuous mode [ 178.921289][ T5781] veth1_macvtap: entered promiscuous mode [ 178.952380][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.976986][ T1128] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.986399][ T1128] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.063537][ T1128] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.082833][ T1128] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.156519][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.193336][ T5788] veth0_macvtap: entered promiscuous mode [ 179.255914][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.299178][ T5788] veth1_macvtap: entered promiscuous mode [ 179.349184][ T2959] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.384064][ T2959] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.408381][ T2959] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.432572][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.466176][ T2959] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.592884][ T2959] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.617041][ T2959] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.675374][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.719357][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.796802][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.883531][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.068850][ T704] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.133025][ T704] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.151336][ T704] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.214162][ T704] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.045143][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.105864][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.354311][ T704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.398270][ T704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.772902][ T5784] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 184.841609][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.878166][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.079889][ T1334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.133020][ T1334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.394376][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.431456][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.513114][ T5962] loop2: detected capacity change from 0 to 2048 [ 185.663584][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.701808][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.730629][ T5962] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.919013][ T5962] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 186.160263][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.224720][ T1334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.247682][ T1334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.410279][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.453615][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.988052][ T2959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.996134][ T2959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.216869][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.272534][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.682166][ T5989] capability: warning: `syz.1.9' uses 32-bit capabilities (legacy support in use) [ 188.117265][ T5988] loop2: detected capacity change from 0 to 4096 [ 188.254042][ T5988] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.677934][ T29] audit: type=1800 audit(1774236937.179:2): pid=5988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 190.010545][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.714123][ T6016] Zero length message leads to an empty skb [ 192.298483][ T6023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21'. [ 192.446435][ T6026] program syz.3.22 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.759852][ T6039] syzkaller0: entered promiscuous mode [ 192.798247][ T6039] syzkaller0: entered allmulticast mode [ 193.102695][ T6046] netlink: 48 bytes leftover after parsing attributes in process `syz.3.28'. [ 194.705304][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36'. [ 196.126140][ T6086] loop1: detected capacity change from 0 to 1764 [ 197.383365][ T6086] syz.1.38 (6086) used greatest stack depth: 1712 bytes left [ 197.468415][ T6089] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 199.138576][ T6099] syz.3.43 uses obsolete (PF_INET,SOCK_PACKET) [ 200.046967][ T6103] syzkaller0: entered promiscuous mode [ 200.073721][ T6103] syzkaller0: entered allmulticast mode [ 203.990227][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.996820][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.658442][ T6153] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 207.380045][ T6182] loop2: detected capacity change from 0 to 1764 [ 207.887725][ T6184] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 209.100768][ T5428] veth0_macvtap: left promiscuous mode [ 217.917943][ T6278] loop4: detected capacity change from 0 to 1764 [ 218.425752][ T6279] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 221.459513][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 224.211980][ T6299] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 224.212080][ T6299] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 224.480558][ T6299] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 224.480652][ T6299] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 224.555066][ T6299] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 224.555160][ T6299] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 224.639505][ T6299] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 224.639600][ T6299] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 224.768640][ T6299] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 224.768733][ T6299] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 226.521246][ T6339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.122'. [ 227.831876][ T6345] loop4: detected capacity change from 0 to 1764 [ 228.801162][ T6345] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 232.538696][ T6363] netlink: 40 bytes leftover after parsing attributes in process `syz.0.130'. [ 233.465429][ T6367] syzkaller0: entered promiscuous mode [ 233.598081][ T6367] syzkaller0: entered allmulticast mode [ 234.005413][ T6374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'. [ 235.495241][ T6391] syzkaller0: entered promiscuous mode [ 235.495337][ T6391] syzkaller0: entered allmulticast mode [ 237.639456][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 238.329232][ T6408] netlink: 40 bytes leftover after parsing attributes in process `syz.2.142'. [ 239.278307][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 239.649768][ T6419] loop0: detected capacity change from 0 to 1764 [ 241.017916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 241.120339][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 241.529917][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 241.838002][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 241.939789][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 242.349107][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 242.518012][ T6419] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 244.089877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 247.502844][ T6458] syzkaller0: entered promiscuous mode [ 247.519377][ T6469] sctp: [Deprecated]: syz.0.156 (pid 6469) Use of struct sctp_assoc_value in delayed_ack socket option. [ 247.519377][ T6469] Use struct sctp_sack_info instead [ 247.526220][ T6458] syzkaller0: entered allmulticast mode [ 248.825414][ T6481] loop4: detected capacity change from 0 to 1764 [ 250.833071][ T6482] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 255.068943][ T6494] netlink: 56 bytes leftover after parsing attributes in process `syz.0.163'. [ 256.257282][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.169'. [ 256.320301][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.169'. [ 256.371236][ T6514] Bluetooth: MGMT ver 1.23 [ 256.501242][ T6517] netlink: 40 bytes leftover after parsing attributes in process `syz.0.170'. [ 256.601185][ T6518] syzkaller0: entered promiscuous mode [ 256.606829][ T6518] syzkaller0: entered allmulticast mode [ 257.506513][ T6536] netlink: 56 bytes leftover after parsing attributes in process `syz.4.177'. [ 258.161011][ T6542] syzkaller0: entered promiscuous mode [ 258.161106][ T6542] syzkaller0: entered allmulticast mode [ 258.490441][ T6551] netlink: 68 bytes leftover after parsing attributes in process `syz.0.183'. [ 258.506460][ T6551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.183'. [ 258.779315][ T6554] netlink: 44 bytes leftover after parsing attributes in process `syz.2.184'. [ 258.824075][ T6554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.184'. [ 259.953366][ T6567] netlink: 76 bytes leftover after parsing attributes in process `syz.0.189'. [ 259.968289][ T6567] syzkaller0: entered promiscuous mode [ 259.968350][ T6567] syzkaller0: entered allmulticast mode [ 259.973818][ T6564] syzkaller0: entered promiscuous mode [ 259.973906][ T6564] syzkaller0: entered allmulticast mode [ 260.035686][ T6567] tc action pedit 'at' offset 3357 out of bounds [ 260.035761][ T6567] tc action pedit 'at' offset 3357 out of bounds [ 260.035824][ T6567] tc action pedit 'at' offset 3357 out of bounds [ 260.035885][ T6567] tc action pedit 'at' offset 3357 out of bounds [ 260.036048][ T6567] tc action pedit 'at' offset 3357 out of bounds [ 260.036113][ T6567] tc action pedit 'at' offset 3357 out of bounds [ 260.036177][ T6567] tc action pedit 'at' offset 3357 out of bounds [ 260.036240][ T6567] tc action pedit 'at' offset 3357 out of bounds [ 260.036303][ T6567] tc action pedit 'at' offset 3357 out of bounds [ 260.036366][ T6567] tc action pedit 'at' offset 3357 out of bounds [ 260.036496][ T6567] 0: reclassify loop, rule prio 0, protocol 800 [ 260.218674][ T6569] netlink: 56 bytes leftover after parsing attributes in process `syz.4.190'. [ 261.109447][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.194'. [ 261.173190][ T6578] syzkaller0: entered promiscuous mode [ 261.173254][ T6578] syzkaller0: entered allmulticast mode [ 261.569480][ T6584] netlink: 68 bytes leftover after parsing attributes in process `syz.0.196'. [ 261.629976][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.196'. [ 261.698529][ T6586] netlink: 44 bytes leftover after parsing attributes in process `syz.1.197'. [ 261.791526][ T6588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.197'. [ 262.757216][ T6599] syzkaller0: entered promiscuous mode [ 262.806937][ T6599] syzkaller0: entered allmulticast mode [ 263.050460][ T6601] syzkaller0: entered promiscuous mode [ 263.056365][ T6601] syzkaller0: entered allmulticast mode [ 264.751573][ T6627] syzkaller0: entered promiscuous mode [ 264.751670][ T6627] syzkaller0: entered allmulticast mode [ 264.990279][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.211'. [ 265.391291][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.391548][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.447819][ C1] hrtimer: interrupt took 366921 ns [ 266.364042][ T6649] syzkaller0: entered promiscuous mode [ 266.364235][ T6649] syzkaller0: entered allmulticast mode [ 268.289559][ T6668] loop3: detected capacity change from 0 to 1764 [ 269.005046][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.221'. [ 269.355980][ T6669] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 273.981069][ T6676] netlink: 'syz.1.224': attribute type 1 has an invalid length. [ 274.232655][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.225'. [ 274.323199][ T6676] 8021q: adding VLAN 0 to HW filter on device bond1 [ 274.583930][ T6681] bond1: (slave geneve2): making interface the new active one [ 274.633706][ T6681] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 274.677370][ T6682] syzkaller0: entered promiscuous mode [ 276.263127][ T6715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.236'. [ 277.158098][ T6720] loop0: detected capacity change from 0 to 1764 [ 278.205972][ T6720] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 278.652164][ T6724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.239'. [ 280.018971][ T6735] IPVS: rr: FWM 3 0x00000003 - no destination available [ 280.028072][ T5830] IPVS: starting estimator thread 0... [ 280.178143][ T6737] IPVS: using max 192 ests per chain, 9600 per kthread [ 280.819283][ T6740] syzkaller0: entered promiscuous mode [ 280.824946][ T6740] syzkaller0: entered allmulticast mode [ 283.976109][ T6766] netlink: 44 bytes leftover after parsing attributes in process `syz.1.253'. [ 284.116803][ T6768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.253'. [ 284.224298][ T6767] syzkaller0: entered promiscuous mode [ 284.291880][ T6767] syzkaller0: entered allmulticast mode [ 284.484222][ T6773] IPVS: rr: FWM 3 0x00000003 - no destination available [ 285.572598][ T6790] syzkaller0: entered promiscuous mode [ 285.579723][ T6790] syzkaller0: entered allmulticast mode [ 286.825274][ T6815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.267'. [ 286.898038][ T6815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.267'. [ 287.652268][ T6822] syzkaller0: entered promiscuous mode [ 287.683010][ T6822] syzkaller0: entered allmulticast mode [ 289.334525][ T6853] syzkaller0: entered promiscuous mode [ 289.370832][ T6853] syzkaller0: entered allmulticast mode [ 290.343090][ T6871] x_tables: duplicate underflow at hook 3 [ 290.903719][ T6883] warning: `syz.0.286' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 291.406777][ T6888] syzkaller0: entered promiscuous mode [ 291.413210][ T6888] syzkaller0: entered allmulticast mode [ 292.600088][ T5428] veth1_macvtap: left promiscuous mode [ 297.013628][ T6984] syzkaller0: entered promiscuous mode [ 297.098416][ T6984] syzkaller0: entered allmulticast mode [ 297.582653][ T7002] loop3: detected capacity change from 0 to 512 [ 297.870238][ T7002] EXT4-fs (loop3): 1 truncate cleaned up [ 297.924547][ T7002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.030268][ T7002] netlink: 52 bytes leftover after parsing attributes in process `syz.3.322'. [ 298.485951][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.831837][ T7038] netlink: 68 bytes leftover after parsing attributes in process `syz.1.331'. [ 299.902277][ T7038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.331'. [ 301.978437][ T7025] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 302.685818][ T7048] syzkaller0: entered promiscuous mode [ 302.710593][ T7048] syzkaller0: entered allmulticast mode [ 303.012614][ T7065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.337'. [ 304.574074][ T7092] netlink: 68 bytes leftover after parsing attributes in process `syz.4.345'. [ 304.626105][ T7092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.345'. [ 305.307045][ T7109] netlink: 100 bytes leftover after parsing attributes in process `syz.3.348'. [ 305.361222][ T7093] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.371054][ T7093] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.664879][ T7093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.808589][ T7093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.890681][ T57] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.958972][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.016332][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.082171][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.352846][ T7134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.351'. [ 311.068604][ T7164] netlink: 68 bytes leftover after parsing attributes in process `syz.1.363'. [ 311.899145][ T7164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'. [ 315.109638][ T7196] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 319.028381][ T7248] syzkaller0: entered promiscuous mode [ 319.034041][ T7248] syzkaller0: entered allmulticast mode [ 319.760241][ T7259] netlink: 20 bytes leftover after parsing attributes in process `syz.3.389'. [ 319.833442][ T7262] ======================================================= [ 319.833442][ T7262] WARNING: The mand mount option has been deprecated and [ 319.833442][ T7262] and is ignored by this kernel. Remove the mand [ 319.833442][ T7262] option from the mount to silence this warning. [ 319.833442][ T7262] ======================================================= [ 320.177112][ T7266] netlink: 27 bytes leftover after parsing attributes in process `syz.1.391'. [ 320.961663][ T7274] netlink: 28 bytes leftover after parsing attributes in process `syz.3.393'. [ 323.102226][ T7299] netlink: 24 bytes leftover after parsing attributes in process `syz.3.400'. [ 323.831577][ T7302] syzkaller0: entered promiscuous mode [ 323.837496][ T7302] syzkaller0: entered allmulticast mode [ 324.516472][ T7316] netlink: 20 bytes leftover after parsing attributes in process `syz.3.403'. [ 325.610185][ T7345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.410'. [ 325.849483][ T7347] netlink: 36 bytes leftover after parsing attributes in process `syz.1.410'. [ 325.888512][ T7345] block device autoloading is deprecated and will be removed. [ 326.276093][ T7347] xt_CT: You must specify a L4 protocol and not use inversions on it [ 326.844851][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.860721][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.900158][ T7352] syzkaller0: entered promiscuous mode [ 326.968428][ T7352] syzkaller0: entered allmulticast mode [ 328.066814][ T7363] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.076364][ T7363] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.017278][ T7363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.104410][ T7363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.263487][ T49] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.291251][ T49] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.444799][ T49] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.493312][ T49] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.263440][ T7444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.424'. [ 334.410406][ T7443] netlink: 16 bytes leftover after parsing attributes in process `syz.1.424'. [ 335.107583][ T7446] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.117252][ T7446] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.430900][ T7443] xt_CT: You must specify a L4 protocol and not use inversions on it [ 335.796691][ T7446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.901502][ T7446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.560742][ T704] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.575262][ T704] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.598188][ T704] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.607323][ T704] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.216623][ T7496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.441'. [ 340.231009][ T7496] netlink: 16 bytes leftover after parsing attributes in process `syz.3.441'. [ 340.815971][ T7496] xt_CT: You must specify a L4 protocol and not use inversions on it [ 341.333707][ T7503] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.342396][ T7503] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.182125][ T7503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.304815][ T7503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.238122][ T704] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.293998][ T704] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.348622][ T704] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.381701][ T704] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.692931][ T7530] syzkaller0: entered promiscuous mode [ 344.755823][ T7530] syzkaller0: entered allmulticast mode [ 346.620029][ T7558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.457'. [ 346.748762][ T7558] netlink: 16 bytes leftover after parsing attributes in process `syz.0.457'. [ 347.354025][ T7566] loop3: detected capacity change from 0 to 512 [ 347.469463][ T7558] xt_CT: You must specify a L4 protocol and not use inversions on it [ 347.554110][ T7566] EXT4-fs (loop3): 1 truncate cleaned up [ 347.623060][ T7566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.712172][ T7566] netlink: 52 bytes leftover after parsing attributes in process `syz.3.459'. [ 348.022408][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.245322][ T7611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.471'. [ 350.293249][ T7611] netlink: 16 bytes leftover after parsing attributes in process `syz.2.471'. [ 350.536310][ T7611] xt_CT: You must specify a L4 protocol and not use inversions on it [ 350.651929][ T7615] loop3: detected capacity change from 0 to 512 [ 350.768728][ T7615] EXT4-fs (loop3): 1 truncate cleaned up [ 350.820648][ T7615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.984969][ T7623] syzkaller0: entered promiscuous mode [ 351.011621][ T7623] syzkaller0: entered allmulticast mode [ 351.440117][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.322237][ T7647] netlink: 27 bytes leftover after parsing attributes in process `syz.4.480'. [ 353.221923][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.485'. [ 353.270100][ T7666] netlink: 16 bytes leftover after parsing attributes in process `syz.1.485'. [ 353.322899][ T7666] xt_CT: You must specify a L4 protocol and not use inversions on it [ 353.685105][ T7672] loop3: detected capacity change from 0 to 512 [ 353.764445][ T7672] EXT4-fs (loop3): 1 truncate cleaned up [ 353.772850][ T7672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.152943][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.317196][ T7680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.488'. [ 355.155160][ T7693] netlink: 27 bytes leftover after parsing attributes in process `syz.3.493'. [ 356.642598][ T7712] loop4: detected capacity change from 0 to 512 [ 356.745153][ T7712] EXT4-fs (loop4): 1 truncate cleaned up [ 356.770006][ T7712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.075769][ T5781] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.279656][ T7717] syzkaller0: entered promiscuous mode [ 357.285582][ T7717] syzkaller0: entered allmulticast mode [ 357.594621][ T7724] netlink: 44 bytes leftover after parsing attributes in process `syz.4.501'. [ 357.609445][ T7724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.501'. [ 357.622879][ T7723] netlink: 68 bytes leftover after parsing attributes in process `syz.3.502'. [ 357.652692][ T7723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.502'. [ 358.182729][ T7730] netlink: 27 bytes leftover after parsing attributes in process `syz.1.505'. [ 359.893112][ T7749] syzkaller0: entered promiscuous mode [ 359.908371][ T7749] syzkaller0: entered allmulticast mode [ 359.939030][ T7754] netlink: 44 bytes leftover after parsing attributes in process `syz.3.513'. [ 359.993548][ T7755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.513'. [ 360.050880][ T7757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.514'. [ 361.625510][ T7769] syzkaller0: entered promiscuous mode [ 361.653495][ T7769] syzkaller0: entered allmulticast mode [ 363.548863][ T7798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.526'. [ 364.392007][ T7804] netlink: 44 bytes leftover after parsing attributes in process `syz.0.529'. [ 364.449187][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.529'. [ 365.915033][ T7828] syzkaller0: entered promiscuous mode [ 365.921069][ T7828] syzkaller0: entered allmulticast mode [ 366.379806][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.539'. [ 367.536733][ T7855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.544'. [ 368.276474][ T7870] netlink: 32 bytes leftover after parsing attributes in process `syz.4.551'. [ 368.675484][ T7879] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 369.124034][ T7103] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 369.312016][ T7103] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 369.356703][ T7103] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.388081][ T7103] usb 2-1: config 0 has no interface number 0 [ 369.394494][ T7103] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 369.428490][ T7103] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 369.553970][ T7103] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 369.585284][ T7103] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.596105][ T7103] usb 2-1: Product: syz [ 369.611692][ T7103] usb 2-1: Manufacturer: syz [ 369.638285][ T7103] usb 2-1: SerialNumber: syz [ 369.665293][ T7103] usb 2-1: config 0 descriptor?? [ 369.676577][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.559'. [ 370.461174][ T7103] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 370.732750][ T7103] usb 2-1: USB disconnect, device number 2 [ 371.275732][ T7897] syzkaller0: entered promiscuous mode [ 371.348205][ T7897] syzkaller0: entered allmulticast mode [ 372.091568][ T7919] netlink: 32 bytes leftover after parsing attributes in process `syz.0.565'. [ 374.871235][ T7110] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 374.941253][ T7955] netlink: 32 bytes leftover after parsing attributes in process `syz.2.578'. [ 375.077215][ T7110] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 375.148428][ T7110] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.223808][ T7110] usb 1-1: config 0 has no interface number 0 [ 375.302485][ T7110] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 375.388788][ T7110] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 375.465423][ T7110] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 375.517412][ T7110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.547176][ T7110] usb 1-1: Product: syz [ 375.575000][ T7110] usb 1-1: Manufacturer: syz [ 375.588329][ T7110] usb 1-1: SerialNumber: syz [ 375.610500][ T7110] usb 1-1: config 0 descriptor?? [ 375.841310][ T7110] usbtouchscreen 1-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 375.907595][ T7110] usb 1-1: USB disconnect, device number 2 [ 377.675328][ T7997] netlink: 32 bytes leftover after parsing attributes in process `syz.4.592'. [ 379.127445][ T8001] syzkaller0: entered promiscuous mode [ 379.162900][ T8001] syzkaller0: entered allmulticast mode [ 379.319007][ T8018] netlink: 44 bytes leftover after parsing attributes in process `syz.0.596'. [ 379.551225][ T8018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.596'. [ 380.428981][ T5836] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 380.605696][ T5836] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 380.630937][ T5836] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.660531][ T5836] usb 3-1: config 0 has no interface number 0 [ 380.676116][ T5836] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 380.704865][ T8043] netlink: 32 bytes leftover after parsing attributes in process `syz.3.605'. [ 380.710001][ T5836] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 380.796554][ T5836] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 380.815131][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.825281][ T5836] usb 3-1: Product: syz [ 380.830002][ T5836] usb 3-1: Manufacturer: syz [ 380.835613][ T5836] usb 3-1: SerialNumber: syz [ 380.849304][ T5836] usb 3-1: config 0 descriptor?? [ 381.437213][ T5836] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 381.512944][ T5836] usb 3-1: USB disconnect, device number 2 [ 382.342468][ T8064] netlink: 44 bytes leftover after parsing attributes in process `syz.0.611'. [ 382.372235][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.611'. [ 382.997593][ T8080] netlink: 28 bytes leftover after parsing attributes in process `syz.0.615'. [ 383.517527][ T8069] syzkaller0: entered promiscuous mode [ 383.586288][ T8069] syzkaller0: entered allmulticast mode [ 383.902857][ T8093] netlink: 32 bytes leftover after parsing attributes in process `syz.1.619'. [ 384.777675][ T8107] netlink: 44 bytes leftover after parsing attributes in process `syz.2.625'. [ 384.794910][ T8107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.625'. [ 387.269202][ T8150] syzkaller0: entered promiscuous mode [ 387.274865][ T8150] syzkaller0: entered allmulticast mode [ 388.281258][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.289283][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.312937][ T7103] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 390.516001][ T7103] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 390.550654][ T7103] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.591241][ T7103] usb 3-1: config 0 has no interface number 0 [ 390.624112][ T7103] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 390.680473][ T7103] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 390.748847][ T7103] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 390.781602][ T7103] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.810497][ T7103] usb 3-1: Product: syz [ 390.828156][ T7103] usb 3-1: Manufacturer: syz [ 390.857301][ T7103] usb 3-1: SerialNumber: syz [ 390.913224][ T7103] usb 3-1: config 0 descriptor?? [ 391.214854][ T7103] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 391.328834][ T7103] usb 3-1: USB disconnect, device number 3 [ 394.708544][ T795] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 394.940558][ T795] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 394.989300][ T795] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.035388][ T795] usb 3-1: config 0 has no interface number 0 [ 395.060422][ T795] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 395.098236][ T795] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 395.175401][ T795] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 395.202300][ T795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.218184][ T795] usb 3-1: Product: syz [ 395.248651][ T795] usb 3-1: Manufacturer: syz [ 395.253425][ T795] usb 3-1: SerialNumber: syz [ 395.305668][ T795] usb 3-1: config 0 descriptor?? [ 395.477036][ T8299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.678'. [ 395.595943][ T795] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 395.655263][ T795] usb 3-1: USB disconnect, device number 4 [ 399.057457][ T8370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.695'. [ 399.458288][ T7110] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 399.663745][ T7110] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 399.694003][ T7110] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.744184][ T7110] usb 3-1: config 0 has no interface number 0 [ 399.768839][ T7110] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 399.808280][ T7110] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 399.858572][ T7110] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 399.891367][ T7110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.939320][ T7110] usb 3-1: Product: syz [ 399.944728][ T7110] usb 3-1: Manufacturer: syz [ 399.978997][ T7110] usb 3-1: SerialNumber: syz [ 400.023842][ T7110] usb 3-1: config 0 descriptor?? [ 401.060755][ T8390] loop0: detected capacity change from 0 to 1024 [ 401.134557][ T7110] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 401.157506][ T7110] usb 3-1: USB disconnect, device number 5 [ 401.646099][ T8390] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.326984][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.970450][ T8414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.704'. [ 404.021698][ T8435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.712'. [ 404.370309][ T8441] loop2: detected capacity change from 0 to 1024 [ 404.480591][ T8441] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.879482][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.960230][ T7110] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 405.941431][ T7110] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 405.992646][ T7110] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.072361][ T7110] usb 2-1: config 0 has no interface number 0 [ 406.122680][ T7110] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 406.230637][ T7110] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 406.375522][ T7110] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 406.477986][ T7110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.578175][ T7110] usb 2-1: Product: syz [ 406.582524][ T7110] usb 2-1: Manufacturer: syz [ 406.668332][ T7110] usb 2-1: SerialNumber: syz [ 406.775390][ T7110] usb 2-1: config 0 descriptor?? [ 407.104086][ T7110] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 407.186170][ T7110] usb 2-1: USB disconnect, device number 3 [ 408.491048][ T8491] loop0: detected capacity change from 0 to 1024 [ 408.594905][ T8491] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.079011][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.558137][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 410.834282][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.925383][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.029809][ T9] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 411.098408][ T9] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 411.164135][ T9] usb 2-1: Manufacturer: syz [ 411.235301][ T9] usb 2-1: config 0 descriptor?? [ 411.889099][ T8525] syzkaller0: entered promiscuous mode [ 411.922517][ T8525] syzkaller0: entered allmulticast mode [ 412.300010][ T9] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0001/input/input12 [ 412.437640][ T7103] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 412.480909][ T9] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0001/input/input13 [ 412.568195][ T9] input: syz Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0001/input/input14 [ 412.652913][ T7103] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 412.677936][ T7103] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.681578][ T9] input: syz Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0001/input/input15 [ 412.870668][ T9] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.1-1/input0 [ 413.063564][ T9] usb 2-1: USB disconnect, device number 4 [ 413.337888][ T7103] usb 1-1: config 0 has no interface number 0 [ 413.344242][ T7103] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 413.376283][ T7103] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 413.415491][ T7103] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 413.498379][ T8546] overlayfs: missing 'lowerdir' [ 414.373475][ T7103] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.382894][ T7103] usb 1-1: Product: syz [ 414.387225][ T7103] usb 1-1: Manufacturer: syz [ 414.392083][ T7103] usb 1-1: SerialNumber: syz [ 415.376161][ T7103] usb 1-1: config 0 descriptor?? [ 416.088080][ T7103] usb 1-1: can't set config #0, error -71 [ 416.206178][ T7103] usb 1-1: USB disconnect, device number 3 [ 416.858918][ T8555] fido_id[8555]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 420.478165][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 420.671263][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 420.709802][ T9] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 420.738047][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 420.777966][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 420.826677][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 420.858546][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.866737][ T9] usb 5-1: Product: syz [ 420.898019][ T9] usb 5-1: Manufacturer: syz [ 420.909045][ T9] usb 5-1: SerialNumber: syz [ 421.168958][ T9] usb 5-1: 0:2 : does not exist [ 421.565217][ T8617] netlink: 27 bytes leftover after parsing attributes in process `syz.2.767'. [ 421.596565][ T9] usb 5-1: USB disconnect, device number 2 [ 421.828943][ T6395] udevd[6395]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 428.087970][ T7103] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 428.310206][ T7103] usb 3-1: No LPM exit latency info found, disabling LPM. [ 428.360569][ T7103] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1040, setting to 0 [ 428.398163][ T7103] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 55, changing to 4 [ 428.421448][ T7103] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 16, setting to 0 [ 428.469029][ T7103] usb 3-1: string descriptor 0 read error: -22 [ 428.493834][ T7103] usb 3-1: New USB device found, idVendor=0582, idProduct=0027, bcdDevice= 0.40 [ 428.514237][ T7103] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.609488][ T7103] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 428.638966][ T7103] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 428.743325][ T8685] netlink: 44 bytes leftover after parsing attributes in process `syz.0.786'. [ 428.793095][ T9] usb 3-1: USB disconnect, device number 6 [ 428.822591][ T8685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.786'. [ 430.978479][ T5072] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 430.997366][ T5072] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 431.018967][ T5072] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 431.044674][ T5072] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 431.061643][ T5072] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 431.098891][ T5783] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 431.141308][ T5783] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 431.165771][ T5783] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 431.232912][ T5783] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 431.253942][ T5783] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 432.220327][ T8718] netlink: 44 bytes leftover after parsing attributes in process `syz.2.798'. [ 432.261657][ T8718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.798'. [ 432.971707][ T8709] chnl_net:caif_netlink_parms(): no params data found [ 433.368416][ T5072] Bluetooth: hci5: command tx timeout [ 435.013841][ T8709] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.058430][ T8709] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.067085][ T8709] bridge_slave_0: entered allmulticast mode [ 435.111351][ T8709] bridge_slave_0: entered promiscuous mode [ 435.344894][ T8709] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.371689][ T8709] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.394445][ T8709] bridge_slave_1: entered allmulticast mode [ 435.413790][ T8766] netlink: 44 bytes leftover after parsing attributes in process `syz.3.809'. [ 435.440017][ T8709] bridge_slave_1: entered promiscuous mode [ 435.450693][ T5072] Bluetooth: hci5: command tx timeout [ 435.462276][ T8766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.809'. [ 436.014157][ T8709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.278216][ T8770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.811'. [ 436.319140][ T8709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.502613][ T8709] team0: Port device team_slave_0 added [ 436.542850][ T8709] team0: Port device team_slave_1 added [ 436.803203][ T8709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.848710][ T8709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.984693][ T8709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.035615][ T8709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.059329][ T8709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.169314][ T8709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.527987][ T5072] Bluetooth: hci5: command tx timeout [ 437.586376][ T8709] hsr_slave_0: entered promiscuous mode [ 437.601893][ T8709] hsr_slave_1: entered promiscuous mode [ 437.625280][ T8709] debugfs: 'hsr0' already exists in 'hsr' [ 437.638967][ T8709] Cannot create hsr debugfs directory [ 438.507138][ T8804] netlink: 44 bytes leftover after parsing attributes in process `syz.2.823'. [ 438.593576][ T8804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.823'. [ 439.581535][ T8709] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 439.611728][ T5072] Bluetooth: hci5: command tx timeout [ 439.674145][ T8709] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 439.795960][ T8709] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 439.918075][ T8709] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 440.404154][ T8846] loop2: detected capacity change from 0 to 1024 [ 440.517032][ T8846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.914079][ T8709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.101041][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.144767][ T8709] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.255078][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.262638][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.413193][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.420830][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.521875][ T8857] netlink: 44 bytes leftover after parsing attributes in process `syz.4.838'. [ 441.541967][ T8857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.838'. [ 443.118135][ T8885] loop2: detected capacity change from 0 to 1024 [ 443.276396][ T8879] syzkaller0: entered promiscuous mode [ 443.301441][ T8885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.388087][ T8879] syzkaller0: entered allmulticast mode [ 443.749453][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.195426][ T8709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.271605][ T8899] netlink: 44 bytes leftover after parsing attributes in process `syz.2.850'. [ 444.339524][ T8899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.850'. [ 445.541255][ T8923] loop3: detected capacity change from 0 to 1024 [ 445.641003][ T8923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.735041][ T8921] syzkaller0: entered promiscuous mode [ 445.742168][ T8921] syzkaller0: entered allmulticast mode [ 446.196479][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.509205][ T8938] netlink: 44 bytes leftover after parsing attributes in process `syz.4.863'. [ 446.542830][ T8940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.863'. [ 446.758779][ T8709] veth0_vlan: entered promiscuous mode [ 446.844906][ T8709] veth1_vlan: entered promiscuous mode [ 447.162142][ T8709] veth0_macvtap: entered promiscuous mode [ 447.252467][ T8709] veth1_macvtap: entered promiscuous mode [ 447.450270][ T8709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.636008][ T8709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.793528][ T3479] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.818494][ T3479] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.845897][ T3479] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.865041][ T3479] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.922634][ T8958] loop3: detected capacity change from 0 to 1024 [ 448.040137][ T8958] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.492123][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.503465][ T8968] syzkaller0: entered promiscuous mode [ 448.521839][ T8968] syzkaller0: entered allmulticast mode [ 448.929308][ T8976] netlink: 40 bytes leftover after parsing attributes in process `syz.3.874'. [ 449.719751][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.726356][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.324709][ T9000] loop4: detected capacity change from 0 to 1024 [ 450.401825][ T9000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.598658][ T30] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 450.793734][ T30] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 450.838230][ T30] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.878920][ T30] usb 1-1: config 0 has no interface number 0 [ 450.910516][ T30] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 450.927516][ T5781] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.952644][ T30] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 451.015949][ T30] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 451.036168][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.056525][ T30] usb 1-1: Product: syz [ 451.066042][ T30] usb 1-1: Manufacturer: syz [ 451.078083][ T30] usb 1-1: SerialNumber: syz [ 451.106207][ T30] usb 1-1: config 0 descriptor?? [ 451.342871][ T8998] netlink: 36 bytes leftover after parsing attributes in process `syz.0.882'. [ 451.409582][ T30] usbtouchscreen 1-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 451.476061][ T30] usb 1-1: USB disconnect, device number 4 [ 451.689963][ T9019] netlink: 40 bytes leftover after parsing attributes in process `syz.3.888'. [ 452.252675][ T9022] syzkaller0: entered promiscuous mode [ 452.274951][ T9022] syzkaller0: entered allmulticast mode [ 453.388034][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.397196][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.633839][ T9054] loop4: detected capacity change from 0 to 1024 [ 453.660405][ T3479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.695484][ T3479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.726934][ T9054] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.239528][ T5781] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.290975][ T9066] netlink: 8 bytes leftover after parsing attributes in process `syz.5.789'. [ 454.295909][ T9067] netlink: 40 bytes leftover after parsing attributes in process `syz.2.900'. [ 454.323636][ T9066] netlink: 20 bytes leftover after parsing attributes in process `syz.5.789'. [ 455.118117][ T7103] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 455.354244][ T7103] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 455.403579][ T7103] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.463795][ T7103] usb 5-1: config 0 has no interface number 0 [ 455.508432][ T7103] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 455.547327][ T7103] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 455.683958][ T7103] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 455.732468][ T7103] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.774943][ T7103] usb 5-1: Product: syz [ 455.792499][ T7103] usb 5-1: Manufacturer: syz [ 455.802731][ T7103] usb 5-1: SerialNumber: syz [ 455.847577][ T7103] usb 5-1: config 0 descriptor?? [ 456.153628][ T9071] netlink: 36 bytes leftover after parsing attributes in process `syz.4.901'. [ 456.988965][ T7103] usbtouchscreen 5-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 457.263707][ T7103] usb 5-1: USB disconnect, device number 3 [ 458.095540][ T9118] netlink: 40 bytes leftover after parsing attributes in process `syz.3.912'. [ 458.144652][ T9119] loop0: detected capacity change from 0 to 1024 [ 458.420788][ T9119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.425124][ T9123] netlink: 8 bytes leftover after parsing attributes in process `syz.5.913'. [ 458.508506][ T9123] netlink: 12 bytes leftover after parsing attributes in process `syz.5.913'. [ 458.928838][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.625185][ T9173] netlink: 40 bytes leftover after parsing attributes in process `syz.3.926'. [ 461.910852][ T9176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.927'. [ 461.923861][ T7103] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 461.970461][ T9176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.927'. [ 462.153414][ T7103] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 462.238552][ T7103] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.308374][ T7103] usb 1-1: config 0 has no interface number 0 [ 462.358553][ T7103] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 462.425372][ T7103] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 462.608420][ T7103] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 462.648165][ T7103] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.656476][ T7103] usb 1-1: Product: syz [ 462.701543][ T9180] loop5: detected capacity change from 0 to 1024 [ 462.727626][ T7103] usb 1-1: Manufacturer: syz [ 462.732701][ T7103] usb 1-1: SerialNumber: syz [ 462.794756][ T7103] usb 1-1: config 0 descriptor?? [ 463.040193][ T9180] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.059617][ T9167] netlink: 36 bytes leftover after parsing attributes in process `syz.0.925'. [ 463.239244][ T7103] usbtouchscreen 1-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 463.341352][ T7103] usb 1-1: USB disconnect, device number 5 [ 463.566780][ T8709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.989161][ T9223] netlink: 40 bytes leftover after parsing attributes in process `syz.4.939'. [ 465.152775][ T9226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.940'. [ 465.194860][ T9226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.940'. [ 466.877333][ T9236] syzkaller0: entered promiscuous mode [ 466.942512][ T9236] syzkaller0: entered allmulticast mode [ 467.544558][ T9243] loop5: detected capacity change from 0 to 1024 [ 467.653519][ T9243] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.048383][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 468.175217][ T8709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.234644][ T9] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 468.253427][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.265344][ T9] usb 3-1: config 0 has no interface number 0 [ 468.273228][ T9] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 468.284711][ T9] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 468.320654][ T9] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 468.335193][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.388127][ T9] usb 3-1: Product: syz [ 468.392476][ T9] usb 3-1: Manufacturer: syz [ 468.415072][ T9] usb 3-1: SerialNumber: syz [ 468.433178][ T9] usb 3-1: config 0 descriptor?? [ 468.668922][ T9261] syzkaller0: entered promiscuous mode [ 468.674827][ T9261] syzkaller0: entered allmulticast mode [ 468.692464][ T9248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.946'. [ 468.722871][ T9] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 468.811953][ T9] usb 3-1: USB disconnect, device number 7 [ 469.300561][ T9274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.953'. [ 469.515470][ T9270] syzkaller0: entered promiscuous mode [ 469.535034][ T9276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.954'. [ 469.552123][ T9270] syzkaller0: entered allmulticast mode [ 472.238417][ T9295] loop5: detected capacity change from 0 to 1024 [ 472.314888][ T9295] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.609324][ T8709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.267204][ T9314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.967'. [ 473.389342][ T9318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.969'. [ 473.399111][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 473.413010][ T9310] syzkaller0: entered promiscuous mode [ 473.421387][ T9310] syzkaller0: entered allmulticast mode [ 473.584277][ T9] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 473.609585][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.640774][ T9] usb 4-1: config 0 has no interface number 0 [ 473.660093][ T9] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 473.741160][ T9] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 473.801649][ T9] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 473.839394][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.847640][ T9] usb 4-1: Product: syz [ 473.877120][ T9] usb 4-1: Manufacturer: syz [ 473.886976][ T9] usb 4-1: SerialNumber: syz [ 473.899596][ T9] usb 4-1: config 0 descriptor?? [ 473.940415][ T9316] syzkaller0: entered promiscuous mode [ 473.952667][ T9316] syzkaller0: entered allmulticast mode [ 474.121697][ T9308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.966'. [ 474.189347][ T9] usbtouchscreen 4-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 474.268859][ T9] usb 4-1: USB disconnect, device number 2 [ 476.222111][ T9345] loop0: detected capacity change from 0 to 1024 [ 476.376726][ T9345] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.061241][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.180951][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.981'. [ 478.211898][ T9366] syzkaller0: entered promiscuous mode [ 478.249051][ T9366] syzkaller0: entered allmulticast mode [ 478.288327][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 478.519960][ T9] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 478.551367][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.580172][ T9] usb 6-1: config 0 has no interface number 0 [ 478.611271][ T9] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 478.651101][ T9] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 478.736803][ T9] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 478.768035][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.810257][ T9] usb 6-1: Product: syz [ 478.814622][ T9] usb 6-1: Manufacturer: syz [ 478.840022][ T9] usb 6-1: SerialNumber: syz [ 478.866998][ T9] usb 6-1: config 0 descriptor?? [ 479.124453][ T9373] netlink: 4 bytes leftover after parsing attributes in process `syz.5.986'. [ 479.189367][ T9] usbtouchscreen 6-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 479.270082][ T9] usb 6-1: USB disconnect, device number 2 [ 480.438765][ T9407] loop4: detected capacity change from 0 to 1024 [ 481.445735][ T9421] netlink: 40 bytes leftover after parsing attributes in process `syz.5.993'. [ 481.538843][ T9407] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.922611][ T9423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.995'. [ 481.942946][ T5781] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.523468][ T9438] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1000'. [ 483.020166][ T9450] syzkaller0: entered promiscuous mode [ 483.103587][ T9450] syzkaller0: entered allmulticast mode [ 483.918219][ T7103] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 484.086077][ T7103] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 484.119817][ T7103] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 484.172090][ T7103] usb 1-1: config 0 has no interface number 0 [ 485.144829][ T7103] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 485.155898][ T7103] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 485.178447][ T7103] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 485.187691][ T7103] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.197029][ T7103] usb 1-1: Product: syz [ 485.355158][ T9478] loop4: detected capacity change from 0 to 1024 [ 485.374992][ T9480] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1009'. [ 485.490319][ T9478] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 485.935705][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1010'. [ 486.154537][ T7103] usb 1-1: Manufacturer: syz [ 486.161641][ T7103] usb 1-1: SerialNumber: syz [ 486.172951][ T7103] usb 1-1: config 0 descriptor?? [ 486.383549][ T5781] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.650202][ T7103] usbtouchscreen 1-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 486.705600][ T7103] usb 1-1: USB disconnect, device number 6 [ 486.950160][ T9498] overlayfs: missing 'lowerdir' [ 488.349881][ T9507] syzkaller0: entered promiscuous mode [ 488.355541][ T9507] syzkaller0: entered allmulticast mode [ 488.552576][ T9529] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1021'. [ 488.766097][ T9519] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.775846][ T9519] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.804081][ T9532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1023'. [ 488.903016][ T9533] loop3: detected capacity change from 0 to 1024 [ 488.966772][ T9533] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.255311][ T9519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.290332][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.297353][ T9519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.406432][ T13] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.529810][ T13] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.550493][ T13] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.599177][ T13] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.929940][ T9561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1031'. [ 491.065125][ T7103] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 491.263296][ T7103] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 491.288142][ T7103] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.354767][ T7103] usb 6-1: config 0 has no interface number 0 [ 491.395862][ T7103] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 491.485134][ T7103] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 491.595494][ T7103] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 491.633539][ T7103] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.674497][ T7103] usb 6-1: Product: syz [ 491.724075][ T7103] usb 6-1: Manufacturer: syz [ 491.744834][ T7103] usb 6-1: SerialNumber: syz [ 491.810597][ T7103] usb 6-1: config 0 descriptor?? [ 492.041592][ T7103] usbtouchscreen 6-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 492.092128][ T7103] usb 6-1: USB disconnect, device number 3 [ 492.124528][ T9581] loop2: detected capacity change from 0 to 1024 [ 492.239320][ T9581] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.437118][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.569033][ T9596] syzkaller0: entered promiscuous mode [ 495.585930][ T9599] netlink: 'syz.3.1040': attribute type 33 has an invalid length. [ 495.597655][ T9600] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1041'. [ 495.608451][ T9596] syzkaller0: entered allmulticast mode [ 495.883595][ T9604] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 496.506968][ T9610] overlayfs: missing 'lowerdir' [ 496.856670][ T9613] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1046'. [ 499.510793][ T9653] loop2: detected capacity change from 0 to 1024 [ 499.784825][ T9653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.828096][ T7103] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 500.049789][ T7103] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 500.086067][ T7103] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 500.145580][ T7103] usb 1-1: config 0 has no interface number 0 [ 500.176265][ T7103] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 500.218378][ T7103] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 500.304552][ T7103] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 500.345646][ T7103] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.369499][ T9663] syzkaller0: entered promiscuous mode [ 500.392541][ T7103] usb 1-1: Product: syz [ 500.410022][ T9663] syzkaller0: entered allmulticast mode [ 500.416054][ T7103] usb 1-1: Manufacturer: syz [ 500.444156][ T7103] usb 1-1: SerialNumber: syz [ 500.505591][ T7103] usb 1-1: config 0 descriptor?? [ 500.594067][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.539034][ T49] bridge_slave_1: left allmulticast mode [ 501.544862][ T49] bridge_slave_1: left promiscuous mode [ 501.589663][ T7103] usbtouchscreen 1-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 501.649194][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.725076][ T49] bridge_slave_0: left allmulticast mode [ 501.732120][ T7103] usb 1-1: USB disconnect, device number 7 [ 501.753727][ T49] bridge_slave_0: left promiscuous mode [ 501.792523][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.780903][ T9674] overlayfs: missing 'lowerdir' [ 504.649342][ T9688] overlayfs: missing 'lowerdir' [ 504.732485][ T9685] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1062'. [ 504.935077][ T49] bond1 (unregistering): (slave geneve2): Releasing active interface [ 505.333257][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 505.443250][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 505.584975][ T49] bond0 (unregistering): Released all slaves [ 505.707387][ T49] bond1 (unregistering): Released all slaves [ 506.978960][ T9718] loop0: detected capacity change from 0 to 1024 [ 507.088709][ T9718] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.336036][ T49] hsr_slave_0: left promiscuous mode [ 507.397912][ T49] hsr_slave_1: left promiscuous mode [ 507.440817][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.479977][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.551009][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.054428][ T9746] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1074'. [ 508.125860][ T9752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1074'. [ 508.742148][ T9762] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1076'. [ 509.222145][ T49] team0 (unregistering): Port device team_slave_1 removed [ 509.255716][ T49] team0 (unregistering): Port device team_slave_0 removed [ 509.626608][ T9726] syzkaller0: entered promiscuous mode [ 509.634383][ T9726] syzkaller0: entered allmulticast mode [ 510.803640][ T9794] loop5: detected capacity change from 0 to 1024 [ 510.973961][ T9794] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.155239][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.170385][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.308157][ T9802] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 511.384663][ T9805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1085'. [ 511.431354][ T9802] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1085'. [ 511.610554][ T8709] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.118611][ T7110] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 512.340638][ T7110] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 512.407938][ T7110] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.444520][ T7110] usb 3-1: config 0 has no interface number 0 [ 512.468741][ T7110] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 512.557234][ T7110] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 512.624332][ T9827] syzkaller0: entered promiscuous mode [ 512.634363][ T9827] syzkaller0: entered allmulticast mode [ 512.648551][ T7110] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 512.697901][ T7110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.748139][ T7110] usb 3-1: Product: syz [ 512.752491][ T7110] usb 3-1: Manufacturer: syz [ 512.757255][ T7110] usb 3-1: SerialNumber: syz [ 512.857409][ T7110] usb 3-1: config 0 descriptor?? [ 513.175691][ T7110] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 513.268123][ T7110] usb 3-1: USB disconnect, device number 8 [ 513.476713][ T9841] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1095'. [ 514.197594][ T9855] loop3: detected capacity change from 0 to 1024 [ 514.324406][ T9855] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.560951][ T9863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1101'. [ 514.593102][ T9863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.666634][ T9868] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1101'. [ 514.834578][ T9863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.897375][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.868075][ T9887] syzkaller0: entered promiscuous mode [ 515.873743][ T9887] syzkaller0: entered allmulticast mode [ 515.969341][ T9893] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1109'. [ 517.036655][ T9907] overlayfs: missing 'lowerdir' [ 519.098321][ T7110] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 521.871287][ T7110] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 521.900942][ T7110] usb 3-1: can't read configurations, error -71 [ 522.005059][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1118'. [ 522.068629][ T9931] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1118'. [ 522.180433][ T9927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.602173][ T9947] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1123'. [ 524.645882][ T9959] Driver unsupported XDP return value 0 on prog (id 80) dev N/A, expect packet loss! [ 524.726958][ T9963] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1129'. [ 526.021071][ T9982] lo speed is unknown, defaulting to 1000 [ 526.028216][ T9982] lo speed is unknown, defaulting to 1000 [ 526.040465][ T9982] lo speed is unknown, defaulting to 1000 [ 526.097512][ T9982] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 526.306072][ T9982] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 526.579414][ T9982] lo speed is unknown, defaulting to 1000 [ 526.600581][ T9982] lo speed is unknown, defaulting to 1000 [ 526.610594][ T9982] lo speed is unknown, defaulting to 1000 [ 526.630740][ T9982] lo speed is unknown, defaulting to 1000 [ 526.651043][ T9982] lo speed is unknown, defaulting to 1000 [ 527.158868][ T9989] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1136'. [ 527.201931][ T9987] syzkaller0: entered promiscuous mode [ 527.207589][ T9987] syzkaller0: entered allmulticast mode [ 529.693767][T10011] syzkaller0: entered promiscuous mode [ 529.763303][T10011] syzkaller0: entered allmulticast mode [ 530.281993][T10019] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1146'. [ 530.738504][T10027] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1149'. [ 531.271557][ T29] audit: type=1804 audit(1774237279.779:3): pid=10034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1152" name="/newroot/216/file0" dev="tmpfs" ino=1112 res=1 errno=0 [ 531.426850][T10037] syzkaller0: entered promiscuous mode [ 531.444549][T10037] syzkaller0: entered allmulticast mode [ 532.274838][T10057] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1159'. [ 532.532491][T10062] syzkaller0: entered promiscuous mode [ 532.577932][T10062] syzkaller0: entered allmulticast mode [ 532.781178][T10069] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1163'. [ 533.429049][T10078] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1165'. [ 533.578741][T10075] syzkaller0: entered promiscuous mode [ 533.584873][T10075] syzkaller0: entered allmulticast mode [ 534.760277][T10109] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1174'. [ 534.970031][T10112] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1176'. [ 535.101541][T10113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1175'. [ 535.688128][T10128] syzkaller0: entered promiscuous mode [ 535.693780][T10128] syzkaller0: entered allmulticast mode [ 536.325472][T10143] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1184'. [ 536.546092][T10139] syzkaller0: entered promiscuous mode [ 536.568124][T10139] syzkaller0: entered allmulticast mode [ 537.239560][T10160] overlayfs: missing 'lowerdir' [ 538.188651][T10164] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1188'. [ 538.498315][T10172] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1190'. [ 539.665650][T10187] syzkaller0: entered promiscuous mode [ 539.678420][T10187] syzkaller0: entered allmulticast mode [ 539.984582][T10201] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1198'. [ 540.505594][T10197] syzkaller0: entered promiscuous mode [ 540.511294][T10214] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1202'. [ 540.555670][T10197] syzkaller0: entered allmulticast mode [ 541.045176][T10223] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1204'. [ 542.196188][T10238] overlayfs: missing 'lowerdir' [ 543.096965][T10252] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1214'. [ 545.723490][T10275] syzkaller0: entered promiscuous mode [ 545.749685][T10275] syzkaller0: entered allmulticast mode [ 547.688549][T10319] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1226'. [ 548.645248][T10324] syzkaller0: entered promiscuous mode [ 548.651253][T10324] syzkaller0: entered allmulticast mode [ 549.333642][ T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 549.575860][ T9] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 549.601353][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 549.678058][ T9] usb 4-1: config 0 has no interface number 0 [ 549.721237][ T9] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 550.793471][ T9] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 550.815227][ T9] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 550.824821][ T9] usb 4-1: Product: syz [ 550.830292][ T9] usb 4-1: SerialNumber: syz [ 550.836846][T10356] syzkaller0: entered promiscuous mode [ 550.877416][T10356] syzkaller0: entered allmulticast mode [ 551.781694][ T9] usb 4-1: config 0 descriptor?? [ 551.808013][ T9] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 552.195610][ T795] usb 4-1: USB disconnect, device number 3 [ 553.496155][T10392] syzkaller0: entered promiscuous mode [ 553.512563][T10392] syzkaller0: entered allmulticast mode [ 554.897389][T10409] syzkaller0: entered promiscuous mode [ 554.954111][T10409] syzkaller0: entered allmulticast mode [ 555.748108][ T795] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 555.959001][ T795] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 555.988867][ T795] usb 6-1: config 0 has no interface number 0 [ 556.001908][ T795] usb 6-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 556.038352][ T795] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 556.071202][ T795] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 556.100784][ T795] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 556.146026][ T795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.239891][ T795] usb 6-1: config 0 descriptor?? [ 556.259904][T10435] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 556.374948][ T795] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 556.463910][T10448] syzkaller0: entered promiscuous mode [ 556.482220][T10448] syzkaller0: entered allmulticast mode [ 556.513952][ T795] usb 6-1: USB disconnect, device number 4 [ 560.077660][T10496] syzkaller0: entered promiscuous mode [ 560.173272][T10496] syzkaller0: entered allmulticast mode [ 561.211705][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 561.404026][ T9] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 561.424139][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.464300][ T9] usb 5-1: config 0 has no interface number 0 [ 561.504238][ T9] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 561.568846][ T9] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 561.697130][ T9] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 561.770393][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.828583][ T9] usb 5-1: Product: syz [ 561.832935][ T9] usb 5-1: Manufacturer: syz [ 561.918328][ T9] usb 5-1: SerialNumber: syz [ 562.055239][ T9] usb 5-1: config 0 descriptor?? [ 562.732183][T10533] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1282'. [ 562.794833][T10539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1282'. [ 563.101961][ T9] usbtouchscreen 5-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 564.094996][ T9] usb 5-1: USB disconnect, device number 4 [ 567.592628][T10601] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1296'. [ 567.660757][T10599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1296'. [ 568.327666][T10607] loop5: detected capacity change from 0 to 1764 [ 570.343787][T10608] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 573.407885][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.414488][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 574.248910][T10607] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 574.263397][T10607] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 574.273487][T10607] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 575.428037][ T795] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 575.657203][ T795] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 575.713265][ T795] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 575.794767][ T795] usb 3-1: config 0 has no interface number 0 [ 575.840664][ T795] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 575.903052][ T795] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 576.039631][ T795] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 576.085637][ T795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.131328][ T795] usb 3-1: Product: syz [ 576.135701][ T795] usb 3-1: Manufacturer: syz [ 576.200080][ T795] usb 3-1: SerialNumber: syz [ 576.256854][ T795] usb 3-1: config 0 descriptor?? [ 576.563887][ T795] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 576.626241][ T795] usb 3-1: USB disconnect, device number 11 [ 577.966226][T10672] loop0: detected capacity change from 0 to 1764 [ 578.216931][T10673] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 578.643667][T10670] syzkaller0: entered promiscuous mode [ 578.712612][T10670] syzkaller0: entered allmulticast mode [ 578.789236][T10672] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 578.799113][T10672] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 578.808901][T10672] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 578.890407][T10679] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1312'. [ 578.989523][T10682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1312'. [ 579.144249][T10684] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1313'. [ 581.508078][T10707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1318'. [ 581.658827][T10707] netlink: 'syz.3.1318': attribute type 1 has an invalid length. [ 581.666727][T10707] netlink: 'syz.3.1318': attribute type 2 has an invalid length. [ 583.808174][ T795] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 584.059323][ T795] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 584.108274][ T795] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.147096][ T795] usb 5-1: config 0 has no interface number 0 [ 584.188197][ T795] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 584.238036][ T795] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 584.297242][ T795] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 584.336676][ T795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.365158][ T795] usb 5-1: Product: syz [ 584.388033][ T795] usb 5-1: Manufacturer: syz [ 584.411512][ T795] usb 5-1: SerialNumber: syz [ 584.446315][ T795] usb 5-1: config 0 descriptor?? [ 584.872445][ T795] usbtouchscreen 5-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 584.969191][ T5072] Bluetooth: hci5: command 0x0406 tx timeout [ 585.020470][ T795] usb 5-1: USB disconnect, device number 5 [ 585.428814][T10749] lo speed is unknown, defaulting to 1000 [ 585.752490][T10754] syzkaller0: entered promiscuous mode [ 585.785984][T10754] syzkaller0: entered allmulticast mode [ 585.824827][T10759] netlink: 'syz.5.1328': attribute type 10 has an invalid length. [ 585.995208][T10759] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 586.515006][ T35] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.580649][ T6183] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.789811][ T6183] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.438808][ T6183] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.986432][T10796] loop3: detected capacity change from 0 to 1764 [ 589.846020][T10798] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 596.648507][ T7103] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 596.930160][ T7103] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 596.959993][ T7103] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 596.997911][ T7103] usb 3-1: config 0 has no interface number 0 [ 597.014985][ T7103] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 597.057946][ T7103] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 597.106035][ T7103] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 597.128188][ T7103] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.136374][ T7103] usb 3-1: Product: syz [ 597.171166][ T7103] usb 3-1: Manufacturer: syz [ 597.175930][ T7103] usb 3-1: SerialNumber: syz [ 597.220876][ T7103] usb 3-1: config 0 descriptor?? [ 597.432108][T10833] syzkaller0: entered promiscuous mode [ 597.462909][T10833] syzkaller0: entered allmulticast mode [ 597.529098][ T7103] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 597.591369][ T7103] usb 3-1: USB disconnect, device number 12 [ 599.228141][ T7110] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 600.268745][ T7110] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 600.277016][ T7110] usb 4-1: config 0 has no interface number 0 [ 600.291873][ T7110] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 600.301649][ T7110] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.410545][T10882] loop0: detected capacity change from 0 to 1764 [ 601.252652][ T7110] usb 4-1: Product: syz [ 601.257066][ T7110] usb 4-1: Manufacturer: syz [ 601.263938][ T7110] usb 4-1: SerialNumber: syz [ 602.341261][ T7110] usb 4-1: config 0 descriptor?? [ 603.032659][T10882] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 605.071951][ T7110] usb 4-1: can't set config #0, error -71 [ 605.156954][ T7110] usb 4-1: USB disconnect, device number 4 [ 605.363953][T10891] lo speed is unknown, defaulting to 1000 [ 606.624818][ T7110] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 606.918583][ T7110] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 606.968143][ T7110] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 607.017912][ T7110] usb 3-1: config 0 has no interface number 0 [ 607.055468][ T7110] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 607.132322][ T7110] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 607.225233][ T7110] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 607.268362][ T7110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.276554][ T7110] usb 3-1: Product: syz [ 607.328335][ T7110] usb 3-1: Manufacturer: syz [ 607.354120][ T7110] usb 3-1: SerialNumber: syz [ 607.415734][ T7110] usb 3-1: config 0 descriptor?? [ 607.785083][ T7110] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 607.936845][ T7110] usb 3-1: USB disconnect, device number 13 [ 612.159102][T10958] capability: warning: `syz.0.1372' uses deprecated v2 capabilities in a way that may be insecure [ 612.626472][T10965] lo speed is unknown, defaulting to 1000 [ 613.028081][ T7110] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 613.246857][ T7110] usb 1-1: Using ep0 maxpacket: 16 [ 613.318631][ T7110] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 613.351792][ T7110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.408093][ T7110] usb 1-1: Product: syz [ 613.416943][ T7110] usb 1-1: Manufacturer: syz [ 613.445625][ T7110] usb 1-1: SerialNumber: syz [ 613.529484][ T7110] usb 1-1: config 0 descriptor?? [ 613.565264][ T7110] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 613.845213][ T7110] ssu100 1-1:0.0: probe with driver ssu100 failed with error -71 [ 614.000317][ T7110] usb 1-1: USB disconnect, device number 8 [ 616.223594][T11007] syzkaller0: entered promiscuous mode [ 616.260105][T11007] syzkaller0: entered allmulticast mode [ 619.886567][T11028] lo speed is unknown, defaulting to 1000 [ 620.247979][ T7110] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 620.451699][ T7110] usb 4-1: Using ep0 maxpacket: 8 [ 620.490662][ T7110] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 620.553305][ T7110] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 620.594866][ T7110] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.613795][ T7110] usb 4-1: Product: syz [ 620.628291][ T7110] usb 4-1: Manufacturer: syz [ 620.637941][ T7110] usb 4-1: SerialNumber: syz [ 620.779635][ T7110] usb 4-1: config 0 descriptor?? [ 620.865146][ T7110] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 620.952536][ T7110] usb 4-1: setting power ON [ 620.957291][ T7110] dvb-usb: bulk message failed: -22 (2/0) [ 621.046610][ T7110] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 621.110929][ T7110] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 621.135894][ T7110] usb 4-1: media controller created [ 621.438820][ T7110] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 622.666359][ T7110] usb 4-1: selecting invalid altsetting 6 [ 623.657923][ T7110] usb 4-1: digital interface selection failed (-22) [ 624.399324][ T7110] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 624.413830][ T7110] usb 4-1: setting power OFF [ 624.419004][ T7110] dvb-usb: bulk message failed: -22 (2/0) [ 624.424860][ T7110] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 624.434912][ T7110] (NULL device *): no alternate interface [ 624.481333][T11076] syzkaller0: entered promiscuous mode [ 624.588660][T11076] syzkaller0: entered allmulticast mode [ 625.138676][T11089] Device name cannot be null; rc = [-22] [ 626.498371][ T7110] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 626.693526][ T7110] usb 4-1: USB disconnect, device number 5 [ 629.631999][T11094] lo speed is unknown, defaulting to 1000 [ 630.795562][T11109] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 630.804733][T11109] ===================================================== [ 630.812451][T11109] BUG: KMSAN: uninit-value in dvbdmx_release_ts_feed+0x198/0x290 [ 630.820440][T11109] dvbdmx_release_ts_feed+0x198/0x290 [ 630.825967][T11109] dvb_dmxdev_filter_start+0x1187/0x1af0 [ 630.831999][T11109] dvb_dmxdev_pes_filter_set+0x810/0x860 [ 630.837923][T11109] dvb_demux_do_ioctl+0x9a3/0xc80 [ 630.843140][T11109] dvb_usercopy+0x263/0x500 [ 630.847935][T11109] dvb_demux_ioctl+0x46/0x70 [ 630.854430][T11109] __se_sys_ioctl+0x23c/0x400 [ 630.860038][T11109] __x64_sys_ioctl+0x97/0xe0 [ 630.864791][T11109] x64_sys_call+0x1975/0x3ea0 [ 630.869872][T11109] do_syscall_64+0x134/0xf80 [ 630.874715][T11109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.880843][T11109] [ 630.883226][T11109] Uninit was created at: [ 630.887976][T11109] __alloc_frozen_pages_noprof+0x6f7/0x1020 [ 630.894036][T11109] alloc_pages_mpol+0x328/0x860 [ 630.899237][T11109] alloc_pages_noprof+0x101/0x280 [ 630.904427][T11109] __vmalloc_node_range_noprof+0xa97/0x2d80 [ 630.910602][T11109] __vmalloc_noprof+0x128/0x1f0 [ 630.915599][T11109] vmalloc_array_noprof+0x48/0x80 [ 630.920974][T11109] dvb_dmx_init+0x121/0x930 [ 630.925617][T11109] vidtv_bridge_probe+0x1b1f/0x2690 [ 630.931244][T11109] platform_probe+0x213/0x370 [ 630.936193][T11109] really_probe+0x4d5/0xe40 [ 630.940925][T11109] __driver_probe_device+0x25e/0x370 [ 630.946433][T11109] driver_probe_device+0x70/0x8f0 [ 630.951641][T11109] __driver_attach+0x541/0xaa0 [ 630.958398][T11109] bus_for_each_dev+0x33b/0x580 [ 630.963422][T11109] driver_attach+0x51/0x70 [ 630.968676][T11109] bus_add_driver+0x54f/0xdb0 [ 630.973503][T11109] driver_register+0x42e/0x6a0 [ 630.978459][T11109] __platform_driver_register+0x65/0x80 [ 630.984164][T11109] vidtv_bridge_init+0x73/0x100 [ 630.989629][T11109] do_one_initcall+0x237/0xbb0 [ 630.994550][T11109] do_initcall_level+0x157/0x350 [ 630.999721][T11109] do_initcalls+0x176/0x310 [ 631.004337][T11109] do_basic_setup+0x1d/0x30 [ 631.009036][T11109] kernel_init_freeable+0x213/0x460 [ 631.014361][T11109] kernel_init+0x2f/0x5e0 [ 631.019081][T11109] ret_from_fork+0x20f/0x910 [ 631.023874][T11109] ret_from_fork_asm+0x1a/0x30 [ 631.028888][T11109] [ 631.031314][T11109] CPU: 0 UID: 0 PID: 11109 Comm: syz.4.1407 Not tainted syzkaller #0 PREEMPT(full) [ 631.040901][T11109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 631.051183][T11109] ===================================================== [ 631.059917][T11109] Disabling lock debugging due to kernel taint [ 631.107930][T11109] Kernel panic - not syncing: kmsan.panic set ... [ 631.114484][T11109] CPU: 0 UID: 0 PID: 11109 Comm: syz.4.1407 Tainted: G B syzkaller #0 PREEMPT(full) [ 631.125584][T11109] Tainted: [B]=BAD_PAGE [ 631.129806][T11109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 631.139962][T11109] Call Trace: [ 631.143319][T11109] [ 631.146323][T11109] __dump_stack+0x26/0x30 [ 631.150812][T11109] dump_stack_lvl+0x50/0x1c0 [ 631.155549][T11109] ? dump_stack+0x12/0x25 [ 631.160030][T11109] dump_stack+0x1e/0x25 [ 631.164328][T11109] vpanic+0x7b4/0x1430 [ 631.168577][T11109] panic+0x15d/0x160 [ 631.172676][T11109] kmsan_report+0x31a/0x320 [ 631.177365][T11109] ? __msan_warning+0x1b/0x30 [ 631.182199][T11109] ? dvbdmx_release_ts_feed+0x198/0x290 [ 631.187907][T11109] ? dvb_dmxdev_filter_start+0x1187/0x1af0 [ 631.193862][T11109] ? dvb_dmxdev_pes_filter_set+0x810/0x860 [ 631.199814][T11109] ? dvb_demux_do_ioctl+0x9a3/0xc80 [ 631.205149][T11109] ? dvb_usercopy+0x263/0x500 [ 631.210005][T11109] ? dvb_demux_ioctl+0x46/0x70 [ 631.214899][T11109] ? __se_sys_ioctl+0x23c/0x400 [ 631.219912][T11109] ? __x64_sys_ioctl+0x97/0xe0 [ 631.224836][T11109] ? x64_sys_call+0x1975/0x3ea0 [ 631.229847][T11109] ? do_syscall_64+0x134/0xf80 [ 631.234765][T11109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.240981][T11109] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 631.247498][T11109] ? kmsan_get_metadata+0xf1/0x160 [ 631.252789][T11109] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 631.259299][T11109] ? kmsan_get_metadata+0xf1/0x160 [ 631.264592][T11109] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 631.270598][T11109] ? preempt_schedule_common+0x5b/0x80 [ 631.276202][T11109] ? preempt_schedule+0x30/0x40 [ 631.281183][T11109] ? preempt_schedule_thunk+0x16/0x30 [ 631.286709][T11109] ? _raw_spin_unlock_irq+0x47/0x50 [ 631.292116][T11109] ? kmsan_get_metadata+0x146/0x160 [ 631.297523][T11109] __msan_warning+0x1b/0x30 [ 631.302194][T11109] dvbdmx_release_ts_feed+0x198/0x290 [ 631.307747][T11109] dvb_dmxdev_filter_start+0x1187/0x1af0 [ 631.313552][T11109] ? __pfx_dvbdmx_release_ts_feed+0x10/0x10 [ 631.319622][T11109] dvb_dmxdev_pes_filter_set+0x810/0x860 [ 631.325412][T11109] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 631.331675][T11109] dvb_demux_do_ioctl+0x9a3/0xc80 [ 631.336849][T11109] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 631.342536][T11109] dvb_usercopy+0x263/0x500 [ 631.347228][T11109] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 631.352950][T11109] ? kmsan_get_metadata+0xf1/0x160 [ 631.358260][T11109] dvb_demux_ioctl+0x46/0x70 [ 631.362982][T11109] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 631.368400][T11109] __se_sys_ioctl+0x23c/0x400 [ 631.373276][T11109] __x64_sys_ioctl+0x97/0xe0 [ 631.378042][T11109] x64_sys_call+0x1975/0x3ea0 [ 631.382896][T11109] do_syscall_64+0x134/0xf80 [ 631.387724][T11109] ? clear_bhb_loop+0x50/0xa0 [ 631.392549][T11109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.398595][T11109] RIP: 0033:0x7fcbeb99c799 [ 631.403116][T11109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.422869][T11109] RSP: 002b:00007fcbec8d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 631.431438][T11109] RAX: ffffffffffffffda RBX: 00007fcbebc16180 RCX: 00007fcbeb99c799 [ 631.439532][T11109] RDX: 0000200000000000 RSI: 0000000040146f2c RDI: 0000000000000006 [ 631.447618][T11109] RBP: 00007fcbeba32c99 R08: 0000000000000000 R09: 0000000000000000 [ 631.455693][T11109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 631.463761][T11109] R13: 00007fcbebc16218 R14: 00007fcbebc16180 R15: 00007fff0ba6cf28 [ 631.471888][T11109] [ 631.475268][T11109] Kernel Offset: disabled [ 631.479648][T11109] Rebooting in 86400 seconds..