last executing test programs: 10.470163292s ago: executing program 3 (id=1600): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$tty20(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x8000, 0x0) acct(&(0x7f0000000180)='./file0/file0\x00') socket$netlink(0x10, 0x3, 0x15) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x421, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 8.904484207s ago: executing program 3 (id=1609): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(&(0x7f0000000140)=@sg0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000002c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[0x0, 0x0], &(0x7f0000000900), 0x0, 0x2, 0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f00000009c0)={0x17df000000000000, r7, r6}) unshare(0x40020000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x3c}, 0x1, 0x620b}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)='P', &(0x7f0000000740), 0x4af}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), &(0x7f0000000240), 0x2}, 0x38) 7.378331073s ago: executing program 3 (id=1613): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) socket$packet(0x11, 0x3, 0x300) syz_open_dev$video4linux(&(0x7f0000000140), 0x106, 0x40440) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x4, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48ed, 0x0, 0x2, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) setrlimit(0x7, &(0x7f0000000180)={0xfffffffe, 0x6}) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = socket(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000009a00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40040}}, {{&(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001100)=[@cred={{0x18}}], 0x18, 0x20000084}}, {{&(0x7f0000001180)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) openat$ppp(0xffffff9c, 0x0, 0x4340, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f000000fa00)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001880)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x9630, 0x10100, 0x0, 0x141}, &(0x7f0000002000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) 6.037468327s ago: executing program 3 (id=1615): r0 = openat$snapshot(0xffffff9c, &(0x7f0000000080), 0x8001, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, 0x0) 5.875138485s ago: executing program 3 (id=1617): socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8ec, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c1) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x14010, 0x0) r4 = socket(0x11, 0x3, 0x0) connect$vsock_stream(r4, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @local}, 0x10) getpeername$packet(r4, &(0x7f0000001040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001080)=0x14) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x3c0, 0xffffffff, 0xf0, 0x240, 0xf0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@broadcast, @loopback, 0xff, 0xffffffff, 'vlan1\x00', 'macvlan0\x00', {}, {}, 0x62, 0x2, 0x42}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0\x00', {0x63, 0x518, 0x7fff, 0x586b, 0x2, 0x200, 0xfffffffc, 0x78, 0x80}, {0x8000000000000001}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x2, 0x2}}, @common=@ah={{0x30}, {[0x10001, 0x6]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x0, 0x7, 0x2, 0x2, 0x1, 0x3]}, {0x2, [0x4, 0x1, 0x7, 0x1, 0x0, 0x3], 0x2}}}}, {{@ip={@remote, @empty, 0xff000000, 0x0, 'vlan1\x00', 'vcan0\x00', {}, {}, 0x29, 0x2, 0x8}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@ah={{0x30}, {[0x1, 0x5]}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'pim6reg1\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r5, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 4.310871038s ago: executing program 2 (id=1626): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) add_key(&(0x7f0000000180)='rxrpc\x00', 0x0, &(0x7f0000000540)="a588109c71c1583c2a68e74ecec5bf74e3a121926bc251e07bba0043c80769a4514329e16ccdcbc3ec266f40d521337d5e690e73b3a5095ee940ac83d6a44c707208e2741b7b6d0af3786119faa9b4fc2050d10f270cf9ee1a450a748185044db2a87be1877e4a4260b9563b7327881868ccc4e0666b2b080e94fa7220f3836490a14d7e50d4fd54375a3b7487494f144e42a52ea1b5107c2f5081e40a749b262531a85bcf109957654208d95d2beb5ae6ad696b109ffea0fdbcdb3f730f", 0xbe, 0xfffffffffffffffe) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x19, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x18) statfs(&(0x7f0000000000)='./file0/../file0/../file0\x00', &(0x7f0000000d80)=""/4096) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = socket$netlink(0x10, 0x3, 0x15) r4 = socket(0x2, 0x2, 0x1) bind$unix(r4, &(0x7f0000000000)=@abs, 0x6e) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0xc084) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000280)={0x2d, 0x0, 0x1f}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000840}, 0x41) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) dup3(r3, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 3.002499715s ago: executing program 2 (id=1630): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x1ff, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={0x0, 0x50}}, 0x4000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r5, &(0x7f0000004400), 0x3fffffffffffff2, 0x6000000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) 2.821097006s ago: executing program 0 (id=1634): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x51, 0x68e03) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000004c0)={&(0x7f00000002c0)=[{0x5, 0x5800, 0x0, 0x0}, {0x0, 0x8400, 0x0, 0x0}], 0x2}) 2.799244127s ago: executing program 0 (id=1635): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0xd, 0x0, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x40045010, &(0x7f0000000080)=0xd8eb) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, 0x0, 0x20044000) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = syz_open_dev$dri(0x0, 0x7, 0x220042) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000380)={0x3, r9, r8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000440)={0x5, r9}) syz_io_uring_setup(0x7a72, &(0x7f0000000480)={0x0, 0x2d12, 0x1000, 0x2, 0x306}, &(0x7f0000000140), &(0x7f0000000280)) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed"], 0x10}}, 0x0) 2.680806198s ago: executing program 3 (id=1636): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x14, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda"], 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)={[{@uid={'uid', 0x3d, r2}}]}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) bind$netlink(r7, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r8, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) r12 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, r12) close(0x4) 1.890390489s ago: executing program 0 (id=1637): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12", 0x26, 0x20000000, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mprotect(&(0x7f0000f9a000/0x4000)=nil, 0x4000, 0xc) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x1, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0xfffffffe, 0x5}, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = syz_clone(0xa000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ptrace(0x10, r7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.89016148s ago: executing program 1 (id=1638): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000005000000095"], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.890098259s ago: executing program 2 (id=1639): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, &(0x7f0000000200)) 1.811158967s ago: executing program 1 (id=1640): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001740), 0x80000, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x18, 0x3b, 0x14, 0x100010, 0x4, 0xe80, 0x6, 0x40}}) 1.810952632s ago: executing program 2 (id=1641): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000f40)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x2d, 0x0, "43454aaffb47c1dfdb641478600c76da8eaa4a4664404b8d1e9732f885e6c6ca9c3e416e20694831073c979cfc242672dc2689ad8e2243b6805a5d9b021a6431208ce130fba79482151714901bfd1768"}, 0xd8) 1.810818709s ago: executing program 1 (id=1642): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x36b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0xd, 0x0, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x40045010, &(0x7f0000000080)=0xd8eb) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, 0x0, 0x20044000) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = syz_open_dev$dri(0x0, 0x7, 0x220042) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000380)={0x3, r9, r8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000440)={0x5, r9}) syz_io_uring_setup(0x7a72, &(0x7f0000000480)={0x0, 0x2d12, 0x1000, 0x2, 0x306}, &(0x7f0000000140), &(0x7f0000000280)) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed"], 0x10}}, 0x0) 1.810782992s ago: executing program 2 (id=1643): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDMKTONE(r0, 0x4b30, 0x4) 1.720533204s ago: executing program 2 (id=1644): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x9003, 0x1, 0x286, [0x4000000002c0, 0x4000000002f0], 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$I2C(0x0, 0x1, 0x2003) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='X', 0x1, 0x0, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x11000) write$binfmt_misc(r3, &(0x7f0000000180)='5', 0x1) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r9, 0x84, 0x6c, &(0x7f0000000280)={r10, 0x8, "83cd131de522f666"}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f0000000500)=ANY=[@ANYBLOB="040036004d56bb966f09e5d22d3d3a4842b5d0f74437f85d9ea3839e1080b422fb05810635d74e0f43688356f0d4fe49b6e7df14b3ac0a697d5d", @ANYRES32=r10, @ANYRES16=r5, @ANYRES16=r8], 0x3e) write$char_usb(r5, &(0x7f0000001300)='7', 0x1) read$char_usb(r5, &(0x7f0000000340)=""/138, 0x8a) syz_usb_disconnect(r4) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x88e00, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x8000}) socket(0x400000000010, 0x3, 0x0) 916.183388ms ago: executing program 1 (id=1645): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0xd, 0x0, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x40045010, &(0x7f0000000080)=0xd8eb) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, 0x0, 0x20044000) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = syz_open_dev$dri(0x0, 0x7, 0x220042) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000380)={0x3, r9, r8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000440)={0x5, r9}) syz_io_uring_setup(0x7a72, &(0x7f0000000480)={0x0, 0x2d12, 0x1000, 0x2, 0x306}, &(0x7f0000000140), &(0x7f0000000280)) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed"], 0x10}}, 0x0) 898.001153ms ago: executing program 0 (id=1646): r0 = openat$vim2m(0xffffff9c, &(0x7f0000019140), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000000)={0x0, 0xbd5, 0x2, {0x2, @raw_data="f91fd2868ba3d9189024fc40809db9e19479c0b5fce2c721330d5771dbf9dbfa9e2ad24622489141b4803cfeb0b70909e75715a13fada32fef53473eb9ce014fbe3929ea41fdeb0ff177dfb9d3227f213a6451b667d35b03b25618d20cea1f072990b86d463a0de7513744a2bb3bf4fb6049e30f7c533837beba9566c9fd8721c48fad424a5fb17bc1419fb85e5e7dce382ba5a1ce182b419becd67c18f0ba055b8d72225df5a5e7917f8a87a52b8c2516745c462e944b0c22a7e71ecf492a0ef916598abba0e732"}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc04c560f, &(0x7f0000000280)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x100000, 0x1, {}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, "5c0a0551"}, 0x5141, 0x1, {0x0}, 0x2, 0x20000000}) 839.53072ms ago: executing program 0 (id=1647): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x6, @raw_data="ea085714fd6486c664bb2dd910e83b6feaeb92013329491adc92ebab4976b081bd49e0560bb8aa37495f0035b549152d4692fd35f3811206a39e2a2af1b2ef32ee71bfbc1876517dd9e0f1f29613733c179d239b84e2a8ad52dc9f2853d60d209e2abd835672a2e2428b4305733721b55926e11efb6e32bc90e294fd39943cd449cb5345680c6b58cdf9cff8a1477c6ac451b99e1b620934f0bc77c4e815c80859148278dddb591569a47bc5c913a564bee744cd8215b35ac0feed1415fc98943dabc8b35dd3694a"}) 839.126188ms ago: executing program 0 (id=1648): socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000340)=0x10001) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x8, &(0x7f0000000180)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0x8}, 0x94) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 139.054µs ago: executing program 1 (id=1649): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 0s ago: executing program 1 (id=1650): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) kernel console output (not intermixed with test programs): tooth: hci3: Opcode 0x0c1a failed: -4 [ 242.949923][ T9028] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 242.956539][ T9028] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 242.959786][ T9028] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 243.234254][ T29] usb usb44-port1: attempt power cycle [ 243.764913][ T9057] netlink: 196 bytes leftover after parsing attributes in process `syz.0.795'. [ 243.837697][ T9064] netlink: 'syz.0.798': attribute type 10 has an invalid length. [ 243.843103][ T9064] bond1: option mode: unable to set because the bond device has slaves [ 243.879987][ T29] usb usb44-port1: unable to enumerate USB device [ 244.883557][ T5964] Bluetooth: hci3: unexpected event for opcode 0x0c38 [ 244.993857][ T5964] Bluetooth: hci1: command 0x0406 tx timeout [ 245.330981][ T9094] netlink: 56 bytes leftover after parsing attributes in process `syz.0.812'. [ 245.344114][ T1330] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 245.495122][ T1330] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 245.499309][ T1330] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 245.503615][ T1330] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 245.524196][ T1330] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 245.533973][ T1330] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 245.543991][ T1330] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.555255][ T1330] usb 7-1: config 0 descriptor?? [ 245.964526][ T1330] plantronics 0003:047F:FFFF.000A: ignoring exceeding usage max [ 245.969120][ T1330] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 245.972242][ T1330] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 245.975952][ T1330] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 245.979171][ T1330] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 245.982270][ T1330] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 245.995867][ T1330] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 246.166313][ T9089] netlink: 'syz.2.810': attribute type 10 has an invalid length. [ 246.171028][ T9089] bond1: option mode: unable to set because the bond device is up [ 246.180378][ T6018] usb 7-1: USB disconnect, device number 24 [ 247.073843][ T5964] Bluetooth: hci1: command 0x0406 tx timeout [ 247.443812][ T1330] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 247.615673][ T1330] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 247.620544][ T1330] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 247.625376][ T1330] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 247.629562][ T1330] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 247.635492][ T1330] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 247.638905][ T1330] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.650313][ T1330] usb 7-1: config 0 descriptor?? [ 248.059141][ T1330] plantronics 0003:047F:FFFF.000B: ignoring exceeding usage max [ 248.063366][ T1330] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 248.066719][ T1330] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 248.069790][ T1330] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 248.073168][ T1330] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 248.077001][ T1330] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 248.092072][ T1330] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 248.259287][ T9131] netlink: 'syz.2.827': attribute type 10 has an invalid length. [ 248.263584][ T9131] bond1: option mode: unable to set because the bond device is up [ 248.269394][ T60] usb 7-1: USB disconnect, device number 25 [ 249.614162][ T9226] input: syz0 as /devices/virtual/input/input11 [ 249.710288][ T9215] lo speed is unknown, defaulting to 1000 [ 251.049846][ T9246] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 251.063969][ T9246] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 251.123662][ T9255] input: syz1 as /devices/virtual/input/input12 [ 251.332106][ T9267] input: syz0 as /devices/virtual/input/input13 [ 252.353939][ T5964] Bluetooth: hci1: command 0x0406 tx timeout [ 253.083801][ T5964] Bluetooth: hci3: command 0x0406 tx timeout [ 253.153868][ T5956] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 253.884322][ T34] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 254.033840][ T34] usb 6-1: Using ep0 maxpacket: 32 [ 254.037152][ T34] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 254.040634][ T34] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 254.044694][ T34] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 254.048175][ T34] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 254.055380][ T34] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 254.059175][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.062525][ T34] usb 6-1: Product: syz [ 254.064993][ T34] usb 6-1: Manufacturer: syz [ 254.066986][ T34] usb 6-1: SerialNumber: syz [ 254.075970][ C3] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 254.083124][ T34] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input14 [ 254.294080][ T34] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 254.297673][ T34] (id 0x00) [ 254.343778][ T34] rc_core: IR keymap rc-imon-pad not found [ 254.346420][ T34] Registered IR keymap rc-empty [ 254.348724][ T34] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 254.352979][ T34] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 254.495390][ T34] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 254.499697][ T34] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input15 [ 254.505907][ T34] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:13> initialized [ 254.679975][ T34] usb 6-1: USB disconnect, device number 13 [ 255.153929][ T5956] Bluetooth: hci3: command 0x0406 tx timeout [ 255.291539][ T9385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.914'. [ 255.479031][ T9392] netlink: 'syz.1.916': attribute type 4 has an invalid length. [ 255.743957][ T9399] tipc: Resetting bearer [ 255.875275][ T915] lo speed is unknown, defaulting to 1000 [ 255.877406][ T915] syz0: Port: 1 Link DOWN [ 255.912026][ T62] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.955174][ T62] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.958123][ T62] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.906892][ T7538] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 257.065585][ T7538] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.070139][ T7538] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.074299][ T7538] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 257.079837][ T7538] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 257.084134][ T7538] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.090301][ T7538] usb 7-1: config 0 descriptor?? [ 257.233822][ T5956] Bluetooth: hci3: command 0x0406 tx timeout [ 257.312145][ T62] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.332261][ T9416] bridge0: port 4(erspan0) entered disabled state [ 257.353461][ T9416] bridge0: port 3(team0) entered disabled state [ 257.355726][ T9416] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.358110][ T9416] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.475789][ T9416] bond0: left promiscuous mode [ 257.477630][ T9416] bond_slave_0: left promiscuous mode [ 257.479592][ T9416] bond_slave_1: left promiscuous mode [ 257.481590][ T9416] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 257.488773][ T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.499990][ T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.503049][ T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.507421][ T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.510275][ T7538] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x1 [ 257.523954][ T7538] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x6 [ 257.537705][ T7538] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 258.343453][ T9463] netlink: 64 bytes leftover after parsing attributes in process `syz.1.940'. [ 258.349464][ T9463] block nbd0: not configured, cannot reconfigure [ 258.753790][ T6018] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 258.924835][ T6018] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 258.932858][ T6018] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.936617][ T6018] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 258.939820][ T6018] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 258.944236][ T6018] usb 6-1: config 0 interface 0 has no altsetting 0 [ 258.948935][ T6018] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.952413][ T6018] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 258.958717][ T6018] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 258.965157][ T6018] usb 6-1: config 0 interface 0 has no altsetting 0 [ 258.969665][ T6018] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.001608][ T6018] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 259.006789][ T6018] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 259.013330][ T6018] usb 6-1: config 0 interface 0 has no altsetting 0 [ 259.018851][ T6018] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.022119][ T6018] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 259.053943][ T6018] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 259.058075][ T6018] usb 6-1: config 0 interface 0 has no altsetting 0 [ 259.089690][ T6018] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.102959][ T6018] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 259.106049][ T6018] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 259.110291][ T6018] usb 6-1: config 0 interface 0 has no altsetting 0 [ 259.113495][ T6018] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.120665][ T6018] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 259.124473][ T6018] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 259.129316][ T6018] usb 6-1: config 0 interface 0 has no altsetting 0 [ 259.133092][ T6018] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.137385][ T6018] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 259.140281][ T6018] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 259.144564][ T6018] usb 6-1: config 0 interface 0 has no altsetting 0 [ 259.147649][ T6018] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.151028][ T6018] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 259.154060][ T6018] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 259.158150][ T6018] usb 6-1: config 0 interface 0 has no altsetting 0 [ 259.162054][ T6018] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 259.165033][ T6018] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 259.167804][ T6018] usb 6-1: Product: syz [ 259.169169][ T6018] usb 6-1: Manufacturer: syz [ 259.170704][ T6018] usb 6-1: SerialNumber: syz [ 259.173505][ T6018] usb 6-1: config 0 descriptor?? [ 259.176853][ T6018] yurex 6-1:0.0: Could not find endpoints [ 259.313874][ T5956] Bluetooth: hci3: command 0x0406 tx timeout [ 259.532441][ T60] usb 6-1: USB disconnect, device number 14 [ 259.574396][ T7538] usb 7-1: reset high-speed USB device number 26 using dummy_hcd [ 259.578872][ T7538] usb 7-1: device reset changed ep0 maxpacket size! [ 259.583963][ T5789] usb 7-1: USB disconnect, device number 26 [ 259.594956][ T40] audit: type=1326 audit(1764343562.575:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9481 comm="syz.3.947" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70cd579 code=0x0 [ 259.723825][ T5789] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 259.883779][ T5789] usb 7-1: Using ep0 maxpacket: 16 [ 259.887147][ T5789] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 259.892333][ T5789] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 259.895464][ T5789] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.898215][ T5789] usb 7-1: Product: syz [ 259.899574][ T5789] usb 7-1: Manufacturer: syz [ 259.901053][ T5789] usb 7-1: SerialNumber: syz [ 259.904726][ T5789] usb 7-1: config 0 descriptor?? [ 260.276394][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.278483][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.601703][ T9485] lo speed is unknown, defaulting to 1000 [ 261.594084][ T9507] input: syz1 as /devices/virtual/input/input16 [ 262.288000][ T9525] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3965544961 (63448719376 ns) > initial count (51650093520 ns). Using initial count to start timer. [ 262.405929][ T9528] netlink: 'syz.3.961': attribute type 1 has an invalid length. [ 262.426229][ T9528] 8021q: adding VLAN 0 to HW filter on device bond1 [ 262.438868][ T9528] bond1: (slave dummy0): making interface the new active one [ 262.442200][ T9528] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 262.858207][ T9540] netlink: 'syz.0.965': attribute type 10 has an invalid length. [ 262.918129][ T915] usb 7-1: USB disconnect, device number 27 [ 263.263786][ T915] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 263.368650][ T9544] overlayfs: upper fs does not support file handles, falling back to index=off. [ 263.415198][ T915] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.418886][ T915] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.423007][ T915] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 263.429094][ T915] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 263.432914][ T915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.440738][ T915] usb 7-1: config 0 descriptor?? [ 263.857836][ T915] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 264.883823][ T5789] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 265.035400][ T5789] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 265.039074][ T5789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 265.042500][ T5789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 265.045712][ T5789] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 265.049882][ T5789] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 265.052761][ T5789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.056748][ T5789] usb 6-1: config 0 descriptor?? [ 265.462893][ T5789] plantronics 0003:047F:FFFF.000E: ignoring exceeding usage max [ 265.468910][ T5789] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 265.471302][ T5789] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 265.473901][ T5789] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 265.476254][ T5789] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 265.478731][ T5789] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 265.484883][ T5789] plantronics 0003:047F:FFFF.000E: hiddev1,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 265.664904][ T9571] netlink: 'syz.1.977': attribute type 10 has an invalid length. [ 265.668870][ T6018] usb 6-1: USB disconnect, device number 15 [ 265.914823][ T60] usb 7-1: USB disconnect, device number 28 [ 267.016292][ T9602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.988'. [ 267.894564][ T9642] orangefs: client-core tried to read wrong size [ 267.934331][ T9645] syzkaller0: entered promiscuous mode [ 267.936393][ T9645] syzkaller0: entered allmulticast mode [ 269.108517][ T9682] binder_alloc: 9681: binder_alloc_buf, no vma [ 269.361501][ T9698] netlink: 'syz.0.1016': attribute type 10 has an invalid length. [ 269.370878][ T9698] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 269.374250][ T62] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:f416:33ff:fef9:6038 error=-28 [ 269.374630][ T9698] bond1: (slave macvlan4): Enslaving as an active interface with an up link [ 269.777035][ T9709] serio: Serial port ptm0 [ 273.043803][ T40] audit: type=1326 audit(1764343576.015:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9811 comm="syz.2.1036" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 273.059015][ T40] audit: type=1326 audit(1764343576.015:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9811 comm="syz.2.1036" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70ad5a7 code=0x7ffc0000 [ 273.070750][ T40] audit: type=1326 audit(1764343576.015:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9811 comm="syz.2.1036" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 273.084841][ T40] audit: type=1326 audit(1764343576.015:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9811 comm="syz.2.1036" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70ad5a7 code=0x7ffc0000 [ 273.093577][ T40] audit: type=1326 audit(1764343576.015:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9811 comm="syz.2.1036" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 273.105273][ T40] audit: type=1326 audit(1764343576.015:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9811 comm="syz.2.1036" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 273.115152][ T40] audit: type=1326 audit(1764343576.025:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9811 comm="syz.2.1036" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 273.122739][ T40] audit: type=1326 audit(1764343576.025:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9811 comm="syz.2.1036" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 273.132252][ T40] audit: type=1326 audit(1764343576.025:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9811 comm="syz.2.1036" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 273.152785][ T40] audit: type=1326 audit(1764343576.035:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9811 comm="syz.2.1036" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 273.396687][ T9834] overlayfs: failed to clone upperpath [ 273.591006][ T9782] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 274.154723][ T60] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 274.305562][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.310141][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.314715][ T60] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 274.320383][ T60] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 274.324580][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.330967][ T60] usb 6-1: config 0 descriptor?? [ 274.753717][ T60] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 275.907712][ T9874] create_pit_timer: 1 callbacks suppressed [ 275.907726][ T9874] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 276.543766][ T9883] netlink: 'syz.0.1056': attribute type 10 has an invalid length. [ 276.588293][ T9885] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 276.610048][ T9885] kvm: pic: non byte read [ 276.613508][ T9885] kvm: pic: level sensitive irq not supported [ 276.614346][ T9885] kvm: pic: non byte read [ 276.619952][ T9885] kvm: pic: level sensitive irq not supported [ 276.620652][ T9885] kvm: pic: non byte read [ 276.630084][ T9885] kvm: pic: level sensitive irq not supported [ 276.630533][ T9885] kvm: pic: non byte read [ 276.636971][ T9885] kvm: pic: level sensitive irq not supported [ 276.637459][ T9885] kvm: pic: non byte read [ 276.642740][ T9885] kvm: pic: level sensitive irq not supported [ 276.643235][ T9885] kvm: pic: non byte read [ 276.648105][ T9885] kvm: pic: level sensitive irq not supported [ 276.648423][ T9885] kvm: pic: non byte read [ 276.653111][ T9885] kvm: pic: level sensitive irq not supported [ 276.653424][ T9885] kvm: pic: non byte read [ 276.658930][ T9885] kvm: pic: level sensitive irq not supported [ 276.659478][ T9885] kvm: pic: non byte read [ 276.665927][ T9885] kvm: pic: level sensitive irq not supported [ 276.666465][ T9885] kvm: pic: non byte read [ 276.671089][ T9885] kvm: pic: level sensitive irq not supported [ 276.736140][ T1330] usb 6-1: USB disconnect, device number 16 [ 276.894006][ T9893] syzkaller0: entered promiscuous mode [ 276.895797][ T9893] syzkaller0: entered allmulticast mode [ 277.420938][ T9908] bridge2: entered allmulticast mode [ 277.423846][ T60] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 277.574711][ T60] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 277.579404][ T60] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.583309][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.590498][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 277.595131][ T60] usb 7-1: config 0 interface 0 has no altsetting 0 [ 277.600139][ T60] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.604100][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.608904][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 277.613113][ T60] usb 7-1: config 0 interface 0 has no altsetting 0 [ 277.617776][ T60] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.622219][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.630095][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 277.634341][ T60] usb 7-1: config 0 interface 0 has no altsetting 0 [ 277.639112][ T60] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.642986][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.647794][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 277.651972][ T60] usb 7-1: config 0 interface 0 has no altsetting 0 [ 277.655792][ T60] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.659659][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.674960][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 277.679168][ T60] usb 7-1: config 0 interface 0 has no altsetting 0 [ 277.704181][ T60] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.707986][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.712501][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 277.716980][ T60] usb 7-1: config 0 interface 0 has no altsetting 0 [ 277.720836][ T60] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.724913][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.729066][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 277.732412][ T60] usb 7-1: config 0 interface 0 has no altsetting 0 [ 277.736449][ T60] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.739671][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.743986][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 277.747481][ T60] usb 7-1: config 0 interface 0 has no altsetting 0 [ 277.751948][ T60] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 277.754912][ T60] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 277.761020][ T60] usb 7-1: Product: syz [ 277.762422][ T60] usb 7-1: Manufacturer: syz [ 277.764008][ T60] usb 7-1: SerialNumber: syz [ 277.766705][ T60] usb 7-1: config 0 descriptor?? [ 277.770957][ T60] yurex 7-1:0.0: Could not submitting URB [ 277.772825][ T60] yurex 7-1:0.0: probe with driver yurex failed with error -5 [ 277.818352][ T9925] netlink: 'syz.0.1073': attribute type 10 has an invalid length. [ 278.026927][ T60] usb 7-1: USB disconnect, device number 29 [ 278.764599][ T9966] netlink: 'syz.0.1085': attribute type 10 has an invalid length. [ 278.907528][ T9970] kvm: requested 18438 ns i8254 timer period limited to 200000 ns [ 278.915126][ T9970] kvm: requested 165104 ns i8254 timer period limited to 200000 ns [ 278.921493][ T9970] kvm: requested 152533 ns i8254 timer period limited to 200000 ns [ 278.986126][ T9970] kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 279.009520][ T9970] kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 279.015435][ T9970] kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 279.021176][ T9970] kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 279.039427][ T9970] kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 279.221468][ T9977] syzkaller0: entered promiscuous mode [ 279.223321][ T9977] syzkaller0: entered allmulticast mode [ 279.431328][ T9990] syzkaller0: entered promiscuous mode [ 279.433223][ T9990] syzkaller0: entered allmulticast mode [ 280.540624][T10009] netlink: 'syz.1.1101': attribute type 29 has an invalid length. [ 280.545460][T10009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1101'. [ 280.587948][T10011] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 280.590557][T10011] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 280.594210][T10011] vhci_hcd vhci_hcd.0: Device attached [ 280.597529][T10012] vhci_hcd: connection closed [ 280.597732][ T9796] vhci_hcd: stop threads [ 280.601459][ T9796] vhci_hcd: release socket [ 280.603614][ T9796] vhci_hcd: disconnect device [ 281.241332][ T5956] Bluetooth: hci1: unexpected event for opcode 0x0c57 [ 281.241939][T10023] syz_tun: entered allmulticast mode [ 281.249477][T10022] syz_tun: left allmulticast mode [ 281.307416][T10027] netlink: 'syz.2.1108': attribute type 10 has an invalid length. [ 281.486473][T10032] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1109'. [ 281.489522][T10032] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1109'. [ 281.789862][ T5956] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 281.793249][ T5956] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 282.182992][T10043] lo speed is unknown, defaulting to 1000 [ 282.739931][T10060] tipc: Enabling of bearer rejected, failed to enable media [ 282.753846][T10059] tipc: Started in network mode [ 282.756186][T10059] tipc: Node identity 86880f495b2e, cluster identity 4711 [ 282.760027][T10059] tipc: Enabled bearer , priority 0 [ 282.762983][T10059] syzkaller0: entered promiscuous mode [ 282.765205][T10059] syzkaller0: entered allmulticast mode [ 282.769560][T10059] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 282.794674][T10059] tipc: Resetting bearer [ 282.800768][T10057] tipc: Resetting bearer [ 282.833550][T10057] tipc: Disabling bearer [ 283.545138][T10076] syzkaller0: entered promiscuous mode [ 283.547666][T10076] syzkaller0: entered allmulticast mode [ 283.615134][T10076] tipc: Enabled bearer , priority 0 [ 283.619028][T10075] tipc: Resetting bearer [ 283.644679][T10075] tipc: Disabling bearer [ 284.490910][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 284.490925][ T40] audit: type=1804 audit(1764343587.465:1216): pid=10096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1125" name="/newroot/259/bus" dev="tmpfs" ino=1389 res=1 errno=0 [ 285.746444][ T40] audit: type=1326 audit(1764343588.725:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10119 comm="syz.2.1134" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 285.753109][ T40] audit: type=1326 audit(1764343588.725:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10119 comm="syz.2.1134" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 285.767062][ T40] audit: type=1326 audit(1764343588.745:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10119 comm="syz.2.1134" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 285.776496][ T40] audit: type=1326 audit(1764343588.745:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10119 comm="syz.2.1134" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 285.785949][ T40] audit: type=1326 audit(1764343588.745:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10119 comm="syz.2.1134" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 285.793237][ T40] audit: type=1326 audit(1764343588.755:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10119 comm="syz.2.1134" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 285.800411][ T40] audit: type=1326 audit(1764343588.765:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10119 comm="syz.2.1134" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad598 code=0x7ffc0000 [ 285.807864][ T40] audit: type=1326 audit(1764343588.765:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10119 comm="syz.2.1134" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad598 code=0x7ffc0000 [ 285.815196][ T40] audit: type=1326 audit(1764343588.765:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10119 comm="syz.2.1134" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad598 code=0x7ffc0000 [ 285.959873][T10125] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1135'. [ 286.756708][T10132] tipc: Enabled bearer , priority 0 [ 286.765292][T10132] syzkaller0: entered promiscuous mode [ 286.767141][T10132] syzkaller0: entered allmulticast mode [ 286.786357][T10132] tipc: Resetting bearer [ 286.800164][T10131] tipc: Resetting bearer [ 286.811095][T10131] tipc: Disabling bearer [ 286.826510][T10136] tipc: Started in network mode [ 286.828796][T10136] tipc: Node identity 8e8815ebb067, cluster identity 4711 [ 286.831851][T10136] tipc: Enabled bearer , priority 0 [ 286.835346][T10136] syzkaller0: entered promiscuous mode [ 286.837236][T10136] syzkaller0: entered allmulticast mode [ 286.856400][T10136] tipc: Resetting bearer [ 286.861061][T10135] tipc: Resetting bearer [ 286.872198][T10135] tipc: Disabling bearer [ 286.960363][T10139] tipc: Enabled bearer , priority 0 [ 286.974025][T10139] syzkaller0: entered promiscuous mode [ 286.976885][T10139] syzkaller0: entered allmulticast mode [ 287.002129][T10139] tipc: Resetting bearer [ 287.004286][T10139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.010692][T10138] tipc: Resetting bearer [ 287.024092][T10138] tipc: Disabling bearer [ 288.011416][T10158] syzkaller0: entered promiscuous mode [ 288.013322][T10158] syzkaller0: entered allmulticast mode [ 288.182182][T10167] tipc: Enabled bearer , priority 0 [ 288.186403][T10167] syzkaller0: entered promiscuous mode [ 288.188775][T10167] syzkaller0: entered allmulticast mode [ 288.207057][T10167] tipc: Resetting bearer [ 288.210834][T10166] tipc: Resetting bearer [ 288.218546][T10166] tipc: Disabling bearer [ 289.108047][T10182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1152'. [ 289.391280][T10191] netlink: 'syz.0.1156': attribute type 10 has an invalid length. [ 289.891999][T10201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1159'. [ 289.904432][T10201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1159'. [ 289.909497][T10201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1159'. [ 291.277948][T10216] openvswitch: netlink: Actions may not be safe on all matching packets [ 292.190632][T10234] ubi: mtd0 is already attached to ubi31 [ 292.273933][ T5789] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 292.444277][ T5789] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 292.447774][ T5789] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 292.450990][ T5789] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 292.454990][ T5789] usb 7-1: config 0 interface 0 has no altsetting 0 [ 292.457925][ T5789] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 292.460780][ T5789] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 292.465144][ T5789] usb 7-1: config 0 interface 0 has no altsetting 0 [ 292.468120][ T5789] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 292.471103][ T5789] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 292.474990][ T5789] usb 7-1: config 0 interface 0 has no altsetting 0 [ 292.477863][ T5789] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 292.480911][ T5789] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 292.484768][ T5789] usb 7-1: config 0 interface 0 has no altsetting 0 [ 292.488007][ T5789] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 292.491189][ T5789] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 292.494862][ T5789] usb 7-1: config 0 interface 0 has no altsetting 0 [ 292.497836][ T5789] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 292.500775][ T5789] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 292.504447][ T5789] usb 7-1: config 0 interface 0 has no altsetting 0 [ 292.507498][ T5789] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 292.510792][ T5789] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 292.514632][ T5789] usb 7-1: config 0 interface 0 has no altsetting 0 [ 292.518078][ T5789] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 292.521411][ T5789] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 292.525333][ T5789] usb 7-1: config 0 interface 0 has no altsetting 0 [ 292.529234][ T5789] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 292.532352][ T5789] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 292.535355][ T5789] usb 7-1: Product: syz [ 292.536946][ T5789] usb 7-1: Manufacturer: syz [ 292.538620][ T5789] usb 7-1: SerialNumber: syz [ 292.541613][ T5789] usb 7-1: config 0 descriptor?? [ 292.547365][ T5789] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 292.909782][ C2] usb 7-1: yurex_control_callback - control failed: -71 [ 292.909958][ T915] usb 7-1: USB disconnect, device number 30 [ 292.915739][ T915] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 293.976894][T10248] syzkaller0: entered promiscuous mode [ 293.978843][T10248] syzkaller0: entered allmulticast mode [ 295.523788][ T5789] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 295.685699][ T5789] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 295.690781][ T5789] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 295.694675][ T5789] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 295.697895][ T5789] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 295.702506][ T5789] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 295.705559][ T5789] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.717322][ T5789] usb 7-1: config 0 descriptor?? [ 296.135569][ T5789] plantronics 0003:047F:FFFF.0010: ignoring exceeding usage max [ 296.138706][ T5789] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 296.141127][ T5789] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 296.146598][ T5789] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 296.149033][ T5789] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 296.151647][ T5789] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 296.174306][ T5789] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 296.337806][T10271] netlink: 'syz.2.1180': attribute type 10 has an invalid length. [ 296.341810][T10271] bond1: option mode: unable to set because the bond device is up [ 296.350448][T10271] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 296.355774][T10271] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 296.363230][ T5789] usb 7-1: USB disconnect, device number 31 [ 296.366029][ T1149] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 296.444005][ T9762] bond1: (slave macvlan2): link status up again after 0 ms [ 296.446639][ T9762] bond1: (slave macvlan2): failed to get link speed/duplex [ 296.493905][ T9796] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 296.564101][ T9782] bond1: (slave macvlan2): failed to get link speed/duplex [ 296.677352][ T9796] bond1: (slave macvlan2): failed to get link speed/duplex [ 296.784100][ T9782] bond1: (slave macvlan2): failed to get link speed/duplex [ 296.803835][ T1330] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 296.893924][ T1149] bond1: (slave macvlan2): failed to get link speed/duplex [ 296.967704][ T1330] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 296.982666][ T1330] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 296.989951][ T1330] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 296.996369][ T1330] usb 6-1: config 0 interface 0 has no altsetting 0 [ 297.008814][ T1149] bond1: (slave macvlan2): failed to get link speed/duplex [ 297.015884][ T1330] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 297.029216][ T1330] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 297.038117][ T1330] usb 6-1: config 0 interface 0 has no altsetting 0 [ 297.053874][ T1330] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 297.067379][ T1330] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 297.078935][ T1330] usb 6-1: config 0 interface 0 has no altsetting 0 [ 297.093586][ T1330] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 297.099686][ T1330] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 297.111581][ T1330] usb 6-1: config 0 interface 0 has no altsetting 0 [ 297.124639][ T1330] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 297.129912][ T1330] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 297.135285][ T9769] bond1: (slave macvlan2): failed to get link speed/duplex [ 297.139360][ T1330] usb 6-1: config 0 interface 0 has no altsetting 0 [ 297.146958][ T1330] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 297.153108][ T1330] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 297.161624][ T1330] usb 6-1: config 0 interface 0 has no altsetting 0 [ 297.177044][ T1330] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 297.181021][ T1330] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 297.191626][ T1330] usb 6-1: config 0 interface 0 has no altsetting 0 [ 297.207853][ T1330] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 297.212007][ T1330] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 297.218087][ T1330] usb 6-1: config 0 interface 0 has no altsetting 0 [ 297.240414][ T1330] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 297.244740][ T1330] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 297.250613][ T1330] usb 6-1: Product: syz [ 297.252498][ T1330] usb 6-1: Manufacturer: syz [ 297.254778][ T1330] usb 6-1: SerialNumber: syz [ 297.286668][ T1330] usb 6-1: config 0 descriptor?? [ 297.322292][ T1330] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 297.566339][ T34] usb 6-1: USB disconnect, device number 17 [ 297.570830][ T34] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 298.646525][T10307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1190'. [ 301.403992][ T9782] net_ratelimit: 36 callbacks suppressed [ 301.404010][ T9782] bond1: (slave macvlan2): failed to get link speed/duplex [ 301.514017][ T9782] bond1: (slave macvlan2): failed to get link speed/duplex [ 301.623863][ T1149] bond1: (slave macvlan2): failed to get link speed/duplex [ 301.733873][ T9796] bond1: (slave macvlan2): failed to get link speed/duplex [ 301.774470][T10348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1200'. [ 301.809649][T10348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1200'. [ 301.854774][ T1149] bond1: (slave macvlan2): failed to get link speed/duplex [ 301.973819][ T1149] bond1: (slave macvlan2): failed to get link speed/duplex [ 302.083866][ T1149] bond1: (slave macvlan2): failed to get link speed/duplex [ 302.103787][ T7782] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 302.193836][ T9796] bond1: (slave macvlan2): failed to get link speed/duplex [ 302.303818][ T9796] bond1: (slave macvlan2): failed to get link speed/duplex [ 302.413861][ T9782] bond1: (slave macvlan2): failed to get link speed/duplex [ 302.444382][ T7782] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 302.448846][ T7782] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 302.452729][ T7782] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 302.457003][ T7782] usb 6-1: config 0 interface 0 has no altsetting 0 [ 302.461251][ T7782] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 302.464734][ T7782] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 302.469036][ T7782] usb 6-1: config 0 interface 0 has no altsetting 0 [ 302.472155][ T7782] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 302.475420][ T7782] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 302.479231][ T7782] usb 6-1: config 0 interface 0 has no altsetting 0 [ 302.482635][ T7782] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 302.486214][ T7782] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 302.489844][ T7782] usb 6-1: config 0 interface 0 has no altsetting 0 [ 302.493396][ T7782] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 302.496483][ T7782] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 302.500219][ T7782] usb 6-1: config 0 interface 0 has no altsetting 0 [ 302.503590][ T7782] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 302.506835][ T7782] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 302.510527][ T7782] usb 6-1: config 0 interface 0 has no altsetting 0 [ 302.514480][ T7782] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 302.517526][ T7782] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 302.521208][ T7782] usb 6-1: config 0 interface 0 has no altsetting 0 [ 302.524430][ T7782] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 302.527566][ T7782] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 302.531168][ T7782] usb 6-1: config 0 interface 0 has no altsetting 0 [ 302.536159][ T7782] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 302.539303][ T7782] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 302.542161][ T7782] usb 6-1: Product: syz [ 302.543833][ T7782] usb 6-1: Manufacturer: syz [ 302.545524][ T7782] usb 6-1: SerialNumber: syz [ 302.549251][ T7782] usb 6-1: config 0 descriptor?? [ 302.554425][ T7782] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 302.809156][ T6018] usb 6-1: USB disconnect, device number 18 [ 302.824015][ T6018] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 304.022182][T10391] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1211'. [ 304.896467][T10406] netlink: 'syz.0.1215': attribute type 10 has an invalid length. [ 304.899700][T10406] bond1: option mode: unable to set because the bond device has slaves [ 304.908322][T10406] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 304.911146][ T9796] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:f416:33ff:fef9:6038 error=-28 [ 304.915088][T10406] bond1: (slave macvlan5): Enslaving as an active interface with an up link [ 305.335462][ T9762] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 306.454117][ T9796] net_ratelimit: 34 callbacks suppressed [ 306.454157][ T9796] bond1: (slave macvlan2): failed to get link speed/duplex [ 306.574752][ T9762] bond1: (slave macvlan2): failed to get link speed/duplex [ 306.628380][T10427] futex_wake_op: syz.0.1219 tries to shift op by 32; fix this program [ 306.693860][ T9762] bond1: (slave macvlan2): failed to get link speed/duplex [ 306.804082][ T9796] bond1: (slave macvlan2): failed to get link speed/duplex [ 306.913862][ T9796] bond1: (slave macvlan2): failed to get link speed/duplex [ 307.190608][ T9782] bond1: (slave macvlan2): failed to get link speed/duplex [ 307.293919][ T9762] bond1: (slave macvlan2): failed to get link speed/duplex [ 307.403927][ T9762] bond1: (slave macvlan2): failed to get link speed/duplex [ 307.515086][ T9796] bond1: (slave macvlan2): failed to get link speed/duplex [ 307.634066][ T34] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 307.636558][ T9796] bond1: (slave macvlan2): failed to get link speed/duplex [ 307.814073][ T34] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 307.818374][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 307.821412][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 307.825632][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 307.829118][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 307.831939][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 307.835499][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 307.843090][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 307.846745][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 307.850445][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 307.854052][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 307.857178][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 307.860736][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 307.864512][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 307.867600][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 307.871308][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 307.875009][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 307.878015][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 307.881567][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 307.892496][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 307.896111][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 307.899685][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 307.909754][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 307.914552][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 307.920140][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 307.925805][ T34] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 307.930583][ T34] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 307.935532][ T34] usb 7-1: Product: syz [ 307.937841][ T34] usb 7-1: Manufacturer: syz [ 307.940372][ T34] usb 7-1: SerialNumber: syz [ 307.945137][ T34] usb 7-1: config 0 descriptor?? [ 307.958598][ T34] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 308.213962][ T34] usb 7-1: USB disconnect, device number 32 [ 308.218395][ T34] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 308.456559][T10452] netlink: 'syz.0.1225': attribute type 10 has an invalid length. [ 308.460501][T10452] bond1: option mode: unable to set because the bond device has slaves [ 308.469234][T10452] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 308.472205][ T9762] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:f416:33ff:fef9:6038 error=-28 [ 308.472476][T10452] bond1: (slave macvlan6): Enslaving as an active interface with an up link [ 309.172716][T10461] sp0: Synchronizing with TNC [ 309.228687][T10463] netlink: 'syz.0.1229': attribute type 10 has an invalid length. [ 309.232240][T10463] bond1: option mode: unable to set because the bond device has slaves [ 309.239905][T10463] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 309.242702][ T9762] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:f416:33ff:fef9:6038 error=-28 [ 309.242970][T10463] bond1: (slave macvlan7): Enslaving as an active interface with an up link [ 309.802854][T10465] 9pnet_virtio: no channels available for device syz [ 310.189064][T10469] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1232'. [ 310.755336][ T60] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 311.533824][ T9769] net_ratelimit: 32 callbacks suppressed [ 311.533837][ T9769] bond1: (slave macvlan2): failed to get link speed/duplex [ 311.644256][ T9762] bond1: (slave macvlan2): failed to get link speed/duplex [ 311.724334][ T34] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 311.753852][ T9769] bond1: (slave macvlan2): failed to get link speed/duplex [ 311.863920][ T9769] bond1: (slave macvlan2): failed to get link speed/duplex [ 311.875693][ T34] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 311.880579][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 311.885061][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 311.889333][ T34] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 311.894957][ T34] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 311.898731][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.903901][ T34] usb 6-1: config 0 descriptor?? [ 311.984260][ T9762] bond1: (slave macvlan2): failed to get link speed/duplex [ 312.093908][ T9762] bond1: (slave macvlan2): failed to get link speed/duplex [ 312.204036][ T9762] bond1: (slave macvlan2): failed to get link speed/duplex [ 312.313853][ T9782] bond1: (slave macvlan2): failed to get link speed/duplex [ 312.313871][ T34] plantronics 0003:047F:FFFF.0011: ignoring exceeding usage max [ 312.319771][ T34] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 312.322719][ T34] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 312.325859][ T34] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 312.328806][ T34] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 312.331818][ T34] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 312.339672][ T34] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 312.423788][ T9762] bond1: (slave macvlan2): failed to get link speed/duplex [ 312.533828][ T9796] bond1: (slave macvlan2): failed to get link speed/duplex [ 312.552769][T10500] netlink: 'syz.1.1236': attribute type 10 has an invalid length. [ 312.556680][T10500] bond1: option mode: unable to set because the bond device has slaves [ 312.563331][T10500] bond1: (slave macvlan5): Error -98 calling set_mac_address [ 312.747941][ T7782] usb 6-1: USB disconnect, device number 19 [ 316.554023][ T1149] net_ratelimit: 33 callbacks suppressed [ 316.554065][ T1149] bond1: (slave macvlan2): failed to get link speed/duplex [ 316.663831][ T9796] bond1: (slave macvlan2): failed to get link speed/duplex [ 316.773917][ T1149] bond1: (slave macvlan2): failed to get link speed/duplex [ 316.883917][ T1149] bond1: (slave macvlan2): failed to get link speed/duplex [ 316.994157][ T1149] bond1: (slave macvlan2): failed to get link speed/duplex [ 317.104008][ T9777] bond1: (slave macvlan2): failed to get link speed/duplex [ 317.214911][ T9796] bond1: (slave macvlan2): failed to get link speed/duplex [ 317.323963][ T9777] bond1: (slave macvlan2): failed to get link speed/duplex [ 317.434093][ T9777] bond1: (slave macvlan2): failed to get link speed/duplex [ 317.543953][ T9796] bond1: (slave macvlan2): failed to get link speed/duplex [ 317.828483][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.832882][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.973841][ T59] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 319.125393][ T59] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 319.130381][ T59] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 319.135263][ T59] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 319.139498][ T59] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 319.145099][ T59] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 319.148921][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.154906][ T59] usb 6-1: config 0 descriptor?? [ 319.562883][ T59] plantronics 0003:047F:FFFF.0012: ignoring exceeding usage max [ 319.577505][ T59] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 319.580392][ T59] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 319.583388][ T59] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 319.603963][ T59] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 319.604689][T10575] 9pnet_fd: p9_fd_create_tcp (10575): problem connecting socket to 127.0.0.1 [ 319.607070][ T59] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 319.626500][ T59] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 319.780308][T10570] netlink: 'syz.1.1251': attribute type 10 has an invalid length. [ 319.790298][T10570] bond1: option mode: unable to set because the bond device has slaves [ 319.826364][T10570] bond1: (slave macvlan5): Error -98 calling set_mac_address [ 319.938158][ T59] usb 6-1: USB disconnect, device number 20 [ 320.797198][T10604] tipc: Cannot configure node identity twice [ 321.573754][ T9769] net_ratelimit: 34 callbacks suppressed [ 321.573766][ T9769] bond1: (slave macvlan2): failed to get link speed/duplex [ 321.580839][T10618] syz.0.1260 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 321.683816][ T9769] bond1: (slave macvlan2): failed to get link speed/duplex [ 321.793849][ T9762] bond1: (slave macvlan2): failed to get link speed/duplex [ 321.810230][ T40] kauditd_printk_skb: 1922 callbacks suppressed [ 321.810241][ T40] audit: type=1326 audit(1764343624.785:3148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10610 comm="syz.1.1258" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 321.819975][ T40] audit: type=1326 audit(1764343624.795:3149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10610 comm="syz.1.1258" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 322.109828][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.113309][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.122807][ T9762] bond1: (slave macvlan2): failed to get link speed/duplex [ 322.233803][ T9796] bond1: (slave macvlan2): failed to get link speed/duplex [ 322.343831][ T9796] bond1: (slave macvlan2): failed to get link speed/duplex [ 322.454144][ T9769] bond1: (slave macvlan2): failed to get link speed/duplex [ 322.551656][T10630] netlink: 'syz.0.1263': attribute type 10 has an invalid length. [ 322.558159][T10630] bond1: option mode: unable to set because the bond device has slaves [ 322.563889][ T9769] bond1: (slave macvlan2): failed to get link speed/duplex [ 322.572977][T10630] 8021q: adding VLAN 0 to HW filter on device macvlan8 [ 322.577017][ T9796] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:f416:33ff:fef9:6038 error=-28 [ 322.577830][T10630] bond1: (slave macvlan8): Enslaving as an active interface with an up link [ 322.684873][ T1149] bond1: (slave macvlan2): failed to get link speed/duplex [ 322.723799][ T60] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 322.793911][ T9796] bond1: (slave macvlan2): failed to get link speed/duplex [ 322.873799][ T60] usb 6-1: Using ep0 maxpacket: 8 [ 322.877077][ T60] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 322.880770][ T60] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 322.883802][ T7782] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 322.884144][ T60] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 322.890524][ T60] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 322.894871][ T60] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 322.897797][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.035167][ T7782] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 323.039124][ T7782] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 323.042599][ T7782] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 323.045824][ T7782] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 323.049949][ T7782] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 323.052818][ T7782] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.057225][ T7782] usb 7-1: config 0 descriptor?? [ 323.111190][ T60] usb 6-1: usb_control_msg returned -32 [ 323.114564][ T60] usbtmc 6-1:16.0: can't read capabilities [ 323.197523][T10638] overlayfs: failed to resolve './file1': -2 [ 323.465184][ T7782] plantronics 0003:047F:FFFF.0013: ignoring exceeding usage max [ 323.468497][ T7782] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 323.470794][ T7782] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 323.473077][ T7782] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 323.475656][ T7782] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 323.478251][ T7782] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 323.488939][ T7782] plantronics 0003:047F:FFFF.0013: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 323.672667][T10635] netlink: 'syz.2.1265': attribute type 10 has an invalid length. [ 323.676340][T10635] bond1: option mode: unable to set because the bond device has slaves [ 323.695168][T10635] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 323.771952][ T34] usb 7-1: USB disconnect, device number 33 [ 325.625593][ T6018] usb 6-1: USB disconnect, device number 21 [ 325.736965][T10673] virtio-fs: tag not found [ 326.473944][T10676] lo speed is unknown, defaulting to 1000 [ 326.664471][ T9782] net_ratelimit: 32 callbacks suppressed [ 326.664489][ T9782] bond1: (slave macvlan2): failed to get link speed/duplex [ 326.714523][T10689] netlink: 'syz.3.1277': attribute type 1 has an invalid length. [ 326.773911][ T9769] bond1: (slave macvlan2): failed to get link speed/duplex [ 326.883889][ T1149] bond1: (slave macvlan2): failed to get link speed/duplex [ 326.993945][ T9796] bond1: (slave macvlan2): failed to get link speed/duplex [ 327.103908][ T9769] bond1: (slave macvlan2): failed to get link speed/duplex [ 327.125672][ T40] audit: type=1326 audit(1764343630.105:3150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10688 comm="syz.3.1277" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 327.135414][ T40] audit: type=1326 audit(1764343630.105:3151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10688 comm="syz.3.1277" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 327.136436][T10691] /dev/nullb0: Can't open blockdev [ 327.147164][ T40] audit: type=1326 audit(1764343630.105:3152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10688 comm="syz.3.1277" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 327.156827][ T40] audit: type=1326 audit(1764343630.125:3153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10688 comm="syz.3.1277" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 327.164067][ T40] audit: type=1326 audit(1764343630.125:3154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10688 comm="syz.3.1277" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 327.211208][ T40] audit: type=1326 audit(1764343630.185:3155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10688 comm="syz.3.1277" exe="/syz-executor" sig=0 arch=40000003 syscall=352 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 327.219892][ T9796] bond1: (slave macvlan2): failed to get link speed/duplex [ 327.225154][ T40] audit: type=1326 audit(1764343630.185:3156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10688 comm="syz.3.1277" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 327.233029][ T40] audit: type=1326 audit(1764343630.185:3157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10688 comm="syz.3.1277" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 327.241567][ T40] audit: type=1326 audit(1764343630.185:3158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10688 comm="syz.3.1277" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 327.250474][ T40] audit: type=1326 audit(1764343630.195:3159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10688 comm="syz.3.1277" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 327.323801][ T9796] bond1: (slave macvlan2): failed to get link speed/duplex [ 327.433812][ T9762] bond1: (slave macvlan2): failed to get link speed/duplex [ 327.543893][ T9769] bond1: (slave macvlan2): failed to get link speed/duplex [ 327.654002][ T9769] bond1: (slave macvlan2): failed to get link speed/duplex [ 328.547032][T10707] loop2: detected capacity change from 0 to 7 [ 328.561397][T10707] Dev loop2: unable to read RDB block 7 [ 328.563431][T10707] loop2: AHDI p1 p2 p3 [ 328.566393][T10707] loop2: partition table partially beyond EOD, truncated [ 328.571934][T10707] loop2: p1 start 1601398130 is beyond EOD, truncated [ 328.574527][T10707] loop2: p2 start 1702059890 is beyond EOD, truncated [ 329.883792][ T59] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 330.034885][ T59] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 330.039303][ T59] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 330.042950][ T59] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 330.048195][ T59] usb 6-1: config 0 interface 0 has no altsetting 0 [ 330.052047][ T59] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 330.055869][ T59] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 330.060314][ T59] usb 6-1: config 0 interface 0 has no altsetting 0 [ 330.064234][ T59] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 330.067755][ T59] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 330.071494][ T59] usb 6-1: config 0 interface 0 has no altsetting 0 [ 330.075006][ T59] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 330.078330][ T59] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 330.082240][ T59] usb 6-1: config 0 interface 0 has no altsetting 0 [ 330.085743][ T59] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 330.089720][ T59] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 330.094405][ T59] usb 6-1: config 0 interface 0 has no altsetting 0 [ 330.098352][ T59] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 330.102013][ T59] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 330.106484][ T59] usb 6-1: config 0 interface 0 has no altsetting 0 [ 330.110390][ T59] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 330.114263][ T59] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 330.119116][ T59] usb 6-1: config 0 interface 0 has no altsetting 0 [ 330.123001][ T59] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 330.127040][ T59] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 330.131458][ T59] usb 6-1: config 0 interface 0 has no altsetting 0 [ 330.136086][ T59] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 330.139024][ T59] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 330.142948][ T59] usb 6-1: Product: syz [ 330.145206][ T59] usb 6-1: Manufacturer: syz [ 330.147198][ T59] usb 6-1: SerialNumber: syz [ 330.151448][ T59] usb 6-1: config 0 descriptor?? [ 330.159980][ T59] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 330.462108][ C3] usb 6-1: yurex_control_callback - control failed: -71 [ 330.464834][ T59] usb 6-1: USB disconnect, device number 22 [ 330.468005][ T59] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 331.158668][T10741] IPVS: Error connecting to the multicast addr [ 331.408327][T10746] syzkaller0: entered promiscuous mode [ 331.410117][T10746] syzkaller0: entered allmulticast mode [ 331.519346][T10750] netlink: 'syz.1.1293': attribute type 2 has an invalid length. [ 331.809030][ T1149] net_ratelimit: 34 callbacks suppressed [ 331.809077][ T1149] bond1: (slave macvlan2): failed to get link speed/duplex [ 331.942706][ T9796] bond1: (slave macvlan2): failed to get link speed/duplex [ 332.056356][ T9782] bond1: (slave macvlan2): failed to get link speed/duplex [ 332.184365][ T9769] bond1: (slave macvlan2): failed to get link speed/duplex [ 334.153868][ T9769] bond1: (slave macvlan2): failed to get link speed/duplex [ 334.284252][ T9788] bond1: (slave macvlan2): failed to get link speed/duplex [ 334.413008][ T9769] bond1: (slave macvlan2): failed to get link speed/duplex [ 334.524167][ T9769] bond1: (slave macvlan2): failed to get link speed/duplex [ 334.618651][T10778] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 334.621867][T10778] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 334.627905][T10778] vhci_hcd vhci_hcd.0: Device attached [ 334.634087][ T1149] bond1: (slave macvlan2): failed to get link speed/duplex [ 334.794983][T10783] fuse: Bad value for 'fd' [ 334.833952][ T1149] bond1: (slave macvlan2): failed to get link speed/duplex [ 334.934181][ T29] usb 42-1: SetAddress Request (14) to port 0 [ 334.936463][ T29] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 335.017320][T10784] binder: 10774:10784 ioctl 0 80000040 returned -22 [ 335.165335][T10779] vhci_hcd: connection reset by peer [ 335.169782][ T9769] vhci_hcd: stop threads [ 335.171802][ T9769] vhci_hcd: release socket [ 335.174271][ T9769] vhci_hcd: disconnect device [ 335.558015][T10788] netlink: 134788 bytes leftover after parsing attributes in process `syz.3.1301'. [ 336.904791][ T1149] net_ratelimit: 16 callbacks suppressed [ 336.904809][ T1149] bond1: (slave macvlan2): failed to get link speed/duplex [ 337.034143][ T9782] bond1: (slave macvlan2): failed to get link speed/duplex [ 337.065741][ T9769] Bluetooth: Error in BCSP hdr checksum [ 337.084210][ T9769] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 337.144266][ T1149] bond1: (slave macvlan2): failed to get link speed/duplex [ 337.314111][ T1149] bond1: (slave macvlan2): failed to get link speed/duplex [ 337.324166][ T1149] Bluetooth: Error in BCSP hdr checksum [ 337.423838][ T9769] bond1: (slave macvlan2): failed to get link speed/duplex [ 337.533870][ T1149] bond1: (slave macvlan2): failed to get link speed/duplex [ 337.583952][ T1149] Bluetooth: Error in BCSP hdr checksum [ 337.643887][ T9788] bond1: (slave macvlan2): failed to get link speed/duplex [ 337.754504][ T9788] bond1: (slave macvlan2): failed to get link speed/duplex [ 337.863909][ T1149] bond1: (slave macvlan2): failed to get link speed/duplex [ 337.984007][ T1149] bond1: (slave macvlan2): failed to get link speed/duplex [ 338.367038][T10809] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 338.369253][T10809] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 338.373331][T10809] vhci_hcd vhci_hcd.0: Device attached [ 338.663785][ T6018] usb 44-1: SetAddress Request (26) to port 0 [ 338.666035][ T6018] usb 44-1: new SuperSpeed USB device number 26 using vhci_hcd [ 338.668532][T10810] vhci_hcd: connection closed [ 338.693041][ T1149] vhci_hcd: stop threads [ 338.696469][ T1149] vhci_hcd: release socket [ 338.697974][ T1149] vhci_hcd: disconnect device [ 338.833937][ T5964] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 339.120671][T10818] netlink: 'syz.1.1306': attribute type 4 has an invalid length. [ 339.429466][T10818] netlink: 'syz.1.1306': attribute type 4 has an invalid length. [ 339.685580][T10823] fuse: Bad value for 'fd' [ 340.037026][ T29] usb 42-1: device descriptor read/8, error -110 [ 340.583892][ T29] usb usb42-port1: attempt power cycle [ 341.355431][ T29] usb usb42-port1: unable to enumerate USB device [ 341.462443][T10825] Process accounting resumed [ 341.630754][T10841] overlayfs: failed to clone upperpath [ 341.934500][ T9782] net_ratelimit: 31 callbacks suppressed [ 341.934517][ T9782] bond1: (slave macvlan2): failed to get link speed/duplex [ 342.054982][ T9782] bond1: (slave macvlan2): failed to get link speed/duplex [ 342.163988][ T9782] bond1: (slave macvlan2): failed to get link speed/duplex [ 342.275509][ T9782] bond1: (slave macvlan2): failed to get link speed/duplex [ 342.347001][T10848] lo speed is unknown, defaulting to 1000 [ 342.383900][ T9782] bond1: (slave macvlan2): failed to get link speed/duplex [ 342.476887][T10854] mkiss: ax0: crc mode is auto. [ 342.514261][ T1149] bond1: (slave macvlan2): failed to get link speed/duplex [ 342.684845][ T9769] bond1: (slave macvlan2): failed to get link speed/duplex [ 342.793920][ T1149] bond1: (slave macvlan2): failed to get link speed/duplex [ 342.904009][ T1149] bond1: (slave macvlan2): failed to get link speed/duplex [ 343.014548][ T9796] bond1: (slave macvlan2): failed to get link speed/duplex [ 343.063866][ T60] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 343.073916][ T5789] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 343.213861][ T60] usb 6-1: Using ep0 maxpacket: 8 [ 343.218303][ T60] usb 6-1: config 0 interface 0 has no altsetting 0 [ 343.221036][ T60] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 343.225233][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.234975][ T60] usb 6-1: config 0 descriptor?? [ 343.238935][ T5789] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 343.250435][ T5789] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 343.253489][ T5789] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 343.259987][ T5789] usb 7-1: config 0 interface 0 has no altsetting 0 [ 343.267519][ T5789] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 343.270369][ T5789] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 343.276377][ T5789] usb 7-1: config 0 interface 0 has no altsetting 0 [ 343.279504][ T5789] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 343.282380][ T5789] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 343.286168][ T5789] usb 7-1: config 0 interface 0 has no altsetting 0 [ 343.289322][ T5789] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 343.292735][ T5789] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 343.296667][ T5789] usb 7-1: config 0 interface 0 has no altsetting 0 [ 343.299871][ T5789] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 343.302730][ T5789] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 343.306197][ T5789] usb 7-1: config 0 interface 0 has no altsetting 0 [ 343.309525][ T5789] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 343.312811][ T5789] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 343.316425][ T5789] usb 7-1: config 0 interface 0 has no altsetting 0 [ 343.322524][ T5789] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 343.325647][ T5789] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 343.329184][ T5789] usb 7-1: config 0 interface 0 has no altsetting 0 [ 343.332437][ T5789] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 343.335673][ T5789] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 343.339089][ T5789] usb 7-1: config 0 interface 0 has no altsetting 0 [ 343.344252][ T5789] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 343.347197][ T5789] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 343.349851][ T5789] usb 7-1: Product: syz [ 343.351474][ T5789] usb 7-1: Manufacturer: syz [ 343.353643][ T5789] usb 7-1: SerialNumber: syz [ 343.363979][ T5789] usb 7-1: config 0 descriptor?? [ 343.371489][ T5789] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 343.677997][ C2] usb 7-1: yurex_control_callback - control failed: -71 [ 343.679020][ T59] usb 7-1: USB disconnect, device number 34 [ 343.685955][ T59] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 343.713775][ T6018] usb 44-1: device descriptor read/8, error -110 [ 343.944706][T10877] netlink: 107460 bytes leftover after parsing attributes in process `syz.0.1320'. [ 344.104627][ T6018] usb usb44-port1: attempt power cycle [ 344.664734][ T6018] usb usb44-port1: unable to enumerate USB device [ 344.988598][ T60] usbhid 6-1:0.0: can't add hid device: -71 [ 344.992127][ T60] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 345.025999][ T60] usb 6-1: USB disconnect, device number 23 [ 345.945847][T10900] hub 8-0:1.0: USB hub found [ 345.948563][T10900] hub 8-0:1.0: 1 port detected [ 346.021716][T10909] overlayfs: failed to resolve './file1': -2 [ 346.974337][ T9782] net_ratelimit: 32 callbacks suppressed [ 346.974350][ T9782] bond1: (slave macvlan2): failed to get link speed/duplex [ 347.084000][ T9788] bond1: (slave macvlan2): failed to get link speed/duplex [ 347.193917][ T9766] bond1: (slave macvlan2): failed to get link speed/duplex [ 347.304263][ T9788] bond1: (slave macvlan2): failed to get link speed/duplex [ 347.414548][ T1149] bond1: (slave macvlan2): failed to get link speed/duplex [ 347.534342][ T9766] bond1: (slave macvlan2): failed to get link speed/duplex [ 347.644384][ T9766] bond1: (slave macvlan2): failed to get link speed/duplex [ 347.754542][ T9782] bond1: (slave macvlan2): failed to get link speed/duplex [ 347.823848][ T1330] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 347.863921][ T9766] bond1: (slave macvlan2): failed to get link speed/duplex [ 347.974018][ T9782] bond1: (slave macvlan2): failed to get link speed/duplex [ 347.985514][ T1330] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 347.990294][ T1330] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 347.993249][ T1330] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 348.003922][ T1330] usb 6-1: config 0 interface 0 has no altsetting 0 [ 348.007153][ T1330] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 348.010132][ T1330] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 348.013891][ T1330] usb 6-1: config 0 interface 0 has no altsetting 0 [ 348.017521][ T1330] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 348.020525][ T1330] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 348.033849][ T1330] usb 6-1: config 0 interface 0 has no altsetting 0 [ 348.037199][ T1330] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 348.040257][ T1330] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 348.053873][ T1330] usb 6-1: config 0 interface 0 has no altsetting 0 [ 348.057062][ T1330] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 348.060080][ T1330] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 348.073826][ T1330] usb 6-1: config 0 interface 0 has no altsetting 0 [ 348.084543][ T1330] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 348.087410][ T1330] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 348.090902][ T1330] usb 6-1: config 0 interface 0 has no altsetting 0 [ 348.094646][ T1330] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 348.097454][ T1330] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 348.100885][ T1330] usb 6-1: config 0 interface 0 has no altsetting 0 [ 348.104429][ T1330] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 348.107285][ T1330] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 348.110762][ T1330] usb 6-1: config 0 interface 0 has no altsetting 0 [ 348.115208][ T1330] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 348.118048][ T1330] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 348.120694][ T1330] usb 6-1: Product: syz [ 348.122053][ T1330] usb 6-1: Manufacturer: syz [ 348.133971][ T1330] usb 6-1: SerialNumber: syz [ 348.136911][ T1330] usb 6-1: config 0 descriptor?? [ 348.144777][ T1330] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 348.448849][ C3] usb 6-1: yurex_control_callback - control failed: -71 [ 348.455322][ T60] usb 6-1: USB disconnect, device number 24 [ 348.487447][T10929] Bluetooth: MGMT ver 1.23 [ 348.497191][ T60] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 349.065377][T10936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1334'. [ 349.078844][T10936] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 349.081976][T10936] overlayfs: missing 'lowerdir' [ 349.473943][T10942] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 350.175763][T10942] /dev/sr0: Can't open blockdev [ 352.083831][ T1149] net_ratelimit: 35 callbacks suppressed [ 352.083846][ T1149] bond1: (slave macvlan2): failed to get link speed/duplex [ 352.230078][ T1149] bond1: (slave macvlan2): failed to get link speed/duplex [ 352.298055][T10982] netlink: 'syz.1.1341': attribute type 10 has an invalid length. [ 352.349370][T10982] team0: left allmulticast mode [ 352.350982][T10982] team_slave_0: left allmulticast mode [ 352.352701][T10982] team_slave_1: left allmulticast mode [ 352.354640][T10982] geneve0: left allmulticast mode [ 352.356312][T10982] team0: left promiscuous mode [ 352.357622][T10983] netlink: 'syz.1.1341': attribute type 10 has an invalid length. [ 352.357891][T10982] team_slave_0: left promiscuous mode [ 352.360370][T10983] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1341'. [ 352.362283][T10982] team_slave_1: left promiscuous mode [ 352.367083][T10982] geneve0: left promiscuous mode [ 352.369425][T10982] bridge0: port 3(team0) entered disabled state [ 352.379714][T10982] batman_adv: batadv0: Adding interface: team0 [ 352.381921][T10982] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.389939][T10982] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 352.394389][ T9782] bond1: (slave macvlan2): failed to get link speed/duplex [ 352.403911][T10983] team0: entered promiscuous mode [ 352.405570][T10983] team_slave_0: entered promiscuous mode [ 352.407497][T10983] team_slave_1: entered promiscuous mode [ 352.434675][T10983] geneve0: entered promiscuous mode [ 352.441594][T10983] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.449271][T10983] batman_adv: batadv0: Interface activated: team0 [ 352.451416][T10983] batman_adv: batadv0: Interface deactivated: team0 [ 352.453508][T10983] batman_adv: batadv0: Removing interface: team0 [ 352.467087][T10983] bridge0: port 3(team0) entered blocking state [ 352.469676][T10983] bridge0: port 3(team0) entered disabled state [ 352.472137][T10983] team0: entered allmulticast mode [ 352.474083][T10983] team_slave_0: entered allmulticast mode [ 352.476091][T10983] team_slave_1: entered allmulticast mode [ 352.478088][T10983] geneve0: entered allmulticast mode [ 352.504112][ T9769] bond1: (slave macvlan2): failed to get link speed/duplex [ 352.614373][ T9769] bond1: (slave macvlan2): failed to get link speed/duplex [ 352.724069][ T1149] bond1: (slave macvlan2): failed to get link speed/duplex [ 352.844131][ T9769] bond1: (slave macvlan2): failed to get link speed/duplex [ 352.954612][ T9769] bond1: (slave macvlan2): failed to get link speed/duplex [ 353.065925][ T1149] bond1: (slave macvlan2): failed to get link speed/duplex [ 353.183985][ T1149] bond1: (slave macvlan2): failed to get link speed/duplex [ 353.314741][T10997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1347'. [ 353.442699][ T9769] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.446397][ T9769] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.450012][ T9769] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.453610][ T9769] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.465095][ T9769] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.467928][ T9769] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.470662][ T9769] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.473341][ T9769] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.296580][T11033] ptrace attach of ""[11034] was attempted by "/syz-executor exec"[11033] [ 356.583896][T11058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1360'. [ 357.406509][T11070] netlink: 'syz.1.1362': attribute type 4 has an invalid length. [ 357.862516][T11074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1365'. [ 357.868153][T11074] netlink: 'syz.3.1365': attribute type 1 has an invalid length. [ 357.870881][T11074] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1365'. [ 357.938124][T11076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1365'. [ 358.134227][T11087] tipc: Can't bind to reserved service type 0 [ 358.138207][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1364'. [ 358.213834][ T60] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 358.256956][T11083] mkiss: ax0: crc mode is auto. [ 358.393933][ T60] usb 7-1: Using ep0 maxpacket: 8 [ 358.414786][ T60] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 358.420762][ T60] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 358.424964][ T60] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 358.429529][ T60] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 358.436147][ T60] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 358.440148][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.686299][ T60] usb 7-1: usb_control_msg returned -32 [ 358.688073][ T60] usbtmc 7-1:16.0: can't read capabilities [ 359.062551][T11103] program syz.3.1371 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 359.533226][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 359.533238][ T40] audit: type=1326 audit(1764343662.505:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11077 comm="syz.2.1366" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x0 [ 359.634220][ T60] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 359.656644][ C1] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 359.669194][T11114] usbtmc 7-1:16.0: Unable to send data, error -71 [ 360.152809][T11110] lo speed is unknown, defaulting to 1000 [ 361.867481][T11155] fuse: Unknown parameter '0x0000000000000009' [ 362.049661][ T1330] usb 7-1: USB disconnect, device number 35 [ 368.823309][ T9769] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 370.375333][T11184] netlink: 'syz.2.1383': attribute type 1 has an invalid length. [ 370.389887][T11184] 8021q: adding VLAN 0 to HW filter on device bond2 [ 371.101386][T11184] bond2: (slave veth3): Enslaving as an active interface with a down link [ 371.414192][T11184] bond2: (slave dummy0): making interface the new active one [ 371.417317][T11184] dummy0: entered promiscuous mode [ 371.419655][T11184] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 371.567175][T11184] bond2 (unregistering): (slave veth3): Releasing active interface [ 371.574045][T11184] bond2 (unregistering): (slave dummy0): Releasing active interface [ 371.579704][T11184] bond2 (unregistering): Released all slaves [ 371.725419][ T60] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 372.569480][T11230] kAFS: unable to lookup cell '' [ 373.508619][T11247] rdma_rxe: rxe_newlink: failed to add syz_tun [ 374.959052][T11267] comedi comedi0: No channels found! [ 375.855716][T11257] netlink: 'syz.0.1400': attribute type 1 has an invalid length. [ 375.878170][T11257] 8021q: adding VLAN 0 to HW filter on device bond2 [ 376.020714][T11257] bond2: (slave veth3): Enslaving as an active interface with a down link [ 376.169994][T11257] bond2: (slave dummy0): making interface the new active one [ 376.172826][T11257] dummy0: entered promiscuous mode [ 376.174707][T11257] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 376.272996][T11257] bond2 (unregistering): (slave veth3): Releasing active interface [ 376.277603][T11257] bond2 (unregistering): (slave dummy0): Releasing active interface [ 376.281120][T11257] bond2 (unregistering): Released all slaves [ 376.439836][T11274] netlink: 'syz.3.1404': attribute type 1 has an invalid length. [ 376.472371][T11274] 8021q: adding VLAN 0 to HW filter on device bond2 [ 376.500959][T11274] bond2: (slave veth3): Enslaving as an active interface with a down link [ 376.565724][T11282] overlayfs: failed to clone upperpath [ 376.639915][T11274] bond2 (unregistering): (slave veth3): Releasing active interface [ 376.647137][T11274] bond2 (unregistering): Released all slaves [ 379.023811][T11323] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 379.026823][T11323] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 379.305200][T11320] comedi comedi0: No channels found! [ 380.653804][ T60] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 380.820484][ T60] usb 7-1: Using ep0 maxpacket: 16 [ 380.832358][ T60] usb 7-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 380.853746][ T60] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 380.856207][T11341] 9pnet_fd: p9_fd_create_tcp (11341): problem connecting socket to 127.0.0.1 [ 380.863166][ T60] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 380.870245][ T60] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.872959][ T60] usb 7-1: Product: syz [ 380.874540][ T60] usb 7-1: Manufacturer: syz [ 380.876761][ T60] usb 7-1: SerialNumber: syz [ 381.029279][T11345] kAFS: unable to lookup cell '(' [ 381.035471][T11345] kAFS: unable to lookup cell '(,c¾ûL' [ 381.127378][T11336] smc: net device bond0 applied user defined pnetid SYZ2 [ 381.132178][T11336] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1416'. [ 381.265740][T11336] bond1: (slave macvlan2): Removing an active aggregator [ 381.285245][T11336] bond1: (slave macvlan2): Releasing backup interface [ 381.315065][T11351] netlink: 'syz.2.1416': attribute type 17 has an invalid length. [ 381.322472][T11351] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1416'. [ 381.341498][T11336] smc: removing net device bond0 with user defined pnetid SYZ2 [ 381.352858][T11336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.358301][T11336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.362864][T11336] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 381.367558][T11336] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 381.373783][T11336] bond0 (unregistering): Released all slaves [ 381.494053][T11355] 9pnet_fd: Insufficient options for proto=fd [ 381.565874][T11358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1418'. [ 381.570466][T11358] netlink: 'syz.3.1418': attribute type 5 has an invalid length. [ 381.573231][T11358] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1418'. [ 381.593829][T11358] geneve2: entered promiscuous mode [ 381.596325][T11358] geneve2: entered allmulticast mode [ 381.601894][ T9769] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 381.604780][ T9769] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 381.609418][ T9769] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 381.612716][ T9769] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 381.788430][T11363] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1422'. [ 381.987198][ T40] audit: type=1326 audit(1764343684.965:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11365 comm="syz.1.1423" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 381.997714][ T40] audit: type=1326 audit(1764343684.965:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11365 comm="syz.1.1423" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 382.120567][ T40] audit: type=1326 audit(1764343684.965:3164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11365 comm="syz.1.1423" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 382.127707][ T40] audit: type=1326 audit(1764343684.965:3165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11365 comm="syz.1.1423" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 382.135582][ T40] audit: type=1326 audit(1764343684.965:3166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11365 comm="syz.1.1423" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 382.142380][ T40] audit: type=1326 audit(1764343684.965:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11365 comm="syz.1.1423" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 382.161926][ T40] audit: type=1326 audit(1764343684.965:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11365 comm="syz.1.1423" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 382.173798][ T40] audit: type=1326 audit(1764343684.965:3169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11365 comm="syz.1.1423" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 382.181703][ T40] audit: type=1326 audit(1764343684.965:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11365 comm="syz.1.1423" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 382.188780][ T40] audit: type=1326 audit(1764343684.965:3171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11365 comm="syz.1.1423" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 382.205606][T11355] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 382.629215][T11376] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 382.631352][T11376] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 382.635056][T11376] vhci_hcd vhci_hcd.0: Device attached [ 382.694018][T11376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1424'. [ 382.924490][ T29] usb 44-1: SetAddress Request (30) to port 0 [ 382.929139][ T29] usb 44-1: new SuperSpeed USB device number 30 using vhci_hcd [ 383.105987][ T60] usb 7-1: 0:2 : does not exist [ 383.116390][T11382] rdma_rxe: rxe_newlink: failed to add syz_tun [ 383.133535][ T60] usb 7-1: 5:0: cannot get min/max values for control 4 (id 5) [ 383.155947][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.158910][ T60] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5) [ 383.201999][ T60] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5) [ 383.227596][ T60] usb 7-1: 5:0: failed to get current value for ch 1 (-22) [ 383.273981][ T5956] Bluetooth: hci1: unexpected event for opcode 0x100c [ 383.342249][ T60] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5) [ 383.371727][ T60] usb 7-1: USB disconnect, device number 36 [ 383.381156][T11377] vhci_hcd: connection reset by peer [ 383.388233][ T9796] vhci_hcd: stop threads [ 383.389903][ T9796] vhci_hcd: release socket [ 383.392126][ T9796] vhci_hcd: disconnect device [ 384.513783][ T10] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 384.676330][ T10] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 384.686741][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 384.690465][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 384.695516][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 384.706379][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 384.710310][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 384.716433][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 384.727432][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 384.730865][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 384.735652][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 384.745540][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 384.749275][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 384.754140][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 384.761098][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 384.765373][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 384.769873][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 384.773781][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 384.777499][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 384.781889][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 384.786892][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 384.790555][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 384.795384][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 384.799229][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 384.802938][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 384.807982][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 384.812772][ T10] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 384.816927][ T10] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 384.820376][ T10] usb 7-1: Product: syz [ 384.822156][ T10] usb 7-1: Manufacturer: syz [ 384.824556][ T10] usb 7-1: SerialNumber: syz [ 384.828519][ T10] usb 7-1: config 0 descriptor?? [ 384.836247][ T10] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 385.193952][ C0] usb 7-1: yurex_control_callback - control failed: -71 [ 385.194626][ T60] usb 7-1: USB disconnect, device number 37 [ 385.199711][ T60] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 385.317511][T11404] 9pnet_fd: p9_fd_create_tcp (11404): problem connecting socket to 127.0.0.1 [ 385.380587][T11406] kAFS: unable to lookup cell '(' [ 385.383367][T11406] kAFS: unable to lookup cell '(,c¾ûL' [ 385.961587][T11414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1437'. [ 385.966403][T11414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1437'. [ 388.033821][ T29] usb 44-1: device descriptor read/8, error -110 [ 388.474940][T11453] rdma_rxe: rxe_newlink: failed to add syz_tun [ 388.498237][ T29] usb usb44-port1: attempt power cycle [ 389.214146][ T29] usb usb44-port1: unable to enumerate USB device [ 389.606747][T11463] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 389.610544][T11463] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 393.236597][T11517] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 393.240218][T11517] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 395.423566][ T5956] Bluetooth: hci1: Malformed LE Event: 0x0d [ 396.663743][ T59] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 396.813820][ T59] usb 6-1: Using ep0 maxpacket: 16 [ 396.817654][ T59] usb 6-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 396.820922][ T59] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 396.825839][ T59] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 396.828730][ T59] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.831281][ T59] usb 6-1: Product: syz [ 396.832622][ T59] usb 6-1: Manufacturer: syz [ 396.834412][ T59] usb 6-1: SerialNumber: syz [ 397.048944][T11551] smc: net device bond0 applied user defined pnetid SYZ2 [ 397.052240][T11551] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1473'. [ 397.056117][T11551] bond_slave_0: left promiscuous mode [ 397.058694][T11551] bond_slave_1: left promiscuous mode [ 397.060991][T11551] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 397.086376][T11551] bond1: (slave macvlan2): Removing an active aggregator [ 397.089268][T11551] bond1: (slave macvlan2): Releasing backup interface [ 397.108088][T11551] smc: removing net device bond0 with user defined pnetid SYZ2 [ 397.112138][T11551] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.118558][T11551] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.127660][T11551] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 397.150811][T11551] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 397.156266][T11551] bond0 (unregistering): Released all slaves [ 397.162901][T11561] netlink: 'syz.1.1473': attribute type 17 has an invalid length. [ 397.165746][T11561] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1473'. [ 397.175401][T11561] macvtap0: entered allmulticast mode [ 397.178341][T11561] veth0_macvtap: entered allmulticast mode [ 397.181610][T11561] net_ratelimit: 1 callbacks suppressed [ 397.181624][T11561] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 398.108660][T11576] overlayfs: failed to resolve './file1': -2 [ 398.110724][ T59] usb 6-1: 0:2 : does not exist [ 398.118506][ T59] usb 6-1: 5:0: cannot get min/max values for control 4 (id 5) [ 398.125258][ T59] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5) [ 398.130865][ T59] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5) [ 398.136353][ T59] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 398.147043][ T59] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5) [ 398.153211][ T59] usb 6-1: USB disconnect, device number 25 [ 398.162159][T11292] udevd[11292]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 398.993397][ T9762] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.998821][ T9762] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.215853][T11620] 9pnet_fd: p9_fd_create_tcp (11620): problem connecting socket to 127.0.0.1 [ 403.214588][T11662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1506'. [ 403.322031][ T5956] Bluetooth: hci1: unexpected event for opcode 0x0c1c [ 405.438603][T11711] ieee802154 phy1 wpan1: encryption failed: -90 [ 406.585953][T11721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1522'. [ 406.891799][T11728] netlink: 'syz.0.1527': attribute type 10 has an invalid length. [ 406.895841][T11728] bond1: option mode: unable to set because the bond device has slaves [ 406.903529][T11728] 8021q: adding VLAN 0 to HW filter on device macvlan9 [ 406.907075][ T9769] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:f416:33ff:fef9:6038 error=-28 [ 406.910331][T11728] bond1: (slave macvlan9): Enslaving as an active interface with an up link [ 407.213144][T11738] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 407.444373][T11740] comedi comedi0: dmm32at: I/O port conflict (0x3,16) [ 407.823878][ T6018] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 408.645937][T11758] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.1536'. [ 408.817533][ T6018] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 408.821371][ T6018] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 408.825596][ T6018] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 408.829649][ T6018] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 408.835032][ T6018] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 408.838781][ T6018] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.844262][ T6018] usb 7-1: config 0 descriptor?? [ 409.252289][ T6018] plantronics 0003:047F:FFFF.0014: ignoring exceeding usage max [ 409.258708][ T6018] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 409.261267][ T6018] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 409.263625][ T6018] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 409.266238][ T6018] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 409.268617][ T6018] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 409.277553][ T6018] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 409.453172][T11748] netlink: 'syz.2.1541': attribute type 10 has an invalid length. [ 409.494013][T11748] 8021q: adding VLAN 0 to HW filter on device bond1 [ 409.504669][ T29] usb 7-1: USB disconnect, device number 38 [ 410.449086][T11775] mkiss: ax0: crc mode is auto. [ 411.004397][ T1330] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 411.164448][ T1330] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 411.167838][ T1330] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 411.170907][ T1330] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 411.174719][ T1330] usb 6-1: config 0 interface 0 has no altsetting 0 [ 411.178431][ T1330] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 411.181345][ T1330] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 411.184803][ T1330] usb 6-1: config 0 interface 0 has no altsetting 0 [ 411.187689][ T1330] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 411.190541][ T1330] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 411.194185][ T1330] usb 6-1: config 0 interface 0 has no altsetting 0 [ 411.197353][ T1330] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 411.200181][ T1330] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 411.203613][ T1330] usb 6-1: config 0 interface 0 has no altsetting 0 [ 411.206810][ T1330] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 411.209705][ T1330] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 411.213088][ T1330] usb 6-1: config 0 interface 0 has no altsetting 0 [ 411.216251][ T1330] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 411.219141][ T1330] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 411.222531][ T1330] usb 6-1: config 0 interface 0 has no altsetting 0 [ 411.227447][ T1330] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 411.230378][ T1330] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 411.233896][ T1330] usb 6-1: config 0 interface 0 has no altsetting 0 [ 411.236792][ T1330] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 411.239628][ T1330] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 411.243186][ T1330] usb 6-1: config 0 interface 0 has no altsetting 0 [ 411.247242][ T1330] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 411.250316][ T1330] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 411.252973][ T1330] usb 6-1: Product: syz [ 411.254477][ T1330] usb 6-1: Manufacturer: syz [ 411.256019][ T1330] usb 6-1: SerialNumber: syz [ 411.259482][ T1330] usb 6-1: config 0 descriptor?? [ 411.264233][ T1330] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 411.626928][ C3] usb 6-1: yurex_control_callback - control failed: -71 [ 411.629444][ T1330] usb 6-1: USB disconnect, device number 26 [ 411.633789][ T1330] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 411.677953][T11812] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1556'. [ 412.696643][T11836] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 412.698854][T11836] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 412.703176][T11836] vhci_hcd vhci_hcd.0: Device attached [ 412.973772][ T6018] usb 42-1: SetAddress Request (18) to port 0 [ 412.975879][ T6018] usb 42-1: new SuperSpeed USB device number 18 using vhci_hcd [ 413.316559][T11837] vhci_hcd: connection reset by peer [ 413.320275][ T13] vhci_hcd: stop threads [ 413.321788][ T13] vhci_hcd: release socket [ 413.323271][ T13] vhci_hcd: disconnect device [ 413.684402][T11852] netlink: 'syz.0.1568': attribute type 10 has an invalid length. [ 413.688879][T11852] bond1: option mode: unable to set because the bond device has slaves [ 413.697857][T11852] 8021q: adding VLAN 0 to HW filter on device macvlan10 [ 413.701890][ T9788] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:f416:33ff:fef9:6038 error=-28 [ 413.702475][T11852] bond1: (slave macvlan10): Enslaving as an active interface with an up link [ 413.959998][ T5956] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 414.397003][T11871] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=256, location=256 [ 414.400888][T11871] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=512, location=512 [ 414.404174][T11871] UDF-fs: warning (device sr0): udf_load_vrs: No anchor found [ 414.406945][T11871] UDF-fs: Scanning with blocksize 2048 failed [ 414.525223][T11871] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=256, location=256 [ 414.529110][T11871] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=512, location=512 [ 414.532191][T11871] UDF-fs: warning (device sr0): udf_load_vrs: No anchor found [ 414.534717][T11871] UDF-fs: Scanning with blocksize 4096 failed [ 414.536881][T11871] UDF-fs: warning (device sr0): udf_fill_super: No partition found (1) [ 415.213898][ T5789] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 415.385011][ T5789] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 415.389798][ T5789] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 415.393979][ T5789] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 415.399063][ T5789] usb 7-1: config 0 interface 0 has no altsetting 0 [ 415.403332][ T5789] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 415.407876][ T5789] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 415.412637][ T5789] usb 7-1: config 0 interface 0 has no altsetting 0 [ 415.417211][ T5789] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 415.420913][ T5789] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 415.425683][ T5789] usb 7-1: config 0 interface 0 has no altsetting 0 [ 415.429885][ T5789] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 415.434039][ T5789] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 415.438745][ T5789] usb 7-1: config 0 interface 0 has no altsetting 0 [ 415.443130][ T5789] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 415.447276][ T5789] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 415.451958][ T5789] usb 7-1: config 0 interface 0 has no altsetting 0 [ 415.456291][ T5789] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 415.461299][ T5789] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 415.466334][ T5789] usb 7-1: config 0 interface 0 has no altsetting 0 [ 415.470565][ T5789] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 415.474781][ T5789] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 415.479567][ T5789] usb 7-1: config 0 interface 0 has no altsetting 0 [ 415.483888][ T5789] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 415.487910][ T5789] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 415.492567][ T5789] usb 7-1: config 0 interface 0 has no altsetting 0 [ 415.498445][ T5789] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 415.502488][ T5789] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 415.506270][ T5789] usb 7-1: Product: syz [ 415.508162][ T5789] usb 7-1: Manufacturer: syz [ 415.510309][ T5789] usb 7-1: SerialNumber: syz [ 415.516002][ T5789] usb 7-1: config 0 descriptor?? [ 415.524071][ T5789] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 415.887171][ C2] usb 7-1: yurex_control_callback - control failed: -71 [ 415.888212][ T59] usb 7-1: USB disconnect, device number 39 [ 415.894843][ T59] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 417.024823][T11900] netlink: 'syz.3.1584': attribute type 10 has an invalid length. [ 417.030678][T11900] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 417.049530][T11900] 8021q: adding VLAN 0 to HW filter on device bond2 [ 417.066621][T11900] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 417.072544][T11900] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 417.550432][T11919] fuse: Bad value for 'fd' [ 417.972775][T11927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1590'. [ 417.977326][T11927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1590'. [ 418.118638][ T6018] usb 42-1: device descriptor read/8, error -110 [ 418.386252][T11934] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 418.559243][ T6018] usb usb42-port1: attempt power cycle [ 418.741510][T11909] Process accounting resumed [ 419.098108][T11946] bond2: Removing last arp target with arp_interval on [ 419.124746][ T6018] usb usb42-port1: unable to enumerate USB device [ 419.209256][T11949] netlink: 'syz.0.1598': attribute type 10 has an invalid length. [ 419.213939][T11949] bond1: option mode: unable to set because the bond device has slaves [ 419.238795][T11949] 8021q: adding VLAN 0 to HW filter on device macvlan11 [ 419.244271][T11949] bond1: (slave macvlan11): Enslaving as an active interface with an up link [ 419.244645][ T9762] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:f416:33ff:fef9:6038 error=-28 [ 419.603206][T11955] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 419.606032][T11955] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 419.612068][T11955] vhci_hcd vhci_hcd.0: Device attached [ 419.776449][T11955] fuse: Bad value for 'fd' [ 419.913826][ T29] usb 44-1: SetAddress Request (34) to port 0 [ 419.916167][ T29] usb 44-1: new SuperSpeed USB device number 34 using vhci_hcd [ 420.199328][T11956] vhci_hcd: connection reset by peer [ 420.207172][ T9788] vhci_hcd: stop threads [ 420.208580][ T9788] vhci_hcd: release socket [ 420.211327][ T9788] vhci_hcd: disconnect device [ 421.632358][T11992] lo speed is unknown, defaulting to 1000 [ 421.633790][ T1330] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 421.785013][ T1330] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 421.788585][ T1330] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 421.792622][ T1330] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 421.795909][ T1330] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.803811][ T1330] usb 6-1: config 0 descriptor?? [ 421.834722][ T1330] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 423.058653][T12010] netlink: 'syz.1.1610': attribute type 10 has an invalid length. [ 423.323223][T12010] bond1: option mode: unable to set because the bond device is up [ 423.825903][T12013] random: crng reseeded on system resumption [ 424.819653][ T5789] usb 6-1: USB disconnect, device number 27 [ 424.993838][ T29] usb 44-1: device descriptor read/8, error -110 [ 425.173052][T12035] ptrace attach of ""[12038] was attempted by "/syz-executor exec"[12035] [ 425.404253][ T29] usb usb44-port1: attempt power cycle [ 425.765404][T12049] IPVS: Error connecting to the multicast addr [ 425.799492][T12050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1626'. [ 426.095592][ T29] usb usb44-port1: unable to enumerate USB device [ 427.323855][ T9766] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 428.274678][T12090] ptrace attach of ""[12092] was attempted by "/syz-executor exec"[12090] [ 428.413798][ T59] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 428.564358][ T59] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 428.567724][ T59] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 428.570671][ T59] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 428.574564][ T59] usb 7-1: config 0 interface 0 has no altsetting 0 [ 428.577270][ T59] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 428.580198][ T59] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 428.584404][ T59] usb 7-1: config 0 interface 0 has no altsetting 0 [ 428.588522][ T59] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 428.592432][ T59] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 428.596823][ T59] usb 7-1: config 0 interface 0 has no altsetting 0 [ 428.599874][ T59] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 428.602926][ T59] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 428.606652][ T59] usb 7-1: config 0 interface 0 has no altsetting 0 [ 428.609607][ T59] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 428.612573][ T59] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 428.616350][ T59] usb 7-1: config 0 interface 0 has no altsetting 0 [ 428.619139][ T59] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 428.622064][ T59] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 428.625729][ T59] usb 7-1: config 0 interface 0 has no altsetting 0 [ 428.628589][ T59] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 428.631728][ T59] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 428.635769][ T59] usb 7-1: config 0 interface 0 has no altsetting 0 [ 428.638769][ T59] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 428.641860][ T59] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 428.647754][ T59] usb 7-1: config 0 interface 0 has no altsetting 0 [ 428.651654][ T59] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 428.654793][ T59] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 428.657503][ T59] usb 7-1: Product: syz [ 428.658883][ T59] usb 7-1: Manufacturer: syz [ 428.660453][ T59] usb 7-1: SerialNumber: syz [ 428.663259][ T59] usb 7-1: config 0 descriptor?? [ 428.668006][ T59] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 429.037370][ C3] usb 7-1: yurex_control_callback - control failed: -71 [ 429.044246][ T59] usb 7-1: USB disconnect, device number 40 [ 429.048666][ T59] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 429.241909][T12106] netlink: 'syz.0.1648': attribute type 4 has an invalid length. [ 429.261967][T12106] netlink: 'syz.0.1648': attribute type 4 has an invalid length. [ 429.861145][T12110] ------------[ cut here ]------------ [ 429.863870][T12110] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 429.867782][T12110] WARNING: CPU: 2 PID: 12110 at net/mac80211/main.c:425 ieee80211_link_info_change_notify+0x349/0x3f0 [ 429.874269][T12110] Modules linked in: [ 429.876961][T12110] CPU: 2 UID: 0 PID: 12110 Comm: syz.1.1650 Not tainted syzkaller #0 PREEMPT(full) [ 429.880094][T12110] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 429.884554][T12110] RIP: 0010:ieee80211_link_info_change_notify+0x349/0x3f0 [ 429.887510][T12110] Code: 74 24 08 48 81 c6 20 01 00 00 48 89 74 24 08 e8 ad 73 f2 f6 8b 54 24 04 48 8b 74 24 08 48 c7 c7 80 a8 e2 8c e8 b8 f6 b0 f6 90 <0f> 0b 90 90 e9 0b fe ff ff e8 89 73 f2 f6 90 0f 0b 90 e9 21 fd ff [ 429.894866][T12110] RSP: 0018:ffffc900035ffa30 EFLAGS: 00010282 [ 429.897333][T12110] RAX: 0000000000000000 RBX: ffff88804f37cd80 RCX: ffffc90007b11000 [ 429.900653][T12110] RDX: 0000000000080000 RSI: ffffffff817adc55 RDI: 0000000000000001 [ 429.904091][T12110] RBP: 0000000000040000 R08: 0000000000000001 R09: 0000000000000000 [ 429.907473][T12110] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88804f37d7b8 [ 429.910803][T12110] R13: ffff88804f37e590 R14: 0000000000000000 R15: ffff88804ce50e80 [ 429.914222][T12110] FS: 0000000000000000(0000) GS:ffff888097a0d000(0063) knlGS:00000000f541db40 [ 429.917200][T12110] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 429.919405][T12110] CR2: fffffffffd000000 CR3: 0000000076965000 CR4: 0000000000352ef0 [ 429.922814][T12110] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 429.926210][T12110] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 429.929182][T12110] Call Trace: [ 429.930284][T12110] [ 429.931309][T12110] ieee80211_recalc_txpower+0xe4/0x110 [ 429.933094][T12110] ieee80211_set_tx_power+0x2b8/0x10d0 [ 429.935633][T12110] cfg80211_wext_siwtxpower+0x311/0x680 [ 429.938035][T12110] ? __pfx_cfg80211_wext_siwtxpower+0x10/0x10 [ 429.940670][T12110] ioctl_standard_call+0xb5/0x1d0 [ 429.942839][T12110] compat_standard_call+0xf2/0x350 [ 429.945174][T12110] ? __pfx_cfg80211_wext_siwtxpower+0x10/0x10 [ 429.947560][T12110] ? __pfx_compat_standard_call+0x10/0x10 [ 429.949652][T12110] ? full_name_hash+0xbc/0x110 [ 429.951662][T12110] ? netdev_name_node_lookup+0x127/0x180 [ 429.954192][T12110] ? __pfx_compat_standard_call+0x10/0x10 [ 429.956646][T12110] ? __pfx_cfg80211_wext_siwtxpower+0x10/0x10 [ 429.958715][T12110] wireless_process_ioctl.constprop.0+0x291/0x3d0 [ 429.961046][T12110] compat_wext_handle_ioctl+0x284/0x310 [ 429.963392][T12110] ? __pfx_compat_wext_handle_ioctl+0x10/0x10 [ 429.966113][T12110] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 429.968644][T12110] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 429.971184][T12110] compat_sock_ioctl+0x320/0x730 [ 429.973329][T12110] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 429.975762][T12110] ? hook_file_ioctl_common+0x145/0x410 [ 429.978137][T12110] ? __fget_files+0x20e/0x3c0 [ 429.980182][T12110] ? __might_fault+0x30/0x190 [ 429.982242][T12110] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 429.984620][T12110] __ia32_compat_sys_ioctl+0x242/0x370 [ 429.986506][T12110] __do_fast_syscall_32+0x7c/0x300 [ 429.988151][T12110] do_fast_syscall_32+0x32/0x80 [ 429.989728][T12110] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 429.991855][T12110] RIP: 0023:0xf702d579 [ 429.993206][T12110] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 430.000088][T12110] RSP: 002b:00000000f541d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 430.003654][T12110] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008b26 [ 430.007190][T12110] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 430.010521][T12110] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 430.013833][T12110] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 430.016519][T12110] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 430.019052][T12110] [ 430.020055][T12110] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 430.022792][T12110] CPU: 2 UID: 0 PID: 12110 Comm: syz.1.1650 Not tainted syzkaller #0 PREEMPT(full) [ 430.025779][T12110] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 430.029070][T12110] Call Trace: [ 430.030222][T12110] [ 430.031234][T12110] dump_stack_lvl+0x3d/0x1f0 [ 430.033081][T12110] vpanic+0x640/0x6f0 [ 430.034825][T12110] ? ieee80211_link_info_change_notify+0x349/0x3f0 [ 430.037605][T12110] panic+0xca/0xd0 [ 430.039231][T12110] ? __pfx_panic+0x10/0x10 [ 430.041178][T12110] check_panic_on_warn+0xab/0xb0 [ 430.043492][T12110] __warn+0xf6/0x3c0 [ 430.045228][T12110] ? preempt_schedule_notrace+0x62/0xe0 [ 430.047552][T12110] ? ieee80211_link_info_change_notify+0x349/0x3f0 [ 430.050274][T12110] report_bug+0x3c3/0x580 [ 430.052114][T12110] ? ieee80211_link_info_change_notify+0x349/0x3f0 [ 430.054796][T12110] handle_bug+0x184/0x210 [ 430.056411][T12110] exc_invalid_op+0x17/0x50 [ 430.057893][T12110] asm_exc_invalid_op+0x1a/0x20 [ 430.059440][T12110] RIP: 0010:ieee80211_link_info_change_notify+0x349/0x3f0 [ 430.062090][T12110] Code: 74 24 08 48 81 c6 20 01 00 00 48 89 74 24 08 e8 ad 73 f2 f6 8b 54 24 04 48 8b 74 24 08 48 c7 c7 80 a8 e2 8c e8 b8 f6 b0 f6 90 <0f> 0b 90 90 e9 0b fe ff ff e8 89 73 f2 f6 90 0f 0b 90 e9 21 fd ff [ 430.070061][T12110] RSP: 0018:ffffc900035ffa30 EFLAGS: 00010282 [ 430.072758][T12110] RAX: 0000000000000000 RBX: ffff88804f37cd80 RCX: ffffc90007b11000 [ 430.076093][T12110] RDX: 0000000000080000 RSI: ffffffff817adc55 RDI: 0000000000000001 [ 430.079134][T12110] RBP: 0000000000040000 R08: 0000000000000001 R09: 0000000000000000 [ 430.081638][T12110] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88804f37d7b8 [ 430.084110][T12110] R13: ffff88804f37e590 R14: 0000000000000000 R15: ffff88804ce50e80 [ 430.086635][T12110] ? __warn_printk+0x1a5/0x350 [ 430.088167][T12110] ieee80211_recalc_txpower+0xe4/0x110 [ 430.089909][T12110] ieee80211_set_tx_power+0x2b8/0x10d0 [ 430.091609][T12110] cfg80211_wext_siwtxpower+0x311/0x680 [ 430.093398][T12110] ? __pfx_cfg80211_wext_siwtxpower+0x10/0x10 [ 430.095323][T12110] ioctl_standard_call+0xb5/0x1d0 [ 430.096927][T12110] compat_standard_call+0xf2/0x350 [ 430.098563][T12110] ? __pfx_cfg80211_wext_siwtxpower+0x10/0x10 [ 430.100480][T12110] ? __pfx_compat_standard_call+0x10/0x10 [ 430.102306][T12110] ? full_name_hash+0xbc/0x110 [ 430.103835][T12110] ? netdev_name_node_lookup+0x127/0x180 [ 430.105672][T12110] ? __pfx_compat_standard_call+0x10/0x10 [ 430.107479][T12110] ? __pfx_cfg80211_wext_siwtxpower+0x10/0x10 [ 430.109414][T12110] wireless_process_ioctl.constprop.0+0x291/0x3d0 [ 430.111480][T12110] compat_wext_handle_ioctl+0x284/0x310 [ 430.113285][T12110] ? __pfx_compat_wext_handle_ioctl+0x10/0x10 [ 430.115239][T12110] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 430.117127][T12110] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 430.119007][T12110] compat_sock_ioctl+0x320/0x730 [ 430.120615][T12110] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 430.122363][T12110] ? hook_file_ioctl_common+0x145/0x410 [ 430.124108][T12110] ? __fget_files+0x20e/0x3c0 [ 430.125643][T12110] ? __might_fault+0x30/0x190 [ 430.127145][T12110] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 430.128863][T12110] __ia32_compat_sys_ioctl+0x242/0x370 [ 430.130612][T12110] __do_fast_syscall_32+0x7c/0x300 [ 430.132232][T12110] do_fast_syscall_32+0x32/0x80 [ 430.133791][T12110] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 430.135798][T12110] RIP: 0023:0xf702d579 [ 430.137104][T12110] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 430.143174][T12110] RSP: 002b:00000000f541d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 430.145820][T12110] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008b26 [ 430.148313][T12110] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 430.150816][T12110] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 430.153307][T12110] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 430.155808][T12110] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 430.158348][T12110] [ 430.160061][T12110] Kernel Offset: disabled [ 430.161471][T12110] Rebooting in 86400 seconds..