last executing test programs: 5.299221519s ago: executing program 0 (id=460): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000002000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000002", 0x2d) 5.067712385s ago: executing program 0 (id=462): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101e42, 0x33) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000005c0)) 4.668913153s ago: executing program 1 (id=468): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.579680329s ago: executing program 0 (id=469): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f00000000c0)='./file0\x00', r2, 0x4000, r2}, 0x18) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0xb}, 0x94) syz_usb_control_io$hid(r3, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="40084f0000003a45444db441ba8f87f2de0e4872fc8bf45a40f05ee2dd90695e964d4c32c89580d16e26665c3cb71de602a74a933006000000000000009e550e6cce756bd0fcb4d76e82557a2a3105786e85061901"], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000480)={0x20, 0x3, 0x1, 0x8}}) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000140)={0x0, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 3.791935344s ago: executing program 2 (id=473): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x24048800) sched_setattr(0x0, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0xb, @sdr={0x34565559, 0x2}}) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) poll(0x0, 0x0, 0x8) r4 = socket(0x40000000015, 0x800, 0xfffffffc) connect$inet(r4, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto(r5, &(0x7f0000000100)="51bf7336f6cdf0ca6c13c866d6bc7b55f2d501845841bb2c078a988b7eb38f11a326083cf884920013fbae4a3a5d9c8ea7ea86669fb6212da0b5c82136d9519daeb17c9f96ad78cccef50ab4eabcafbc1a18735359cd7329816984d180735476f901401079349dfbe2e614f51a07c00544d90a594972ba60e1b497f88dcdc1e45dd28c0678", 0x85, 0x20000000, &(0x7f0000000280)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000240), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f0000000000)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r6, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) close(r6) close_range(r0, 0xffffffffffffffff, 0x0) 3.158772649s ago: executing program 3 (id=474): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x20000000, {0x1, 0xff, 0x4}, 0x1}, 0x18) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$can_j1939(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x1d, r3, 0x2, {0x2, 0x0, 0x2}}, 0x18, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) 2.831612561s ago: executing program 3 (id=475): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001680)=@filter={'filter\x00', 0xe, 0x6, 0x102c, [0x0, 0x200000000640, 0x20000000070e, 0x200000000a82], 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/4076]}, 0x1064) 2.516085263s ago: executing program 3 (id=476): socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x2b4, &(0x7f0000000040)={0x0, 0xe8a1, 0xc000, 0x3, 0x18e}) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.465643657s ago: executing program 3 (id=477): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100040, 0x4, &(0x7f0000006680)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96, 0x200}, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0xffffffffffffffff}) 2.327026157s ago: executing program 3 (id=478): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101e42, 0x33) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000005c0)) 2.256447692s ago: executing program 1 (id=479): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.917122366s ago: executing program 2 (id=480): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3f}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200000214000e00602fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5) 1.751398457s ago: executing program 1 (id=481): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=@newtfilter={0x80, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0xfff0}, {}, {0xfff2, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x50, 0x2, [@TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_POLICE={0x4, 0x2, [@TCA_POLICE_RESULT={0x0, 0x5, 0xffffff42}]}, @TCA_CGROUP_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x7, 0x3, 0x86, 0xd412, {0x7, 0x0, 0x1ff, 0xe75, 0x3998, 0x5}, {0xf7, 0x1, 0x1a, 0x0, 0x6, 0x2}, 0x1, 0x5, 0x6}}]}, @TCA_CGROUP_EMATCHES={0xffffffffffffff7b}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.535918622s ago: executing program 3 (id=482): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r5 = openat(0xffffffffffffffff, 0x0, 0xd40, 0x82) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000400)={@local, @broadcast}, &(0x7f0000000200)=0xc) openat$btrfs_control(0xffffff9c, 0x0, 0x20642, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000001bc0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)}}, {{&(0x7f00000022c0)={0x2, 0x20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}, {{&(0x7f0000000680)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}], 0x3, 0x1005) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xd) 1.040385607s ago: executing program 2 (id=483): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf2502000000080001", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="52000180"], 0x5) 979.287821ms ago: executing program 1 (id=484): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/softnet_stat\x00') preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) 776.001416ms ago: executing program 1 (id=485): socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x2b4, &(0x7f0000000040)={0x0, 0xe8a1, 0xc000, 0x3, 0x18e}) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 635.946295ms ago: executing program 0 (id=486): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100040, 0x4, &(0x7f0000006680)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96, 0x200}, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0xffffffffffffffff}) 491.458745ms ago: executing program 2 (id=487): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000680)={0x2f, 0x1b, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x5, 0x1, [0x7]}}, @generic={0x8, 0x9e, "369962423f73dc19f18365e8bc2df56684818192c6dcda76ab3fd201e18d670d09f0a730c444115de3b4fc6e9cfcd426522245a987964202f5d21fd6dc795007fafc002913d2a9eb6ffd2a5602dfef1bf59ce4c26b44a33a9e805c9dd39cfafa0fdfbe6effd3e0698dd1b2681d3af166d29be54b8bf79ac3879430ba6a6c39fe1b542a978e608ea6b59b079a3f8ff6546b7515ffaf1c49f793fc8ac27eba"}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xf4}]}, 0xe8) 427.916239ms ago: executing program 1 (id=488): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x24048800) sched_setattr(0x0, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0xb, @sdr={0x34565559, 0x2}}) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) poll(0x0, 0x0, 0x8) r4 = socket(0x40000000015, 0x800, 0xfffffffc) connect$inet(r4, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto(r5, &(0x7f0000000100)="51bf7336f6cdf0ca6c13c866d6bc7b55f2d501845841bb2c078a988b7eb38f11a326083cf884920013fbae4a3a5d9c8ea7ea86669fb6212da0b5c82136d9519daeb17c9f96ad78cccef50ab4eabcafbc1a18735359cd7329816984d180735476f901401079349dfbe2e614f51a07c00544d90a594972ba60e1b497f88dcdc1e45dd28c0678", 0x85, 0x20000000, &(0x7f0000000280)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000240), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f0000000000)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r6, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) close(r6) close_range(r0, 0xffffffffffffffff, 0x0) 427.258939ms ago: executing program 0 (id=489): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x4335, 0xba, 0x1, 0x6, 0x8}, 0x1, 0xc, [{0x3, 0x4, 0x1100, 0x5, 0x5, 0x6}]}, [{0x0, 0xf24, 0x6, 0x7, 0xe, 0x8}, {0x7, 0xbe, 0xe, 0x101, 0x8, 0x1}, {0xfff, 0xdd74, 0x1c0000, 0x6, 0x5b9, 0xfffffffe}, {0x4, 0x9, 0x9, 0x1, 0x9}, {0x7f, 0x81, 0x55e, 0x43, 0xc, 0x4}, {0x6, 0x2, 0x8, 0x3, 0x7}, {0x800, 0x8, 0x100, 0x9, 0x800, 0x4}, {0xd920, 0x81, 0x2e, 0x6, 0xb, 0x3}, {0x82, 0x10000000, 0xea8, 0x401, 0x0, 0x49}, {0xfffffffe, 0x9, 0x5, 0x4, 0x85, 0x8}, {0x6, 0xf, 0x8, 0x0, 0x9, 0x9}, {0x5, 0x10, 0x2, 0x7, 0xdc, 0x80000000}, {0x7, 0x8, 0x7, 0x6, 0xffffffff}, {0x0, 0x5, 0x9, 0x6, 0x2, 0x9}, {0x200, 0x6, 0x8, 0x4, 0x3, 0x4}, {0x2, 0x5, 0xe, 0x5, 0xfffeffff, 0x8000}, {0x1ff, 0x6, 0x2, 0xfff, 0x16, 0xf}, {0xac, 0x7fffffff, 0xffff7fff, 0x401, 0x2, 0x80000001}, {0x1800, 0x0, 0x80, 0xaa3, 0x68, 0x5}, {0x9, 0x10000, 0x8, 0x4, 0x0, 0x7802}, {0x4, 0xb8, 0x0, 0x6, 0xffff0000}, {0x3, 0x7fffffff, 0x8ac, 0x2, 0x3, 0xa}, {0x7fff, 0xcc00, 0x0, 0x889a, 0xec1b, 0x9}, {0x9, 0x3, 0x6, 0x9, 0x1, 0x2}, {0x53, 0x5, 0x8, 0x0, 0x8, 0x1}, {0x7, 0x6, 0x5, 0x1, 0x2, 0x5}, {0x6, 0x1, 0x3, 0x4, 0x4, 0xf}, {0x7, 0x6, 0x405a, 0x3, 0x34, 0x60b7}, {0x35, 0x7fffffff, 0xc27, 0x4, 0x7fff, 0x1}, {0x7, 0x400, 0x1, 0xf87, 0x10000, 0x1}, {0x2, 0x9, 0x7, 0x9, 0xffffff7f, 0x5}, {0xff, 0x401, 0xf, 0x5, 0x145, 0x6}, {0x1, 0xfffffffb, 0x10, 0x0, 0x8, 0xa}, {0xfffffff8, 0x3, 0x5, 0xfff, 0x9, 0x7fff}, {0x2e, 0x6, 0x3, 0x2, 0x4, 0x8}, {0x6, 0xf, 0xe, 0x4, 0xffffffff, 0x8}, {0x8, 0x81, 0xfff, 0x0, 0x7fffffff, 0xe}, {0x789, 0x80, 0x4, 0x3, 0x2ae8, 0xb18}, {0x4b, 0x1ff, 0x7, 0x5f, 0xf, 0x8001}, {0x3, 0x0, 0x1, 0x1, 0x1, 0x10}, {0xb2280000, 0x0, 0x8000, 0x5, 0x4a0, 0x7}, {0x5a, 0x10000, 0x9, 0x2, 0x6, 0x7}, {0x0, 0x5, 0xfcd4, 0x83a, 0x0, 0x8000000}, {0x3, 0x7, 0x1, 0x0, 0x18, 0x5}, {0x7, 0x9, 0x4, 0x4, 0x62, 0x80000001}, {0x3, 0x9, 0x80000000, 0x3, 0x4, 0xe1}, {0xffff6c01, 0x8, 0x9, 0x8, 0xa1, 0xfffffffa}, {0x1, 0x8, 0xf80, 0x8, 0x4, 0xed8}, {0xaff, 0x9, 0x2, 0x8, 0x8, 0x6}, {0x10, 0x64f7, 0x669f, 0xeed, 0x90, 0x4}, {0x8001, 0x81, 0x9, 0xb8, 0xfff, 0x8}, {0x3, 0xb2, 0x5, 0x702, 0x4, 0x4}, {0x8, 0xfffffc01, 0x9, 0x6, 0x4, 0x3}, {0x1, 0x6, 0x800, 0x4, 0x0, 0x9}, {0x3ff, 0x2, 0xeae2aefa, 0x3, 0x6, 0x4}, {0xdf0, 0x3ff, 0x0, 0x5, 0x8, 0x80000}, {0x7dbb, 0xffff82a1, 0x1000, 0x0, 0x3, 0x8000}, {0x8000, 0x8, 0x3, 0x45a, 0x1000, 0x2}, {0x0, 0x0, 0x3, 0x8, 0x9, 0x6}, {0x0, 0xb, 0x1000, 0x1, 0x8, 0x9}, {0x3, 0xffffffea, 0xb, 0x9, 0x6, 0x7}, {0x8, 0x200, 0x7184, 0xfc9, 0x1, 0x4}, {0x4a7b7d9c, 0x4, 0x8, 0x2, 0x4, 0x7fffffff}, {0x3, 0x0, 0x81, 0xfdca, 0x6, 0x7}, {0x8, 0x80, 0x0, 0x1, 0x80, 0x80000000}, {0x8340, 0x2, 0x7, 0x7, 0x1ff, 0x5}, {0xffffff00, 0x8, 0x400, 0x5, 0x9, 0x9}, {0x101, 0x1, 0x7ff, 0x4, 0x3ff, 0xff}, {0xfff, 0x3, 0x0, 0x0, 0x2, 0x4}, {0x80000000, 0x5, 0x1, 0x5, 0x5, 0xf36}, {0x2, 0x200, 0x3c, 0x2, 0xffffffff, 0x7fff}, {0x3, 0x4, 0x3, 0x8, 0x2, 0x6}, {0x1, 0x481543f5, 0xfffffffb, 0x8, 0x5, 0x4}, {0xfffffffe, 0xf8bf, 0x2, 0x280941e5, 0x5, 0x2}, {0x1, 0xf, 0x4, 0x8001, 0xa6, 0x40}, {0xc, 0x4, 0x2, 0x3, 0x9, 0xffffffff}, {0x7c5, 0x1000, 0x0, 0x101, 0x9, 0x600}, {0xa5, 0x81, 0x4, 0x2, 0xf, 0x2}, {0x6, 0x7fffffff, 0x9, 0xc, 0x10000, 0xe782}, {0xffff, 0xffff, 0xffff936e, 0xfffffff9, 0x9, 0x400}, {0x0, 0x101, 0x4, 0x6, 0x800, 0x3}, {0x8, 0xfff, 0x0, 0x2, 0x12c8c0}, {0x80, 0x3, 0x3ff, 0x0, 0x0, 0x4}, {0x401, 0x3aa0, 0x2, 0xa7e, 0x10000, 0x1}, {0x9, 0x4, 0xffff, 0x1, 0x7, 0x7f}, {0x5, 0x51d9, 0x4, 0x4, 0x3}, {0x5, 0x5, 0x8001, 0x8, 0x0, 0x2}, {0x177f, 0x8, 0x4, 0x401, 0x6, 0x61bd}, {0x6, 0xfffffffa, 0x4, 0x8001, 0x2, 0x200}, {0xe4e6, 0x0, 0x1ff, 0x9, 0x4, 0x5}, {0xfffffff8, 0x7, 0xd, 0x101, 0xd, 0x5}, {0x1ff, 0x7, 0x4, 0x1, 0x4, 0x2}, {0x93f4, 0x8, 0x4, 0x4, 0x0, 0xdc}, {0x6, 0x200, 0x8, 0x6, 0x0, 0xc9e3c560}, {0x68, 0xfffffff0, 0x9, 0x10, 0x2, 0x4}, {0x1, 0x6, 0x6, 0x269392d8, 0x9, 0x2}, {0x101, 0x9, 0xda, 0x8001, 0x400}, {0x6, 0x8, 0x97f1, 0x4, 0xc6a, 0x1}, {0xc, 0x3, 0x81, 0xfffffffb, 0x101, 0xffff8e71}, {0x401, 0x7, 0x3, 0x4, 0xfffffffb, 0x100}, {0x80000000, 0x7, 0x3, 0x817, 0xd1a, 0x9}, {0x9, 0xfff, 0x3e3, 0x1, 0x1, 0x200}, {0x80000000, 0x7, 0x5, 0xaa0, 0xa05d, 0xda3}, {0x8, 0x1, 0x0, 0x100, 0x3, 0x4}, {0x3, 0x19750fe0, 0x1, 0x72a1, 0xc741, 0xb}, {0x0, 0x6, 0x2, 0x8, 0x76b196a6, 0x8}, {0x8000, 0x9, 0x1e, 0x6, 0xffffffa9}, {0x16fe11e, 0x4, 0x0, 0x101, 0x45, 0x9}, {0x1560, 0x9, 0x7, 0x4, 0x3397, 0x3}, {0x1, 0x0, 0x1, 0x8, 0x2, 0xd9}, {0x1, 0x9, 0x7, 0x7fffffff, 0x9fd8, 0x9}, {0x151, 0x400, 0x7fff, 0xa64, 0xffffff27, 0xcc}, {0x4, 0x7fffffff, 0x0, 0xd, 0x7ff, 0x4}, {0x8, 0xc28d, 0x4f110ab2, 0x0, 0x5, 0x6}, {0x7, 0x2, 0x5, 0x3, 0x8, 0x2}, {0x0, 0x2, 0x7548, 0x3, 0xafa, 0x9}, {0xb1c, 0x4, 0xbc, 0x8, 0x8, 0x7}, {0x3, 0x187, 0x2, 0x1, 0x0, 0x4}, {0x0, 0x4, 0xcfb6, 0xfffffffe, 0x0, 0x6}, {0xfffffe10, 0x6, 0x5, 0x0, 0x26b, 0x7}, {0xc913, 0x6, 0x1ff, 0x4, 0x2, 0xffff}, {0x9, 0x7, 0x8, 0x6ea, 0x8, 0x42cd443b}, {0x6, 0x8, 0x1f, 0x101, 0x4, 0xfffffffb}, {0x81, 0xc13, 0x4, 0x1, 0xa8e0, 0x9}, {0x9, 0x9, 0x1ff, 0x8001, 0xfffffffa, 0x4}, {0x8, 0x8, 0x4, 0x2, 0xef52, 0x1}, {0xacf88a0, 0x7, 0x7, 0xd6, 0x9, 0x3}, {0x60, 0x8, 0xf8, 0x2e, 0x2}], [{0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x4}, {}, {0x1, 0x1}, {0x5}, {0x95b179793b992e66}, {0x5, 0x1}, {0x1}, {0x2}, {}, {0x5}, {}, {0x4}, {0x1}, {}, {0x3}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x4}, {0x1}, {0x1}, {0x4}, {0x3}, {0x6, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x6}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x0, 0x1}, {0x2}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x1bcf055d63d26b15}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x4, 0x9d647d7a99850e3}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x0, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 277.05425ms ago: executing program 2 (id=490): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/39, 0x27}], 0x1) write$ppp(r0, &(0x7f0000000200)="bc72", 0x2) 100.776712ms ago: executing program 0 (id=491): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) close(0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x440e0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) read$usbmon(r2, 0x0, 0x0) 0s ago: executing program 2 (id=492): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3f}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200000214000e00602fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.201' (ED25519) to the list of known hosts. [ 74.399376][ T5754] cgroup: Unknown subsys name 'net' [ 74.540317][ T5754] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.283470][ T5754] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.876736][ T5769] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.880456][ T5773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.893017][ T5773] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.900118][ T5769] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.909517][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.917543][ T5769] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.925750][ T5769] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.934020][ T5772] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.935065][ T5769] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.942920][ T5772] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.949912][ T5769] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.973205][ T5769] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.981498][ T5769] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.990886][ T5769] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.998541][ T5769] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.006884][ T5769] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.006890][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.021910][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.032495][ T5769] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.043368][ T5769] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.056569][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.064291][ T5769] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.072390][ T5769] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.080460][ T5769] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.496879][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 78.530029][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 78.626771][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 78.747956][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.757725][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.765485][ T5765] bridge_slave_0: entered allmulticast mode [ 78.772683][ T5765] bridge_slave_0: entered promiscuous mode [ 78.786017][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.794153][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.801634][ T5765] bridge_slave_1: entered allmulticast mode [ 78.809574][ T5765] bridge_slave_1: entered promiscuous mode [ 78.850357][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 78.877979][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.885310][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.892830][ T5767] bridge_slave_0: entered allmulticast mode [ 78.899736][ T5767] bridge_slave_0: entered promiscuous mode [ 78.907587][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.914812][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.922386][ T5767] bridge_slave_1: entered allmulticast mode [ 78.930219][ T5767] bridge_slave_1: entered promiscuous mode [ 78.950520][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.957857][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.965614][ T5768] bridge_slave_0: entered allmulticast mode [ 78.973415][ T5768] bridge_slave_0: entered promiscuous mode [ 78.991769][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.999489][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.007236][ T5768] bridge_slave_1: entered allmulticast mode [ 79.014503][ T5768] bridge_slave_1: entered promiscuous mode [ 79.031958][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.044782][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.112036][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.126189][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.155508][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.169455][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.181690][ T5765] team0: Port device team_slave_0 added [ 79.190025][ T5765] team0: Port device team_slave_1 added [ 79.251721][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.258809][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.285451][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.317972][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.325348][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.332830][ T5766] bridge_slave_0: entered allmulticast mode [ 79.339903][ T5766] bridge_slave_0: entered promiscuous mode [ 79.348396][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.357912][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.384515][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.398669][ T5767] team0: Port device team_slave_0 added [ 79.410842][ T5768] team0: Port device team_slave_0 added [ 79.417636][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.427532][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.435057][ T5766] bridge_slave_1: entered allmulticast mode [ 79.442651][ T5766] bridge_slave_1: entered promiscuous mode [ 79.469030][ T5767] team0: Port device team_slave_1 added [ 79.476293][ T5768] team0: Port device team_slave_1 added [ 79.520028][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.552603][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.559614][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.589191][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.603044][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.633871][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.641127][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.672258][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.685716][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.693539][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.719947][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.731825][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.740381][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.767502][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.806567][ T5766] team0: Port device team_slave_0 added [ 79.822443][ T5766] team0: Port device team_slave_1 added [ 79.836386][ T5765] hsr_slave_0: entered promiscuous mode [ 79.843100][ T5765] hsr_slave_1: entered promiscuous mode [ 79.923329][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.930344][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.959250][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.981574][ T5768] hsr_slave_0: entered promiscuous mode [ 79.987975][ T5768] hsr_slave_1: entered promiscuous mode [ 79.994642][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.002569][ T5768] Cannot create hsr debugfs directory [ 80.013561][ T5767] hsr_slave_0: entered promiscuous mode [ 80.020342][ T5767] hsr_slave_1: entered promiscuous mode [ 80.028211][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.035938][ T5767] Cannot create hsr debugfs directory [ 80.042593][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.049663][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.076868][ T5773] Bluetooth: hci0: command tx timeout [ 80.082837][ T5773] Bluetooth: hci1: command tx timeout [ 80.086898][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.142336][ T5773] Bluetooth: hci2: command tx timeout [ 80.143475][ T5776] Bluetooth: hci3: command tx timeout [ 80.332397][ T5766] hsr_slave_0: entered promiscuous mode [ 80.340764][ T5766] hsr_slave_1: entered promiscuous mode [ 80.347799][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.355838][ T5766] Cannot create hsr debugfs directory [ 80.546201][ T5765] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.592919][ T5765] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.613378][ T5765] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.633007][ T5765] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.684864][ T5768] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.710555][ T5768] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.731785][ T5768] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.754063][ T5768] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.815188][ T5767] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.836798][ T5767] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.847325][ T5767] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.877227][ T5767] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.958447][ T5766] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.970393][ T5766] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.985682][ T5766] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.998187][ T5766] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.057533][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.135003][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.160919][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.180085][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.187585][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.199135][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.206357][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.229197][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.278956][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.299960][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.307141][ T4189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.317878][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.349177][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.356512][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.373847][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.380979][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.391805][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.399058][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.431245][ T5765] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.441982][ T5765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.484666][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.547030][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.631982][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.639292][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.691871][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.699412][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.903204][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.012232][ T5765] veth0_vlan: entered promiscuous mode [ 82.050196][ T5765] veth1_vlan: entered promiscuous mode [ 82.121444][ T5765] veth0_macvtap: entered promiscuous mode [ 82.146764][ T5776] Bluetooth: hci1: command tx timeout [ 82.155888][ T5776] Bluetooth: hci0: command tx timeout [ 82.178044][ T5765] veth1_macvtap: entered promiscuous mode [ 82.223060][ T5773] Bluetooth: hci3: command tx timeout [ 82.228620][ T5776] Bluetooth: hci2: command tx timeout [ 82.294678][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.335328][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.370273][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.389573][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.446859][ T5765] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.457219][ T5765] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.475000][ T5765] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.488659][ T5765] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.557520][ T5767] veth0_vlan: entered promiscuous mode [ 82.588416][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.655430][ T5766] veth0_vlan: entered promiscuous mode [ 82.696985][ T5767] veth1_vlan: entered promiscuous mode [ 82.750878][ T5766] veth1_vlan: entered promiscuous mode [ 82.910725][ T5767] veth0_macvtap: entered promiscuous mode [ 82.927637][ T5768] veth0_vlan: entered promiscuous mode [ 82.940382][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.949896][ T5766] veth0_macvtap: entered promiscuous mode [ 82.982377][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.011600][ T5767] veth1_macvtap: entered promiscuous mode [ 83.065507][ T5768] veth1_vlan: entered promiscuous mode [ 83.078914][ T5766] veth1_macvtap: entered promiscuous mode [ 83.118620][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.130692][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.134935][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.149643][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.162815][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.204322][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.219288][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.231731][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.248200][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.259345][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.270469][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.281844][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.294161][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.305042][ T5768] veth0_macvtap: entered promiscuous mode [ 83.317758][ T5768] veth1_macvtap: entered promiscuous mode [ 83.341710][ T5767] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.351041][ T5767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.360153][ T5767] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.369612][ T5767] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.411677][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.429739][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.441563][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.462582][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.496793][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.510961][ T5766] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.522498][ T5766] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.531618][ T5766] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.541085][ T5766] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.687018][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.714990][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.725756][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.757642][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.782397][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.795113][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.808349][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.824473][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.836787][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.848940][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.860624][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.872029][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.882779][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.894554][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.945538][ T5768] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.959940][ T5768] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.970594][ T5768] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.009923][ T5768] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.029033][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.064992][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.111221][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.136181][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.167591][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.179169][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.222670][ T5776] Bluetooth: hci1: command tx timeout [ 84.223038][ T5773] Bluetooth: hci0: command tx timeout [ 84.231623][ T5844] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8'. [ 84.303161][ T5773] Bluetooth: hci2: command tx timeout [ 84.303950][ T5776] Bluetooth: hci3: command tx timeout [ 84.326876][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.352909][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.393249][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.401294][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.514414][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.548901][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.566070][ T5847] syzkaller0: entered promiscuous mode [ 84.571621][ T5847] syzkaller0: entered allmulticast mode [ 84.786542][ T5854] syz.2.10[5854]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 84.849369][ T5854] loop2: detected capacity change from 0 to 1024 [ 84.924283][ T5854] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 84.930871][ T5854] EXT4-fs (loop2): mount failed [ 85.196885][ T5862] loop1: detected capacity change from 0 to 1024 [ 85.219873][ T5862] EXT4-fs: Ignoring removed orlov option [ 85.297142][ T5866] loop2: detected capacity change from 0 to 512 [ 85.314512][ T5862] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.355363][ T5866] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.391238][ T5869] loop3: detected capacity change from 0 to 1024 [ 85.441869][ T5866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.471741][ T5869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.492518][ T5866] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.571501][ T5869] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 85.608580][ T28] audit: type=1800 audit(1775599050.192:2): pid=5866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 85.639976][ T5869] EXT4-fs (loop3): Remounting filesystem read-only [ 85.643575][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.652423][ T5869] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 12, error -5) [ 85.676088][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.871989][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.261093][ T5891] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.302503][ T5773] Bluetooth: hci0: command tx timeout [ 86.312316][ T5773] Bluetooth: hci1: command tx timeout [ 86.382539][ T5773] Bluetooth: hci3: command tx timeout [ 86.383386][ T5776] Bluetooth: hci2: command tx timeout [ 86.566412][ T5898] loop0: detected capacity change from 0 to 1024 [ 86.604975][ T5898] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 86.624035][ T5898] EXT4-fs (loop0): mount failed [ 87.212640][ T787] cfg80211: failed to load regulatory.db [ 87.850057][ T5916] loop2: detected capacity change from 0 to 4096 [ 88.022970][ T5916] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.307986][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.462951][ T5776] Bluetooth: hci3: command tx timeout [ 88.913598][ T5930] syzkaller0: entered promiscuous mode [ 88.919177][ T5930] syzkaller0: entered allmulticast mode [ 89.086549][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.38'. [ 89.598638][ T5946] x_tables: duplicate underflow at hook 4 [ 91.826953][ T5975] xfrm0: entered promiscuous mode [ 91.871114][ T5979] loop1: detected capacity change from 0 to 256 [ 91.956593][ T5979] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.017494][ T28] audit: type=1800 audit(1775599056.602:3): pid=5979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.51" name="bus" dev="loop1" ino=1048592 res=0 errno=0 [ 92.132362][ T28] audit: type=1804 audit(1775599056.602:4): pid=5979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.51" name="/newroot/18/file0/bus" dev="loop1" ino=1048592 res=1 errno=0 [ 92.657729][ T5993] x_tables: duplicate underflow at hook 4 [ 92.668153][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57'. [ 93.385615][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.65'. [ 93.408270][ T6013] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 93.682585][ T5153] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 93.711952][ T6017] syzkaller0: entered promiscuous mode [ 93.743367][ T6017] syzkaller0: entered allmulticast mode [ 93.790878][ T6017] tc action pedit offset 4352 out of bounds [ 93.797261][ T6017] tc action pedit offset 4352 out of bounds [ 93.803390][ T6017] tc action pedit offset 4352 out of bounds [ 93.809394][ T6017] tc action pedit offset 4352 out of bounds [ 93.815427][ T6017] tc action pedit offset 4352 out of bounds [ 93.821504][ T6017] tc action pedit offset 4352 out of bounds [ 93.827476][ T6017] tc action pedit offset 4352 out of bounds [ 93.833464][ T6017] tc action pedit offset 4352 out of bounds [ 93.839397][ T6017] tc action pedit offset 4352 out of bounds [ 93.845571][ T6017] tc action pedit offset 4352 out of bounds [ 93.851625][ T6017] 0: reclassify loop, rule prio 0, protocol 800 [ 93.862084][ T5153] usb 3-1: device descriptor read/64, error -71 [ 94.054629][ T6019] netlink: 68 bytes leftover after parsing attributes in process `syz.0.68'. [ 94.124022][ T6021] loop1: detected capacity change from 0 to 128 [ 94.132225][ T5153] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 94.313591][ T5153] usb 3-1: device descriptor read/64, error -71 [ 94.471815][ T6029] loop3: detected capacity change from 0 to 256 [ 94.514998][ T6029] ======================================================= [ 94.514998][ T6029] WARNING: The mand mount option has been deprecated and [ 94.514998][ T6029] and is ignored by this kernel. Remove the mand [ 94.514998][ T6029] option from the mount to silence this warning. [ 94.514998][ T6029] ======================================================= [ 94.573241][ T5153] usb usb3-port1: attempt power cycle [ 94.582767][ T6029] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 95.715046][ T5153] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 95.812282][ T5153] usb 3-1: device descriptor read/8, error -71 [ 95.846811][ T6044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.75'. [ 96.132632][ T5153] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 96.199608][ T5153] usb 3-1: device descriptor read/8, error -71 [ 96.350504][ T5153] usb usb3-port1: unable to enumerate USB device [ 96.352113][ C1] sched: RT throttling activated [ 97.793358][ T6061] loop3: detected capacity change from 0 to 128 [ 97.893879][ T6055] x_tables: duplicate underflow at hook 4 [ 97.922806][ T6063] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.178488][ T6074] pimreg: entered allmulticast mode [ 98.249777][ T6074] netlink: 28 bytes leftover after parsing attributes in process `syz.1.80'. [ 98.363085][ T6074] Zero length message leads to an empty skb [ 99.076545][ T27] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 99.191349][ T6093] loop2: detected capacity change from 0 to 4096 [ 99.194225][ T6080] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.207469][ T6080] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.237321][ T6093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.252732][ T27] usb 1-1: device descriptor read/64, error -71 [ 99.337051][ T28] audit: type=1800 audit(1775599063.922:5): pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.87" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 99.532506][ T27] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 99.560506][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.722374][ T27] usb 1-1: device descriptor read/64, error -71 [ 99.844389][ T27] usb usb1-port1: attempt power cycle [ 99.864727][ T6101] loop2: detected capacity change from 0 to 128 [ 100.065803][ T6080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.123359][ T6080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.282219][ T27] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 100.346975][ T27] usb 1-1: device descriptor read/8, error -71 [ 100.353563][ T6080] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.372415][ T6080] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.390349][ T6080] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.407707][ T6080] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.534042][ T6074] pimreg: left allmulticast mode [ 100.567491][ T6080] syz.3.84 (6080) used greatest stack depth: 20552 bytes left [ 100.601525][ T6110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.91'. [ 100.628650][ T6110] vlan2: entered promiscuous mode [ 100.634805][ T27] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 100.647422][ T6110] gretap0: entered promiscuous mode [ 100.683695][ T27] usb 1-1: device descriptor read/8, error -71 [ 100.811715][ T27] usb usb1-port1: unable to enumerate USB device [ 100.978478][ T6127] syzkaller0: entered promiscuous mode [ 100.987911][ T6127] syzkaller0: entered allmulticast mode [ 101.151901][ T6138] netlink: 320 bytes leftover after parsing attributes in process `syz.2.98'. [ 101.220696][ T6140] loop3: detected capacity change from 0 to 128 [ 101.436837][ T6144] loop3: detected capacity change from 0 to 256 [ 101.470869][ T6144] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 101.526704][ T28] audit: type=1800 audit(1775599066.102:6): pid=6144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.101" name="bus" dev="loop3" ino=1048597 res=0 errno=0 [ 102.397187][ T6170] loop0: detected capacity change from 0 to 128 [ 102.646783][ T6174] loop0: detected capacity change from 0 to 256 [ 102.676995][ T6174] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.708979][ T28] audit: type=1800 audit(1775599067.292:7): pid=6174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.111" name="bus" dev="loop0" ino=1048598 res=0 errno=0 [ 103.097172][ T5153] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 103.263738][ T5153] usb 1-1: device descriptor read/64, error -71 [ 103.544078][ T5153] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 103.659731][ T6151] pimreg: entered allmulticast mode [ 103.668010][ T6153] netlink: 28 bytes leftover after parsing attributes in process `syz.3.103'. [ 103.678443][ T6155] pimreg: left allmulticast mode [ 103.708558][ T5153] usb 1-1: device descriptor read/64, error -71 [ 103.832728][ T5153] usb usb1-port1: attempt power cycle [ 104.262440][ T5153] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 104.303978][ T5153] usb 1-1: device descriptor read/8, error -71 [ 104.497814][ T6194] loop3: detected capacity change from 0 to 256 [ 104.522333][ T6194] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.575083][ T5153] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 104.640759][ T5153] usb 1-1: device descriptor read/8, error -71 [ 104.655751][ T6197] syzkaller0: entered promiscuous mode [ 104.661419][ T6197] syzkaller0: entered allmulticast mode [ 104.784519][ T5153] usb usb1-port1: unable to enumerate USB device [ 106.920749][ T6205] pimreg: entered allmulticast mode [ 106.934546][ T6208] netlink: 28 bytes leftover after parsing attributes in process `syz.1.123'. [ 106.945914][ T6210] pimreg: left allmulticast mode [ 107.151359][ T6232] loop2: detected capacity change from 0 to 512 [ 107.222237][ T6232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.244253][ T6232] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.420203][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.702285][ T6116] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 107.749782][ T6254] syzkaller0: entered promiscuous mode [ 107.763605][ T6254] syzkaller0: entered allmulticast mode [ 107.873032][ T6116] usb 1-1: device descriptor read/64, error -71 [ 108.155565][ T6116] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 108.328912][ T6116] usb 1-1: device descriptor read/64, error -71 [ 108.469976][ T6116] usb usb1-port1: attempt power cycle [ 108.884350][ T6116] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 108.934401][ T6116] usb 1-1: device descriptor read/8, error -71 [ 109.207592][ T6116] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 109.247921][ T6116] usb 1-1: device descriptor read/8, error -71 [ 109.373549][ T6116] usb usb1-port1: unable to enumerate USB device [ 109.654922][ T6263] pimreg: entered allmulticast mode [ 109.660621][ T6267] netlink: 28 bytes leftover after parsing attributes in process `syz.3.144'. [ 109.673065][ T6269] pimreg: left allmulticast mode [ 110.035236][ T6295] netlink: 14 bytes leftover after parsing attributes in process `syz.1.149'. [ 110.495498][ T6309] syzkaller0: entered promiscuous mode [ 110.507706][ T6309] syzkaller0: entered allmulticast mode [ 110.521556][ T6311] pimreg: entered allmulticast mode [ 112.334832][ T6315] netlink: 28 bytes leftover after parsing attributes in process `syz.2.158'. [ 112.345598][ T6317] pimreg: left allmulticast mode [ 112.409645][ T6332] netlink: 14 bytes leftover after parsing attributes in process `syz.3.164'. [ 112.511116][ T6334] loop1: detected capacity change from 0 to 128 [ 112.947099][ T5811] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 112.971895][ T6352] bridge_slave_0: left allmulticast mode [ 112.977735][ T6352] bridge_slave_0: left promiscuous mode [ 112.984192][ T6352] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.001036][ T6352] bridge_slave_1: left allmulticast mode [ 113.007854][ T6352] bridge_slave_1: left promiscuous mode [ 113.013946][ T6352] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.027994][ T6352] bond0: (slave bond_slave_0): Releasing backup interface [ 113.046711][ T6352] bond0: (slave bond_slave_1): Releasing backup interface [ 113.085373][ T6352] team0: Port device team_slave_0 removed [ 113.103943][ T6352] team0: Port device team_slave_1 removed [ 113.110877][ T6352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.118895][ T5811] usb 3-1: device descriptor read/64, error -71 [ 113.125379][ T6352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.137598][ T6352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.145511][ T6352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.165521][ T6354] bridge0: port 1(syz_tun) entered blocking state [ 113.182349][ T6354] bridge0: port 1(syz_tun) entered disabled state [ 113.193642][ T6354] syz_tun: entered allmulticast mode [ 113.207804][ T6354] syz_tun: entered promiscuous mode [ 113.219097][ T6354] bridge0: port 1(syz_tun) entered blocking state [ 113.226835][ T6354] bridge0: port 1(syz_tun) entered forwarding state [ 113.336827][ T6356] syzkaller0: entered promiscuous mode [ 113.344668][ T6356] syzkaller0: entered allmulticast mode [ 113.402359][ T5811] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 113.564080][ T5811] usb 3-1: device descriptor read/64, error -71 [ 113.699945][ T5811] usb usb3-port1: attempt power cycle [ 114.167381][ T5811] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 114.209613][ T5811] usb 3-1: device descriptor read/8, error -71 [ 114.504275][ T5811] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 114.553450][ T5811] usb 3-1: device descriptor read/8, error -71 [ 114.686755][ T5811] usb usb3-port1: unable to enumerate USB device [ 115.228097][ T6367] pimreg: entered allmulticast mode [ 115.235876][ T6370] netlink: 28 bytes leftover after parsing attributes in process `syz.1.175'. [ 115.247114][ T6371] pimreg: left allmulticast mode [ 115.721096][ T6393] loop1: detected capacity change from 0 to 512 [ 115.727706][ T6396] loop0: detected capacity change from 0 to 128 [ 115.740322][ T6394] netlink: 14 bytes leftover after parsing attributes in process `syz.3.177'. [ 115.777945][ T6396] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.806590][ T6396] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 115.858947][ T6393] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.922452][ T6393] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.991853][ T5766] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.090803][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.167345][ T6409] syzkaller0: entered promiscuous mode [ 116.177900][ T6409] syzkaller0: entered allmulticast mode [ 117.845261][ T6418] pimreg: entered allmulticast mode [ 117.851117][ T6420] netlink: 28 bytes leftover after parsing attributes in process `syz.3.187'. [ 117.871028][ T6421] pimreg: left allmulticast mode [ 118.227364][ T6436] loop3: detected capacity change from 0 to 512 [ 118.294341][ T6438] loop0: detected capacity change from 0 to 512 [ 118.301182][ T6440] netlink: 14 bytes leftover after parsing attributes in process `syz.1.191'. [ 118.327648][ T6436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.348434][ T6438] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.372381][ T23] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 118.380717][ T6436] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.408383][ T6438] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.552363][ T23] usb 3-1: device descriptor read/64, error -71 [ 118.583021][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.597878][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.855085][ T23] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 119.012339][ T23] usb 3-1: device descriptor read/64, error -71 [ 119.133089][ T23] usb usb3-port1: attempt power cycle [ 119.542325][ T23] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 119.611186][ T23] usb 3-1: device descriptor read/8, error -71 [ 119.729152][ T6462] pimreg: entered allmulticast mode [ 119.746203][ T6462] netlink: 28 bytes leftover after parsing attributes in process `syz.3.201'. [ 119.759814][ T6462] pimreg: left allmulticast mode [ 119.781327][ T6466] syzkaller0: entered promiscuous mode [ 119.788391][ T6466] syzkaller0: entered allmulticast mode [ 119.912452][ T23] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 119.963524][ T23] usb 3-1: device descriptor read/8, error -71 [ 120.110218][ T23] usb usb3-port1: unable to enumerate USB device [ 120.153031][ T6478] loop0: detected capacity change from 0 to 256 [ 120.195036][ T6478] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 120.238917][ T28] audit: type=1800 audit(1775599084.822:8): pid=6478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.206" name="bus" dev="loop0" ino=1048599 res=0 errno=0 [ 120.270563][ T28] audit: type=1804 audit(1775599084.822:9): pid=6478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.206" name="/newroot/47/file0/bus" dev="loop0" ino=1048599 res=1 errno=0 [ 121.210049][ T6492] pimreg: entered allmulticast mode [ 121.220312][ T6492] netlink: 28 bytes leftover after parsing attributes in process `syz.1.211'. [ 121.245125][ T6492] pimreg: left allmulticast mode [ 121.282965][ T6494] syzkaller0: entered promiscuous mode [ 121.293164][ T6494] syzkaller0: entered allmulticast mode [ 121.638470][ T6503] loop3: detected capacity change from 0 to 256 [ 121.665961][ T6503] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 121.721542][ T28] audit: type=1800 audit(1775599086.302:10): pid=6503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.215" name="bus" dev="loop3" ino=1048600 res=0 errno=0 [ 121.733560][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.217'. [ 121.828574][ T28] audit: type=1804 audit(1775599086.332:11): pid=6503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.215" name="/newroot/57/file0/bus" dev="loop3" ino=1048600 res=1 errno=0 [ 122.059488][ T6516] netlink: 28 bytes leftover after parsing attributes in process `syz.0.221'. [ 122.161470][ T6519] pimreg: entered allmulticast mode [ 122.170791][ T6519] netlink: 28 bytes leftover after parsing attributes in process `syz.1.222'. [ 122.180835][ T6513] netlink: 14 bytes leftover after parsing attributes in process `syz.0.221'. [ 122.209205][ T6519] pimreg: left allmulticast mode [ 122.222359][ T5811] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 122.408502][ T5811] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.434209][ T5811] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 122.447729][ T6527] x_tables: duplicate underflow at hook 4 [ 122.460779][ T5811] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 122.483469][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.566548][ T5811] usb 4-1: config 0 descriptor?? [ 122.591213][ T6530] syzkaller0: entered promiscuous mode [ 122.601588][ T6530] syzkaller0: entered allmulticast mode [ 122.936762][ T6535] syzkaller0: entered promiscuous mode [ 122.944548][ T6535] syzkaller0: entered allmulticast mode [ 123.256276][ T5811] usb 4-1: USB disconnect, device number 2 [ 123.450480][ T6543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.230'. [ 123.696919][ T6548] pimreg: entered allmulticast mode [ 123.720881][ T6548] netlink: 28 bytes leftover after parsing attributes in process `syz.3.232'. [ 123.735527][ T6548] pimreg: left allmulticast mode [ 124.053688][ T6557] syzkaller0: entered promiscuous mode [ 124.059471][ T6557] syzkaller0: entered allmulticast mode [ 124.219321][ T6559] syzkaller0: entered promiscuous mode [ 124.225484][ T6559] syzkaller0: entered allmulticast mode [ 124.683722][ T6116] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 124.875152][ T6576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.242'. [ 124.901221][ T6577] pimreg: entered allmulticast mode [ 124.908930][ T6116] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.929690][ T6577] netlink: 28 bytes leftover after parsing attributes in process `syz.2.243'. [ 124.940239][ T6116] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 125.002320][ T6116] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 125.003587][ T6577] pimreg: left allmulticast mode [ 125.013096][ T6116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.031357][ T6116] usb 1-1: config 0 descriptor?? [ 125.408606][ T23] usb 1-1: USB disconnect, device number 14 [ 125.427092][ T6589] x_tables: duplicate underflow at hook 4 [ 125.451047][ T6588] syzkaller0: entered promiscuous mode [ 125.476009][ T6588] syzkaller0: entered allmulticast mode [ 126.270711][ T6602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.252'. [ 126.634488][ T6608] loop2: detected capacity change from 0 to 256 [ 126.750077][ T6608] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 126.843635][ T28] audit: type=1800 audit(1775599091.432:12): pid=6608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.255" name="bus" dev="loop2" ino=1048601 res=0 errno=0 [ 126.893669][ T28] audit: type=1804 audit(1775599091.432:13): pid=6608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.255" name="/newroot/64/file0/bus" dev="loop2" ino=1048601 res=1 errno=0 [ 127.052205][ T6116] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 127.177614][ T6617] syzkaller0: entered promiscuous mode [ 127.183436][ T6617] syzkaller0: entered allmulticast mode [ 127.260338][ T6116] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.277036][ T6116] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 127.289358][ T6116] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 127.305175][ T6116] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.330324][ T6116] usb 4-1: config 0 descriptor?? [ 127.591218][ T6116] usb 4-1: USB disconnect, device number 3 [ 127.797650][ T6635] loop0: detected capacity change from 0 to 256 [ 127.834009][ T6635] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 127.879744][ T28] audit: type=1800 audit(1775599092.462:14): pid=6635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.266" name="bus" dev="loop0" ino=1048602 res=0 errno=0 [ 127.969484][ T28] audit: type=1804 audit(1775599092.492:15): pid=6635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.266" name="/newroot/60/file0/bus" dev="loop0" ino=1048602 res=1 errno=0 [ 128.219211][ T6642] x_tables: duplicate underflow at hook 4 [ 129.598611][ T6649] syzkaller0: entered promiscuous mode [ 129.619074][ T6649] syzkaller0: entered allmulticast mode [ 129.727013][ T6650] syzkaller0: entered promiscuous mode [ 129.751875][ T6653] loop4: detected capacity change from 0 to 7 [ 129.776532][ T6650] syzkaller0: entered allmulticast mode [ 129.801503][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.810937][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 129.826104][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.835385][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 129.861432][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.870695][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 129.885594][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.894922][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 129.903544][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.913070][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 129.921673][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.931081][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 129.939435][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.948660][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 129.992796][ T6653] ldm_validate_partition_table(): Disk read failed. [ 130.013566][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.022908][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 130.051569][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.060890][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 130.079103][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.089016][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 130.100638][ T6653] Dev loop4: unable to read RDB block 0 [ 130.123777][ T6653] loop4: unable to read partition table [ 130.140018][ T6653] loop4: partition table beyond EOD, truncated [ 130.171638][ T6653] loop_reread_partitions: partition scan of loop4 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 130.431576][ T6663] loop0: detected capacity change from 0 to 256 [ 130.451935][ T6663] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 130.510809][ T28] audit: type=1800 audit(1775599095.092:16): pid=6663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.275" name="bus" dev="loop0" ino=1048603 res=0 errno=0 [ 130.539461][ T28] audit: type=1804 audit(1775599095.122:17): pid=6663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.275" name="/newroot/62/file0/bus" dev="loop0" ino=1048603 res=1 errno=0 [ 130.570193][ T5808] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 130.782785][ T6115] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 130.795000][ T5808] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.814473][ T5808] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 130.840559][ T5808] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 130.850730][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.869702][ T5808] usb 4-1: config 0 descriptor?? [ 130.885932][ T5808] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 131.012538][ T6115] usb 2-1: Using ep0 maxpacket: 32 [ 131.020157][ T6115] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 131.031120][ T6115] usb 2-1: config 0 has no interface number 0 [ 131.043200][ T6115] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 131.064053][ T6115] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 131.081242][ T6115] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.089716][ T6115] usb 2-1: Product: syz [ 131.094268][ T6115] usb 2-1: Manufacturer: syz [ 131.098935][ T6115] usb 2-1: SerialNumber: syz [ 131.108137][ T6115] usb 2-1: config 0 descriptor?? [ 131.129898][ T6115] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 131.156151][ T6115] em28xx 2-1:0.132: Video interface 132 found: [ 131.307717][ T23] usb 4-1: USB disconnect, device number 4 [ 131.583791][ T6115] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 132.023851][ T6115] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 132.055669][ T6115] em28xx 2-1:0.132: board has no eeprom [ 132.085384][ T6691] loop0: detected capacity change from 0 to 256 [ 132.095098][ T6691] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 132.121149][ T28] audit: type=1800 audit(1775599096.702:18): pid=6691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.284" name="bus" dev="loop0" ino=1048604 res=0 errno=0 [ 132.164660][ T28] audit: type=1804 audit(1775599096.732:19): pid=6691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.284" name="/newroot/66/file0/bus" dev="loop0" ino=1048604 res=1 errno=0 [ 132.342548][ T6115] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 132.366605][ T6115] em28xx 2-1:0.132: analog set to bulk mode. [ 132.415115][ T6116] em28xx 2-1:0.132: Registering V4L2 extension [ 132.444372][ T6115] usb 2-1: USB disconnect, device number 2 [ 132.473979][ T6115] em28xx 2-1:0.132: Disconnecting em28xx [ 132.612484][ T5808] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 132.666825][ T6116] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 132.682253][ T6116] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 132.689589][ T6116] em28xx 2-1:0.132: No AC97 audio processor [ 132.717586][ T6116] usb 2-1: Decoder not found [ 132.728876][ T6116] em28xx 2-1:0.132: failed to create media graph [ 132.743444][ T6116] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 132.767903][ T6116] em28xx 2-1:0.132: Remote control support is not available for this card. [ 132.789499][ T6115] em28xx 2-1:0.132: Closing input extension [ 132.815836][ T5808] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.818493][ T6115] em28xx 2-1:0.132: Freeing device [ 132.839379][ T5808] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 132.869814][ T5808] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 132.902192][ T5808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.921627][ T5808] usb 1-1: config 0 descriptor?? [ 132.940253][ T5808] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 133.291422][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.298496][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.639241][ T6115] usb 1-1: USB disconnect, device number 15 [ 134.241601][ T6724] loop0: detected capacity change from 0 to 256 [ 134.265969][ T6724] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 134.377991][ T28] audit: type=1800 audit(1775599098.962:20): pid=6724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.294" name="bus" dev="loop0" ino=1048605 res=0 errno=0 [ 134.431647][ T28] audit: type=1804 audit(1775599098.962:21): pid=6724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.294" name="/newroot/69/file0/bus" dev="loop0" ino=1048605 res=1 errno=0 [ 135.742411][ T6116] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 135.974495][ T6116] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.001456][ T6116] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 136.042271][ T6116] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 136.081945][ T6116] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.115514][ T6116] usb 4-1: config 0 descriptor?? [ 136.136419][ T6116] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 136.861883][ T6116] usb 4-1: USB disconnect, device number 5 [ 138.813253][ T6808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.321'. [ 139.172307][ T6116] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 139.384317][ T6116] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.426307][ T6116] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 139.460249][ T6116] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 139.520957][ T6116] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.576568][ T6116] usb 4-1: config 0 descriptor?? [ 139.601055][ T6116] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 140.060873][ T5809] usb 4-1: USB disconnect, device number 6 [ 141.093422][ T6872] pimreg: entered allmulticast mode [ 141.107153][ T6872] netlink: 28 bytes leftover after parsing attributes in process `syz.3.341'. [ 141.128970][ T6872] pimreg: left allmulticast mode [ 141.282365][ T5809] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 141.476983][ T5809] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.497335][ T5809] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 141.549421][ T6880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.343'. [ 141.564629][ T5809] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 141.573969][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.598267][ T5809] usb 2-1: config 0 descriptor?? [ 141.643076][ T5809] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 141.994870][ T5809] usb 2-1: USB disconnect, device number 3 [ 142.662316][ T6115] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 142.832052][ T6897] pimreg: entered allmulticast mode [ 142.839499][ T6897] netlink: 28 bytes leftover after parsing attributes in process `syz.0.350'. [ 142.854963][ T6897] pimreg: left allmulticast mode [ 142.864399][ T6115] usb 3-1: Using ep0 maxpacket: 32 [ 142.873253][ T6115] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 142.889810][ T6115] usb 3-1: config 0 has no interface number 0 [ 142.907004][ T6115] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 142.930428][ T6115] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 142.951393][ T6115] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.973914][ T6115] usb 3-1: Product: syz [ 142.980005][ T6115] usb 3-1: Manufacturer: syz [ 142.987345][ T6115] usb 3-1: SerialNumber: syz [ 143.004444][ T6115] usb 3-1: config 0 descriptor?? [ 143.026231][ T6115] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 143.044462][ T6115] em28xx 3-1:0.132: Video interface 132 found: [ 143.064861][ T6900] loop3: detected capacity change from 0 to 512 [ 143.153384][ T6900] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.261999][ T6900] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.377875][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.444568][ T6115] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 143.468187][ T6910] fuse: Bad value for 'fd' [ 143.542416][ T5153] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 143.765886][ T5153] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.842403][ T6116] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 143.855747][ T6919] netlink: 28 bytes leftover after parsing attributes in process `syz.3.357'. [ 143.862321][ T5153] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 143.929254][ T6115] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 143.954988][ T6921] netlink: 14 bytes leftover after parsing attributes in process `syz.3.357'. [ 143.962148][ T5153] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 143.973328][ T6115] em28xx 3-1:0.132: board has no eeprom [ 144.015118][ T5153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.039767][ T5153] usb 1-1: config 0 descriptor?? [ 144.105997][ T5153] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 144.154370][ T6116] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 144.163706][ T6115] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 144.171612][ T6115] em28xx 3-1:0.132: analog set to bulk mode. [ 144.179278][ T6116] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.208271][ T6923] syzkaller0: entered promiscuous mode [ 144.219460][ T6923] syzkaller0: entered allmulticast mode [ 144.229914][ T6116] usb 2-1: Product: syz [ 144.247022][ T6115] usb 3-1: USB disconnect, device number 14 [ 144.253193][ T6116] usb 2-1: Manufacturer: syz [ 144.283035][ T6116] usb 2-1: SerialNumber: syz [ 144.291588][ T6115] em28xx 3-1:0.132: Disconnecting em28xx [ 144.297587][ T6114] em28xx 3-1:0.132: Registering V4L2 extension [ 144.315039][ T6116] usb 2-1: config 0 descriptor?? [ 144.370784][ T5809] usb 1-1: USB disconnect, device number 16 [ 144.407102][ T6116] hub 2-1:0.0: bad descriptor, ignoring hub [ 144.486957][ T6116] hub: probe of 2-1:0.0 failed with error -5 [ 144.632398][ T6929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.359'. [ 144.649967][ T6116] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 144.710545][ T6116] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 144.808489][ T6114] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 144.829801][ T6116] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 144.858982][ T6114] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 144.940334][ T6935] pimreg: entered allmulticast mode [ 144.942222][ T6116] usb 2-1: media controller created [ 144.956045][ T6114] em28xx 3-1:0.132: No AC97 audio processor [ 144.959926][ T6935] netlink: 28 bytes leftover after parsing attributes in process `syz.3.360'. [ 144.985949][ T6935] pimreg: left allmulticast mode [ 145.062674][ T6114] usb 3-1: Decoder not found [ 145.107838][ T6114] em28xx 3-1:0.132: failed to create media graph [ 145.161946][ T6114] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 145.196140][ T6116] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 145.217182][ T6114] em28xx 3-1:0.132: Remote control support is not available for this card. [ 145.260209][ T6115] em28xx 3-1:0.132: Closing input extension [ 145.513315][ T6116] DVB: Unable to find symbol dib7000p_attach() [ 145.519527][ T6116] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 145.764152][ T6952] netlink: 'syz.2.366': attribute type 1 has an invalid length. [ 145.948076][ T6952] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.012345][ T6116] rc_core: IR keymap rc-dib0700-rc5 not found [ 146.037783][ T6957] bond1: (slave dummy0): making interface the new active one [ 146.055536][ T6116] Registered IR keymap rc-empty [ 146.084118][ T6116] dvb-usb: could not initialize remote control. [ 146.116618][ T6957] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 146.125798][ T6116] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 146.204596][ T5811] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 146.222234][ T6950] netlink: 14 bytes leftover after parsing attributes in process `syz.2.366'. [ 146.261231][ T6950] bond1: (slave dummy0): Releasing active interface [ 146.421654][ T5811] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 146.476322][ T6957] syz.2.366 (6957) used greatest stack depth: 20328 bytes left [ 146.484351][ T5811] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 146.522737][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.552511][ T5811] usb 4-1: config 0 descriptor?? [ 146.582666][ T5811] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 146.636154][ T6959] syzkaller0: entered promiscuous mode [ 146.641853][ T6959] syzkaller0: entered allmulticast mode [ 146.750906][ T6115] em28xx 3-1:0.132: Freeing device [ 146.751634][ T5811] usb 2-1: USB disconnect, device number 4 [ 146.963793][ T5811] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 147.120407][ T5809] usb 4-1: USB disconnect, device number 7 [ 147.455584][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'. [ 147.679910][ T6987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.376'. [ 147.763823][ T6989] loop3: detected capacity change from 0 to 128 [ 147.862873][ T6989] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 147.992352][ T6989] ext4 filesystem being mounted at /101/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 148.123978][ T6996] fuse: Bad value for 'fd' [ 148.220260][ T5768] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 148.472196][ T27] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 148.751388][ T27] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 148.916497][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.968200][ T27] usb 1-1: Product: syz [ 148.977336][ T27] usb 1-1: Manufacturer: syz [ 148.993036][ T27] usb 1-1: SerialNumber: syz [ 149.084387][ T27] usb 1-1: config 0 descriptor?? [ 149.143001][ T27] hub 1-1:0.0: bad descriptor, ignoring hub [ 149.174389][ T27] hub: probe of 1-1:0.0 failed with error -5 [ 149.372959][ T27] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 149.404768][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 149.432632][ T27] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 149.470630][ T27] usb 1-1: media controller created [ 149.547256][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 149.710901][ T27] DVB: Unable to find symbol dib7000p_attach() [ 149.752701][ T27] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 149.862749][ T27] rc_core: IR keymap rc-dib0700-rc5 not found [ 149.888918][ T27] Registered IR keymap rc-empty [ 149.925908][ T27] dvb-usb: could not initialize remote control. [ 149.962609][ T27] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 150.072055][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.385'. [ 150.158713][ T7025] syzkaller0: entered promiscuous mode [ 150.178963][ T7025] syzkaller0: entered allmulticast mode [ 150.618517][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.389'. [ 150.752419][ T5811] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 150.932202][ T5811] usb 2-1: Using ep0 maxpacket: 32 [ 150.974103][ T5811] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 150.993851][ T5811] usb 2-1: config 0 has no interface number 0 [ 151.000261][ T5811] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 151.017334][ T5811] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 151.045009][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.053981][ T5811] usb 2-1: Product: syz [ 151.058310][ T5811] usb 2-1: Manufacturer: syz [ 151.065130][ T5811] usb 2-1: SerialNumber: syz [ 151.075643][ T5811] usb 2-1: config 0 descriptor?? [ 151.111977][ T5811] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 151.140385][ T5811] em28xx 2-1:0.132: Video interface 132 found: [ 151.297511][ T27] usb 1-1: USB disconnect, device number 17 [ 151.523641][ T5811] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 151.543702][ T27] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 151.923009][ T7049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.395'. [ 151.945743][ T5811] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 151.991365][ T5811] em28xx 2-1:0.132: board has no eeprom [ 152.114259][ T7047] netlink: 16 bytes leftover after parsing attributes in process `syz.0.394'. [ 152.212211][ T5811] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 152.230742][ T5811] em28xx 2-1:0.132: analog set to bulk mode. [ 152.240015][ T27] em28xx 2-1:0.132: Registering V4L2 extension [ 152.258372][ T5811] usb 2-1: USB disconnect, device number 5 [ 152.277951][ T7054] syzkaller0: entered promiscuous mode [ 152.292606][ T5811] em28xx 2-1:0.132: Disconnecting em28xx [ 152.308552][ T7054] syzkaller0: entered allmulticast mode [ 152.489424][ T27] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 152.519904][ T27] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 152.557626][ T27] em28xx 2-1:0.132: No AC97 audio processor [ 152.584793][ T27] usb 2-1: Decoder not found [ 152.599876][ T27] em28xx 2-1:0.132: failed to create media graph [ 152.620149][ T27] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 152.638993][ T27] em28xx 2-1:0.132: Remote control support is not available for this card. [ 152.658153][ T5811] em28xx 2-1:0.132: Closing input extension [ 152.694287][ T5811] em28xx 2-1:0.132: Freeing device [ 153.059975][ T7078] x_tables: duplicate underflow at hook 4 [ 153.393428][ T7090] syzkaller0: entered promiscuous mode [ 153.414391][ T7090] syzkaller0: entered allmulticast mode [ 153.849526][ T7101] netlink: 'syz.1.412': attribute type 1 has an invalid length. [ 153.912861][ T7101] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.947336][ T7104] netlink: 14 bytes leftover after parsing attributes in process `syz.1.412'. [ 154.042728][ T6115] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 154.242198][ T6115] usb 1-1: Using ep0 maxpacket: 32 [ 154.264438][ T6115] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 154.295314][ T6115] usb 1-1: config 0 has no interface number 0 [ 154.301514][ T6115] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 154.355916][ T6115] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 154.372153][ T6115] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.380416][ T6115] usb 1-1: Product: syz [ 154.405864][ T6115] usb 1-1: Manufacturer: syz [ 154.410554][ T6115] usb 1-1: SerialNumber: syz [ 154.443314][ T6115] usb 1-1: config 0 descriptor?? [ 154.459982][ T6115] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 154.497141][ T6115] em28xx 1-1:0.132: Video interface 132 found: [ 154.855899][ T6115] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 155.128260][ T7120] syzkaller0: entered promiscuous mode [ 155.165544][ T7120] syzkaller0: entered allmulticast mode [ 155.275492][ T7126] netlink: 'syz.2.421': attribute type 1 has an invalid length. [ 155.285939][ T6115] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 155.322995][ T6115] em28xx 1-1:0.132: board has no eeprom [ 155.510981][ T7126] 8021q: adding VLAN 0 to HW filter on device bond2 [ 155.526910][ T7132] netlink: 14 bytes leftover after parsing attributes in process `syz.2.421'. [ 155.552220][ T6115] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 155.567499][ T6115] em28xx 1-1:0.132: analog set to bulk mode. [ 155.574267][ T7140] x_tables: duplicate underflow at hook 4 [ 155.597582][ T5153] em28xx 1-1:0.132: Registering V4L2 extension [ 155.614172][ T6115] usb 1-1: USB disconnect, device number 18 [ 155.628800][ T6115] em28xx 1-1:0.132: Disconnecting em28xx [ 155.885359][ T5153] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 155.923168][ T5153] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 155.961462][ T5153] em28xx 1-1:0.132: No AC97 audio processor [ 156.002564][ T5153] usb 1-1: Decoder not found [ 156.018590][ T5153] em28xx 1-1:0.132: failed to create media graph [ 156.049091][ T5153] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 156.089422][ T5153] em28xx 1-1:0.132: Remote control support is not available for this card. [ 156.144319][ T6115] em28xx 1-1:0.132: Closing input extension [ 156.212041][ T6115] em28xx 1-1:0.132: Freeing device [ 156.339588][ T7163] syzkaller0: entered promiscuous mode [ 156.367765][ T7163] syzkaller0: entered allmulticast mode [ 156.659748][ T7171] netlink: 'syz.1.435': attribute type 1 has an invalid length. [ 156.785059][ T7171] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.832595][ T7174] netlink: 14 bytes leftover after parsing attributes in process `syz.1.435'. [ 156.993437][ T7179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.436'. [ 157.827884][ T7206] syzkaller0: entered promiscuous mode [ 157.872168][ T7206] syzkaller0: entered allmulticast mode [ 157.894687][ T7211] netlink: 'syz.2.445': attribute type 1 has an invalid length. [ 157.971454][ T7211] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.084710][ T7211] netlink: 14 bytes leftover after parsing attributes in process `syz.2.445'. [ 158.126761][ T7220] loop1: detected capacity change from 0 to 128 [ 158.166193][ T7220] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 158.190166][ T7220] ext4 filesystem being mounted at /107/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 158.360164][ T5765] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 158.515345][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.451'. [ 158.731371][ T7243] netlink: 'syz.0.456': attribute type 29 has an invalid length. [ 158.761234][ T7243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.456'. [ 158.783313][ T7243] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 159.067474][ T7254] netlink: 'syz.0.459': attribute type 1 has an invalid length. [ 159.181528][ T7254] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.211307][ T7250] syzkaller0: entered promiscuous mode [ 159.217173][ T7250] syzkaller0: entered allmulticast mode [ 159.559355][ T7259] netlink: 14 bytes leftover after parsing attributes in process `syz.0.459'. [ 160.003833][ T7266] loop0: detected capacity change from 0 to 128 [ 160.055149][ T7266] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 160.083783][ T7266] ext4 filesystem being mounted at /109/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 160.361431][ T5766] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 160.445346][ T7283] syzkaller0: entered promiscuous mode [ 160.461978][ T7283] syzkaller0: entered allmulticast mode [ 160.611938][ T7287] fuse: Bad value for 'fd' [ 160.632415][ T5808] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 160.846085][ T5808] usb 2-1: Using ep0 maxpacket: 32 [ 160.892222][ T27] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 160.901170][ T5808] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 160.925845][ T5808] usb 2-1: config 0 has no interface number 0 [ 160.942830][ T5808] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 160.971002][ T5808] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 160.992369][ T5808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.005406][ T5808] usb 2-1: Product: syz [ 161.022372][ T5808] usb 2-1: Manufacturer: syz [ 161.034424][ T5808] usb 2-1: SerialNumber: syz [ 161.053357][ T5808] usb 2-1: config 0 descriptor?? [ 161.071879][ T5808] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 161.100996][ T5808] em28xx 2-1:0.132: Video interface 132 found: [ 161.125607][ T27] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 161.157853][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.178152][ T27] usb 1-1: Product: syz [ 161.186515][ T27] usb 1-1: Manufacturer: syz [ 161.191208][ T27] usb 1-1: SerialNumber: syz [ 161.205586][ T27] usb 1-1: config 0 descriptor?? [ 161.229158][ T27] hub 1-1:0.0: bad descriptor, ignoring hub [ 161.239598][ T27] hub: probe of 1-1:0.0 failed with error -5 [ 161.377363][ T7295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.473'. [ 161.444015][ T27] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 161.479861][ T5808] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 161.509946][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 161.540260][ T27] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 161.550916][ T27] usb 1-1: media controller created [ 161.753801][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 161.905603][ T5808] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 161.925151][ T27] DVB: Unable to find symbol dib7000p_attach() [ 161.934321][ T27] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 161.948156][ T5808] em28xx 2-1:0.132: board has no eeprom [ 162.122683][ T27] rc_core: IR keymap rc-dib0700-rc5 not found [ 162.158436][ T27] Registered IR keymap rc-empty [ 162.165239][ T27] dvb-usb: could not initialize remote control. [ 162.179427][ T27] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 162.190010][ T5808] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 162.252205][ T5808] em28xx 2-1:0.132: analog set to bulk mode. [ 162.273121][ T5811] em28xx 2-1:0.132: Registering V4L2 extension [ 162.290775][ T5808] usb 2-1: USB disconnect, device number 6 [ 162.310466][ T5808] em28xx 2-1:0.132: Disconnecting em28xx [ 162.778125][ T7311] loop3: detected capacity change from 0 to 128 [ 163.044636][ T7311] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 163.087254][ T7311] ext4 filesystem being mounted at /130/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 163.199442][ T7319] syzkaller0: entered promiscuous mode [ 163.235656][ T7319] syzkaller0: entered allmulticast mode [ 163.297046][ T5811] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 163.312372][ T5811] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 163.338651][ T5811] em28xx 2-1:0.132: No AC97 audio processor [ 163.366390][ T5811] usb 2-1: Decoder not found [ 163.382452][ T5811] em28xx 2-1:0.132: failed to create media graph [ 163.384562][ T5768] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 163.410165][ T5811] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 163.444187][ T5811] em28xx 2-1:0.132: Remote control support is not available for this card. [ 163.496200][ T5808] em28xx 2-1:0.132: Closing input extension [ 163.553817][ T5808] em28xx 2-1:0.132: Freeing device [ 164.288760][ T27] usb 1-1: USB disconnect, device number 19 [ 164.352811][ T27] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 164.730470][ T7353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.488'. [ 343.192108][ C0] ------------[ cut here ]------------ [ 343.198454][ C0] WARNING: CPU: 0 PID: 0 at kernel/rcu/tree_stall.h:1001 rcu_check_gp_start_stall+0x2dc/0x460 [ 343.208709][ C0] Modules linked in: [ 343.212629][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 343.219643][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 343.229866][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 343.236324][ C0] Code: ff ff ff 48 c7 c7 a0 d4 30 97 be 04 00 00 00 e8 aa dd 6d 00 48 89 df b8 01 00 00 00 87 05 ac 57 bf 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 00 73 13 8d 74 47 48 c7 c0 ec 40 8b 8e 48 c1 e8 03 [ 343.256055][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010046 [ 343.262129][ C0] RAX: 0000000000000000 RBX: ffffffff8d137300 RCX: ffffffff81717ce6 [ 343.270099][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8d137300 [ 343.278277][ C0] RBP: ffffc90000007e30 R08: 0000000000000003 R09: 0000000000000004 [ 343.286362][ C0] R10: dffffc0000000000 R11: fffffbfff2e61a94 R12: 0000000000002904 [ 343.294530][ C0] R13: ffffffff8d137300 R14: 0000000000000a02 R15: dffffc0000000000 [ 343.302637][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 343.311580][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 343.318162][ C0] CR2: 00007fa985c68223 CR3: 0000000024149000 CR4: 00000000003506f0 [ 343.326151][ C0] Call Trace: [ 343.329444][ C0] [ 343.332303][ C0] rcu_core+0x635/0x1770 [ 343.336564][ C0] ? ktime_get+0x7f/0x280 [ 343.340895][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 343.346096][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 343.351293][ C0] ? sched_clock+0x3f/0x60 [ 343.355727][ C0] ? sched_clock_cpu+0x75/0x430 [ 343.360598][ C0] ? ktime_get+0x7f/0x280 [ 343.364960][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 343.370950][ C0] ? lock_chain_count+0x20/0x20 [ 343.375809][ C0] handle_softirqs+0x280/0x820 [ 343.380599][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 343.385388][ C0] ? do_softirq+0x1a0/0x1a0 [ 343.389916][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 343.395146][ C0] __irq_exit_rcu+0xd3/0x190 [ 343.399750][ C0] ? irq_exit_rcu+0x20/0x20 [ 343.404319][ C0] irq_exit_rcu+0x9/0x20 [ 343.408569][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 343.414211][ C0] [ 343.417143][ C0] [ 343.420076][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 343.426056][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 343.431699][ C0] Code: 4e 21 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 03 19 42 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 343.451495][ C0] RSP: 0018:ffffffff8ce07d80 EFLAGS: 000002c2 [ 343.457599][ C0] RAX: 5a15a039ecc8e100 RBX: ffffffff8162a9dd RCX: 5a15a039ecc8e100 [ 343.465683][ C0] RDX: 0000000000000001 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8de0 [ 343.473765][ C0] RBP: ffffffff8ce07eb8 R08: ffff8880b8e36b2b R09: 1ffff110171c6d65 [ 343.481773][ C0] R10: dffffc0000000000 R11: ffffed10171c6d66 R12: 1ffffffff19c0fbc [ 343.489834][ C0] R13: dffffc0000000000 R14: 1ffffffff19d2688 R15: 0000000000000000 [ 343.497999][ C0] ? do_idle+0x33d/0x590 [ 343.502284][ C0] default_idle+0x13/0x20 [ 343.506710][ C0] default_idle_call+0x6c/0xa0 [ 343.511488][ C0] do_idle+0x33d/0x590 [ 343.515567][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 343.520833][ C0] ? do_idle+0x5/0x590 [ 343.524942][ C0] cpu_startup_entry+0x43/0x60 [ 343.529726][ C0] rest_init+0x2e2/0x300 [ 343.533981][ C0] ? time_init+0x40/0x40 [ 343.538327][ C0] arch_call_rest_init+0xe/0x10 [ 343.543180][ C0] start_kernel+0x459/0x4e0 [ 343.547699][ C0] x86_64_start_reservations+0x2a/0x30 [ 343.553175][ C0] x86_64_start_kernel+0x60/0x60 [ 343.558143][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 343.564235][ C0] [ 343.567308][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 343.574611][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 343.581650][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 343.591729][ C0] Call Trace: [ 343.595043][ C0] [ 343.597901][ C0] dump_stack_lvl+0x18c/0x250 [ 343.602607][ C0] ? show_regs_print_info+0x20/0x20 [ 343.608268][ C0] ? load_image+0x420/0x420 [ 343.612790][ C0] panic+0x2dc/0x730 [ 343.616696][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 343.621549][ C0] ? secondary_startup_64_no_verify+0x179/0x17b [ 343.627793][ C0] __warn+0x2e0/0x470 [ 343.631777][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 343.637603][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 343.643343][ C0] report_bug+0x2be/0x4f0 [ 343.647671][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 343.653583][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 343.659321][ C0] ? rcu_check_gp_start_stall+0x2de/0x460 [ 343.665061][ C0] handle_bug+0xcf/0x120 [ 343.669430][ C0] exc_invalid_op+0x1a/0x50 [ 343.673991][ C0] asm_exc_invalid_op+0x1a/0x20 [ 343.678841][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 343.685175][ C0] Code: ff ff ff 48 c7 c7 a0 d4 30 97 be 04 00 00 00 e8 aa dd 6d 00 48 89 df b8 01 00 00 00 87 05 ac 57 bf 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 00 73 13 8d 74 47 48 c7 c0 ec 40 8b 8e 48 c1 e8 03 [ 343.704800][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010046 [ 343.711051][ C0] RAX: 0000000000000000 RBX: ffffffff8d137300 RCX: ffffffff81717ce6 [ 343.719020][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8d137300 [ 343.726998][ C0] RBP: ffffc90000007e30 R08: 0000000000000003 R09: 0000000000000004 [ 343.734963][ C0] R10: dffffc0000000000 R11: fffffbfff2e61a94 R12: 0000000000002904 [ 343.742964][ C0] R13: ffffffff8d137300 R14: 0000000000000a02 R15: dffffc0000000000 [ 343.751023][ C0] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 343.756766][ C0] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 343.762677][ C0] rcu_core+0x635/0x1770 [ 343.766925][ C0] ? ktime_get+0x7f/0x280 [ 343.771257][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 343.776463][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 343.781655][ C0] ? sched_clock+0x3f/0x60 [ 343.786067][ C0] ? sched_clock_cpu+0x75/0x430 [ 343.791013][ C0] ? ktime_get+0x7f/0x280 [ 343.795343][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 343.801323][ C0] ? lock_chain_count+0x20/0x20 [ 343.806218][ C0] handle_softirqs+0x280/0x820 [ 343.811017][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 343.815864][ C0] ? do_softirq+0x1a0/0x1a0 [ 343.820376][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 343.825582][ C0] __irq_exit_rcu+0xd3/0x190 [ 343.830367][ C0] ? irq_exit_rcu+0x20/0x20 [ 343.834870][ C0] irq_exit_rcu+0x9/0x20 [ 343.839107][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 343.844752][ C0] [ 343.847680][ C0] [ 343.850614][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 343.856592][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 343.862223][ C0] Code: 4e 21 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 03 19 42 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 343.881822][ C0] RSP: 0018:ffffffff8ce07d80 EFLAGS: 000002c2 [ 343.887904][ C0] RAX: 5a15a039ecc8e100 RBX: ffffffff8162a9dd RCX: 5a15a039ecc8e100 [ 343.895873][ C0] RDX: 0000000000000001 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8de0 [ 343.903934][ C0] RBP: ffffffff8ce07eb8 R08: ffff8880b8e36b2b R09: 1ffff110171c6d65 [ 343.911900][ C0] R10: dffffc0000000000 R11: ffffed10171c6d66 R12: 1ffffffff19c0fbc [ 343.920040][ C0] R13: dffffc0000000000 R14: 1ffffffff19d2688 R15: 0000000000000000 [ 343.928008][ C0] ? do_idle+0x33d/0x590 [ 343.932253][ C0] default_idle+0x13/0x20 [ 343.936585][ C0] default_idle_call+0x6c/0xa0 [ 343.941343][ C0] do_idle+0x33d/0x590 [ 343.945451][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 343.950654][ C0] ? do_idle+0x5/0x590 [ 343.954734][ C0] cpu_startup_entry+0x43/0x60 [ 343.959586][ C0] rest_init+0x2e2/0x300 [ 343.963824][ C0] ? time_init+0x40/0x40 [ 343.968068][ C0] arch_call_rest_init+0xe/0x10 [ 343.972916][ C0] start_kernel+0x459/0x4e0 [ 343.977441][ C0] x86_64_start_reservations+0x2a/0x30 [ 343.982907][ C0] x86_64_start_kernel+0x60/0x60 [ 343.987848][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 343.993919][ C0] [ 345.120303][ C0] Shutting down cpus with NMI [ 345.125543][ C0] Kernel Offset: disabled [ 345.130147][ C0] Rebooting in 86400 seconds..