last executing test programs: 12.678959876s ago: executing program 4 (id=3500): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010003704000080000000000000000000", @ANYRES32=r2, @ANYBLOB="c324050000000000240012800b00010067656e65766500001400028005000c0001"], 0x44}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @broadcast}}}], 0x20}, 0x200000e0) 11.358862229s ago: executing program 4 (id=3505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x8, 0x80000001, 0x7}, 0x42}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc8c0}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff8407c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x20040000) 10.837622932s ago: executing program 3 (id=3506): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) lseek(0xffffffffffffffff, 0x9, 0x1) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x80002, 0x0, 0x4}}, 0x2e) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x1, 0x0) write(r5, &(0x7f0000000800)='0', 0x1) 10.609994177s ago: executing program 4 (id=3509): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) socket(0xa, 0x5, 0x0) syz_open_dev$usbmon(&(0x7f0000000100), 0x5, 0x80000) socket(0x10, 0x80002, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 9.358393828s ago: executing program 3 (id=3510): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x800, 0x0) syz_usb_connect$uac3(0x0, 0x97, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x644, 0x8047, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0x5, 0x20, 0xf, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa, 0x800}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x0, 0x7, 0x4, 0x3, 0x0, 0x6, 0x9, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xd, 0x9, 0x0, {0xa, 0x25, 0x25, 0x2, 0x7f, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x4, 0x0, 0x8, {0xa, 0x25, 0x25, 0x2, 0x5, 0x56f}}}}}}}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x6, &(0x7f0000000340)={0x0, 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x0, 0x0, 0x10002, 0xffffffffffffffff, 0x7fffffffffffffff, 0x7, 0x7}, 0x0) pipe2$watch_queue(0x0, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0x98b3}, {0x6, 0x8, 0xfd, 0x7}]}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd0100000000001400000060000000001406"], 0xfdef) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) socket$nl_audit(0x10, 0x3, 0x9) syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) 9.28345994s ago: executing program 1 (id=3513): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000005c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x2000000, &(0x7f0000000c80)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES32], 0x0, 0x315, &(0x7f0000001f80)="$eJzs3c2LI0UYx/FfJ5m8revkICKiUKwgimwzE/DmYQfZBTGgzE4EVxB6nR4N6UmGdBjIIiYHwatnD3vwKIIXb15EvO7Fv0Bdb3vZm3sItnT6ZfPSNBmWzO7q93OYVLqeJ1WpqplhatLd9976+rh7VJVkSeVAkeKkoYKK8bOJXv/19h8vX//lmei5Mdf2DnabxhQkffT595d+Hl744Mdnf6roTuPje/ebf9156UD65+AzFUzHN70gMI652e8PrTD5sON3bWPe91zHd02n57uD4ax+PHRueq458vonJyPj9A4v1k8Gru8bpzcyXXdk1DfDwcg4nzqdnrFt21ysC5IaaamwUmflJba/exAEuh8EQVCZKAiCjOhJUtiKHyuP1lk8SZbmPzd2ZXEUN9kznIcHQWnt+cd/T/T9/+c3681/MD6nbuGcXP/wxrt7rdbVfWOq0vFXp+3TdvQY1f9+QR15cnV7/40bU4VrJCYr/HrtndbVHTPT0KvH4zh/fNqOfjnsHc3y7yZJc/lK8nejfLOYv6X6w3xXTW3rOWXmN40x9TBfhbn8sl57ZS7f1rZ++0R9eToMV/Jc/he7xrz9Xmup/dosDgAAAAAAAACAp5FtUg/37630X701267MPvGR1tfCw2FcFJDur+9oW9Ps/fmdzP39kl4sPcY3DgAAAADA/4g/utV1PM8dbKZQ/LaW08SWpLAgfXkp7EzuCz4v6Urc64yYkqS5I2VJq69TzG9ioVB7M2rrh/24Y9rkQCWF6hl6mFFITtboOtNwQGZVNWUFF860AC6XF4c3LlQHVtZcbKigdYJVPfPCtkr+6FYl8w2ulT5NjryQGRNYeenJORTeVnRE6Qzmt34l3qN7xFGtLg/U5btxf3J+aPydbvEBAAAAeIrM/eEEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAek/T8fyu+0/86Fw9Lrtu/WKX4FvGrl2Rbvk881/0HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8AT6NwAA///lWas8") openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x585000, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x1, 0xc9, "4b6f41e65cac7d7d"}}}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 9.124637204s ago: executing program 2 (id=3514): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) syz_usb_connect(0x6, 0x36, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$unix(0x1, 0x2, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r9 = syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r10, r11, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x19, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r9, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000600)={0x0, @win={{0xbba, 0xf, 0x7, 0x4}, 0x0, 0x3ff, &(0x7f0000000200)={{0x6, 0x4, 0x8001, 0x7a}, &(0x7f00000001c0)={{0x0, 0x730, 0x8, 0xfe}, &(0x7f0000000180)={{0x7, 0x1ad0, 0x2aec, 0x8}}}}, 0xdd, &(0x7f0000000240), 0x6}}) sendmsg$nl_xfrm(r12, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 9.026017997s ago: executing program 4 (id=3515): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r1, 0x0, 0x0, 0x4d0d) r5 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x118}}, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 8.128046559s ago: executing program 1 (id=3517): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 7.886863624s ago: executing program 1 (id=3518): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xf, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4004890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='>', 0x1}], 0x1}, 0x0) 7.789970817s ago: executing program 0 (id=3519): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = socket(0x2b, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) eventfd(0x8) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0xf, 0x35, 0x17, 0x40008, 0x9, 0x20000fb, 0x4, 0x11, 0xffffffffffffffff}}) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB], 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 7.376275917s ago: executing program 1 (id=3520): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$sndpcmp(0x0, 0xfffffffffffffff1, 0x402000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0xffffffffffffffae, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x3ef7, 0xc, 0x2, 0x186ef}, 0x30, 0x1) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000580)={0x0, 0xbd, 0x8, 0x3432523d, 0x3, [0x2], [0x80fffe, 0x2], [], [0x400000000000000, 0x4, 0xfffffffffffffffc, 0x1]}) landlock_restrict_self(r2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) close(r6) syz_clone3(&(0x7f00000003c0)={0x122125000, &(0x7f00000000c0), 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/ipc\x00') syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="0d80c2000000bbbbbbbbbbbb08004c00003c000000000873907800000000ffffffff441c0ed3ac1414aa000000087f00000100000005ac1414aa0000000800000000000c9078010000001a93c430ca991763ed8357ac35e8e13012e36e904c5ae0e29c9e0981ac8527f84a5d443d80b2d0dca365bb4e457973c34cec6566d84fdc3840272db241d54f120000ed80025130c0d9681ebd030841d6318785d2ee2d03dea0793329ee71fd54e8b62475b46f7a11c00851dd54fb05b5713a3a6d00cea3020000003eb9005289c5faadc8dc6a68ab8647f23002c2c4bcad0f583be075543109"], 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) ioctl$NS_GET_PARENT(r7, 0xb702, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24}, 0x804) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0xffffffff}, 0x10}, 0x94) 5.64561076s ago: executing program 2 (id=3521): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = socket(0x2b, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) eventfd(0x8) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0xf, 0x35, 0x17, 0x40008, 0x9, 0x20000fb, 0x4, 0x11, 0xffffffffffffffff}}) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010e00000000000000000700000008000a40000000000900020073797a31000000000900010073797a"], 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 5.384335586s ago: executing program 4 (id=3522): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x4d0d) r5 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 5.113086653s ago: executing program 0 (id=3523): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0x9}, 0x0) mmap(&(0x7f00005e9000/0x2000)=nil, 0x2000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x6a, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) set_mempolicy(0x6, 0x0, 0xe0) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x3, &(0x7f0000000300)={0x3b, 0x8, 0x401}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="bf"}) 4.224167515s ago: executing program 3 (id=3524): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x5fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000300)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}], 0x1}, 0x5) 3.837297134s ago: executing program 0 (id=3525): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x2, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1aa79}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, 0x0, 0x4005) 3.554646781s ago: executing program 3 (id=3526): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000002010500"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001000000000008"], 0x98}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 3.074529504s ago: executing program 3 (id=3527): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x20001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10001000, 0x7ff, 0xffffffff, 0x3d, 0xe, 0x0, 0xffe00002}, 0x1c) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, 0x0, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0xd) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) dup(r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x140, 0x2, 0x3, 0x0, 0x1, 0x2, 0x7ffd, 0x6, 0x1007, 0xf, 0x4, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x101, 0x401, 0x9, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x10001fc, 0x0, 0x4]}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) 2.917920237s ago: executing program 0 (id=3528): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={0x0, 0x80000001}, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_open_dev$sndpcmp(&(0x7f0000001740), 0x0, 0x0) 2.903905108s ago: executing program 2 (id=3529): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) socket(0xa, 0x5, 0x0) syz_open_dev$usbmon(&(0x7f0000000100), 0x5, 0x80000) socket(0x10, 0x80002, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 2.890553938s ago: executing program 1 (id=3530): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xf, 0xfff2}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4004890) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='>', 0x1}], 0x1}, 0x0) 1.015408805s ago: executing program 0 (id=3531): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x2, 0x12) 925.954397ms ago: executing program 2 (id=3532): mkdir(&(0x7f0000000000)='./my_config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./my_config/usb_gadget/g1/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='0', 0x1) r1 = openat(0xffffff9c, &(0x7f0000000800)='./my_config/usb_gadget/g1/functions/uac2.usb0/p_volume_present\x00', 0x1, 0x0) write(r1, &(0x7f0000000900)='0', 0x1) openat(0xffffff9c, &(0x7f0000000a00)='./my_config/usb_gadget/g1/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00)="05", 0xfffffffffffffdbf) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRESHEX=r5, @ANYBLOB="323b86a2b9fcf7b4f6c1b35e4f20e84c3caf9802d2ce42e3e6130e618437ac92d33cdcf4c3000b88fe3fefbc5d31b7815ea9a8a793e0816d4cb7fe41a71943b3786f6dba76fe1ad880ea4b071c285cb341fe575f02245b4205ccd446b1e865ae3d886cc292b6dddb97f43fd2e0f37cee1dca07b52cf1ef8f96649f46f0e0158b32c9b764a5043bfa7e04909523b7186049aa78dda55b714ea55617d9ce68beec3fda226b0e3e0467954c5dd669f800c64e2634e19e05324c832b7b77d5ad27ca47c3a1b35ca346274dcc77b7db62a8898ac0978c0f1ec0bdcdbf622bf79ec5116ac9275d3f59e0", @ANYRESOCT=0x0], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat(0xffffff9c, &(0x7f0000001000)='./my_config/usb_gadget/g1/UDC\x00', 0x1, 0x140) write(r6, &(0x7f0000001100)='dummy_udc.0\n', 0xc) 875.783598ms ago: executing program 3 (id=3533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040080}, 0x2000c084) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000000)=@ethtool_eee={0x45, 0x7, 0x80000008, 0xa07b, 0x7, 0x7b24, 0x80000001, 0x0, [0x7, 0x4]}}) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000030428bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09000000010000006d05000005"], 0x50) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c80)={0x0}, 0x1, 0x0, 0x0, 0x2000c0c5}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x2000000, 0x7, 0x0, &(0x7f0000000600)="c9f7b986000000", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0xb4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r1}, 0x38) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYBLOB="0318ebd0de60196b2927efbe1a97fbe128cd900d9d109bfa5ea67de112787f556eeb14fc918dd8b04be0a7"], 0xa) 760.19203ms ago: executing program 0 (id=3534): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, &(0x7f0000000100)=0x7, 0x4) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4c0c8) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/rcu_expedited', 0x10000, 0x10) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x20600, 0x0) r6 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000009b80)={0x40000012}) epoll_pwait(r6, &(0x7f0000000040)=[{}], 0x1, 0x2, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) 609.914794ms ago: executing program 1 (id=3535): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x800, 0x0) syz_usb_connect$uac3(0x0, 0x97, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x644, 0x8047, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0x5, 0x20, 0xf, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa, 0x800}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x0, 0x7, 0x4, 0x3, 0x0, 0x6, 0x9, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xd, 0x9, 0x0, {0xa, 0x25, 0x25, 0x2, 0x7f, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x4, 0x0, 0x8, {0xa, 0x25, 0x25, 0x2, 0x5, 0x56f}}}}}}}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x6, &(0x7f0000000340)={0x0, 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x0, 0x0, 0x10002, 0xffffffffffffffff, 0x7fffffffffffffff, 0x7, 0x7}, 0x0) pipe2$watch_queue(0x0, 0x80) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0x98b3}, {0x6, 0x8, 0xfd, 0x7}]}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd0100000000001400000060000000001406"], 0xfdef) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x6044}, 0x24004050) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) preadv(r6, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) 443.206789ms ago: executing program 4 (id=3536): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = socket(0x2b, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) eventfd(0x8) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0xf, 0x35, 0x17, 0x40008, 0x9, 0x20000fb, 0x4, 0x11, 0xffffffffffffffff}}) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB], 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 285.146693ms ago: executing program 2 (id=3537): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=@delchain={0x138, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xfc, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x7}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xd8, 0x1, [@m_tunnel_key={0x98, 0x5, 0x0, 0x0, {{0xf}, {0x58, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}]}, {0x11, 0x6, "67a638128ad3f52f2e793588c6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0x3c, 0xc05, 0x0, 0x0, {{0xd}, {0x4}, {0x9, 0x6, "0ef6a460a5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x81}, 0x20002080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {0x0}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 0s ago: executing program 2 (id=3538): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x884) kernel console output (not intermixed with test programs): NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 727.609239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 727.619057][T14306] device veth1_macvtap entered promiscuous mode [ 727.636716][T14650] device syzkaller0 entered promiscuous mode [ 727.753114][T14306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 727.768727][T14306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.779020][T14306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 727.789776][T14306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.843880][T14306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 727.873444][T14306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.917547][T14306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 727.963904][T14306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.016915][T14306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 728.030725][T14657] netlink: 'syz.4.3010': attribute type 1 has an invalid length. [ 728.057270][T14657] 8021q: adding VLAN 0 to HW filter on device bond4 [ 728.074157][T14656] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 728.167862][T14662] device bond4 entered promiscuous mode [ 728.173820][T14662] device veth0_to_bond entered promiscuous mode [ 728.278672][T14663] device macvlan2 entered promiscuous mode [ 728.310269][T14663] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 728.444406][T12500] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 728.464330][T12500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 728.511203][T14306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 728.567746][T14306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.597671][T14306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 728.647599][T14306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.677601][T14306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 728.708041][T14306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.732388][T14306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 728.774020][T14306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.816429][T14306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 728.870503][ T9898] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 728.888490][ T9898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 728.949274][T14306] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.013292][T14306] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.043910][T14306] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.087164][T14306] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.250856][T14688] device syzkaller0 entered promiscuous mode [ 732.405147][T14710] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 732.533918][T12500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.551756][T12500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.648894][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 732.698968][T12500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.706876][T12500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.738343][T14740] device syzkaller0 entered promiscuous mode [ 732.865615][T12500] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 734.126601][T14774] loop4: detected capacity change from 0 to 16 [ 734.206995][T14774] erofs: (device loop4): mounted with root inode @ nid 36. [ 734.275046][T14774] erofs: (device loop4): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 734.358259][T14774] erofs: (device loop4): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 734.416183][T14775] erofs: (device loop4): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 734.454101][T13981] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 734.468670][T13981] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 734.479174][T13981] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 734.487162][T13981] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 734.494991][T13981] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 734.502551][T13981] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 734.784854][T14778] chnl_net:caif_netlink_parms(): no params data found [ 734.859848][ T4363] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 734.886746][T14786] device syzkaller0 entered promiscuous mode [ 735.065110][ T4363] usb 1-1: Using ep0 maxpacket: 8 [ 735.075299][ T4363] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 735.085289][ T4363] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.095466][ T4363] usb 1-1: Product: syz [ 735.100527][ T4363] usb 1-1: Manufacturer: syz [ 735.105275][ T4363] usb 1-1: SerialNumber: syz [ 735.123107][ T4363] usb 1-1: config 0 descriptor?? [ 735.142564][ T4363] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 735.159468][ T4363] pctv452e: pctv452e_power_ctrl: 1 [ 735.159468][ T4363] [ 735.166958][ T4363] usb 1-1: selecting invalid altsetting 3 [ 735.173419][ T4363] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 735.173419][ T4363] [ 735.184583][ T4363] dvb-usb: bulk message failed: -22 (5/0) [ 735.194560][ T4363] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 735.207009][ T4363] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 735.216004][ T4363] usb 1-1: media controller created [ 735.221666][ T4363] dvb-usb: bulk message failed: -22 (8/0) [ 735.227965][ T4363] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 735.236029][ T4363] dvb-usb: MAC address reading failed. [ 735.280770][ T4363] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 735.331291][T14780] dvb-usb: bulk message failed: -22 (7/0) [ 735.337112][T14780] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 735.486728][ T4363] DVB: Unable to find symbol stb0899_attach() [ 735.500812][ T4363] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 735.647836][ T4363] rc_core: IR keymap rc-tt-1500 not found [ 735.653907][ T4363] Registered IR keymap rc-empty [ 735.685134][ T4363] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 735.703815][ T4363] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input88 [ 735.742378][ T4363] dvb-usb: schedule remote query interval to 100 msecs. [ 735.754809][ T4363] pctv452e: pctv452e_power_ctrl: 0 [ 735.754809][ T4363] [ 735.763098][ T4363] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 735.775077][ T4363] usb 1-1: USB disconnect, device number 61 [ 735.897845][ T4363] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 736.548271][ T4293] Bluetooth: hci2: command 0x0409 tx timeout [ 738.341095][T14791] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 738.417334][T14778] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.452748][T14778] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.465034][T14778] device bridge_slave_0 entered promiscuous mode [ 738.475799][T14778] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.483316][T14778] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.492836][T14778] device bridge_slave_1 entered promiscuous mode [ 738.528507][T14778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.589415][T14778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.627899][ T4293] Bluetooth: hci2: command 0x041b tx timeout [ 738.681069][T14778] team0: Port device team_slave_0 added [ 738.717338][T14778] team0: Port device team_slave_1 added [ 738.788763][T14778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.807605][T14778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.883156][T14778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.925172][T14778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.956962][T14778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 739.030468][T14778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 739.167077][T14778] device hsr_slave_0 entered promiscuous mode [ 739.184776][T14778] device hsr_slave_1 entered promiscuous mode [ 739.198056][T14778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 739.208463][T14778] Cannot create hsr debugfs directory [ 739.613724][T14778] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.658563][ T4319] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 739.757600][T14778] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.867579][ T4319] usb 1-1: Using ep0 maxpacket: 8 [ 739.881145][ T4319] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 739.915624][T14778] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.926877][ T4319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.951168][ T4319] usb 1-1: Product: syz [ 739.955455][ T4319] usb 1-1: Manufacturer: syz [ 740.005422][ T4319] usb 1-1: SerialNumber: syz [ 740.032226][ T4319] usb 1-1: config 0 descriptor?? [ 740.060339][ T4319] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 740.070283][ T4319] pctv452e: pctv452e_power_ctrl: 1 [ 740.070283][ T4319] [ 740.078676][ T4319] usb 1-1: selecting invalid altsetting 3 [ 740.086412][ T4319] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 740.086412][ T4319] [ 740.156827][ T4319] dvb-usb: bulk message failed: -22 (5/0) [ 740.163982][T14778] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.187318][ T4319] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 740.220951][ T4319] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 740.245995][T14855] dvb-usb: bulk message failed: -22 (7/0) [ 740.257765][T14855] pctv452e: I2C error -22; AA 01 00 00 00 -> aa 01 31 03 00 00 00 [ 740.265918][ T4319] usb 1-1: media controller created [ 740.281089][ T4319] dvb-usb: bulk message failed: -22 (8/0) [ 740.294886][ T4319] pctv452e: I2C error -22; AA 02 A0 01 14 -> aa 02 31 04 a0 01 14 [ 740.321209][ T4319] dvb-usb: MAC address reading failed. [ 740.367319][ T4319] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 740.623435][ T4319] DVB: Unable to find symbol stb0899_attach() [ 740.638263][ T4319] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 740.707681][ T4293] Bluetooth: hci2: command 0x040f tx timeout [ 740.877677][ T4320] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 740.909406][T14778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 740.941354][T14778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 740.982775][T14778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 741.049556][T14778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 741.067671][ T4319] rc_core: IR keymap rc-tt-1500 not found [ 741.073524][ T4319] Registered IR keymap rc-empty [ 741.087878][ T4320] usb 5-1: Using ep0 maxpacket: 8 [ 741.095740][ T4320] usb 5-1: unable to get BOS descriptor or descriptor too short [ 741.126055][ T4320] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 741.148448][ T4319] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 741.190015][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.209434][ T4319] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input89 [ 741.256589][ T4320] usb 5-1: Product: syz [ 741.263221][ T4319] dvb-usb: schedule remote query interval to 100 msecs. [ 741.269264][ T4320] usb 5-1: Manufacturer: syz [ 741.305461][ T4319] pctv452e: pctv452e_power_ctrl: 0 [ 741.305461][ T4319] [ 741.313272][ T4320] usb 5-1: SerialNumber: syz [ 741.337771][ T4319] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 741.407766][ T4319] usb 1-1: USB disconnect, device number 62 [ 741.512076][T14778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.633757][ T9898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 741.654545][ T9898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 741.682553][ T4319] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 741.754603][T14778] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.913042][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 741.945941][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 742.079887][ T4338] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.087104][ T4338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 742.160808][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 742.200812][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 742.301403][ T4338] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.308659][ T4338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 742.378009][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 742.436818][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 742.502174][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 742.527080][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 742.571151][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 742.593162][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 742.645919][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 742.723979][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 742.757039][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 742.788247][ T4293] Bluetooth: hci2: command 0x0419 tx timeout [ 742.800818][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 742.851212][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 742.873850][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 742.899103][T14897] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 742.906515][T14897] IPv6: NLM_F_CREATE should be set when creating new route [ 742.971810][T14778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 743.931261][T14920] capability: warning: `syz.0.3055' uses deprecated v2 capabilities in a way that may be insecure [ 744.425799][T14778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 744.455313][T12488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 744.477286][T12488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 744.611043][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 744.632236][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 744.782205][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 744.812569][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 744.852697][T14778] device veth0_vlan entered promiscuous mode [ 744.872447][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 744.900131][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 744.944824][T14778] device veth1_vlan entered promiscuous mode [ 744.951496][ T4319] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 745.083087][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 745.120273][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 745.147721][ T4319] usb 1-1: Using ep0 maxpacket: 8 [ 745.159092][ T4319] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 745.193113][T14778] device veth0_macvtap entered promiscuous mode [ 745.231834][ T4319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.261775][T14778] device veth1_macvtap entered promiscuous mode [ 745.284565][ T4319] usb 1-1: Product: syz [ 745.307116][ T4319] usb 1-1: Manufacturer: syz [ 745.331585][ T4319] usb 1-1: SerialNumber: syz [ 745.343938][T14778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 745.388476][ T4319] usb 1-1: config 0 descriptor?? [ 745.411131][ T4319] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 745.427656][T14778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.446378][ T4319] pctv452e: pctv452e_power_ctrl: 1 [ 745.446378][ T4319] [ 745.455412][T14778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 745.489978][ T4319] usb 1-1: selecting invalid altsetting 3 [ 745.495797][ T4319] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 745.495797][ T4319] [ 745.513614][T14778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.525960][ T4319] dvb-usb: bulk message failed: -22 (5/0) [ 745.539557][T14778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 745.566547][ T4319] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 745.572517][T14778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.593237][T14778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 745.602289][T14933] dvb-usb: bulk message failed: -22 (7/0) [ 745.617668][T14933] pctv452e: I2C error -22; AA 01 00 00 00 -> aa 01 31 03 00 00 00 [ 745.619434][ T4319] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 745.634697][T14778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.634721][T14778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 745.634738][T14778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.665855][T14778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 745.684097][ T4319] usb 1-1: media controller created [ 745.691220][ T4319] dvb-usb: bulk message failed: -22 (8/0) [ 745.693180][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 745.697002][ T4319] pctv452e: I2C error -22; AA 02 A0 01 14 -> aa 02 31 04 a0 01 14 [ 745.697060][ T4319] dvb-usb: MAC address reading failed. [ 745.732358][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 745.758894][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 745.771318][ T4319] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 745.780399][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 745.949100][T14778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.970585][T14778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.988182][T14778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 746.009338][T14778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.025415][T14778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 746.037995][T14778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.061835][T14778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 746.085788][T14778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.107791][T14778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 746.119168][T14778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.133086][T14778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 746.160871][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 746.193353][ T4319] DVB: Unable to find symbol stb0899_attach() [ 746.202166][ T4319] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 746.211574][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 746.270117][T14778] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.288741][T14778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.322798][T14778] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.352254][T14778] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.544870][ T7] usb 5-1: USB disconnect, device number 61 [ 746.727741][ T4319] rc_core: IR keymap rc-tt-1500 not found [ 746.733789][ T4319] Registered IR keymap rc-empty [ 746.784396][ T4319] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 746.848717][ T2961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.861135][ T2961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.890068][ T4319] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input90 [ 746.962298][T12488] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 746.995241][ T4319] dvb-usb: schedule remote query interval to 100 msecs. [ 747.054700][ T4319] pctv452e: pctv452e_power_ctrl: 0 [ 747.054700][ T4319] [ 747.072618][T12488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.102960][T12488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.116076][ T4319] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 747.168164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 747.190062][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.299893][ T4319] usb 1-1: USB disconnect, device number 63 [ 747.662185][ T4319] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 747.868238][T14980] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 748.483881][T14991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3067'. [ 749.095709][T15005] device syzkaller0 entered promiscuous mode [ 749.527722][ T4319] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 749.737670][ T4319] usb 3-1: Using ep0 maxpacket: 8 [ 749.778413][ T4319] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 749.801726][ T4319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.819346][ T4319] usb 3-1: Product: syz [ 749.834465][ T4319] usb 3-1: Manufacturer: syz [ 749.847724][ T4319] usb 3-1: SerialNumber: syz [ 749.874631][ T4319] usb 3-1: config 0 descriptor?? [ 749.899596][ T4319] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 749.960916][ T4319] pctv452e: pctv452e_power_ctrl: 1 [ 749.960916][ T4319] [ 749.988008][ T4319] usb 3-1: selecting invalid altsetting 3 [ 750.045951][ T4319] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 750.045951][ T4319] [ 750.104840][ T4319] dvb-usb: bulk message failed: -22 (5/0) [ 750.150120][ T4319] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 750.183551][ T4319] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 750.203253][ T4319] usb 3-1: media controller created [ 750.215350][ T4319] dvb-usb: bulk message failed: -22 (8/0) [ 750.239752][ T4319] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 750.299208][ T4319] dvb-usb: MAC address reading failed. [ 750.379481][ T4319] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 750.425334][T15042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3078'. [ 750.575449][ T4319] DVB: Unable to find symbol stb0899_attach() [ 750.581980][ T4319] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 750.645202][T15046] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 750.797878][ T4319] rc_core: IR keymap rc-tt-1500 not found [ 750.805216][ T4319] Registered IR keymap rc-empty [ 750.826735][ T4319] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 750.865564][ T4319] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input91 [ 750.892936][ T4319] dvb-usb: schedule remote query interval to 100 msecs. [ 750.915722][ T4319] pctv452e: pctv452e_power_ctrl: 0 [ 750.915722][ T4319] [ 750.937271][ T4319] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 750.973529][ T4319] usb 3-1: USB disconnect, device number 60 [ 751.088371][ T4319] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 751.518810][T15062] device syzkaller0 entered promiscuous mode [ 753.171157][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.219294][T15084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3089'. [ 753.489183][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.503202][T13981] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 753.514682][ T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 753.523176][ T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 753.535904][ T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 753.544022][ T49] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 753.552459][ T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 753.845931][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.984990][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.237585][ T4323] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 754.311831][T15108] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 754.363106][T15088] chnl_net:caif_netlink_parms(): no params data found [ 754.386839][ T9] tipc: Left network mode [ 754.447850][ T4323] usb 4-1: Using ep0 maxpacket: 8 [ 754.457291][ T4323] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 754.507591][ T4323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.547011][ T4323] usb 4-1: Product: syz [ 754.551327][ T4323] usb 4-1: Manufacturer: syz [ 754.556043][ T4323] usb 4-1: SerialNumber: syz [ 754.591576][ T4323] usb 4-1: config 0 descriptor?? [ 754.626958][ T4323] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 754.661555][ T4323] pctv452e: pctv452e_power_ctrl: 1 [ 754.661555][ T4323] [ 754.682072][ T4323] usb 4-1: selecting invalid altsetting 3 [ 754.701095][ T4323] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 754.701095][ T4323] [ 754.797577][ T4323] dvb-usb: bulk message failed: -22 (5/0) [ 754.805707][ T4323] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 754.824841][T15103] dvb-usb: bulk message failed: -22 (7/0) [ 754.832365][T15103] pctv452e: I2C error -22; AA 01 00 00 00 -> aa 01 31 03 00 00 00 [ 754.848091][ T4323] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 754.856882][ T4323] usb 4-1: media controller created [ 754.863950][ T4323] dvb-usb: bulk message failed: -22 (8/0) [ 754.872042][ T4323] pctv452e: I2C error -22; AA 02 A0 01 14 -> aa 02 31 04 a0 01 14 [ 754.880507][ T4323] dvb-usb: MAC address reading failed. [ 754.916555][ T4323] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 755.211051][ T4323] DVB: Unable to find symbol stb0899_attach() [ 755.217259][ T4323] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 755.286979][T15088] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.299704][T15088] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.327282][T15088] device bridge_slave_0 entered promiscuous mode [ 755.418693][T15088] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.430496][T15088] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.464140][T15088] device bridge_slave_1 entered promiscuous mode [ 755.587977][ T49] Bluetooth: hci1: command 0x0409 tx timeout [ 755.647868][ T4323] rc_core: IR keymap rc-tt-1500 not found [ 755.653865][ T4323] Registered IR keymap rc-empty [ 755.698661][ T4323] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 755.763900][ T4323] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input92 [ 755.831325][ T4323] dvb-usb: schedule remote query interval to 100 msecs. [ 755.849236][ T4323] pctv452e: pctv452e_power_ctrl: 0 [ 755.849236][ T4323] [ 755.856625][ T4323] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 755.923959][ T4323] usb 4-1: USB disconnect, device number 71 [ 755.951961][T14959] dvb-usb: bulk message failed: -22 (4/0) [ 755.959022][T14959] dvb-usb: error -22 while querying for an remote control event. [ 755.999073][T15151] netlink: 'syz.3.3098': attribute type 1 has an invalid length. [ 756.021763][T15088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 756.055110][ T4323] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 756.076312][T15088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 756.342107][T15088] team0: Port device team_slave_0 added [ 756.370005][T15088] team0: Port device team_slave_1 added [ 756.585668][T15088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 756.597365][T15088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 756.702176][T15088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 756.776187][T15088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 756.812644][T15088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 756.842719][ T1045] block nbd3: Possible stuck request ffff888025080000: control (read@0,1024B). Runtime 210 seconds [ 756.854057][ T1045] block nbd3: Possible stuck request ffff888025080200: control (read@1024,1024B). Runtime 210 seconds [ 756.866245][ T1045] block nbd3: Possible stuck request ffff888025080400: control (read@2048,1024B). Runtime 210 seconds [ 756.880348][ T1045] block nbd3: Possible stuck request ffff888025080600: control (read@3072,1024B). Runtime 210 seconds [ 756.911466][T15088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 757.141564][T15088] device hsr_slave_0 entered promiscuous mode [ 757.176288][T15088] device hsr_slave_1 entered promiscuous mode [ 757.230435][T15088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 757.266145][T15088] Cannot create hsr debugfs directory [ 757.331390][ T9] device hsr_slave_0 left promiscuous mode [ 757.358778][ T9] device hsr_slave_1 left promiscuous mode [ 757.368533][ T9] batman_adv: batadv0: Interface deactivated: dummy0 [ 757.424379][ T9] batman_adv: batadv0: Removing interface: dummy0 [ 757.445668][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 757.464674][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 757.486657][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 757.515480][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 757.543911][ T9] device bridge_slave_1 left promiscuous mode [ 757.554970][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.592566][ T9] device bridge_slave_0 left promiscuous mode [ 757.616589][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.667864][ T49] Bluetooth: hci1: command 0x041b tx timeout [ 757.690851][ T9] device veth1_macvtap left promiscuous mode [ 757.698071][ T9] device veth0_macvtap left promiscuous mode [ 757.704630][ T9] device veth1_vlan left promiscuous mode [ 757.710881][ T9] device veth0_vlan left promiscuous mode [ 757.877624][ T4320] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 758.072624][ T4320] usb 4-1: Using ep0 maxpacket: 8 [ 758.102924][ T4320] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 758.120416][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.140034][ T4320] usb 4-1: Product: syz [ 758.144429][ T4320] usb 4-1: Manufacturer: syz [ 758.154587][ T4320] usb 4-1: SerialNumber: syz [ 758.209788][ T4320] usb 4-1: config 0 descriptor?? [ 758.257615][ T4320] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 758.276379][ T9] bond4 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 758.294165][ T4320] pctv452e: pctv452e_power_ctrl: 1 [ 758.294165][ T4320] [ 758.308122][ T4320] usb 4-1: selecting invalid altsetting 3 [ 758.324261][ T4320] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 758.324261][ T4320] [ 758.340535][ T9] device veth0_to_bond left promiscuous mode [ 758.347847][ T9] bond4 (unregistering): Released all slaves [ 758.357844][ T4320] dvb-usb: bulk message failed: -22 (5/0) [ 758.389216][ T4320] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 758.400696][ T4320] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 758.409476][ T4320] usb 4-1: media controller created [ 758.414771][ T4320] dvb-usb: bulk message failed: -22 (8/0) [ 758.430727][ T4320] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 758.440536][T15186] dvb-usb: bulk message failed: -22 (7/0) [ 758.446362][T15186] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 758.459505][ T4320] dvb-usb: MAC address reading failed. [ 758.510320][ T4320] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 758.640017][ T4320] DVB: Unable to find symbol stb0899_attach() [ 758.646290][ T4320] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 758.719649][ T9] bond3 (unregistering): Released all slaves [ 758.807558][ T4322] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 758.857606][ T4320] rc_core: IR keymap rc-tt-1500 not found [ 758.863615][ T4320] Registered IR keymap rc-empty [ 758.870614][ T4320] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 758.882528][ T4320] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input93 [ 758.905811][ T4320] dvb-usb: schedule remote query interval to 100 msecs. [ 758.919414][ T4320] pctv452e: pctv452e_power_ctrl: 0 [ 758.919414][ T4320] [ 758.927084][ T4320] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 758.941337][ T4320] usb 4-1: USB disconnect, device number 72 [ 758.997919][ T4322] usb 1-1: Using ep0 maxpacket: 8 [ 759.011280][ T4322] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 759.032036][ T4322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.041794][ T9] bond2 (unregistering): Released all slaves [ 759.069003][ T4322] usb 1-1: Product: syz [ 759.073297][ T4322] usb 1-1: Manufacturer: syz [ 759.087551][ T4322] usb 1-1: SerialNumber: syz [ 759.093187][ T4320] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 759.123984][ T4322] usb 1-1: config 0 descriptor?? [ 759.158540][ T4322] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 759.167442][ T4322] pctv452e: pctv452e_power_ctrl: 1 [ 759.167442][ T4322] [ 759.175050][ T4322] usb 1-1: selecting invalid altsetting 3 [ 759.182357][ T4322] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 759.182357][ T4322] [ 759.193037][ T4322] dvb-usb: bulk message failed: -22 (5/0) [ 759.205120][ T4322] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 759.215979][ T4322] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 759.224983][ T4322] usb 1-1: media controller created [ 759.230461][ T4322] dvb-usb: bulk message failed: -22 (8/0) [ 759.236351][ T4322] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 759.249052][ T4322] dvb-usb: MAC address reading failed. [ 759.273685][ T4322] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 759.313665][T15200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3108'. [ 759.361392][T15190] dvb-usb: bulk message failed: -22 (7/0) [ 759.367214][T15190] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 759.523554][ T4322] DVB: Unable to find symbol stb0899_attach() [ 759.530059][ T4322] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 759.659838][ T9] bond1 (unregistering): Released all slaves [ 759.708394][ T4322] rc_core: IR keymap rc-tt-1500 not found [ 759.714220][ T4322] Registered IR keymap rc-empty [ 759.721409][ T4322] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 759.734288][ T4322] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input94 [ 759.747644][ T49] Bluetooth: hci1: command 0x040f tx timeout [ 759.782961][ T4322] dvb-usb: schedule remote query interval to 100 msecs. [ 759.790812][ T4322] pctv452e: pctv452e_power_ctrl: 0 [ 759.790812][ T4322] [ 759.798843][ T4322] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 759.813690][ T4322] usb 1-1: USB disconnect, device number 64 [ 759.857172][ T4322] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 760.579899][ T9] team0 (unregistering): Port device team_slave_1 removed [ 760.634654][ T9] team0 (unregistering): Port device team_slave_0 removed [ 760.686600][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 760.745899][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 761.125973][ T9] bond0 (unregistering): Released all slaves [ 761.263527][T15189] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 761.283990][T15209] netlink: 'syz.3.3110': attribute type 1 has an invalid length. [ 761.320150][T15210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 761.381620][T15210] device batadv_slave_0 entered promiscuous mode [ 761.827947][ T49] Bluetooth: hci1: command 0x0419 tx timeout [ 762.660931][T15250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3118'. [ 762.828223][T15088] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 762.867642][ T9473] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 762.984763][T15088] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 763.071960][ T9473] usb 3-1: Using ep0 maxpacket: 8 [ 763.089330][ T9473] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 763.113497][ T9473] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.142450][ T9473] usb 3-1: Product: syz [ 763.146967][ T9473] usb 3-1: Manufacturer: syz [ 763.160995][T15088] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 763.188408][ T9473] usb 3-1: SerialNumber: syz [ 763.219350][ T9473] usb 3-1: config 0 descriptor?? [ 763.226037][T15088] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 763.259778][ T9473] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 763.297766][ T9473] pctv452e: pctv452e_power_ctrl: 1 [ 763.297766][ T9473] [ 763.325764][ T9473] usb 3-1: selecting invalid altsetting 3 [ 763.347674][ T9473] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 763.347674][ T9473] [ 763.358616][ T4322] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 763.397714][ T9473] dvb-usb: bulk message failed: -22 (5/0) [ 763.425888][ T9473] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 763.458986][T15248] dvb-usb: bulk message failed: -22 (7/0) [ 763.464813][T15248] pctv452e: I2C error -22; AA 01 00 00 00 -> aa 01 31 03 00 00 00 [ 763.506128][ T9473] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 763.550630][ T9473] usb 3-1: media controller created [ 763.567776][ T4322] usb 2-1: Using ep0 maxpacket: 8 [ 763.577352][ T4322] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 763.595144][ T9473] dvb-usb: bulk message failed: -22 (8/0) [ 763.626635][ T9473] pctv452e: I2C error -22; AA 02 A0 01 14 -> aa 02 31 04 a0 01 14 [ 763.638287][ T4322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.689337][ T9473] dvb-usb: MAC address reading failed. [ 763.699614][ T4322] usb 2-1: Product: syz [ 763.720177][ T4322] usb 2-1: Manufacturer: syz [ 763.747176][ T4322] usb 2-1: SerialNumber: syz [ 763.784455][ T4322] usb 2-1: config 0 descriptor?? [ 763.799807][ T9473] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 763.824935][T15088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.839267][ T4322] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 763.893341][ T4322] pctv452e: pctv452e_power_ctrl: 1 [ 763.893341][ T4322] [ 763.936818][ T4322] usb 2-1: selecting invalid altsetting 3 [ 763.948787][T12488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 763.977203][T12488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 764.000038][ T4322] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 764.000038][ T4322] [ 764.024145][T15256] dvb-usb: bulk message failed: -22 (7/0) [ 764.036081][T15256] pctv452e: I2C error -22; AA 03 00 00 00 -> aa 03 31 03 00 00 00 [ 764.056337][T15088] 8021q: adding VLAN 0 to HW filter on device team0 [ 764.076097][ T4322] dvb-usb: bulk message failed: -22 (5/0) [ 764.146944][ T4322] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 764.257915][ T4322] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 764.275587][ T9898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 764.298664][ T9898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 764.331654][ T4322] usb 2-1: media controller created [ 764.337010][ T4322] dvb-usb: bulk message failed: -22 (8/0) [ 764.344067][ T9898] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.351293][ T9898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 764.367531][ T4322] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 764.377197][ T9473] DVB: Unable to find symbol stb0899_attach() [ 764.384256][ T9473] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 764.420405][ T9898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 764.428698][ T4322] dvb-usb: MAC address reading failed. [ 764.448733][ T9898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 764.485552][ T4322] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 764.516985][ T9898] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.524322][ T9898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 764.585568][ T9898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 764.654305][ T9898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 764.718850][ T9898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 764.776955][T12500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 764.832452][T12500] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 764.860841][T15277] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 764.877753][ T9473] rc_core: IR keymap rc-tt-1500 not found [ 764.883676][ T9473] Registered IR keymap rc-empty [ 764.900056][T15288] netlink: 'syz.3.3123': attribute type 1 has an invalid length. [ 764.929123][T12500] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 764.945602][T12500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 764.954233][ T9473] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 764.990438][T12500] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 765.004793][ T9473] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input95 [ 765.051364][T12500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 765.069190][ T4322] DVB: Unable to find symbol stb0899_attach() [ 765.075349][ T4322] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 765.088976][ T9473] dvb-usb: schedule remote query interval to 100 msecs. [ 765.097269][ T9473] pctv452e: pctv452e_power_ctrl: 0 [ 765.097269][ T9473] [ 765.098594][T12500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 765.157918][ T9473] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 765.172987][T12500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 765.220444][ T9473] usb 3-1: USB disconnect, device number 61 [ 765.230422][T12500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 765.289488][T15088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 765.358063][ T9473] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 765.547602][ T4322] rc_core: IR keymap rc-tt-1500 not found [ 765.553667][ T4322] Registered IR keymap rc-empty [ 765.606050][ T4322] rc rc1: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc1 [ 765.704386][ T4322] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc1/input96 [ 765.730914][ T4322] dvb-usb: schedule remote query interval to 100 msecs. [ 765.738298][ T4322] pctv452e: pctv452e_power_ctrl: 0 [ 765.738298][ T4322] [ 765.746178][ T4322] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 765.760069][ T4322] usb 2-1: USB disconnect, device number 70 [ 765.859747][ T4322] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 766.565811][T12500] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 766.587274][T15330] loop0: detected capacity change from 0 to 128 [ 766.608326][T12500] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 766.641190][T15330] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4) [ 766.675525][T15088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 766.799200][ T4749] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4) [ 766.821423][T15330] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4) [ 767.077770][ T4322] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 767.249281][T15346] netlink: 'syz.2.3134': attribute type 1 has an invalid length. [ 767.297626][ T4322] usb 4-1: Using ep0 maxpacket: 8 [ 767.308463][ T4322] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 767.358514][ T4322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.366598][ T4322] usb 4-1: Product: syz [ 767.414459][ T4322] usb 4-1: Manufacturer: syz [ 767.430595][T15346] 8021q: adding VLAN 0 to HW filter on device bond1 [ 767.453388][ T4322] usb 4-1: SerialNumber: syz [ 767.481183][T15349] device bond1 entered promiscuous mode [ 767.496492][ T4322] usb 4-1: config 0 descriptor?? [ 767.540656][ T4322] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 767.579004][ T4322] pctv452e: pctv452e_power_ctrl: 1 [ 767.579004][ T4322] [ 767.607684][ T4322] usb 4-1: selecting invalid altsetting 3 [ 767.613529][ T4322] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 767.613529][ T4322] [ 767.658929][ T4322] dvb-usb: bulk message failed: -22 (5/0) [ 767.730415][ T4322] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 767.742269][T15337] dvb-usb: bulk message failed: -22 (7/0) [ 767.749342][T15337] pctv452e: I2C error -22; AA 01 00 00 00 -> aa 01 31 03 00 00 00 [ 767.769378][ T4322] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 767.805589][ T4322] usb 4-1: media controller created [ 767.826991][ T4322] dvb-usb: bulk message failed: -22 (8/0) [ 767.854181][ T4322] pctv452e: I2C error -22; AA 02 A0 01 14 -> aa 02 31 04 a0 01 14 [ 767.891205][ T4322] dvb-usb: MAC address reading failed. [ 767.953477][ T4322] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 767.965610][T15357] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3136'. [ 768.335480][ T4322] DVB: Unable to find symbol stb0899_attach() [ 768.347775][ T4322] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 768.520438][T15371] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 768.737617][ T4322] rc_core: IR keymap rc-tt-1500 not found [ 768.743433][ T4322] Registered IR keymap rc-empty [ 768.765510][ T4322] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 768.775551][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 768.777120][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 768.925860][ T4322] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input97 [ 768.940997][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 768.982426][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 769.030301][ T4322] dvb-usb: schedule remote query interval to 100 msecs. [ 769.070976][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 769.095302][ T4322] pctv452e: pctv452e_power_ctrl: 0 [ 769.095302][ T4322] [ 769.128643][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 769.174260][ T4322] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 769.186271][T15088] device veth0_vlan entered promiscuous mode [ 769.205105][ T4322] usb 4-1: USB disconnect, device number 73 [ 769.277279][T15088] device veth1_vlan entered promiscuous mode [ 769.362630][ T4322] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 769.398491][T12488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 769.425433][T12488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 769.452674][T15088] device veth0_macvtap entered promiscuous mode [ 769.468843][T15088] device veth1_macvtap entered promiscuous mode [ 769.504873][T15088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 769.516619][T15088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.528801][T15088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 769.540354][T15088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.565437][T15088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 769.583932][T15088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.596152][T15088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 769.611945][T15088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.624975][T15088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 769.655450][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 769.669296][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 769.691097][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 769.705836][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 769.730019][T15088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 769.746322][T15088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.757071][T15088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 769.775554][T15088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.802768][T15088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 769.815774][T15088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.833710][T15088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 769.876223][T15088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.986671][T15088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 770.045617][T15088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.137044][T15088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 770.175265][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 770.208742][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 770.253679][T15088] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.272890][T15088] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.293817][T15088] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.315173][T15088] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.618875][ T4749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.679679][ T4749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.697926][T15400] null_blk: disk nullb1 created [ 770.756764][T15407] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3146'. [ 770.789274][T12500] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 770.948099][T15406] bond6: (slave veth0_to_bond): Releasing backup interface [ 770.981589][ T4749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.995371][ T4749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.043241][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 771.144346][T15416] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 771.177721][ T4363] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 771.312074][T15426] loop4: detected capacity change from 0 to 512 [ 771.367897][T15426] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 771.378652][ T4363] usb 4-1: Using ep0 maxpacket: 8 [ 771.410784][ T4363] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 771.446591][ T4363] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.469518][ T4363] usb 4-1: Product: syz [ 771.483156][ T4363] usb 4-1: Manufacturer: syz [ 771.503382][ T4363] usb 4-1: SerialNumber: syz [ 771.542953][ T4363] usb 4-1: config 0 descriptor?? [ 771.555570][ T4363] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 771.564546][ T4363] pctv452e: pctv452e_power_ctrl: 1 [ 771.564546][ T4363] [ 771.572485][ T4363] usb 4-1: selecting invalid altsetting 3 [ 771.578568][ T4363] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 771.578568][ T4363] [ 771.589214][ T4363] dvb-usb: bulk message failed: -22 (5/0) [ 771.609736][ T4363] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 771.621887][ T4363] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 771.632166][ T4363] usb 4-1: media controller created [ 771.638554][ T4363] dvb-usb: bulk message failed: -22 (8/0) [ 771.647644][T15426] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 771.651573][ T4363] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 771.700513][ T4363] dvb-usb: MAC address reading failed. [ 771.728652][ T4363] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 771.751780][T15410] dvb-usb: bulk message failed: -22 (7/0) [ 771.754080][T15426] EXT4-fs (loop4): Remounting filesystem read-only [ 771.780542][T15410] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 771.792917][T15426] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.3085: invalid indirect mapped block 4278190080 (level 0) [ 771.811663][T15426] EXT4-fs (loop4): Remounting filesystem read-only [ 771.819020][T15426] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.3085: invalid indirect mapped block 1 (level 1) [ 771.838496][T15426] EXT4-fs (loop4): Remounting filesystem read-only [ 771.848268][T15426] EXT4-fs (loop4): 1 truncate cleaned up [ 771.854140][T15426] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 771.873726][T15426] EXT4-fs error (device loop4): ext4_lookup:1850: inode #2: comm syz.4.3085: bad inode number: 1 [ 771.914574][T15426] EXT4-fs (loop4): Remounting filesystem read-only [ 772.044427][ T4363] DVB: Unable to find symbol stb0899_attach() [ 772.054113][ T4363] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 772.084698][T15088] EXT4-fs (loop4): unmounting filesystem. [ 772.320094][T15445] device syzkaller0 entered promiscuous mode [ 772.347877][ T4363] rc_core: IR keymap rc-tt-1500 not found [ 772.367613][ T4363] Registered IR keymap rc-empty [ 772.401329][ T4363] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 772.452449][ T4363] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input98 [ 772.531406][ T4363] dvb-usb: schedule remote query interval to 100 msecs. [ 772.547788][ T4363] pctv452e: pctv452e_power_ctrl: 0 [ 772.547788][ T4363] [ 772.572991][ T4363] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 772.617921][ T4363] usb 4-1: USB disconnect, device number 74 [ 772.721145][T15453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3155'. [ 772.768544][ T4363] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 773.084830][T15465] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3159'. [ 773.420363][T15470] loop2: detected capacity change from 0 to 32768 [ 773.641550][ T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 773.652078][ T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 773.661699][ T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 773.675126][ T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 773.685898][ T49] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 773.700044][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 773.868886][T15470] XFS (loop2): Mounting V5 Filesystem [ 773.986368][T15470] XFS (loop2): Ending clean mount [ 774.004146][T15470] XFS (loop2): Quotacheck needed: Please wait. [ 774.138058][T15470] XFS (loop2): Quotacheck: Done. [ 774.328366][T15488] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 774.335691][T15488] IPv6: NLM_F_CREATE should be set when creating new route [ 774.454639][ T26] audit: type=1800 audit(1785585634.448:91): pid=15494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3160" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4428 res=0 errno=0 [ 774.884123][T13979] XFS (loop2): Unmounting Filesystem [ 775.045279][ T4749] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.371453][ T4749] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.562557][ T4749] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.726407][ T4749] tipc: Resetting bearer [ 775.755426][ T49] Bluetooth: hci3: command 0x0409 tx timeout [ 775.767804][ T1172] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 775.803443][ T4749] tipc: Disabling bearer [ 775.819631][ T4749] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.957542][ T1172] usb 4-1: Using ep0 maxpacket: 8 [ 775.965432][ T1172] usb 4-1: unable to get BOS descriptor or descriptor too short [ 775.978316][ T1172] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 775.988770][ T1172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.997958][ T1172] usb 4-1: Product: syz [ 776.002681][ T1172] usb 4-1: Manufacturer: syz [ 776.007889][ T1172] usb 4-1: SerialNumber: syz [ 776.070215][T15480] chnl_net:caif_netlink_parms(): no params data found [ 776.092328][T15510] device syzkaller0 entered promiscuous mode [ 776.370278][ T4749] tipc: Left network mode [ 776.677129][T15480] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.687127][T15480] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.731570][T15480] device bridge_slave_0 entered promiscuous mode [ 776.772152][T15527] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3170'. [ 776.926053][T15480] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.940307][T15480] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.975392][T15480] device bridge_slave_1 entered promiscuous mode [ 777.283469][T15480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 777.397874][ T4319] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 777.444173][T15480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 777.565712][T15480] team0: Port device team_slave_0 added [ 777.607571][ T4319] usb 3-1: Using ep0 maxpacket: 8 [ 777.633354][ T4319] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 777.657003][ T4319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.678805][ T4319] usb 3-1: Product: syz [ 777.714664][ T4319] usb 3-1: Manufacturer: syz [ 777.735371][ T4319] usb 3-1: SerialNumber: syz [ 777.790854][ T4319] usb 3-1: config 0 descriptor?? [ 777.818314][T15480] team0: Port device team_slave_1 added [ 777.827745][ T49] Bluetooth: hci3: command 0x041b tx timeout [ 777.844012][ T4319] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 777.867608][ T4319] pctv452e: pctv452e_power_ctrl: 1 [ 777.867608][ T4319] [ 777.885550][ T4319] usb 3-1: selecting invalid altsetting 3 [ 777.891534][ T4319] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 777.891534][ T4319] [ 777.926456][ T4319] dvb-usb: bulk message failed: -22 (5/0) [ 777.949470][ T4319] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 777.964355][ T4319] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 777.986034][ T4319] usb 3-1: media controller created [ 778.004267][ T4319] dvb-usb: bulk message failed: -22 (8/0) [ 778.025468][ T4319] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 778.061859][T15534] dvb-usb: bulk message failed: -22 (7/0) [ 778.068764][ T4319] dvb-usb: MAC address reading failed. [ 778.075803][T15534] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 778.190934][ T4319] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 778.677021][ T4319] DVB: Unable to find symbol stb0899_attach() [ 778.686997][ T4319] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 778.840112][T15480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 778.862282][T15480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.005980][T15480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 779.150933][T15569] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 779.158059][ T4319] rc_core: IR keymap rc-tt-1500 not found [ 779.158437][T15569] IPv6: NLM_F_CREATE should be set when creating new route [ 779.163955][ T4319] Registered IR keymap rc-empty [ 779.186657][ T4319] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 779.251653][ T4319] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input99 [ 779.336375][ T4319] dvb-usb: schedule remote query interval to 100 msecs. [ 779.343719][T15480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 779.343738][T15480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.467243][ T4319] pctv452e: pctv452e_power_ctrl: 0 [ 779.467243][ T4319] [ 779.525040][ T4319] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 779.592432][T15480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 779.643807][ T4319] usb 3-1: USB disconnect, device number 62 [ 779.917396][ T49] Bluetooth: hci3: command 0x040f tx timeout [ 779.952470][ T4319] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 780.030828][T15480] device hsr_slave_0 entered promiscuous mode [ 780.128332][T15480] device hsr_slave_1 entered promiscuous mode [ 780.178619][T15480] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 780.215581][T15480] Cannot create hsr debugfs directory [ 780.871033][ T1172] usb 4-1: USB disconnect, device number 75 [ 780.938702][ T4749] device hsr_slave_0 left promiscuous mode [ 780.978072][ T4749] device hsr_slave_1 left promiscuous mode [ 781.018798][ T4749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 781.057244][ T4749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 781.122990][ T4749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 781.139505][ T4749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.158537][T15203] udevd[15203]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 781.190148][ T4749] batman_adv: batadv0: Removing interface: macvtap2 [ 781.219922][ T4749] device bridge_slave_1 left promiscuous mode [ 781.252950][ T4749] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.300869][ T4749] device bridge_slave_0 left promiscuous mode [ 781.317661][ T4749] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.997507][ T49] Bluetooth: hci3: command 0x0419 tx timeout [ 782.355577][ T4749] device veth1_macvtap left promiscuous mode [ 782.371971][ T4749] device veth0_macvtap left promiscuous mode [ 782.393349][ T4749] device veth1_vlan left promiscuous mode [ 782.416742][ T4749] device veth0_vlan left promiscuous mode [ 782.939130][ T4749] bond6 (unregistering): Released all slaves [ 783.222698][ T4749] bond5 (unregistering): Released all slaves [ 783.471431][ T4749] bond4 (unregistering): Released all slaves [ 783.766907][ T4749] bond3 (unregistering): Released all slaves [ 784.098299][ T4749] bond2 (unregistering): Released all slaves [ 784.128099][ T4749] bond1 (unregistering): Released all slaves [ 784.762573][ T4749] team0 (unregistering): Port device team_slave_1 removed [ 784.816417][ T4749] team0 (unregistering): Port device team_slave_0 removed [ 784.881371][ T4749] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 784.940921][ T4749] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 785.321305][ T4749] bond0 (unregistering): Released all slaves [ 785.557340][T15615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3181'. [ 785.704268][T15654] device syzkaller0 entered promiscuous mode [ 786.172736][ T4320] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 786.367865][ T4320] usb 3-1: Using ep0 maxpacket: 8 [ 786.390968][ T4320] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 786.418527][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.442304][ T4320] usb 3-1: Product: syz [ 786.446714][ T4320] usb 3-1: Manufacturer: syz [ 786.456184][ T4320] usb 3-1: SerialNumber: syz [ 786.482495][ T4320] usb 3-1: config 0 descriptor?? [ 786.516053][ T4320] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 786.531516][ T4320] pctv452e: pctv452e_power_ctrl: 1 [ 786.531516][ T4320] [ 786.542272][ T4320] usb 3-1: selecting invalid altsetting 3 [ 786.558706][ T4320] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 786.558706][ T4320] [ 786.578591][ T4320] dvb-usb: bulk message failed: -22 (5/0) [ 786.604604][ T4320] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 786.623367][ T4320] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 786.640077][ T4320] usb 3-1: media controller created [ 786.646951][ T4320] dvb-usb: bulk message failed: -22 (8/0) [ 786.662751][ T4320] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 786.679858][ T4320] dvb-usb: MAC address reading failed. [ 786.712071][T15668] dvb-usb: bulk message failed: -22 (7/0) [ 786.723230][ T4320] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 786.736059][T15668] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 786.868765][ T1045] block nbd3: Possible stuck request ffff888025080000: control (read@0,1024B). Runtime 240 seconds [ 786.880186][ T1045] block nbd3: Possible stuck request ffff888025080200: control (read@1024,1024B). Runtime 240 seconds [ 786.904223][ T1045] block nbd3: Possible stuck request ffff888025080400: control (read@2048,1024B). Runtime 240 seconds [ 786.915573][ T1045] block nbd3: Possible stuck request ffff888025080600: control (read@3072,1024B). Runtime 240 seconds [ 786.981728][ T4320] DVB: Unable to find symbol stb0899_attach() [ 786.997591][ T4320] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 787.134826][ T4320] rc_core: IR keymap rc-tt-1500 not found [ 787.149524][ T4320] Registered IR keymap rc-empty [ 787.155970][ T4320] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 787.167929][ T4320] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input100 [ 787.192106][ T4320] dvb-usb: schedule remote query interval to 100 msecs. [ 787.205702][ T4320] pctv452e: pctv452e_power_ctrl: 0 [ 787.205702][ T4320] [ 787.213779][ T4320] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 787.234810][ T4320] usb 3-1: USB disconnect, device number 63 [ 787.310150][ T4320] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 787.838173][ T4320] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 788.037656][ T4320] usb 3-1: Using ep0 maxpacket: 8 [ 788.049676][ T4320] usb 3-1: unable to get BOS descriptor or descriptor too short [ 788.064009][ T4320] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 788.087813][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.101302][ T4320] usb 3-1: Product: syz [ 788.105619][ T4320] usb 3-1: Manufacturer: syz [ 788.110942][ T4320] usb 3-1: SerialNumber: syz [ 790.427593][T15667] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 791.996903][ T4320] usb 3-1: USB disconnect, device number 64 [ 792.313930][T15203] udevd[15203]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 792.342719][T15480] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 792.395419][T15480] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 792.471618][T15480] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 792.530711][T15480] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 792.579178][T15744] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3196'. [ 792.925849][T15749] device syzkaller0 entered promiscuous mode [ 792.977861][T15480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 793.138831][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 793.176719][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 793.220406][T15480] 8021q: adding VLAN 0 to HW filter on device team0 [ 793.259875][T12500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 793.283365][T12500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 793.307792][ T127] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 793.311659][T12500] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.322773][T12500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 793.373266][T12500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 793.399714][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 793.429418][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 793.449698][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.456881][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 793.517657][ T127] usb 4-1: Using ep0 maxpacket: 8 [ 793.524063][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 793.532630][ T127] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 793.551040][ T127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.563809][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 793.572620][ T127] usb 4-1: Product: syz [ 793.576858][ T127] usb 4-1: Manufacturer: syz [ 793.584669][T15762] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 793.597399][ T127] usb 4-1: SerialNumber: syz [ 793.605419][ T127] usb 4-1: config 0 descriptor?? [ 793.616499][T12500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 793.641146][ T127] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 793.655280][T12500] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 793.673572][ T127] pctv452e: pctv452e_power_ctrl: 1 [ 793.673572][ T127] [ 793.685184][T12500] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 793.695530][ T127] usb 4-1: selecting invalid altsetting 3 [ 793.717245][ T127] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 793.717245][ T127] [ 793.741749][ T127] dvb-usb: bulk message failed: -22 (5/0) [ 793.760943][ T127] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 793.785723][ T127] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 793.804996][ T127] usb 4-1: media controller created [ 793.814451][T15752] dvb-usb: bulk message failed: -22 (7/0) [ 793.826283][T15752] pctv452e: I2C error -22; AA 01 00 00 00 -> aa 01 31 03 00 00 00 [ 793.851778][ T127] dvb-usb: bulk message failed: -22 (8/0) [ 793.872256][ T127] pctv452e: I2C error -22; AA 02 A0 01 14 -> aa 02 31 04 a0 01 14 [ 793.890919][ T127] dvb-usb: MAC address reading failed. [ 793.933915][ T127] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 793.952514][T12500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 794.000826][T12500] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 794.046091][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 794.066575][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 794.126088][T15480] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 794.216452][ T127] DVB: Unable to find symbol stb0899_attach() [ 794.233043][ T127] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 794.258579][T15480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 794.320496][T12488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 794.365488][T12488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 794.789041][ T127] rc_core: IR keymap rc-tt-1500 not found [ 794.794872][ T127] Registered IR keymap rc-empty [ 794.838277][ T127] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 794.848746][ T4320] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 794.907960][ T127] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input101 [ 794.977359][ T127] dvb-usb: schedule remote query interval to 100 msecs. [ 795.007619][ T127] pctv452e: pctv452e_power_ctrl: 0 [ 795.007619][ T127] [ 795.015013][ T127] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 795.047693][ T4320] usb 3-1: Using ep0 maxpacket: 8 [ 795.055357][ T4320] usb 3-1: unable to get BOS descriptor or descriptor too short [ 795.101565][ T4320] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 795.157712][ T127] usb 4-1: USB disconnect, device number 76 [ 795.183966][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.234627][ T4320] usb 3-1: Product: syz [ 795.253372][ T4320] usb 3-1: Manufacturer: syz [ 795.294728][ T4320] usb 3-1: SerialNumber: syz [ 795.504731][ T127] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 796.419877][T15817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3207'. [ 796.475525][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 796.510292][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 796.557018][T15480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 796.693680][T12488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 796.724142][T12488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 796.973840][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 796.997309][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 797.073302][T15480] device veth0_vlan entered promiscuous mode [ 797.095857][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 797.161472][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 797.219618][T15480] device veth1_vlan entered promiscuous mode [ 797.402411][T11014] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 797.441074][T11014] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 797.516926][T11014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 797.609593][T11014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 797.792208][T15480] device veth0_macvtap entered promiscuous mode [ 797.890245][T15480] device veth1_macvtap entered promiscuous mode [ 798.003958][T15480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.047156][T15480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.091917][T15480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.184866][T15480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.218552][T15834] loop4: detected capacity change from 0 to 128 [ 798.265010][T15480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.319368][T15480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.409101][T15480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.421953][T15834] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 798.467898][T15480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.488443][T15834] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 798.489392][T15480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 798.559969][T12500] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 798.628478][T12500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 798.679287][T15480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.764918][T15480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.852250][T15480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.937594][T15480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.023407][T15834] fscrypt (loop4, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 799.033209][T15480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.206021][T15480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.277378][T15480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.366434][T15480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.405180][T15480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.452859][T15480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.571879][T15088] EXT4-fs (loop4): unmounting filesystem. [ 799.579584][T15480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 799.639032][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 799.695895][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 799.754179][T15480] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.823710][T15480] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.897576][T15480] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.954707][T15480] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.122074][ T4320] usb 3-1: USB disconnect, device number 65 [ 800.282022][T15858] loop4: detected capacity change from 0 to 2048 [ 800.526339][T15203] udevd[15203]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 801.216621][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 801.285765][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 801.442630][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 801.549702][T11014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 801.573498][T11014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 801.631915][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 801.694658][T15879] netlink: 'syz.2.3218': attribute type 1 has an invalid length. [ 801.822857][T15879] 8021q: adding VLAN 0 to HW filter on device bond2 [ 801.920656][T15887] device bond2 entered promiscuous mode [ 801.982067][T15883] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3218'. [ 802.379665][ T4322] hid-generic 0081:0011:FFFFFF81.000B: item fetching failed at offset 2/3 [ 802.419221][ T4322] hid-generic: probe of 0081:0011:FFFFFF81.000B failed with error -22 [ 802.697734][ T4322] usb 3-1: new low-speed USB device number 66 using dummy_hcd [ 802.909521][ T4322] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 802.968357][ T4322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 803.001937][ T4322] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 803.035586][ T4322] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 803.099371][ T4322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.139220][T15907] device syzkaller0 entered promiscuous mode [ 803.149056][ T4322] usb 3-1: config 0 descriptor?? [ 803.154770][T15899] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 803.513456][T15911] device syzkaller0 entered promiscuous mode [ 803.574606][ T4322] corsair 0003:1B1C:1B3E.000C: unknown main item tag 0x2 [ 803.598573][ T4322] corsair 0003:1B1C:1B3E.000C: unknown main item tag 0x6 [ 803.646704][ T4322] corsair 0003:1B1C:1B3E.000C: unknown main item tag 0x4 [ 803.656778][ T4322] corsair 0003:1B1C:1B3E.000C: unknown main item tag 0x0 [ 803.752789][ T4322] corsair 0003:1B1C:1B3E.000C: hidraw0: USB HID v0.01 Device [HID 1b1c:1b3e] on usb-dummy_hcd.2-1/input0 [ 803.828227][ T4322] usb 3-1: USB disconnect, device number 66 [ 803.999037][ T4325] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 804.182841][T15920] fido_id[15920]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 804.227903][ T4325] usb 4-1: Using ep0 maxpacket: 8 [ 804.235981][ T4325] usb 4-1: unable to get BOS descriptor or descriptor too short [ 804.298890][ T4325] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 804.337280][ T4325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.372625][ T4325] usb 4-1: Product: syz [ 804.377063][ T4325] usb 4-1: Manufacturer: syz [ 804.427388][ T4325] usb 4-1: SerialNumber: syz [ 804.428793][ T4321] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 804.637657][ T4321] usb 5-1: Using ep0 maxpacket: 8 [ 804.648733][ T4321] usb 5-1: unable to get BOS descriptor or descriptor too short [ 804.689580][ T4321] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 804.717565][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.725852][ T4321] usb 5-1: Product: syz [ 804.757618][ T4321] usb 5-1: Manufacturer: syz [ 804.766660][ T4321] usb 5-1: SerialNumber: syz [ 804.857882][ T4322] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 805.057822][ T4322] usb 3-1: Using ep0 maxpacket: 8 [ 805.069423][ T4322] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 805.120521][ T4322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.207620][ T4322] usb 3-1: Product: syz [ 805.233195][ T4322] usb 3-1: Manufacturer: syz [ 805.253524][ T4322] usb 3-1: SerialNumber: syz [ 805.287316][ T4322] usb 3-1: config 0 descriptor?? [ 805.334962][ T4322] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 805.397614][ T4322] pctv452e: pctv452e_power_ctrl: 1 [ 805.397614][ T4322] [ 805.473366][ T4322] usb 3-1: selecting invalid altsetting 3 [ 805.514982][ T4322] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 805.514982][ T4322] [ 805.603296][ T4322] dvb-usb: bulk message failed: -22 (5/0) [ 805.710316][ T4322] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 805.776058][ T4322] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 805.805853][ T4322] usb 3-1: media controller created [ 805.828329][ T4322] dvb-usb: bulk message failed: -22 (8/0) [ 805.852985][ T4322] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 805.881643][ T4322] dvb-usb: MAC address reading failed. [ 805.917257][ T4322] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 806.476009][ T4322] DVB: Unable to find symbol stb0899_attach() [ 806.484080][ T4322] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 806.987552][ T4322] rc_core: IR keymap rc-tt-1500 not found [ 806.993512][ T4322] Registered IR keymap rc-empty [ 807.018033][ T4322] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 807.059253][ T4322] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input102 [ 807.102539][ T4322] dvb-usb: schedule remote query interval to 100 msecs. [ 807.138858][ T4322] pctv452e: pctv452e_power_ctrl: 0 [ 807.138858][ T4322] [ 807.159257][ T4322] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 807.208589][ T4322] usb 3-1: USB disconnect, device number 67 [ 807.434777][ T4322] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 808.631391][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.710155][ T4293] Bluetooth: hci0: command 0x0406 tx timeout [ 811.159814][ T4320] usb 5-1: USB disconnect, device number 62 [ 811.327865][ T4322] usb 4-1: USB disconnect, device number 77 [ 811.534801][T15988] device syzkaller0 entered promiscuous mode [ 813.699847][T16023] device syzkaller0 entered promiscuous mode [ 814.597827][T15660] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 814.797580][T15660] usb 3-1: Using ep0 maxpacket: 8 [ 814.805065][T15660] usb 3-1: unable to get BOS descriptor or descriptor too short [ 814.867128][T15660] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 814.894366][T15660] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.917118][T15660] usb 3-1: Product: syz [ 814.942450][T15660] usb 3-1: Manufacturer: syz [ 814.964692][T15660] usb 3-1: SerialNumber: syz [ 816.951136][ T1045] block nbd3: Possible stuck request ffff888025080000: control (read@0,1024B). Runtime 270 seconds [ 816.962162][ T1045] block nbd3: Possible stuck request ffff888025080200: control (read@1024,1024B). Runtime 270 seconds [ 816.979012][ T1045] block nbd3: Possible stuck request ffff888025080400: control (read@2048,1024B). Runtime 270 seconds [ 816.990434][ T1045] block nbd3: Possible stuck request ffff888025080600: control (read@3072,1024B). Runtime 270 seconds [ 818.108706][ T3639] udevd[3639]: worker [4584] /devices/virtual/block/nbd3 timeout; kill it [ 818.145625][ T3639] udevd[3639]: seq 20081 '/devices/virtual/block/nbd3' killed [ 820.158346][T15660] usb 3-1: USB disconnect, device number 68 [ 821.209618][T16105] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3256'. [ 821.266897][T15203] udevd[15203]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 821.663485][T16117] device syzkaller0 entered promiscuous mode [ 822.093662][T16120] device syzkaller0 entered promiscuous mode [ 823.178765][T16140] loop3: detected capacity change from 0 to 32768 [ 823.204219][T16140] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.3263 (16140) [ 823.234947][T16140] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 823.246151][T16140] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 823.255128][T16140] BTRFS info (device loop3): use zlib compression, level 3 [ 823.262404][T16140] BTRFS info (device loop3): turning on sync discard [ 823.269401][T16140] BTRFS info (device loop3): using free space tree [ 823.436132][T16140] BTRFS info (device loop3): enabling ssd optimizations [ 823.869112][ T26] audit: type=1800 audit(1785585683.838:92): pid=16159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3263" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 824.788657][T14778] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 825.105735][T16165] loop4: detected capacity change from 0 to 256 [ 825.273436][T16165] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 825.304941][T16165] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 825.323655][T16165] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 826.861476][T16182] loop2: detected capacity change from 0 to 1024 [ 826.982474][ C0] sched: RT throttling activated [ 827.038525][T16182] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 827.646658][ T4320] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 827.837824][ T4320] usb 4-1: Using ep0 maxpacket: 8 [ 827.849050][ T4320] usb 4-1: unable to get BOS descriptor or descriptor too short [ 827.871736][ T4320] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 827.882574][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.891013][ T4320] usb 4-1: Product: syz [ 827.896145][ T4320] usb 4-1: Manufacturer: syz [ 827.901336][ T4320] usb 4-1: SerialNumber: syz [ 831.049513][T13979] EXT4-fs (loop2): unmounting filesystem. [ 831.203752][ T4293] Bluetooth: hci5: command 0x0406 tx timeout [ 831.309482][T16211] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3273'. [ 831.351496][T16211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3273'. [ 831.502847][ T4320] usb 4-1: USB disconnect, device number 78 [ 831.565994][T16213] device syzkaller0 entered promiscuous mode [ 832.622600][T15203] udevd[15203]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 834.162340][T16187] vp-vdpa 0000:00:01.0: Failed to probe modern PCI device [ 837.402440][T16272] netlink: 'syz.4.3284': attribute type 1 has an invalid length. [ 837.629786][T16285] loop4: detected capacity change from 0 to 128 [ 837.684323][T16282] device syzkaller0 entered promiscuous mode [ 838.684837][T16285] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 838.693774][T16285] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 838.803859][T16295] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 838.827193][T15203] udevd[15203]: incorrect ext4 checksum on /dev/loop4 [ 838.860466][T16295] EXT4-fs error (device loop4): ext4_setattr:5634: inode #12: comm syz.4.3289: mark_inode_dirty error [ 838.906637][T16295] EXT4-fs error (device loop4) in ext4_setattr:5695: Corrupt filesystem [ 839.299640][T15088] EXT4-fs (loop4): unmounting filesystem. [ 840.549011][T16316] netlink: 'syz.1.3299': attribute type 1 has an invalid length. [ 841.023182][T16316] device macvlan2 entered promiscuous mode [ 841.280302][T16319] loop4: detected capacity change from 0 to 4096 [ 841.287760][T16332] device syzkaller0 entered promiscuous mode [ 841.552212][T16319] ntfs: volume version 3.1. [ 841.860809][T16338] device syzkaller0 entered promiscuous mode [ 842.594034][T16364] binder_alloc: 16363: binder_alloc_buf, no vma [ 845.629527][T16385] loop4: detected capacity change from 0 to 40427 [ 845.694453][T15203] I/O error, dev loop4, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 848.196251][ T1045] block nbd3: Possible stuck request ffff888025080000: control (read@0,1024B). Runtime 300 seconds [ 848.207820][ T1045] block nbd3: Possible stuck request ffff888025080200: control (read@1024,1024B). Runtime 300 seconds [ 848.219118][ T1045] block nbd3: Possible stuck request ffff888025080400: control (read@2048,1024B). Runtime 300 seconds [ 848.233918][ T1045] block nbd3: Possible stuck request ffff888025080600: control (read@3072,1024B). Runtime 300 seconds [ 848.609017][T16413] device syzkaller0 entered promiscuous mode [ 848.848557][T16420] loop1: detected capacity change from 0 to 16 [ 848.950173][T16420] erofs: (device loop1): mounted with root inode @ nid 36. [ 849.399148][T16433] syz.1.3318: attempt to access beyond end of device [ 849.399148][T16433] loop1: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 850.494555][T16447] loop3: detected capacity change from 0 to 512 [ 850.584214][T16447] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 851.507484][T16447] EXT4-fs error (device loop3): ext4_init_orphan_info:621: comm syz.3.3324: orphan file block 0: bad magic [ 851.750905][T16447] EXT4-fs (loop3): mount failed [ 852.057315][ T4323] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 852.317461][ T4323] usb 5-1: Using ep0 maxpacket: 8 [ 852.325350][ T4323] usb 5-1: unable to get BOS descriptor or descriptor too short [ 852.398501][ T4323] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 852.480197][ T4323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.510961][ T4323] usb 5-1: Product: syz [ 852.534173][ T4323] usb 5-1: Manufacturer: syz [ 852.538915][ T4323] usb 5-1: SerialNumber: syz [ 852.738004][T16381] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 854.420226][T16507] device syzkaller0 entered promiscuous mode [ 854.845250][T16514] loop3: detected capacity change from 0 to 256 [ 855.135692][ T4323] usb 5-1: USB disconnect, device number 63 [ 855.567102][T15203] udevd[15203]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 855.646139][T16523] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3338'. [ 856.420797][T16541] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3342'. [ 856.824470][T16550] netlink: 'syz.3.3346': attribute type 1 has an invalid length. [ 857.051670][T16553] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 857.770970][T16550] device bridge1 entered promiscuous mode [ 857.822054][T16550] bond1: (slave bridge1): making interface the new active one [ 857.899106][T16550] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 858.223806][ T4322] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 858.402489][T16576] loop3: detected capacity change from 0 to 128 [ 858.430042][ T4322] usb 2-1: Using ep0 maxpacket: 8 [ 858.447672][ T4322] usb 2-1: unable to get BOS descriptor or descriptor too short [ 858.465577][T16576] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 858.495874][ T4322] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 858.516739][T16576] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 858.537802][ T4322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.567645][ T4322] usb 2-1: Product: syz [ 858.575984][ T4322] usb 2-1: Manufacturer: syz [ 858.598297][ T4322] usb 2-1: SerialNumber: syz [ 858.713744][T16582] loop2: detected capacity change from 0 to 256 [ 858.765726][ T49] Bluetooth: hci2: command 0x0406 tx timeout [ 859.757915][T16597] device syzkaller0 entered promiscuous mode [ 860.191513][T16600] loop4: detected capacity change from 0 to 1024 [ 860.507487][T16600] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 861.074250][ T26] audit: type=1800 audit(1785585974.928:93): pid=16600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3361" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 862.191705][T15088] EXT4-fs (loop4): unmounting filesystem. [ 862.483665][ T4322] usb 2-1: USB disconnect, device number 71 [ 862.763016][T15203] udevd[15203]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 863.106387][T16625] syz.0.3369[16625] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 863.122208][T16625] syz.0.3369[16625] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 863.739412][T16629] device syzkaller0 entered promiscuous mode [ 863.796874][T16635] loop3: detected capacity change from 0 to 256 [ 863.955853][T16635] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 864.011718][T16635] FAT-fs (loop3): Filesystem has been set read-only [ 864.041442][T16635] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 864.101497][T16635] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 864.143830][T16635] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 864.181596][T16637] device syzkaller0 entered promiscuous mode [ 864.219386][T16635] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 864.254664][T16635] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 864.286225][T16635] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 864.319489][T16650] netlink: 'syz.4.3375': attribute type 1 has an invalid length. [ 864.323412][T16635] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 864.369104][T16635] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 864.403254][T16635] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 864.433052][ T26] audit: type=1800 audit(1785585978.019:94): pid=16635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3371" name="file1" dev="loop3" ino=1048618 res=0 errno=0 [ 864.470082][T16650] 8021q: adding VLAN 0 to HW filter on device bond1 [ 864.515036][T16653] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 864.607698][T16659] device bond1 entered promiscuous mode [ 864.850097][T16668] tmpfs: Bad value for 'mpol' [ 865.875652][T16176] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 866.098351][T16176] usb 4-1: Using ep0 maxpacket: 8 [ 866.141583][T16176] usb 4-1: unable to get BOS descriptor or descriptor too short [ 866.240461][T16176] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 866.256457][T16176] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.264628][T16176] usb 4-1: Product: syz [ 866.272413][T16176] usb 4-1: Manufacturer: syz [ 866.277906][T16176] usb 4-1: SerialNumber: syz [ 869.492666][T16688] input: syz1 as /devices/virtual/input/input103 [ 869.538675][T16693] netlink: 'syz.2.3385': attribute type 10 has an invalid length. [ 869.554951][T16176] usb 4-1: USB disconnect, device number 79 [ 869.600789][T16697] netlink: 'syz.2.3385': attribute type 11 has an invalid length. [ 869.728100][T16693] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 869.928108][T16704] loop3: detected capacity change from 0 to 2048 [ 870.001466][T16707] loop4: detected capacity change from 0 to 512 [ 870.025961][T15203] udevd[15203]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 870.930892][T16707] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 870.958207][T16707] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 870.971708][T16704] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 871.000577][T16707] Quota error (device loop4): do_check_range: Getting dqdh_next_free 256 out of range 0-8 [ 871.014188][T16707] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 871.025985][T16707] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.3389: Failed to acquire dquot type 0 [ 871.364095][T15088] EXT4-fs (loop4): unmounting filesystem. [ 871.383982][T16727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3393'. [ 871.546315][T16730] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 871.555722][T16730] IPv6: NLM_F_CREATE should be set when creating new route [ 872.756775][T14778] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 873.129453][T14778] EXT4-fs (loop3): unmounting filesystem. [ 873.162239][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.474132][T16772] loop4: detected capacity change from 0 to 1024 [ 875.535985][T16772] EXT4-fs: Ignoring removed bh option [ 876.651468][T16772] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 876.722603][T16772] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 876.814778][T16794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3407'. [ 876.847861][T16772] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 3: comm syz.4.3404: lblock 3 mapped to illegal pblock 3 (length 3) [ 876.940685][T16187] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 876.970526][T16772] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 877.103632][T16772] EXT4-fs (loop4): This should not happen!! Data will be lost [ 877.103632][T16772] [ 877.437166][T16771] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: block 3: comm syz.4.3404: lblock 3 mapped to illegal pblock 3 (length 1) [ 877.566832][T16187] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 877.823573][T16187] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.834112][T16187] usb 2-1: config 0 descriptor?? [ 877.850995][T16187] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 877.911788][T16799] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: block 3: comm syz.4.3404: lblock 3 mapped to illegal pblock 3 (length 1) [ 878.000184][T16799] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: block 3: comm syz.4.3404: lblock 3 mapped to illegal pblock 3 (length 1) [ 878.024959][T16771] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: block 3: comm syz.4.3404: lblock 3 mapped to illegal pblock 3 (length 1) [ 878.196753][T16799] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: block 3: comm syz.4.3404: lblock 3 mapped to illegal pblock 3 (length 1) [ 878.262964][T16799] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: block 3: comm syz.4.3404: lblock 3 mapped to illegal pblock 3 (length 1) [ 878.282340][T16187] gspca_stv06xx: I2C: Read error writing address: -71 [ 878.305245][T16187] usb 2-1: USB disconnect, device number 72 [ 878.366789][T16799] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: block 3: comm syz.4.3404: lblock 3 mapped to illegal pblock 3 (length 1) [ 878.406431][T16771] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: block 3: comm syz.4.3404: lblock 3 mapped to illegal pblock 3 (length 1) [ 878.432261][T16771] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: block 3: comm syz.4.3404: lblock 3 mapped to illegal pblock 3 (length 1) [ 879.372461][T16823] bridge0: port 3(veth0_vlan) entered blocking state [ 879.417013][T16823] bridge0: port 3(veth0_vlan) entered disabled state [ 879.462757][ T4743] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 879.478798][T16825] binder: 16821:16825 ioctl c018620c 0 returned -14 [ 879.510628][ T4743] EXT4-fs (loop4): This should not happen!! Data will be lost [ 879.510628][ T4743] [ 879.549854][T15088] EXT4-fs (loop4): unmounting filesystem. [ 879.721298][T16838] loop4: detected capacity change from 0 to 256 [ 879.748625][T16838] exfat: Deprecated parameter 'utf8' [ 879.754124][T16838] exfat: Deprecated parameter 'namecase' [ 879.761615][T16838] exfat: Deprecated parameter 'utf8' [ 879.792627][T16838] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 879.822370][T16841] loop2: detected capacity change from 0 to 128 [ 879.851804][T16841] ext4: Unknown parameter 'func' [ 879.877698][ T4323] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 880.107609][ T4323] usb 2-1: Using ep0 maxpacket: 8 [ 880.115248][ T4323] usb 2-1: unable to get BOS descriptor or descriptor too short [ 880.147604][ T4323] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 880.227910][T16846] syz.4.3417: attempt to access beyond end of device [ 880.227910][T16846] loop4: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 880.246950][T16846] syz.4.3417: attempt to access beyond end of device [ 880.246950][T16846] loop4: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 880.272790][T16846] [syz.4.3417/16846] FS: loop4 File: /file1 would truncate fibmap result [ 880.300696][ T26] audit: type=1800 audit(1785585992.625:95): pid=16846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3417" name="file1" dev="loop4" ino=1048619 res=0 errno=0 [ 880.349085][ T4323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.678777][ T4323] usb 2-1: Product: syz [ 880.725834][ T4323] usb 2-1: Manufacturer: syz [ 880.730602][ T4323] usb 2-1: SerialNumber: syz [ 880.879384][ T1045] block nbd3: Possible stuck request ffff888025080000: control (read@0,1024B). Runtime 330 seconds [ 880.891118][ T1045] block nbd3: Possible stuck request ffff888025080200: control (read@1024,1024B). Runtime 330 seconds [ 880.904352][ T1045] block nbd3: Possible stuck request ffff888025080400: control (read@2048,1024B). Runtime 330 seconds [ 880.915689][ T1045] block nbd3: Possible stuck request ffff888025080600: control (read@3072,1024B). Runtime 330 seconds [ 880.962068][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 883.284402][ T4323] usb 2-1: USB disconnect, device number 73 [ 883.577970][T15203] udevd[15203]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 884.456749][T16888] tipc: Enabling of bearer rejected, failed to enable media [ 884.707963][ T4325] libceph: mon0 (1)[c::]:6789 socket error on write [ 884.884536][T16889] ceph: No mds server is up or the cluster is laggy [ 884.987208][ T4325] libceph: mon0 (1)[c::]:6789 socket error on write [ 885.462738][T16898] loop3: detected capacity change from 0 to 128 [ 885.516079][ T4325] libceph: mon0 (1)[c::]:6789 socket error on write [ 885.550560][T16898] FAT-fs (loop3): bogus number of FAT structure [ 885.576007][T16898] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 885.591547][T16901] device syzkaller0 entered promiscuous mode [ 885.608581][T16898] FAT-fs (loop3): Can't find a valid FAT filesystem [ 885.850551][T16903] tipc: Started in network mode [ 885.855542][T16903] tipc: Node identity 521501a93c05, cluster identity 4711 [ 885.875841][T16903] tipc: Enabled bearer , priority 0 [ 886.200439][T16900] tipc: Resetting bearer [ 886.520274][T16900] tipc: Disabling bearer [ 886.622153][T16909] netlink: 'syz.2.3431': attribute type 1 has an invalid length. [ 886.691195][T16909] 8021q: adding VLAN 0 to HW filter on device bond3 [ 886.714866][T16918] Mass Storage Function, version: 2009/09/11 [ 886.729584][T16921] overlayfs: conflicting lowerdir path [ 886.733288][T16918] LUN: removable file: (no medium) [ 886.758914][ T26] audit: type=1800 audit(1785585998.613:96): pid=16918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3434" name="cdrom" dev="configfs" ino=89296 res=0 errno=0 [ 886.774111][ C1] hrtimer: interrupt took 228702 ns [ 886.849011][ T26] audit: type=1800 audit(1785585998.641:97): pid=16918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3434" name="file" dev="configfs" ino=89297 res=0 errno=0 [ 886.853503][T16913] device bond3 entered promiscuous mode [ 886.959719][T16914] device macvlan2 entered promiscuous mode [ 886.986605][T16914] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 887.099842][T16927] loop3: detected capacity change from 0 to 128 [ 887.193566][T16927] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 887.242052][T16927] UDF-fs: warning (device loop3): udf_fill_super: No fileset found [ 887.279577][ T4325] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 887.427965][T16931] loop2: detected capacity change from 0 to 2048 [ 887.485699][ T4325] usb 2-1: Using ep0 maxpacket: 8 [ 887.494836][ T4325] usb 2-1: unable to get BOS descriptor or descriptor too short [ 887.512631][T16931] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 887.564842][ T4325] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 887.608528][ T4325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.646158][ T4325] usb 2-1: Product: syz [ 887.663363][ T4325] usb 2-1: Manufacturer: syz [ 887.679189][ T4325] usb 2-1: SerialNumber: syz [ 890.404511][T16961] device syzkaller0 entered promiscuous mode [ 893.315298][ T4325] usb 2-1: USB disconnect, device number 74 [ 893.461982][T16998] device syzkaller0 entered promiscuous mode [ 893.630488][T16187] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 893.764535][ T26] audit: type=1800 audit(1785586005.082:98): pid=17004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3462" name="cdrom" dev="configfs" ino=89430 res=0 errno=0 [ 893.836525][T16187] usb 5-1: Using ep0 maxpacket: 8 [ 893.848043][T16187] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 893.879548][T16187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.895840][T16187] usb 5-1: Product: syz [ 893.900188][T16187] usb 5-1: Manufacturer: syz [ 893.905669][T16187] usb 5-1: SerialNumber: syz [ 893.919773][T16187] usb 5-1: config 0 descriptor?? [ 893.949056][T16187] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 893.959654][T16187] pctv452e: pctv452e_power_ctrl: 1 [ 893.959654][T16187] [ 893.969008][T16187] usb 5-1: selecting invalid altsetting 3 [ 893.975351][T16187] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 893.975351][T16187] [ 894.000495][T16187] dvb-usb: bulk message failed: -22 (5/0) [ 894.018944][T16187] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 894.066724][T16187] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 894.107995][T17010] tipc: Enabling of bearer rejected, failed to enable media [ 894.157564][T16996] dvb-usb: bulk message failed: -22 (7/0) [ 894.183322][T16996] pctv452e: I2C error -22; AA 01 00 00 00 -> aa 01 31 03 00 00 00 [ 894.192158][T16187] usb 5-1: media controller created [ 894.234369][T16187] dvb-usb: bulk message failed: -22 (8/0) [ 894.268481][T16187] pctv452e: I2C error -22; AA 02 A0 01 14 -> aa 02 31 04 a0 01 14 [ 894.318401][T16187] dvb-usb: MAC address reading failed. [ 894.387360][T17015] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3465'. [ 894.427503][T17018] netlink: 'syz.2.3466': attribute type 1 has an invalid length. [ 894.437047][T16187] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 894.497857][T17018] 8021q: adding VLAN 0 to HW filter on device bond4 [ 894.560415][T17021] device bond4 entered promiscuous mode [ 894.604513][T17018] device macvlan2 entered promiscuous mode [ 894.681128][T17018] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 895.001614][T16187] DVB: Unable to find symbol stb0899_attach() [ 895.008411][T16187] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 896.112354][T16187] rc_core: IR keymap rc-tt-1500 not found [ 896.118175][T16187] Registered IR keymap rc-empty [ 896.160000][T16187] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 896.372444][T16187] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input105 [ 897.183572][T16187] dvb-usb: schedule remote query interval to 100 msecs. [ 897.194790][T17039] Set syz1 is full, maxelem 2076 reached [ 897.209646][T16187] pctv452e: pctv452e_power_ctrl: 0 [ 897.209646][T16187] [ 897.217079][T16187] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 897.326017][T16187] usb 5-1: USB disconnect, device number 64 [ 897.333078][T15660] dvb-usb: bulk message failed: -22 (4/0) [ 897.343076][T15660] dvb-usb: error -22 while querying for an remote control event. [ 897.486609][T16187] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 897.620797][T17044] device syzkaller0 entered promiscuous mode [ 897.965755][T16187] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 898.171872][T16187] usb 5-1: Using ep0 maxpacket: 8 [ 898.181130][T16187] usb 5-1: unable to get BOS descriptor or descriptor too short [ 898.242052][T16187] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 898.309353][T16187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.384051][T16187] usb 5-1: Product: syz [ 898.420541][T16187] usb 5-1: Manufacturer: syz [ 898.452475][T16187] usb 5-1: SerialNumber: syz [ 899.639554][T16176] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 899.851415][T16176] usb 2-1: Using ep0 maxpacket: 8 [ 899.862754][T16176] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 899.925287][T16176] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.949634][T17081] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3483'. [ 899.970690][T16176] usb 2-1: Product: syz [ 899.987782][T16176] usb 2-1: Manufacturer: syz [ 900.004281][T16176] usb 2-1: SerialNumber: syz [ 900.046240][T16176] usb 2-1: config 0 descriptor?? [ 900.057598][T17084] loop3: detected capacity change from 0 to 128 [ 900.079690][T16176] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 900.113482][T17084] FAT-fs (loop3): bogus number of FAT structure [ 900.128659][T16176] pctv452e: pctv452e_power_ctrl: 1 [ 900.128659][T16176] [ 900.153396][T17084] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 900.170538][T16176] usb 2-1: selecting invalid altsetting 3 [ 900.185033][T16176] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 900.185033][T16176] [ 900.196233][T17084] FAT-fs (loop3): Can't find a valid FAT filesystem [ 900.206542][T16176] dvb-usb: bulk message failed: -22 (5/0) [ 900.217022][T16176] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 900.228600][T16176] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 900.237320][T16176] usb 2-1: media controller created [ 900.245276][T16176] dvb-usb: bulk message failed: -22 (8/0) [ 900.251542][T16176] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 900.437374][T16176] dvb-usb: MAC address reading failed. [ 900.443104][T17068] dvb-usb: bulk message failed: -22 (7/0) [ 900.460424][T16176] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 901.098103][T17068] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 901.346699][T16176] DVB: Unable to find symbol stb0899_attach() [ 901.353607][T16176] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 901.823936][T16176] rc_core: IR keymap rc-tt-1500 not found [ 901.830118][T16176] Registered IR keymap rc-empty [ 901.849421][T16176] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 901.875718][T16176] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input106 [ 901.898726][T16176] dvb-usb: schedule remote query interval to 100 msecs. [ 901.906491][T16176] pctv452e: pctv452e_power_ctrl: 0 [ 901.906491][T16176] [ 901.939000][T16176] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 901.979900][T16176] usb 2-1: USB disconnect, device number 75 [ 902.125447][T16176] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 903.316350][T17111] loop3: detected capacity change from 0 to 512 [ 903.342102][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 903.443783][T17111] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 903.512858][T17111] EXT4-fs error (device loop3): ext4_readdir:223: inode #12: comm syz.3.3490: path /92/file0/file0: directory fails checksum at offset 0 [ 903.819156][T14778] EXT4-fs (loop3): unmounting filesystem. [ 904.085165][T17123] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3495'. [ 904.113572][T17121] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 904.421867][T17125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3497'. [ 904.492041][T15660] usb 5-1: USB disconnect, device number 65 [ 904.625828][T17128] loop3: detected capacity change from 0 to 128 [ 904.691018][T17130] tmpfs: Bad value for 'mpol' [ 904.712711][T17128] FAT-fs (loop3): bogus number of FAT structure [ 904.728823][T17128] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 904.797567][T17128] FAT-fs (loop3): Can't find a valid FAT filesystem [ 904.797792][T17132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3500'. [ 905.795483][T17144] netlink: 'syz.3.3503': attribute type 1 has an invalid length. [ 905.857956][T17144] 8021q: adding VLAN 0 to HW filter on device bond2 [ 905.906642][T17148] device syzkaller0 entered promiscuous mode [ 905.918597][T17147] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3503'. [ 905.942497][T17144] device bond2 entered promiscuous mode [ 906.577733][T17159] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3508'. [ 908.006544][T17169] tmpfs: Bad value for 'mpol' [ 908.047358][T17172] loop1: detected capacity change from 0 to 128 [ 908.069128][T17167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3511'. [ 908.096803][T17172] FAT-fs (loop1): bogus number of FAT structure [ 908.122154][T17172] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 908.169296][T17172] FAT-fs (loop1): Can't find a valid FAT filesystem [ 908.384169][ T4325] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 908.619507][ T4325] usb 4-1: Using ep0 maxpacket: 8 [ 909.108571][ T4325] usb 4-1: unable to get BOS descriptor or descriptor too short [ 909.164029][ T4325] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 909.198337][ T4325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.223519][ T4325] usb 4-1: Product: syz [ 909.245473][ T4325] usb 4-1: Manufacturer: syz [ 909.258510][ T4325] usb 4-1: SerialNumber: syz [ 909.520660][T17190] device syzkaller0 entered promiscuous mode [ 912.036036][T17209] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3521'. [ 913.083660][ T4325] usb 4-1: USB disconnect, device number 80 [ 913.210865][T17223] device syzkaller0 entered promiscuous mode [ 913.907205][T17230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3526'. [ 914.086576][ T1045] block nbd3: Possible stuck request ffff888025080000: control (read@0,1024B). Runtime 360 seconds [ 914.097871][ T1045] block nbd3: Possible stuck request ffff888025080200: control (read@1024,1024B). Runtime 360 seconds [ 914.108959][ T1045] block nbd3: Possible stuck request ffff888025080400: control (read@2048,1024B). Runtime 360 seconds [ 914.120756][ T1045] block nbd3: Possible stuck request ffff888025080600: control (read@3072,1024B). Runtime 360 seconds [ 916.485064][T17246] device syzkaller0 entered promiscuous mode [ 916.866800][T16176] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 917.018373][ T9473] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 917.085757][T16176] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 917.122661][T16176] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 917.190441][T16176] usb 1-1: Dual-Role OTG device on HNP port [ 917.240494][T16176] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 917.256781][ T9473] usb 2-1: Using ep0 maxpacket: 8 [ 917.264299][ T9473] usb 2-1: unable to get BOS descriptor or descriptor too short [ 917.308015][ T9473] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 917.353325][T16176] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.362777][ T9473] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.389377][ T9473] usb 2-1: Product: syz [ 917.416686][T17264] netlink: 'syz.2.3538': attribute type 1 has an invalid length. [ 917.426506][ T9473] usb 2-1: Manufacturer: syz [ 917.428694][ C0] ------------[ cut here ]------------ [ 917.437477][ C0] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 917.441076][ T9473] usb 2-1: SerialNumber: syz [ 917.445623][ C0] WARNING: CPU: 0 PID: 15660 at drivers/usb/gadget/udc/core.c:125 usb_ep_enable+0x27c/0x4d0 [ 917.458923][ C0] Modules linked in: [ 917.462949][ C0] CPU: 0 PID: 15660 Comm: kworker/0:7 Not tainted syzkaller #0 [ 917.471149][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 917.481250][ C0] Workqueue: events nsim_dev_hwstats_traffic_work [ 917.489000][ C0] RIP: 0010:usb_ep_enable+0x27c/0x4d0 [ 917.494616][ C0] Code: 49 8b 0e 48 c7 c0 80 cf 3e 8b 49 c7 c0 a0 cf 3e 8b 4c 0f 44 c0 48 c7 c7 40 cf 3e 8b 48 c7 c6 19 aa 63 8c 89 ea e8 d4 f4 ce fa <0f> 0b e9 c4 fe ff ff e8 78 6a 03 fb 49 bc 00 00 00 00 00 fc ff df [ 917.515675][ C0] RSP: 0018:ffffc90000007788 EFLAGS: 00010046 [ 917.521886][ C0] RAX: a89fb971aaac6200 RBX: ffff888143b340e0 RCX: ffff88801df60000 [ 917.530247][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 917.538332][ C0] RBP: 0000000000000081 R08: ffffffff8e210aef R09: 1ffffffff1c4215d [ 917.547112][ C0] R10: dffffc0000000000 R11: fffffbfff1c4215e R12: dffffc0000000000 [ 917.555462][ C0] R13: ffff888143b3410d R14: ffff888143b340e8 R15: ffff888026b48fba [ 917.563547][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 917.572520][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 917.579299][ C0] CR2: 000000110c2c130b CR3: 0000000031098000 CR4: 00000000003526f0 [ 917.587391][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 917.595387][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 917.603383][ C0] Call Trace: [ 917.606695][ C0] [ 917.609585][ C0] hidg_set_alt+0x126/0xa00 [ 917.614380][ C0] ? usb_gadget_set_state+0x142/0x310 [ 917.619880][ C0] set_config+0x6e8/0xf70 [ 917.624271][ C0] composite_setup+0x194c/0x2b00 [ 917.629247][ C0] configfs_composite_setup+0xc3/0x100 [ 917.634735][ C0] dummy_timer+0x12ea/0x3420 [ 917.639416][ C0] ? __lock_acquire+0x1465/0x7c40 [ 917.644770][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 917.651181][ C0] ? lock_chain_count+0x20/0x20 [ 917.656542][ C0] ? dummy_free_streams+0x520/0x520 [ 917.661795][ C0] __hrtimer_run_queues+0x522/0xc90 [ 917.667113][ C0] ? dummy_free_streams+0x520/0x520 [ 917.672358][ C0] ? hrtimer_interrupt+0x980/0x980 [ 917.677613][ C0] hrtimer_run_softirq+0x173/0x290 [ 917.682900][ C0] handle_softirqs+0x291/0x910 [ 917.688422][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 917.694444][ C0] ? do_softirq+0x210/0x210 [ 917.698974][ C0] ? hrtimer_interrupt+0x775/0x980 [ 917.704152][ C0] __irq_exit_rcu+0x13b/0x230 [ 917.708861][ C0] ? irq_exit_rcu+0x20/0x20 [ 917.713397][ C0] irq_exit_rcu+0x5/0x20 [ 917.717665][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 917.723505][ C0] [ 917.726484][ C0] [ 917.729993][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 917.737270][ C0] RIP: 0010:queue_delayed_work_on+0x1a7/0x1f0 [ 917.743542][ C0] Code: 4d 85 ed 75 16 e8 59 f6 2d 00 eb 15 e8 52 f6 2d 00 e8 6d e0 db 08 4d 85 ed 74 ea e8 43 f6 2d 00 fb 48 c7 44 24 20 0e 36 e0 45 <48> b8 00 00 00 00 00 fc ff df 49 c7 04 06 00 00 00 00 41 c7 44 06 [ 917.763376][ C0] RSP: 0018:ffffc90003dc7b60 EFLAGS: 00000293 [ 917.769558][ C0] RAX: ffffffff815437dd RBX: 0000000000000000 RCX: ffff88801df60000 [ 917.777553][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 917.786799][ C0] RBP: ffffc90003dc7c30 R08: ffffffff90b1032f R09: 1ffffffff2162065 [ 917.794800][ C0] R10: dffffc0000000000 R11: fffffbfff2162066 R12: ffffffff81557601 [ 917.803087][ C0] R13: 0000000000000200 R14: 1ffff920007b8f70 R15: 0000000000000000 [ 917.811103][ C0] ? process_one_work+0x701/0x1160 [ 917.816334][ C0] ? queue_delayed_work_on+0x19d/0x1f0 [ 917.821835][ C0] ? delayed_work_timer_fn+0x80/0x80 [ 917.827140][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 917.833082][ C0] ? _raw_spin_unlock+0x40/0x40 [ 917.838054][ C0] ? nsim_dev_hwstats_traffic_work+0x155/0x1a0 [ 917.844244][ C0] ? process_one_work+0x7b4/0x1160 [ 917.849397][ C0] process_one_work+0x8ab/0x1160 [ 917.854465][ C0] ? worker_detach_from_pool+0x240/0x240 [ 917.860390][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 917.865441][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 917.871014][ C0] ? wq_worker_running+0x97/0x190 [ 917.876347][ C0] worker_thread+0xaf5/0x12a0 [ 917.881070][ C0] kthread+0x29d/0x330 [ 917.885170][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 917.890414][ C0] ? kthread_blkcg+0xd0/0xd0 [ 917.895125][ C0] ret_from_fork+0x1f/0x30 [ 917.899979][ C0] [ 917.903211][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 917.910510][ C0] CPU: 0 PID: 15660 Comm: kworker/0:7 Not tainted syzkaller #0 [ 917.918165][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 917.928249][ C0] Workqueue: events nsim_dev_hwstats_traffic_work [ 917.934804][ C0] Call Trace: [ 917.938713][ C0] [ 917.943242][ C0] dump_stack_lvl+0x188/0x24e [ 917.947961][ C0] ? memcpy+0x3c/0x60 [ 917.952046][ C0] ? show_regs_print_info+0x12/0x12 [ 917.957391][ C0] ? load_image+0x410/0x410 [ 917.961928][ C0] panic+0x2d3/0x710 [ 917.966130][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 917.970663][ C0] ? ret_from_fork+0x1f/0x30 [ 917.975287][ C0] __warn+0x2f8/0x4f0 [ 917.979401][ C0] ? usb_ep_enable+0x27c/0x4d0 [ 917.984195][ C0] ? usb_ep_enable+0x27c/0x4d0 [ 917.989079][ C0] report_bug+0x2ba/0x4f0 [ 917.993838][ C0] ? usb_ep_enable+0x27c/0x4d0 [ 917.998822][ C0] handle_bug+0x3a/0x70 [ 918.003125][ C0] exc_invalid_op+0x16/0x40 [ 918.007656][ C0] asm_exc_invalid_op+0x16/0x20 [ 918.012542][ C0] RIP: 0010:usb_ep_enable+0x27c/0x4d0 [ 918.018113][ C0] Code: 49 8b 0e 48 c7 c0 80 cf 3e 8b 49 c7 c0 a0 cf 3e 8b 4c 0f 44 c0 48 c7 c7 40 cf 3e 8b 48 c7 c6 19 aa 63 8c 89 ea e8 d4 f4 ce fa <0f> 0b e9 c4 fe ff ff e8 78 6a 03 fb 49 bc 00 00 00 00 00 fc ff df [ 918.038106][ C0] RSP: 0018:ffffc90000007788 EFLAGS: 00010046 [ 918.044362][ C0] RAX: a89fb971aaac6200 RBX: ffff888143b340e0 RCX: ffff88801df60000 [ 918.054460][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 918.063044][ C0] RBP: 0000000000000081 R08: ffffffff8e210aef R09: 1ffffffff1c4215d [ 918.071136][ C0] R10: dffffc0000000000 R11: fffffbfff1c4215e R12: dffffc0000000000 [ 918.079242][ C0] R13: ffff888143b3410d R14: ffff888143b340e8 R15: ffff888026b48fba [ 918.087264][ C0] ? usb_ep_enable+0x27c/0x4d0 [ 918.092787][ C0] hidg_set_alt+0x126/0xa00 [ 918.097806][ C0] ? usb_gadget_set_state+0x142/0x310 [ 918.103397][ C0] set_config+0x6e8/0xf70 [ 918.107889][ C0] composite_setup+0x194c/0x2b00 [ 918.112871][ C0] configfs_composite_setup+0xc3/0x100 [ 918.118825][ C0] dummy_timer+0x12ea/0x3420 [ 918.123560][ C0] ? __lock_acquire+0x1465/0x7c40 [ 918.128727][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 918.133898][ C0] ? lock_chain_count+0x20/0x20 [ 918.138789][ C0] ? dummy_free_streams+0x520/0x520 [ 918.144391][ C0] __hrtimer_run_queues+0x522/0xc90 [ 918.149674][ C0] ? dummy_free_streams+0x520/0x520 [ 918.155170][ C0] ? hrtimer_interrupt+0x980/0x980 [ 918.160335][ C0] hrtimer_run_softirq+0x173/0x290 [ 918.165562][ C0] handle_softirqs+0x291/0x910 [ 918.170363][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 918.175246][ C0] ? do_softirq+0x210/0x210 [ 918.179790][ C0] ? hrtimer_interrupt+0x775/0x980 [ 918.185278][ C0] __irq_exit_rcu+0x13b/0x230 [ 918.190072][ C0] ? irq_exit_rcu+0x20/0x20 [ 918.194638][ C0] irq_exit_rcu+0x5/0x20 [ 918.198939][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 918.204709][ C0] [ 918.207662][ C0] [ 918.210614][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 918.217113][ C0] RIP: 0010:queue_delayed_work_on+0x1a7/0x1f0 [ 918.223223][ C0] Code: 4d 85 ed 75 16 e8 59 f6 2d 00 eb 15 e8 52 f6 2d 00 e8 6d e0 db 08 4d 85 ed 74 ea e8 43 f6 2d 00 fb 48 c7 44 24 20 0e 36 e0 45 <48> b8 00 00 00 00 00 fc ff df 49 c7 04 06 00 00 00 00 41 c7 44 06 [ 918.242949][ C0] RSP: 0018:ffffc90003dc7b60 EFLAGS: 00000293 [ 918.249046][ C0] RAX: ffffffff815437dd RBX: 0000000000000000 RCX: ffff88801df60000 [ 918.257040][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 918.265036][ C0] RBP: ffffc90003dc7c30 R08: ffffffff90b1032f R09: 1ffffffff2162065 [ 918.273033][ C0] R10: dffffc0000000000 R11: fffffbfff2162066 R12: ffffffff81557601 [ 918.281032][ C0] R13: 0000000000000200 R14: 1ffff920007b8f70 R15: 0000000000000000 [ 918.289055][ C0] ? process_one_work+0x701/0x1160 [ 918.294228][ C0] ? queue_delayed_work_on+0x19d/0x1f0 [ 918.299725][ C0] ? delayed_work_timer_fn+0x80/0x80 [ 918.305038][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 918.311326][ C0] ? _raw_spin_unlock+0x40/0x40 [ 918.316212][ C0] ? nsim_dev_hwstats_traffic_work+0x155/0x1a0 [ 918.322413][ C0] ? process_one_work+0x7b4/0x1160 [ 918.327746][ C0] process_one_work+0x8ab/0x1160 [ 918.332720][ C0] ? worker_detach_from_pool+0x240/0x240 [ 918.338387][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 918.343438][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 918.349121][ C0] ? wq_worker_running+0x97/0x190 [ 918.354363][ C0] worker_thread+0xaf5/0x12a0 [ 918.359379][ C0] kthread+0x29d/0x330 [ 918.364183][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 918.369375][ C0] ? kthread_blkcg+0xd0/0xd0 [ 918.374808][ C0] ret_from_fork+0x1f/0x30 [ 918.379827][ C0] [ 918.383591][ C0] Kernel Offset: disabled [ 918.388111][ C0] Rebooting in 86400 seconds..