last executing test programs: 18m58.519229953s ago: executing program 0 (id=131): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kvm_mmio\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x58) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, 0x0, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000207c0)=""/39, 0x27}], 0x1}, 0x61) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x50}}, 0x8000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$VIDIOC_DQBUF(r7, 0xc0585611, &(0x7f0000000040)=@mmap={0x9, 0x7, 0x4, 0x10000, 0x2, {0x0, 0x2710}, {0x4, 0x1, 0x6, 0x7, 0x8, 0x9, "9b9a7244"}, 0x7f80000, 0x1, {}, 0x3}) 18m57.126466618s ago: executing program 0 (id=134): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x40008c4, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x2200000c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), 0x0) r1 = socket$inet(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f0000000000)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@fallback=r2, r2, 0x2e, 0x0, 0x0, @void, @value=r2}, 0x20) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) chdir(0x0) unshare(0x22020600) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x18) 18m52.739572708s ago: executing program 0 (id=136): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x14, 0x2, 0x6, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x4004000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000340)={[], [{@pcr={'pcr', 0x3d, 0x2a}}, {@smackfsdef}, {@smackfshat={'smackfshat', 0x3d, ']/!\r/\\]\xf4Y\x9e\x03@?\xbf\xfb\xd0\xba\xed\x9a\xf33\xf9'}}]}) socket(0x1e, 0x2, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f0000001fc0)=""/184, 0x20002078) 18m50.503954628s ago: executing program 0 (id=141): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000080)={0x402, 0x3}, 0x8) sendto$inet(r3, &(0x7f0000000100)="ab", 0x34000, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 18m48.075671462s ago: executing program 0 (id=145): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x2400c804) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB], 0x7) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r7 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{}, @hci_rp_role_discovery={{0x1}, {0x0, 0xc9, 0x1}}}}, 0x4a) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0xc048aeca, &(0x7f0000003680)={{0x2, 0x0, 0x80, {0xeeef0000, 0x2000, 0x3}}, "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", "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"}) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) 18m41.580690835s ago: executing program 0 (id=153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101282, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r5) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x1) syz_emit_vhci(0x0, 0x7) socket$inet_sctp(0x2, 0x1, 0x84) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000340)={0x80, 0x40000094, 0x0, 0x0}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x2, 0x6, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x40040000) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) 18m24.495439485s ago: executing program 32 (id=153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101282, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r5) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x1) syz_emit_vhci(0x0, 0x7) socket$inet_sctp(0x2, 0x1, 0x84) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000340)={0x80, 0x40000094, 0x0, 0x0}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x2, 0x6, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x40040000) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) 10m8.484079202s ago: executing program 1 (id=1756): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) 10m8.086754281s ago: executing program 1 (id=1758): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x2, 0xefae, 0x0, 0x3}, 'syz1\x00', 0x4d}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x2c0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0xffffffff) clock_gettime(0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) close(0x3) r1 = io_uring_setup(0x457c, &(0x7f0000000480)={0x0, 0xd498, 0x800, 0x8000003, 0x1d4}) close_range(r1, 0xffffffffffffffff, 0x0) 10m7.489210304s ago: executing program 1 (id=1763): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket(0x25, 0x1, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x230}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) 10m3.25746569s ago: executing program 1 (id=1781): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file1\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 10m2.931504063s ago: executing program 1 (id=1782): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x3000000, 0x8, {0x0, @empty}}}], 0x20}}], 0x1, 0x80) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7e, 0x1000, 0x5c8, 0x80000003, 0x6}) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x58, r8, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) uname(&(0x7f0000000000)=""/98) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000080)={0x0, 0x1d, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000017abccc849e5e0551b19e033622d9a2555f953ae3abb4114ae07edf48a99cf06bd0d7a5a1165cfa7c13821b6a483e8ed44a373188a014920922cb8d9ffc83d80898b48ad9844c8c6723ad8951e919d7be7bf981f3b7391bf06dd95b3d674a5c15fea8d77a74780733c164b8e18bd3b6c2a43163fbe223ac0f6e8be6db23e81e94c19da8c5c1c9475eadfca3d5b6c", @ANYRES16=r6, @ANYBLOB="01002bbd7000fedbdf25050000000800090002000000060001000500000008000c00aa0a000008000b00040000000c0010000500000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) write$smackfs_cipso(0xffffffffffffffff, &(0x7f0000006940)={'batadv_slave_1\x00', 0x20, 0x21, 0x20, 0x4, 0x20, [{0xa2}, {0x46}, {0x7c}, {0x77}]}, 0x8f) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x143001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r10, 0x5, 0x14, 0x0, &(0x7f0000000000)='%', 0x0, 0x7fffffff, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_clone(0x200, &(0x7f0000000140)="1c7b11da2b8793873e0ca595aff70c3c2dbebe2df3ed014e3f813a14b6cd0daf5930f8b310e84455e834184e28c1e07fdcc9cbfdacbbb581b2e9089d59ecc8e91ffbd5062d067a24225d854fe53f3c6ea6f3bb05e132812156d6ee1311947e98e48c30aa32fa0d708b5d1ea2337eee27d4", 0x71, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000540)="a18ae4a04f58abb3a7a45043c89b3c4e6b90cdac2eea6d15e67e00a17aba3c9d4aae0843a7c8eb813e02b44081e94641d785b490e9c2912b5fcf6c3fcffcea2a25aeb6a378eaa4f3cb9081ff57001e53645ee87a2211c1c9fa0bb8191fcb818921a88b77730749c0cfb57a7e25354a98b923278ed1") r11 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b00000000000001000000090002007379"], 0xb4}}, 0x0) syz_open_dev$MSR(&(0x7f00000005c0), 0x80000000, 0x0) 10m1.495521863s ago: executing program 1 (id=1786): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x11a) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x2) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 10m1.037163802s ago: executing program 33 (id=1786): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x11a) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x2) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 11.836034722s ago: executing program 5 (id=3839): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000040)={0x0, 0x2c, 0x0, 0x6, 0x0, 0xa9, 0x3, 0x2, 0x1}) 11.617515002s ago: executing program 6 (id=3841): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x80, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x71fa0ab79eaedd99, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x1003513, 0x0, 0x1, 0x0, 0x0) 10.480395863s ago: executing program 3 (id=3842): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x11) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000200)={r1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='objagg_create\x00'}, 0x18) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = epoll_create(0x2) epoll_wait(r4, 0x0, 0x0, 0x800009) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r5, 0xc048aeca, &(0x7f0000000200)) 10.184326568s ago: executing program 3 (id=3844): preadv(0xffffffffffffffff, 0x0, 0x0, 0x2372, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001480)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x28, 0x80008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) 10.184065285s ago: executing program 4 (id=3845): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb70000000109"], 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, 0x0, r4, 0x0}]) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000080)=@x86={0x5, 0x1, 0x40, 0x0, 0x7, 0x2, 0x59, 0xff, 0x6, 0x70, 0x3, 0x6, 0x0, 0x3, 0x5, 0x3, 0x8e, 0x45, 0x7, '\x00', 0x1, 0xb70}) 9.347774012s ago: executing program 5 (id=3847): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) syz_open_dev$vbi(&(0x7f0000000280), 0x2, 0x2) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@ifindex, 0xffffffffffffffff, 0xb}, 0x20) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 9.081299624s ago: executing program 3 (id=3848): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x3000000, 0x8, {0x0, @empty}}}], 0x20}}], 0x1, 0x80) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7e, 0x1000, 0x5c8, 0x80000003, 0x6}) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x58, r8, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) uname(&(0x7f0000000000)=""/98) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000080)={0x0, 0x1d, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000017abccc849e5e0551b19e033622d9a2555f953ae3abb4114ae07edf48a99cf06bd0d7a5a1165cfa7c13821b6a483e8ed44a373188a014920922cb8d9ffc83d80898b48ad9844c8c6723ad8951e919d7be7bf981f3b7391bf06dd95b3d674a5c15fea8d77a74780733c164b8e18bd3b6c2a43163fbe223ac0f6e8be6db23e81e94c19da8c5c1c9475eadfca3d5b6c", @ANYRES16=r6, @ANYBLOB="01002bbd7000fedbdf25050000000800090002000000060001000500000008000c00aa0a000008000b00040000000c0010000500000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) write$smackfs_cipso(0xffffffffffffffff, &(0x7f0000006940)={'batadv_slave_1\x00', 0x20, 0x21, 0x20, 0x5, 0x20, [{0xa2}, {0x46}, {0x63}, {0x7c}, {0x77}]}, 0xa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x143001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_clone(0x200, &(0x7f0000000140)="1c7b11da2b8793873e0ca595aff70c3c2dbebe2df3ed014e3f813a14b6cd0daf5930f8b310e84455e834184e28c1e07fdcc9cbfdacbbb581b2e9089d59ecc8e91ffbd5062d067a24225d854fe53f3c6ea6f3bb05e132812156d6ee1311947e98e48c30aa32fa0d708b5d1ea2337eee27d4", 0x71, &(0x7f00000001c0), &(0x7f0000000240), 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b00000000000001000000090002007379"], 0xb4}}, 0x0) syz_open_dev$MSR(&(0x7f00000005c0), 0x80000000, 0x0) 8.2933791s ago: executing program 4 (id=3849): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000e98000/0x4000)=nil, 0x4000}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x8, r2) r3 = syz_pidfd_open(r2, 0x0) process_mrelease(r3, 0x700000000000000) 7.916479001s ago: executing program 4 (id=3852): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x600000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f022}) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x5) mount$9p_rdma(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', &(0x7f0000000280), 0x10000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 7.857813198s ago: executing program 3 (id=3853): socket$qrtr(0x2a, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, 0x0, 0x0) 7.719031596s ago: executing program 4 (id=3854): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x8a, 0x9}, {0x1}, @const={0x0, {0x0, 0x8, 0x4, 0x7f}}}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000300)={0x48, 0xe}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x38, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x38}}, 0x2008040) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) setreuid(0x0, 0xee00) request_key(&(0x7f0000000440)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x3}, &(0x7f0000000500)='/dev/vcsu#\x00', 0xffffffffffffffff) 6.011182087s ago: executing program 5 (id=3856): r0 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) connect$llc(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x80) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, 0x17, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000) 5.873348706s ago: executing program 6 (id=3857): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) mkdir(0x0, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000440)={0x0, 0xef73, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001d000)=""/102400, 0x19000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_init_net_socket$ax25(0x3, 0x5, 0xcf) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4f21, 0x5, @mcast1, 0xac}}, 0x0, 0x0, 0x2b, 0x0, "954f3b91f54aa78eb1ffb374125cd8327f0e15511a8be8955942b32b934c23581ae7ac9b12d3215964a4d6400300467c41f36b02a24b627d260000000000000000000000000000036d7b9eae01be6e00"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000001a00)="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", 0x1, 0x0, 0x1, {0x11, r4}}) io_uring_enter(r0, 0x23f7, 0x0, 0x6e, 0x0, 0x0) 5.599031709s ago: executing program 6 (id=3858): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) listen(r4, 0x80000000) 4.57371211s ago: executing program 6 (id=3859): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) 4.236480682s ago: executing program 4 (id=3860): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x8, 0x0, 0x0, 0x0, 0x0, {0x1, r5}}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x100000000000000, 0x0, 0x0) 4.11684938s ago: executing program 6 (id=3861): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0xa, &(0x7f00000010c0)=0xd, 0x3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) rseq(0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.099567921s ago: executing program 5 (id=3862): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) socket(0x200000100000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2c, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x844}, 0x4000000) 3.045625613s ago: executing program 6 (id=3863): r0 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r0, 0x2007ffb) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20008000) open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) 2.956164904s ago: executing program 2 (id=3864): close(0xffffffffffffffff) socket$can_raw(0x1d, 0x3, 0x1) socket(0x40000000015, 0x5, 0x0) r0 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x20000081, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x7c81, 0x0) 2.579905041s ago: executing program 3 (id=3865): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xd0, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x6}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x64, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffefc5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x114}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.50152929s ago: executing program 2 (id=3866): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) add_key(0x0, 0x0, &(0x7f0000000100)="305c0605e182d1447ad1ad837003", 0xe, 0xfffffffffffffffe) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="ebff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xffffffffffffff02, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.419696267s ago: executing program 2 (id=3867): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) getsockopt$ax25_int(r2, 0x101, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) 1.874356769s ago: executing program 2 (id=3868): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000001c0)=0x40000) 1.677533433s ago: executing program 3 (id=3869): openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r2, 0x0, r2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.43606277s ago: executing program 2 (id=3870): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_RATE={0x14, 0x6, {0x8, 0x2, 0x3, 0xf}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x7fff, 0x267, 0x0, 0x25, 0x19dd, 0x9}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.05458073s ago: executing program 5 (id=3871): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60102, 0xc) fcntl$setstatus(r1, 0x4, 0x6800) write$binfmt_format(r1, &(0x7f0000000040)='0\x00', 0x2) read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f0000000680)={0x100, r2, 0x102, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010100}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00', 0x6}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x63fb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x510}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb06e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd1}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x80}, 0x200448c4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0x1e, 0x80004, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) prctl$PR_GET_KEEPCAPS(0x7) 989.47106ms ago: executing program 2 (id=3872): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r4 = socket(0x8, 0x3, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r4, 0x400261f2, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001d"], 0xb8}}, 0x0) 66.315914ms ago: executing program 4 (id=3873): r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x1) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x1ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x6}, 0x1c) connect$inet6(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x4, 0x10100000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x800) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 0s ago: executing program 5 (id=3874): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x3000000, 0x8, {0x0, @empty}}}], 0x20}}], 0x1, 0x80) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7e, 0x1000, 0x5c8, 0x80000003, 0x6}) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x58, r8, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) uname(&(0x7f0000000000)=""/98) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000080)={0x0, 0x1d, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000017abccc849e5e0551b19e033622d9a2555f953ae3abb4114ae07edf48a99cf06bd0d7a5a1165cfa7c13821b6a483e8ed44a373188a014920922cb8d9ffc83d80898b48ad9844c8c6723ad8951e919d7be7bf981f3b7391bf06dd95b3d674a5c15fea8d77a74780733c164b8e18bd3b6c2a43163fbe223ac0f6e8be6db23e81e94c19da8c5c1c9475eadfca3d5b6c", @ANYRES16=r6, @ANYBLOB="01002bbd7000fedbdf25050000000800090002000000060001000500000008000c00aa0a000008000b00040000000c0010000500000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) r10 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/smackfs/cipso\x00', 0x2, 0x0) write$smackfs_cipso(r10, &(0x7f0000006940)={'batadv_slave_1\x00', 0x20, 0x21, 0x20, 0x5, 0x20, [{0xa2}, {0x46}, {0x63}, {0x7c}, {0x77}]}, 0xa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x143001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r11, 0x5, 0x14, 0x0, &(0x7f0000000000)='%', 0x0, 0x7fffffff, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_clone(0x200, &(0x7f0000000140)="1c7b11da2b8793873e0ca595aff70c3c2dbebe2df3ed014e3f813a14b6cd0daf5930f8b310e84455e834184e28c1e07fdcc9cbfdacbbb581b2e9089d59ecc8e91ffbd5062d067a24225d854fe53f3c6ea6f3bb05e132812156d6ee1311947e98e48c30aa32fa0d708b5d1ea2337eee27d4", 0x71, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000540)) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) sendmsg$NFT_BATCH(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b00000000000001000000090002007379"], 0xb4}}, 0x0) syz_open_dev$MSR(&(0x7f00000005c0), 0x80000000, 0x0) kernel console output (not intermixed with test programs): -1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 709.281530][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.303320][ T5897] usb 2-1: config 0 descriptor?? [ 709.491153][T12485] blktrace: Concurrent blktraces are not allowed on loop4 [ 709.567321][T12487] IPVS: Unknown mcast interface: vcan0 [ 709.750625][ T5897] plantronics 0003:047F:FFFF.0011: reserved main item tag 0xe [ 709.778361][T12490] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1735'. [ 709.839497][ T5897] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 709.879998][ T5897] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 710.025060][ T9] usb 2-1: USB disconnect, device number 27 [ 710.089720][T12493] fido_id[12493]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 711.209729][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 713.263191][ T9] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 713.315111][ T9] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 713.603467][ T66] wlan1: authenticated [ 713.626459][ T66] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 713.795390][ T6308] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 713.969041][ T6539] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 714.085293][ T6539] wlan1: association with 08:02:11:00:00:00 timed out [ 714.217479][ T30] audit: type=1804 audit(1752003396.872:1577): pid=12554 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.1757" name="/newroot/221/file0" dev="tmpfs" ino=1174 res=1 errno=0 [ 714.502215][T12556] input: syz1 as /devices/virtual/input/input21 [ 714.649532][ T6539] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 714.911507][T12568] netlink: 'syz.2.1761': attribute type 10 has an invalid length. [ 714.958949][T12568] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1761'. [ 714.987322][T12568] dummy0: entered promiscuous mode [ 715.011968][T12568] bridge0: port 3(dummy0) entered blocking state [ 715.041956][T12568] bridge0: port 3(dummy0) entered disabled state [ 715.059182][T12568] dummy0: entered allmulticast mode [ 715.100559][T12568] bridge0: port 3(dummy0) entered blocking state [ 715.107875][T12568] bridge0: port 3(dummy0) entered forwarding state [ 715.126248][T12575] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 715.299884][T12577] IPVS: Error connecting to the multicast addr [ 715.340064][T12579] netlink: 'syz.3.1766': attribute type 1 has an invalid length. [ 715.555397][T12579] 8021q: adding VLAN 0 to HW filter on device bond2 [ 715.635352][ T5897] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 715.666179][T12584] bond2: (slave gretap1): making interface the new active one [ 715.681059][T12573] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1764'. [ 715.695575][T12584] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 715.827827][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 715.848805][ T5897] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 715.892192][ T5897] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 715.920427][ T5897] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 715.985610][ T5897] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 716.041485][ T5897] usb 3-1: config 0 interface 0 has no altsetting 0 [ 716.101200][ T5897] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 716.118982][ T5897] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 716.174862][ T5897] usb 3-1: Product: syz [ 716.179057][ T5897] usb 3-1: Manufacturer: syz [ 716.218420][ T5897] usb 3-1: SerialNumber: syz [ 716.242105][ T5897] usb 3-1: config 0 descriptor?? [ 716.297633][ T5897] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 716.367176][ T5897] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 717.158105][ T5897] usb 3-1: USB disconnect, device number 28 [ 717.164195][ C1] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 717.287569][ T5897] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 717.449035][ T30] audit: type=1800 audit(1752003399.903:1578): pid=12610 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1773" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 718.827585][T12622] syzkaller0: entered allmulticast mode [ 720.995600][ T36] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 721.012539][ T5968] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 721.021408][T12645] overlayfs: failed to clone upperpath [ 721.107533][ T36] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.215642][ T5968] usb 3-1: Using ep0 maxpacket: 32 [ 721.223562][ T5968] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 721.233350][ T36] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 721.253401][ T5968] usb 3-1: config 0 has no interface number 0 [ 721.269269][ T5968] usb 3-1: config 0 interface 184 has no altsetting 0 [ 721.279931][ T36] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.314522][ T5968] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 721.350548][ T5968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.376010][ T5968] usb 3-1: Product: syz [ 721.380208][ T5968] usb 3-1: Manufacturer: syz [ 721.384838][ T5968] usb 3-1: SerialNumber: syz [ 721.425543][ T5968] usb 3-1: config 0 descriptor?? [ 721.437482][ T36] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 721.458334][ T5968] smsc75xx v1.0.0 [ 721.486516][ T36] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.563117][ T5968] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 722.637217][ T5968] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 723.082443][ T36] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.140047][ T36] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.466446][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 724.479023][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 724.491137][ T36] bridge_slave_1: left allmulticast mode [ 724.496812][ T36] bridge_slave_1: left promiscuous mode [ 724.503724][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 724.512782][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.530569][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 724.541028][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 724.584930][ T36] bridge_slave_0: left allmulticast mode [ 724.590600][ T36] bridge_slave_0: left promiscuous mode [ 724.596523][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.114025][T12679] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1797'. [ 725.136562][ T5968] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000011c: -71 [ 725.161421][ T5968] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRL: -71 [ 725.198654][ T5968] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 725.242520][ T5968] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 725.263237][ T5968] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 725.296741][ T5968] usb 3-1: USB disconnect, device number 29 [ 726.710652][ T5840] Bluetooth: hci1: command tx timeout [ 726.844309][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 726.869360][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 726.912123][ T36] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 726.936072][ T36] bond0 (unregistering): Released all slaves [ 727.001598][T12678] IPVS: Error connecting to the multicast addr [ 727.181742][T12671] lo speed is unknown, defaulting to 1000 [ 727.269591][ T36] tipc: Left network mode [ 727.483078][T12711] syzkaller0: entered allmulticast mode [ 727.882631][T12722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1809'. [ 728.943637][ T5840] Bluetooth: hci1: command tx timeout [ 730.824936][T12745] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1816'. [ 731.157954][ T5840] Bluetooth: hci1: command tx timeout [ 733.119987][T12743] IPVS: Error connecting to the multicast addr [ 733.386755][ T5840] Bluetooth: hci1: command tx timeout [ 733.896281][ T36] hsr_slave_0: left promiscuous mode [ 734.066340][ T36] hsr_slave_1: left promiscuous mode [ 734.092746][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 734.302887][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 734.388984][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 734.418843][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 734.551541][ T36] veth1_macvtap: left promiscuous mode [ 734.686095][ T36] veth0_macvtap: left promiscuous mode [ 734.691787][ T36] veth1_vlan: left promiscuous mode [ 734.734121][ T36] veth0_vlan: left promiscuous mode [ 735.031977][ T5897] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 735.135083][ T5847] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 735.243309][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 735.261448][ T5897] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 735.273062][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 735.283122][ T5897] usb 6-1: Product: syz [ 735.291297][ T5897] usb 6-1: Manufacturer: syz [ 735.296088][ T5847] usb 3-1: Using ep0 maxpacket: 16 [ 735.302219][ T5897] usb 6-1: SerialNumber: syz [ 735.308191][ T5847] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 735.331884][ T5847] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 735.439019][ T5847] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 735.456276][ T5897] usb 6-1: config 0 descriptor?? [ 735.991604][T12799] netlink: 'syz.3.1829': attribute type 7 has an invalid length. [ 736.002708][T12799] netlink: 'syz.3.1829': attribute type 8 has an invalid length. [ 736.028623][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.037964][ T5847] usb 3-1: Product: syz [ 736.042463][T12790] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 736.050682][ T5847] usb 3-1: Manufacturer: syz [ 736.088944][ T5847] usb 3-1: SerialNumber: syz [ 736.280583][ T5897] usb 6-1: USB disconnect, device number 17 [ 736.356248][T12805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1832'. [ 736.370762][ T5847] usb 3-1: 0:2 : does not exist [ 736.403451][ T5847] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 736.471925][ T5847] usb 3-1: USB disconnect, device number 30 [ 736.601808][T12793] udevd[12793]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 738.175514][ T36] team0 (unregistering): Port device team_slave_1 removed [ 738.312050][ T36] team0 (unregistering): Port device team_slave_0 removed [ 738.331605][ T5897] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 738.515048][ T5897] usb 3-1: Using ep0 maxpacket: 8 [ 738.524532][ T5897] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 738.533725][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.577256][ T5897] usb 3-1: Product: syz [ 738.581467][ T5897] usb 3-1: Manufacturer: syz [ 738.586072][ T5897] usb 3-1: SerialNumber: syz [ 738.634394][ T5897] usb 3-1: config 0 descriptor?? [ 738.885561][ T5897] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 739.343690][T12814] IPVS: Error connecting to the multicast addr [ 739.631029][T12671] chnl_net:caif_netlink_parms(): no params data found [ 740.100081][T12847] bridge_slave_0: left allmulticast mode [ 740.188285][T12847] bridge_slave_0: left promiscuous mode [ 740.270944][T12847] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.323950][T12847] bridge_slave_1: left allmulticast mode [ 740.337494][T12847] bridge_slave_1: left promiscuous mode [ 740.346069][T12847] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.369882][T12847] bond0: (slave bond_slave_0): Releasing backup interface [ 740.389954][T12847] bond0: (slave bond_slave_1): Releasing backup interface [ 740.452200][T12847] team0: Failed to send options change via netlink (err -105) [ 740.469888][T12847] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 740.481741][T12847] team0: Port device team_slave_0 removed [ 740.573964][T12847] team0: Failed to send options change via netlink (err -105) [ 740.609131][T12847] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 740.633855][T12847] team0: Port device team_slave_1 removed [ 740.647576][T12847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 740.662575][T12847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 740.673405][ T5897] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 740.675300][T12847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 740.696131][T12847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 740.716794][ T5897] usb 3-1: USB disconnect, device number 31 [ 740.797147][T12847] bond2: (slave gretap1): Releasing active interface [ 740.919609][T12851] team0: Failed to send options change via netlink (err -105) [ 740.942027][T12851] team0: Mode changed to "loadbalance" [ 741.063705][T12857] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1844'. [ 741.103540][T12860] IPVS: Error connecting to the multicast addr [ 741.875633][T12671] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.901074][T12671] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.921827][ T30] audit: type=1800 audit(1752003422.802:1579): pid=12882 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.1849" name="SYSV798dd828" dev="tmpfs" ino=0 res=0 errno=0 [ 741.945815][T12671] bridge_slave_0: entered allmulticast mode [ 741.956083][T12671] bridge_slave_0: entered promiscuous mode [ 741.973300][T12671] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.992734][T12671] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.060806][T12671] bridge_slave_1: entered allmulticast mode [ 742.074781][T12671] bridge_slave_1: entered promiscuous mode [ 743.039065][ T36] IPVS: stop unused estimator thread 0... [ 743.048022][T12671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 743.212212][T12671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 743.361301][T12671] team0: Port device team_slave_0 added [ 743.377734][T12671] team0: Port device team_slave_1 added [ 743.461251][T12671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 743.478993][T12671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.506550][T12671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.520252][T12671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.527650][T12671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.557093][T12671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.780560][T12671] hsr_slave_0: entered promiscuous mode [ 743.790885][T12671] hsr_slave_1: entered promiscuous mode [ 743.802304][T12671] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 743.820780][T12671] Cannot create hsr debugfs directory [ 744.693973][T12903] netlink: 'syz.3.1855': attribute type 10 has an invalid length. [ 744.804914][T12903] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 745.026964][T12671] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 745.059016][T12909] IPVS: Error connecting to the multicast addr [ 745.083578][T12671] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 745.201012][T12671] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 745.227965][T12905] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1857'. [ 745.304533][T12671] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 745.814139][T12671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 745.874961][T12671] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.484441][T12671] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 746.608909][T12671] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 746.648082][ T6247] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.655262][ T6247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 746.706243][ T6247] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.713441][ T6247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 746.937594][ T43] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 747.108446][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 747.131980][ T43] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 747.153817][ T43] usb 3-1: config 0 has no interface number 0 [ 747.159944][ T43] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 747.191357][ T43] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 747.200809][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.261126][T12671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.398414][ T43] usb 3-1: Product: syz [ 747.403342][ T43] usb 3-1: Manufacturer: syz [ 747.442409][ T43] usb 3-1: SerialNumber: syz [ 748.412866][ T43] usb 3-1: config 0 descriptor?? [ 748.449255][ T43] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 748.497248][ T43] em28xx 3-1:0.132: Video interface 132 found: [ 748.617465][T12963] IPVS: Error connecting to the multicast addr [ 748.666790][T12967] IPVS: Error connecting to the multicast addr [ 748.783764][ T6247] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 748.853543][ T43] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 748.904124][T12963] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1871'. [ 748.958750][T12970] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1872'. [ 748.994219][T12671] veth0_vlan: entered promiscuous mode [ 749.022509][T12671] veth1_vlan: entered promiscuous mode [ 749.367772][ T43] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 749.386462][ T43] em28xx 3-1:0.132: board has no eeprom [ 749.409363][T12671] veth0_macvtap: entered promiscuous mode [ 749.443537][T12671] veth1_macvtap: entered promiscuous mode [ 749.509875][ T43] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 749.514699][T12671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 749.540135][T12671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 749.567325][ T43] em28xx 3-1:0.132: analog set to bulk mode. [ 749.571466][T12671] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.576342][ T5917] em28xx 3-1:0.132: Registering V4L2 extension [ 749.599291][T12671] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.624658][ T8762] usb 3-1: USB disconnect, device number 32 [ 749.643438][ T8762] em28xx 3-1:0.132: Disconnecting em28xx [ 749.660922][T12671] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.681855][T12671] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.925450][ T5917] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 749.936046][ T5917] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 749.972428][ T5917] em28xx 3-1:0.132: No AC97 audio processor [ 750.000574][T12982] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1875'. [ 750.018405][ T5917] usb 3-1: Decoder not found [ 750.035140][ T5917] em28xx 3-1:0.132: failed to create media graph [ 750.045589][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.071627][ T5917] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 750.078484][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.096629][ T5917] em28xx 3-1:0.132: Remote control support is not available for this card. [ 750.116656][ T8762] em28xx 3-1:0.132: Closing input extension [ 750.177926][T12982] netlink: 'syz.4.1875': attribute type 3 has an invalid length. [ 750.185679][T12982] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1875'. [ 750.211566][ T6247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.240162][ T8762] em28xx 3-1:0.132: Freeing device [ 750.240479][ T6247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.412853][T12984] binder: 12983:12984 ioctl c0306201 200000000640 returned -22 [ 750.871109][T12998] netlink: 'syz.6.1788': attribute type 1 has an invalid length. [ 750.883517][T12999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1880'. [ 753.635501][T13028] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 755.774062][T13042] lo speed is unknown, defaulting to 1000 [ 756.849327][T13059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1896'. [ 757.510535][T13064] tipc: Enabling of bearer rejected, failed to enable media [ 758.601116][ T5897] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 758.729063][ T5917] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 758.820922][ T5897] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 758.830413][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.870008][ T5897] usb 7-1: config 0 descriptor?? [ 758.913928][ T5897] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 758.953530][ T5917] usb 6-1: Using ep0 maxpacket: 8 [ 759.007193][ T5917] usb 6-1: config 0 has an invalid interface number: 239 but max is 0 [ 759.015431][ T5917] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 759.049711][ T5917] usb 6-1: config 0 has no interface number 0 [ 759.056024][ T5917] usb 6-1: config 0 interface 239 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 759.124648][ T5917] usb 6-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 759.133770][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.184188][ T5917] usb 6-1: Product: syz [ 759.188400][ T5917] usb 6-1: Manufacturer: syz [ 759.218704][ T5917] usb 6-1: SerialNumber: syz [ 759.302508][ T5917] usb 6-1: config 0 descriptor?? [ 760.498700][ T5917] ath6kl: Failed to submit usb control message: -110 [ 760.527693][ T5917] ath6kl: unable to send the bmi data to the device: -110 [ 760.547971][ T5917] ath6kl: Unable to send get target info: -110 [ 760.578240][ T5917] ath6kl: Failed to init ath6kl core: -110 [ 760.599107][ T5917] ath6kl_usb 6-1:0.239: probe with driver ath6kl_usb failed with error -110 [ 761.427743][ T9] usb 7-1: USB disconnect, device number 2 [ 761.642972][ T5917] usb 6-1: USB disconnect, device number 18 [ 762.641744][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 762.647876][T13099] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 763.472273][T13099] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 763.478929][T13099] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 763.485717][T13099] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 763.493452][T13099] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 763.502084][T13099] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 763.508644][T13099] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 763.517285][T13099] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 765.037477][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 765.398799][T13162] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1925'. [ 765.636986][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 765.643272][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 765.720786][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 767.203375][T13187] hsr0: entered promiscuous mode [ 767.212570][T13185] tipc: Started in network mode [ 767.219607][T13187] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1936'. [ 767.233801][T13185] tipc: Node identity f218dadc79fe, cluster identity 4711 [ 767.243681][T13185] tipc: Enabled bearer , priority 0 [ 767.258889][T13187] hsr_slave_0: left promiscuous mode [ 767.266244][T13187] hsr_slave_1: left promiscuous mode [ 767.328572][T13187] hsr0 (unregistering): left promiscuous mode [ 767.355064][T13185] tipc: Resetting bearer [ 767.369384][T13183] tipc: Disabling bearer [ 768.277871][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 768.289763][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 770.511972][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 771.113488][T13229] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1951'. [ 771.242920][T13235] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 772.884887][T13258] IPVS: Error connecting to the multicast addr [ 773.447529][T13253] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 773.479029][T13253] overlayfs: failed to set xattr on upper [ 773.509633][T13253] overlayfs: ...falling back to redirect_dir=nofollow. [ 773.523306][T13253] overlayfs: ...falling back to uuid=null. [ 774.395217][T13248] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1955'. [ 776.850340][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 777.264933][T13291] overlayfs: failed to clone upperpath [ 782.792162][T13355] IPVS: Unknown mcast interface: vcan0 [ 782.986830][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 783.115459][T13355] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1986'. [ 783.744630][ T30] audit: type=1326 audit(1752003461.920:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13373 comm="syz.2.1994" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f210db8e929 code=0x0 [ 783.779337][T13372] tipc: Started in network mode [ 783.784238][T13372] tipc: Node identity 0a0a0d510158, cluster identity 4711 [ 783.831369][T13372] tipc: Enabled bearer , priority 0 [ 783.868375][T13372] syzkaller0: entered promiscuous mode [ 783.896029][T13372] syzkaller0: entered allmulticast mode [ 784.054448][T13378] tipc: Resetting bearer [ 784.508642][T13369] tipc: Resetting bearer [ 784.598270][T13369] tipc: Disabling bearer [ 787.743517][ T5897] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 787.917354][ T5897] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 788.112468][ T5897] usb 7-1: config 0 has no interface number 0 [ 788.119390][ T5897] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 788.131341][ T5897] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 788.142255][ T5897] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 788.154698][ T5897] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 788.169012][ T5897] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 788.180666][ T5897] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 788.194137][ T5897] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 788.206454][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.983847][ T5897] usb 7-1: config 0 descriptor?? [ 789.015042][T13402] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 789.037028][T13402] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 789.051446][ T5897] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 789.319235][ T5917] usb 7-1: USB disconnect, device number 3 [ 789.329444][ T5917] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 789.378853][T13424] IPVS: Unknown mcast interface: vcan0 [ 790.478419][T13420] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2006'. [ 794.951099][T13473] IPVS: Unknown mcast interface: vcan0 [ 797.956773][T13488] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2020'. [ 799.420098][T13499] IPVS: Error connecting to the multicast addr [ 799.495945][T13499] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2027'. [ 801.746721][T13524] overlayfs: failed to clone upperpath [ 801.918859][T13522] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2034'. [ 801.971330][T13522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 803.084883][T13522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 803.448881][T13542] netlink: 'syz.4.2040': attribute type 1 has an invalid length. [ 803.566062][T13543] IPVS: Error connecting to the multicast addr [ 803.669144][T13545] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 804.054494][ T66] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 804.152735][T13542] 8021q: adding VLAN 0 to HW filter on device bond3 [ 804.378878][ T49] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 804.397854][T13538] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2039'. [ 804.988890][T13545] veth3: entered promiscuous mode [ 805.160948][T13545] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 806.132135][ T43] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 806.863005][ T30] audit: type=1800 audit(1752003483.163:1581): pid=13573 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2047" name=A0F29C1437B3CFF8C3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=41194 res=0 errno=0 [ 806.867576][ T43] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 806.895265][ C0] vkms_vblank_simulate: vblank timer overrun [ 807.409110][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.424816][ T43] usb 7-1: config 0 descriptor?? [ 807.433080][ T43] cp210x 7-1:0.0: cp210x converter detected [ 807.866124][ T43] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 807.911938][ T43] usb 7-1: cp210x converter now attached to ttyUSB0 [ 808.650380][T13566] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2044'. [ 808.711815][T13566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.751770][T13566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.780027][ T43] usb 7-1: USB disconnect, device number 4 [ 808.877206][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 808.906363][ T43] cp210x 7-1:0.0: device disconnected [ 810.860522][T13617] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 812.268004][T13634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2062'. [ 817.435259][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 817.660863][T13674] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2074'. [ 822.115917][T13708] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 822.447109][T13703] netlink: 'syz.4.2084': attribute type 14 has an invalid length. [ 822.709038][T13706] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2082'. [ 823.257762][ T5918] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 823.431491][ T5918] usb 7-1: Using ep0 maxpacket: 8 [ 823.460762][ T5918] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 823.498398][ T5918] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.521590][ T5918] usb 7-1: Product: syz [ 823.533061][ T5918] usb 7-1: Manufacturer: syz [ 823.547449][ T5918] usb 7-1: SerialNumber: syz [ 823.566317][ T5918] usb 7-1: config 0 descriptor?? [ 823.801637][ T5918] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 824.011332][T13727] usb usb8: check_ctrlrecip: process 13727 (syz.5.2090) requesting ep 01 but needs 81 [ 824.047027][T13727] usb usb8: usbfs: process 13727 (syz.5.2090) did not claim interface 0 before use [ 824.058432][T13727] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 824.137339][T13738] IPVS: Error connecting to the multicast addr [ 824.247252][T13734] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2092'. [ 825.351856][ T5918] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 825.378762][ T5918] usb 7-1: USB disconnect, device number 5 [ 827.418217][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 827.672701][ T9] usb 6-1: device descriptor read/64, error -71 [ 828.006883][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 828.669440][ T9] usb 6-1: device descriptor read/64, error -71 [ 828.886591][T13776] IPVS: Unknown mcast interface: vcan0 [ 828.969683][T13776] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2105'. [ 828.978903][ T9] usb usb6-port1: attempt power cycle [ 829.415432][ T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 829.940757][ T9] usb 6-1: device descriptor read/8, error -71 [ 833.543584][T13817] tipc: Enabling of bearer rejected, failed to enable media [ 838.760694][ T30] audit: type=1326 audit(1752003513.395:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13849 comm="syz.5.2126" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f61c878e929 code=0x0 [ 840.282254][T13866] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 840.391711][T13874] __vm_enough_memory: pid: 13874, comm: syz.4.2130, bytes: 21200499380224 not enough memory for the allocation [ 842.701832][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 851.609167][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 859.772949][T14003] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 859.773426][T14014] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 859.792104][T14016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2172'. [ 869.995254][T14073] lo speed is unknown, defaulting to 1000 [ 870.903637][T14089] overlayfs: failed to resolve './file0': -2 [ 871.519807][T14085] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2192'. [ 873.129063][T14107] netlink: 'syz.3.2198': attribute type 6 has an invalid length. [ 885.148791][ T5840] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 886.803938][ T8762] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 886.989614][ T8762] usb 6-1: Using ep0 maxpacket: 32 [ 887.004710][ T8762] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 887.101384][ T8762] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 887.123234][ T8762] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 887.133104][ T8762] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 887.142534][ T8762] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.168669][ T8762] usb 6-1: config 0 descriptor?? [ 887.189363][ T8762] hub 6-1:0.0: USB hub found [ 887.403638][ T8762] hub 6-1:0.0: 2 ports detected [ 888.267550][T14237] IPVS: Unknown mcast interface: vcan0 [ 888.419009][T14240] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2231'. [ 888.495682][T14251] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2234'. [ 889.443562][ T8762] hub 6-1:0.0: activate --> -90 [ 889.757441][T14258] overlayfs: failed to clone upperpath [ 889.793982][T14268] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.2238'. [ 890.008250][ T43] usb 6-1: USB disconnect, device number 23 [ 890.020306][ T8762] usb 6-1-port1: cannot warm reset (err = -71) [ 892.232641][T14288] IPVS: Unknown mcast interface: vcan0 [ 892.488276][T14295] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2242'. [ 892.597526][T14298] random: crng reseeded on system resumption [ 893.335595][T14307] IPVS: Error connecting to the multicast addr [ 894.473751][T14307] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2248'. [ 899.545364][T14348] overlayfs: missing 'lowerdir' [ 905.688233][T14389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 906.668666][T14402] overlayfs: missing 'lowerdir' [ 906.723189][T14400] syz_tun: entered allmulticast mode [ 907.890759][T14398] syz_tun: left allmulticast mode [ 908.434270][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 908.451815][ T997] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 908.901313][ T5840] Bluetooth: hci3: unexpected event for opcode 0x0c6d [ 910.310090][T14428] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2280'. [ 910.319561][T14428] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2280'. [ 911.452492][ T43] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 912.214104][ T43] usb 7-1: Using ep0 maxpacket: 8 [ 912.222309][ T43] usb 7-1: unable to get BOS descriptor or descriptor too short [ 912.235732][ T43] usb 7-1: config 4 has an invalid interface number: 255 but max is 0 [ 912.243987][ T43] usb 7-1: config 4 has no interface number 0 [ 912.267498][ T43] usb 7-1: config 4 interface 255 has no altsetting 0 [ 912.419579][ T43] usb 7-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= e.87 [ 912.438685][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.446766][ T43] usb 7-1: Product: syz [ 913.089489][ T43] usb 7-1: Manufacturer: syz [ 913.094294][ T43] usb 7-1: SerialNumber: syz [ 913.337322][ T43] usb 7-1: USB disconnect, device number 6 [ 914.256834][T14460] Invalid ELF header magic: != ELF [ 916.815233][ T30] audit: type=1326 audit(1752003586.403:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14482 comm="syz.2.2294" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f210db8e929 code=0x0 [ 917.057111][T14464] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 921.037059][T14535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2306'. [ 921.047094][T14535] netlink: 'syz.4.2306': attribute type 15 has an invalid length. [ 921.144519][T14535] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 921.153596][T14535] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 921.162360][T14535] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 921.171061][T14535] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 921.181681][T14535] vxlan0: entered promiscuous mode [ 921.635016][ T5968] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 922.176814][ T5968] usb 7-1: device descriptor read/64, error -71 [ 922.466667][ T5968] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 922.638551][ T5968] usb 7-1: device descriptor read/64, error -71 [ 922.782164][ T5968] usb usb7-port1: attempt power cycle [ 923.407521][ T5968] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 923.590155][ T5968] usb 7-1: device descriptor read/8, error -71 [ 924.865082][ T30] audit: type=1326 audit(1752003593.793:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14560 comm="syz.6.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa576f8e929 code=0x7fc00000 [ 927.950780][T14594] overlayfs: missing 'lowerdir' [ 928.064853][T14595] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 929.199063][T14602] sg_write: data in/out 2387/42 bytes for SCSI command 0x0-- guessing data in; [ 929.199063][T14602] program syz.5.2324 not setting count and/or reply_len properly [ 929.320730][T14604] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 929.331943][T14604] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 931.704751][T14617] syz.6.2326: attempt to access beyond end of device [ 931.704751][T14617] loop13: rw=0, sector=0, nr_sectors = 1 limit=0 [ 931.718457][T14617] FAT-fs (loop13): unable to read boot sector [ 932.782202][T14607] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2325'. [ 936.776520][T14668] xt_hashlimit: size too large, truncated to 1048576 [ 937.479319][T14679] overlayfs: failed to clone upperpath [ 938.559090][T14685] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2347'. [ 938.668814][T14687] block nbd6: NBD_DISCONNECT [ 939.413706][T14692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2349'. [ 942.367832][T14703] IPVS: Unknown mcast interface: vcan0 [ 942.381844][T14713] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 942.618206][ T5840] Bluetooth: hci2: unexpected event for opcode 0x040d [ 942.670351][T14703] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2350'. [ 942.746944][T14726] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2358'. [ 942.755939][T14726] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2358'. [ 942.764951][T14726] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2358'. [ 942.773986][T14726] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2358'. [ 946.024328][ T3491] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 946.689564][T14766] IPVS: Error connecting to the multicast addr [ 947.019441][T14773] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 947.028483][T14773] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 947.047020][ T5968] IPVS: starting estimator thread 0... [ 947.161970][T14774] IPVS: using max 28 ests per chain, 67200 per kthread [ 947.676562][T14766] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2370'. [ 949.032941][T14788] fuse: Bad value for 'fd' [ 950.024085][T14795] kAFS: unable to lookup cell '' [ 953.164285][T14825] sctp: [Deprecated]: syz.4.2388 (pid 14825) Use of int in max_burst socket option deprecated. [ 953.164285][T14825] Use struct sctp_assoc_value instead [ 954.244835][T14841] IPVS: Error connecting to the multicast addr [ 955.099547][T14848] team_slave_0: entered promiscuous mode [ 955.105636][T14848] team_slave_1: entered promiscuous mode [ 955.156411][T14841] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2390'. [ 955.471521][T14852] cifs: Unknown parameter 'no'‘a£Nð[G¶zob,erèèµ;%j¸¼ [ 955.471521][T14852] ‡üzæ,€@q¬Ú÷ôÐåéJ#³"ŽÚh/.W1ȱ¨nNCº"†CÙ×ðÚ<“™+`# ÷Ž¢k²–' [ 955.571429][T14855] IPVS: Error connecting to the multicast addr [ 955.805482][T14855] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2393'. [ 960.986986][T14904] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2404'. [ 961.536095][T14908] IPVS: Error connecting to the multicast addr [ 963.011765][T14906] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2407'. [ 967.583097][T14955] fuse: Bad value for 'fd' [ 967.786656][T14961] IPVS: Error connecting to the multicast addr [ 969.003725][T14957] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2419'. [ 969.512781][T14974] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 969.520855][T14974] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 969.530381][T14974] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 971.813157][T14997] binder: 14990:14997 ioctl c0306201 0 returned -14 [ 971.824880][T14997] binder: 14990:14997 ioctl c0306201 200000000640 returned -22 [ 972.349598][T15000] IPVS: Error connecting to the multicast addr [ 974.126601][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 974.703216][T14992] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2428'. [ 978.385407][T15040] netlink: 'syz.4.2438': attribute type 1 has an invalid length. [ 978.399799][T15040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 980.132560][T15063] IPVS: Error connecting to the multicast addr [ 981.552898][ T1087] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 982.224014][T15057] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2439'. [ 982.653262][T15090] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 982.687981][T15090] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 984.066629][T15097] netlink: 'syz.2.2456': attribute type 10 has an invalid length. [ 984.082258][T15097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 984.092037][T15097] bond_slave_0: entered promiscuous mode [ 984.098020][T15097] bond_slave_1: entered promiscuous mode [ 984.104166][T15097] team0: Port device bond0 added [ 984.901187][T15105] IPVS: Error connecting to the multicast addr [ 985.446017][T15111] netlink: 'syz.6.2457': attribute type 1 has an invalid length. [ 985.814114][T15110] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2457'. [ 986.386261][T15111] 8021q: adding VLAN 0 to HW filter on device bond1 [ 986.499779][T15105] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2452'. [ 991.153557][ T30] audit: type=1326 audit(1752003655.904:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15148 comm="syz.5.2464" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f61c878e929 code=0x0 [ 994.341787][T15164] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 994.355948][T15164] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.364532][T15164] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.587942][T15212] IPVS: Error connecting to the multicast addr [ 1000.547833][T15212] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2479'. [ 1001.661419][T15232] overlayfs: failed to clone upperpath [ 1002.421427][ T30] audit: type=1326 audit(1752003666.474:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15234 comm="syz.5.2485" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f61c878e929 code=0x0 [ 1010.349083][T15285] dvmrp8: entered allmulticast mode [ 1010.413952][T15290] No control pipe specified [ 1011.575179][T15299] tipc: Enabled bearer , priority 0 [ 1011.856108][T15298] tipc: Disabling bearer [ 1015.043673][T15347] netlink: 126588 bytes leftover after parsing attributes in process `syz.6.2516'. [ 1016.555107][T15362] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1016.567560][T15362] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1016.982115][T14840] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1017.874622][T15354] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2518'. [ 1021.720677][T15407] random: crng reseeded on system resumption [ 1025.490152][T15424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2535'. [ 1026.922493][T15441] overlayfs: failed to clone upperpath [ 1027.725145][T15447] IPVS: Error connecting to the multicast addr [ 1027.905515][T15447] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2538'. [ 1034.040243][T15487] Device name cannot be null; rc = [-22] [ 1038.588084][T15522] fuse: Bad value for 'fd' [ 1038.595167][T15521] IPVS: Error connecting to the multicast addr [ 1039.564110][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1039.712366][T15514] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2560'. [ 1043.811895][T15568] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2571'. [ 1044.165851][ T30] audit: type=1800 audit(1752003705.526:1587): pid=15572 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.2572" name="nullb0" dev="tmpfs" ino=2094 res=0 errno=0 [ 1045.164576][ T5968] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 1046.067279][ T5968] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1046.077916][ T5968] usb 7-1: not running at top speed; connect to a high speed hub [ 1046.605111][ T5968] usb 7-1: config 219 interface 0 has no altsetting 0 [ 1046.628581][ T5968] usb 7-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e [ 1046.678541][ T5968] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.719763][ T5968] usb 7-1: Product: syz [ 1046.737369][ T5968] usb 7-1: Manufacturer: syz [ 1046.755515][ T5968] usb 7-1: SerialNumber: syz [ 1047.736498][ T5968] snd-usb-audio 7-1:219.0: probe with driver snd-usb-audio failed with error -22 [ 1047.764024][ T5968] usb 7-1: USB disconnect, device number 11 [ 1048.741282][ T5917] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1049.918361][ T5917] usb 6-1: Using ep0 maxpacket: 32 [ 1051.288130][ T5917] usb 6-1: device descriptor read/all, error -71 [ 1051.438140][T15612] netlink: 'syz.2.2583': attribute type 1 has an invalid length. [ 1051.446166][T15612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1051.641083][ T8762] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1052.651398][ T1087] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1052.913130][ T8762] usb 7-1: Using ep0 maxpacket: 16 [ 1053.042031][ T8762] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1053.062795][ T8762] usb 7-1: can't read configurations, error -71 [ 1053.147983][T15634] overlay: ./file0 is not a directory [ 1054.043633][T15634] Process accounting resumed [ 1060.136469][T15690] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1061.962773][T15715] netlink: 'syz.2.2612': attribute type 3 has an invalid length. [ 1067.503775][T15758] netlink: 'syz.6.2621': attribute type 25 has an invalid length. [ 1070.630434][T15774] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 1071.354719][T15784] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1072.721063][T15791] netlink: 'syz.5.2629': attribute type 10 has an invalid length. [ 1073.179927][T15791] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1073.691886][T15797] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2631'. [ 1074.477828][T15797] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2631'. [ 1074.878827][T15791] syz.5.2629 (15791) used greatest stack depth: 19048 bytes left [ 1078.189920][T15844] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1078.203763][T15844] bridge0: port 3(dummy0) entered disabled state [ 1078.210526][T15844] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.218573][T15844] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.875979][T15850] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1080.315131][T15853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1080.577765][ T30] audit: type=1326 audit(1752003739.584:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15847 comm="syz.2.2646" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f210db8e929 code=0x0 [ 1080.675575][T15864] IPVS: Unknown mcast interface: vcan0 [ 1081.375229][T15860] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2649'. [ 1081.677159][T15879] IPVS: Error connecting to the multicast addr [ 1081.739040][T15882] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2653'. [ 1082.289686][T15883] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2654'. [ 1083.584629][ T43] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1083.755774][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 1083.768714][ T43] usb 6-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config [ 1083.814643][ T43] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1083.939368][ T43] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1084.009242][ T43] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1084.075662][ T43] usb 6-1: Manufacturer: syz [ 1084.188202][ T43] usb 6-1: config 0 descriptor?? [ 1085.407549][ T43] usb 6-1: USB disconnect, device number 26 [ 1086.503305][T15905] siw: device registration error -23 [ 1087.032140][T15907] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1087.045063][T15907] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.052612][T15907] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.508943][T15917] netlink: 'syz.2.2662': attribute type 27 has an invalid length. [ 1089.497626][T15934] IPVS: Error connecting to the multicast addr [ 1090.242097][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1090.298232][ T5968] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1090.494324][T15929] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2666'. [ 1090.505850][ T5968] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1090.531993][ T5968] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1090.560773][ T5968] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1090.590275][ T5968] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1090.630748][ T5968] usb 6-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 1090.661914][ T5968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.669964][ T5968] usb 6-1: Product: syz [ 1090.757359][ T5968] usb 6-1: Manufacturer: syz [ 1090.779405][ T5968] usb 6-1: SerialNumber: syz [ 1090.804618][ T5968] usb 6-1: config 0 descriptor?? [ 1090.845589][ T5968] kvaser_usb 6-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 1090.852754][ T5968] kvaser_usb 6-1:0.0: error -EMSGSIZE: Failed to initialize card [ 1090.994966][ T5968] kvaser_usb 6-1:0.0: probe with driver kvaser_usb failed with error -90 [ 1092.675584][T15964] program syz.6.2673 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1092.775788][ T5917] usb 6-1: USB disconnect, device number 27 [ 1094.168676][ T9] IPVS: starting estimator thread 0... [ 1094.381997][ T9] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1094.382057][T15982] IPVS: using max 46 ests per chain, 110400 per kthread [ 1095.536655][ T9] usb 6-1: device descriptor read/64, error -71 [ 1096.281689][T15998] IPVS: Error connecting to the multicast addr [ 1097.357734][ T9] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1097.804178][ T8762] libceph: connect (1)[c::]:6789 error -22 [ 1097.818443][ T8762] libceph: mon0 (1)[c::]:6789 connect error [ 1097.849158][T16020] ceph: No mds server is up or the cluster is laggy [ 1097.933610][T15992] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2683'. [ 1098.134891][ T8762] libceph: connect (1)[c::]:6789 error -22 [ 1098.144488][ T8762] libceph: mon0 (1)[c::]:6789 connect error [ 1100.989144][T16053] netlink: 'syz.4.2694': attribute type 27 has an invalid length. [ 1102.841613][ T9] usb usb6-port1: attempt power cycle [ 1103.236106][T16064] netlink: 788 bytes leftover after parsing attributes in process `syz.4.2697'. [ 1105.366613][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1105.736503][T16082] blktrace: Concurrent blktraces are not allowed on loop6 [ 1105.770270][T16082] IPVS: Error connecting to the multicast addr [ 1106.144724][T16085] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2704'. [ 1106.259490][T16082] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2705'. [ 1106.555757][T16090] kvm: emulating exchange as write [ 1110.830581][ T30] audit: type=1326 audit(1752003767.478:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16120 comm="syz.5.2714" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f61c878e929 code=0x0 [ 1111.743662][T16145] IPVS: Unknown mcast interface: vcan0 [ 1111.775153][T16146] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2721'. [ 1112.761685][T16154] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1113.599304][T16145] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2718'. [ 1114.077388][T16162] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1114.100195][T16162] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2723'. [ 1115.161991][T16172] ptrace attach of "./syz-executor exec"[12671] was attempted by "./syz-executor exec"[16172] [ 1115.268605][T16173] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1115.278200][T16173] overlayfs: failed to set xattr on upper [ 1115.284463][T16173] overlayfs: ...falling back to redirect_dir=nofollow. [ 1115.291459][T16173] overlayfs: ...falling back to index=off. [ 1115.297455][T16173] overlayfs: ...falling back to uuid=null. [ 1115.304135][T16173] overlayfs: maximum fs stacking depth exceeded [ 1119.451779][ T9] libceph: connect (1)[c::]:6789 error -22 [ 1119.483900][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1119.606427][T16199] ceph: No mds server is up or the cluster is laggy [ 1121.832087][T16221] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2737'. [ 1123.307684][T16230] ufs: You didn't specify the type of your ufs filesystem [ 1123.307684][T16230] [ 1123.307684][T16230] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1123.307684][T16230] [ 1123.307684][T16230] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1123.341066][T16230] ufs: ufstype=old is supported read-only [ 1123.434683][T16230] syz.5.2739: attempt to access beyond end of device [ 1123.434683][T16230] nbd5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1124.697230][T16247] IPVS: Unknown mcast interface: vcan0 [ 1124.776973][T16247] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2742'. [ 1124.851793][T16254] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 1125.165944][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1128.665848][T16284] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 1129.558300][T16284] QAT: Device 7 not found [ 1131.553767][T16305] 9pnet_fd: Insufficient options for proto=fd [ 1134.980251][T16321] : entered promiscuous mode [ 1135.093310][T16326] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2765'. [ 1139.013891][T16362] netlink: 'syz.4.2776': attribute type 1 has an invalid length. [ 1139.206451][T16367] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2777'. [ 1139.218800][T16367] overlayfs: failed to clone upperpath [ 1140.447777][ T5847] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1141.281825][ T5847] usb 7-1: Using ep0 maxpacket: 16 [ 1141.367473][ T5847] usb 7-1: config 0 has no interfaces? [ 1141.380946][ T5847] usb 7-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1141.406783][ T5847] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.602562][ T5847] usb 7-1: config 0 descriptor?? [ 1142.588446][T16406] delete_channel: no stack [ 1143.875135][ T5968] usb 7-1: USB disconnect, device number 14 [ 1144.551723][T16424] openvswitch: netlink: Message has 16 unknown bytes. [ 1144.559127][T16424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1146.278399][T16436] 9pnet_virtio: no channels available for device syz [ 1148.409352][T16461] /dev/nullb0: Can't lookup blockdev [ 1150.064621][T16475] netlink: 'syz.2.2805': attribute type 10 has an invalid length. [ 1150.080988][T16475] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 1150.089508][T16475] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1150.188244][T16467] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2804'. [ 1154.746071][T16527] netlink: 'syz.5.2816': attribute type 1 has an invalid length. [ 1154.753979][T16527] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2816'. [ 1158.824521][T16557] IPVS: Unknown mcast interface: vcan0 [ 1158.959318][T16539] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2821'. [ 1159.095137][ T5948] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 1159.425005][ T5948] usb 7-1: config 2 has an invalid interface number: 211 but max is 0 [ 1160.246931][ T5948] usb 7-1: config 2 has no interface number 0 [ 1160.258909][ T5948] usb 7-1: config 2 interface 211 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1160.301908][ T5948] usb 7-1: config 2 interface 211 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1160.491002][ T5948] usb 7-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=27.95 [ 1160.529407][ T5948] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.552669][ T5948] usb 7-1: Product: syz [ 1160.569373][ T5948] usb 7-1: Manufacturer: syz [ 1160.581928][ T5948] usb 7-1: SerialNumber: syz [ 1160.598835][T16562] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1160.630001][ T5948] em28xx 7-1:2.211: New device syz syz @ 12 Mbps (2040:8268, interface 211, class 211) [ 1160.748848][T12541] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1160.947141][ T5948] em28xx 7-1:2.211: Device initialization failed. [ 1160.963478][ T5948] em28xx 7-1:2.211: Device must be connected to a high-speed USB 2.0 port. [ 1161.297643][T16594] netlink: 'syz.6.2825': attribute type 4 has an invalid length. [ 1162.730016][T16604] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2835'. [ 1163.557122][ T5948] usb 7-1: USB disconnect, device number 15 [ 1163.942598][T16615] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1164.607684][T16623] openvswitch: netlink: Flow actions attr not present in new flow. [ 1164.794517][T16627] IPVS: Error connecting to the multicast addr [ 1164.844158][T16626] IPVS: Unknown mcast interface: vcan0 [ 1165.966634][T16626] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2839'. [ 1166.209540][T16617] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2836'. [ 1170.959374][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1171.917148][T16685] 9pnet_fd: Insufficient options for proto=fd [ 1172.142042][T16690] NILFS (nullb0): couldn't find nilfs on the device [ 1173.094600][T16686] xt_l2tp: v2 doesn't support IP mode [ 1173.545773][T16701] overlayfs: missing 'lowerdir' [ 1173.648876][T16702] netlink: 'syz.5.2860': attribute type 7 has an invalid length. [ 1173.656952][T16702] netlink: 'syz.5.2860': attribute type 3 has an invalid length. [ 1173.665422][T16702] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2860'. [ 1178.575410][ T5840] Bluetooth: hci0: unexpected event for opcode 0x041b [ 1180.601934][T16741] netlink: 'syz.4.2870': attribute type 10 has an invalid length. [ 1180.640716][T16741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1180.665858][T16741] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1181.521718][ T9] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1181.575514][T16745] overlayfs: missing 'lowerdir' [ 1181.756275][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 1181.777849][ T9] usb 7-1: config 0 has an invalid interface number: 21 but max is 0 [ 1182.355348][ T9] usb 7-1: config 0 has no interface number 0 [ 1182.361696][ T9] usb 7-1: config 0 interface 21 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1182.376141][ T9] usb 7-1: config 0 interface 21 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1182.386129][ T9] usb 7-1: config 0 interface 21 has no altsetting 0 [ 1182.419182][ T9] usb 7-1: New USB device found, idVendor=2040, idProduct=b753, bcdDevice=4a.63 [ 1182.442230][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.526287][ T9] usb 7-1: Product: syz [ 1182.530657][ T9] usb 7-1: Manufacturer: syz [ 1182.535294][ T9] usb 7-1: SerialNumber: syz [ 1182.593188][ T9] usb 7-1: config 0 descriptor?? [ 1182.602572][T16743] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1182.620796][T16743] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1183.822439][T16758] tmpfs: Bad value for 'mpol' [ 1183.902795][T16758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1183.980240][T16758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1185.469199][T16770] IPVS: Unknown mcast interface: vcan0 [ 1185.656143][T16769] netlink: 'syz.2.2878': attribute type 6 has an invalid length. [ 1185.824851][T16770] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2877'. [ 1186.364750][ T9] usb 7-1: USB disconnect, device number 16 [ 1188.097812][T16802] sctp: [Deprecated]: syz.6.2883 (pid 16802) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1188.097812][T16802] Use struct sctp_sack_info instead [ 1188.836761][T16801] IPVS: Error connecting to the multicast addr [ 1188.981582][T16806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2884'. [ 1190.399732][T16804] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2881'. [ 1190.456764][T16820] netlink: 1284 bytes leftover after parsing attributes in process `syz.5.2887'. [ 1190.483403][T16822] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2888'. [ 1191.764454][T16828] 9pnet_virtio: no channels available for device syz [ 1192.321322][T16833] syz.6.2892: attempt to access beyond end of device [ 1192.321322][T16833] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1192.352036][T16833] (syz.6.2892,16833,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 1192.390303][T16833] (syz.6.2892,16833,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 1192.390326][T16837] netlink: 'syz.6.2892': attribute type 1 has an invalid length. [ 1192.421343][T16833] (syz.6.2892,16833,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1192.436327][T16833] (syz.6.2892,16833,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 1192.716867][ T66] bond3: (slave ip6gretap1): link status up again after 0 ms [ 1192.736416][ T66] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1192.753368][ T5847] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1192.831126][T16833] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1192.853227][T14840] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1193.036673][ T66] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1193.049474][ T5847] usb 6-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 1193.058695][ T5847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.068125][ T5847] usb 6-1: Product: syz [ 1193.090562][ T5847] usb 6-1: Manufacturer: syz [ 1194.112741][ T5847] usb 6-1: SerialNumber: syz [ 1194.121293][ T5847] usb 6-1: config 0 descriptor?? [ 1194.122859][ T6247] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1195.083625][ T6247] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1195.096604][ T6247] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1195.299640][ T66] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1195.318463][T16854] program syz.6.2899 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1195.576174][ T997] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1195.897084][T14840] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1196.142167][ T6247] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1196.525094][T16865] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2901'. [ 1199.490486][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1199.614853][ T5847] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1199.642361][ T997] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1199.661215][ T5847] asix 6-1:0.0: probe with driver asix failed with error -71 [ 1199.711534][ T5847] usb 6-1: USB disconnect, device number 31 [ 1199.998619][ T997] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1202.358609][T16895] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2905'. [ 1202.904685][ T3491] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1203.330269][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1203.522351][ T6247] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1203.640268][T12541] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1204.336506][ T1087] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1204.781258][ T1087] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1205.679121][ T6247] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1205.901142][ T66] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1206.691902][ T66] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1206.774641][T16930] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2913'. [ 1207.619560][T16925] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2913'. [ 1207.637324][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1208.098496][ T1087] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1208.336630][ T6539] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1208.799206][ T66] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1208.932423][ T1087] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1209.156342][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 1209.177183][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1209.317509][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1210.685397][T16955] netlink: 'syz.4.2918': attribute type 1 has an invalid length. [ 1210.722003][T16955] bond4: (slave gretap1): making interface the new active one [ 1210.730163][T16955] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 1211.060645][ T6247] net_ratelimit: 2 callbacks suppressed [ 1211.060663][ T6247] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1211.175821][T16971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1211.234592][ T6539] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1211.822389][ T1087] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1211.936136][ T66] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1212.260989][ T5844] Bluetooth: hci0: Malformed LE Event: 0x1b [ 1212.301110][ T6247] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1212.462993][T16983] delete_channel: no stack [ 1212.496764][ T66] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1212.597756][T16973] tty tty2: ldisc open failed (-12), clearing slot 1 [ 1212.616225][ T6247] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1212.800499][T16990] netlink: 'syz.4.2926': attribute type 9 has an invalid length. [ 1213.282924][ T1087] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1213.295839][T16994] syz_tun: entered allmulticast mode [ 1213.400933][ T6539] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1213.564359][ T66] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1214.223072][T16993] syz_tun: left allmulticast mode [ 1214.337611][T17003] overlayfs: failed to clone upperpath [ 1214.972290][T17023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1214.980987][T17023] batadv_slave_0: entered promiscuous mode [ 1216.530388][T17039] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2948'. [ 1216.612051][T17039] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1216.620461][T17039] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1216.630065][T17039] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1216.637921][T17039] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1216.872557][ T6247] net_ratelimit: 8 callbacks suppressed [ 1216.872570][ T6247] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1217.014618][ T6247] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1217.153888][T12541] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1217.417395][ T43] libceph: connect (1)[c::]:6789 error -22 [ 1217.426967][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 1217.498676][T12541] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1217.794941][ T43] libceph: connect (1)[c::]:6789 error -22 [ 1217.801708][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 1217.976517][T17074] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1218.271738][ T3491] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1218.308354][T17056] ceph: No mds server is up or the cluster is laggy [ 1218.366884][ T5847] libceph: connect (1)[c::]:6789 error -22 [ 1218.397274][ T5847] libceph: mon0 (1)[c::]:6789 connect error [ 1218.470611][ T3491] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1218.612443][ T6247] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1218.678422][ T30] audit: type=1326 audit(1752003868.763:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17095 comm="syz.3.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715758e929 code=0x7ffc0000 [ 1218.702839][T17096] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2974'. [ 1218.754728][ T1087] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1218.762511][ T30] audit: type=1326 audit(1752003868.763:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17095 comm="syz.3.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715758e929 code=0x7ffc0000 [ 1218.851962][ T30] audit: type=1326 audit(1752003868.763:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17095 comm="syz.3.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f715758e929 code=0x7ffc0000 [ 1218.913124][ T30] audit: type=1326 audit(1752003868.763:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17095 comm="syz.3.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715758e929 code=0x7ffc0000 [ 1218.939354][ T6247] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1218.970593][ T30] audit: type=1326 audit(1752003868.763:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17095 comm="syz.3.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715758e929 code=0x7ffc0000 [ 1219.010124][ T30] audit: type=1326 audit(1752003868.763:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17095 comm="syz.3.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f715758e929 code=0x7ffc0000 [ 1219.061091][T12541] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1219.068779][ T30] audit: type=1326 audit(1752003868.763:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17095 comm="syz.3.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715758e929 code=0x7ffc0000 [ 1219.108023][ T30] audit: type=1326 audit(1752003868.763:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17095 comm="syz.3.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715758e929 code=0x7ffc0000 [ 1219.129700][ C0] vkms_vblank_simulate: vblank timer overrun [ 1219.154525][ T30] audit: type=1326 audit(1752003868.763:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17095 comm="syz.3.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f715758e929 code=0x7ffc0000 [ 1219.198583][ T30] audit: type=1326 audit(1752003868.763:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17095 comm="syz.3.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715758e929 code=0x7ffc0000 [ 1219.419647][ T5847] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1219.633250][ T5847] usb 7-1: Using ep0 maxpacket: 16 [ 1219.641298][ T5847] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1219.658272][ T5847] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1220.427485][ T5847] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1220.440805][ T5847] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1220.457357][ T5847] usb 7-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1220.466530][ T5847] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.478342][ T5847] usb 7-1: Product: syz [ 1220.482627][ T5847] usb 7-1: Manufacturer: syz [ 1220.487413][ T5847] usb 7-1: SerialNumber: syz [ 1220.509990][ T5847] usb 7-1: config 0 descriptor?? [ 1220.539455][ T5847] mcba_usb 7-1:0.0 can0: couldn't setup read URBs [ 1220.546720][ T5847] mcba_usb 7-1:0.0 can0: couldn't start device: -90 [ 1220.617205][ T5847] mcba_usb 7-1:0.0: probe with driver mcba_usb failed with error -90 [ 1220.749890][ T5847] usb 7-1: USB disconnect, device number 17 [ 1220.972343][T17152] IPVS: Error connecting to the multicast addr [ 1221.041136][T17152] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2999'. [ 1222.319850][ T36] net_ratelimit: 19 callbacks suppressed [ 1222.319869][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1222.502067][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1222.858275][ T3491] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1223.014328][T12541] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1223.251991][T12541] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1223.297977][ T5844] Bluetooth: hci0: unexpected event for opcode 0x204e [ 1223.488045][ T6539] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1223.902594][T17209] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1223.955690][T17209] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3015'. [ 1224.048472][ T6247] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1224.206329][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1224.466895][T12541] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1224.661230][T17214] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3022'. [ 1224.757550][T17215] IPv6: Can't replace route, no match found [ 1227.778960][ T1087] net_ratelimit: 16 callbacks suppressed [ 1227.778981][ T1087] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1227.919825][ T1087] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1228.044494][T12541] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1228.176733][T12541] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1228.261886][T17257] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3039'. [ 1228.296198][T12541] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1228.823674][ T3491] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1228.927600][T17266] ptrace attach of "./syz-executor exec"[8807] was attempted by "./syz-executor exec"[17266] [ 1228.993198][T17266] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1229.001194][T17266] overlayfs: failed to set xattr on upper [ 1229.007159][T17266] overlayfs: ...falling back to redirect_dir=nofollow. [ 1229.014413][T17266] overlayfs: ...falling back to index=off. [ 1229.020366][T17266] overlayfs: ...falling back to uuid=null. [ 1229.026524][T17266] overlayfs: maximum fs stacking depth exceeded [ 1229.177806][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1229.455360][T17269] netlink: 'syz.3.3042': attribute type 3 has an invalid length. [ 1229.464051][T17257] netlink: 'syz.2.3039': attribute type 10 has an invalid length. [ 1229.588722][T12541] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1229.732588][ T6539] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1229.864250][T12541] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1229.974450][ T5917] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1230.687170][ T5917] usb 7-1: Using ep0 maxpacket: 32 [ 1230.700290][ T5917] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1230.713016][ T5917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.744872][ T5917] usb 7-1: Product: syz [ 1230.749066][ T5917] usb 7-1: Manufacturer: syz [ 1230.772674][ T5917] usb 7-1: SerialNumber: syz [ 1230.784278][ T5917] usb 7-1: config 0 descriptor?? [ 1230.807409][ T5917] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1230.850881][T17303] IPVS: Unknown mcast interface: vcan0 [ 1231.012008][T17299] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3053'. [ 1231.244248][ T5917] gspca_stk1135: reg_w 0x0 err -71 [ 1231.250456][ T5917] gspca_stk1135: serial bus timeout: status=0x00 [ 1231.350702][ T5917] gspca_stk1135: Sensor write failed [ 1231.356101][ T5917] gspca_stk1135: serial bus timeout: status=0x00 [ 1231.367731][ T5917] gspca_stk1135: Sensor write failed [ 1231.382529][ T5917] gspca_stk1135: serial bus timeout: status=0x00 [ 1231.388888][ T5917] gspca_stk1135: Sensor read failed [ 1231.403452][ T5917] gspca_stk1135: serial bus timeout: status=0x00 [ 1231.415044][ T5917] gspca_stk1135: Sensor read failed [ 1231.420280][ T5917] gspca_stk1135: Detected sensor type unknown (0x0) [ 1231.440976][ T5917] gspca_stk1135: serial bus timeout: status=0x00 [ 1231.478266][ T5917] gspca_stk1135: Sensor read failed [ 1231.483520][ T5917] gspca_stk1135: serial bus timeout: status=0x00 [ 1231.504272][ T5917] gspca_stk1135: Sensor read failed [ 1231.509524][ T5917] gspca_stk1135: serial bus timeout: status=0x00 [ 1231.542407][ T5917] gspca_stk1135: Sensor write failed [ 1231.548215][ T5917] gspca_stk1135: serial bus timeout: status=0x00 [ 1231.582586][ T5917] gspca_stk1135: Sensor write failed [ 1231.595373][ T5917] stk1135 7-1:0.0: probe with driver stk1135 failed with error -71 [ 1231.626486][ T5917] usb 7-1: USB disconnect, device number 18 [ 1231.714752][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1231.880033][T17324] comedi comedi0: dt2814: I/O port conflict (0x1c,2) [ 1232.675330][T17336] IPVS: Error connecting to the multicast addr [ 1232.730242][T17339] IPVS: Error connecting to the multicast addr [ 1232.894326][T17342] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3067'. [ 1233.120380][T17344] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3069'. [ 1233.165452][ T36] net_ratelimit: 25 callbacks suppressed [ 1233.165469][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1233.379352][ T6539] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1233.585743][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1234.127592][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1234.311483][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1234.450512][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1234.568469][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1234.578750][T17368] netlink: 'syz.5.3077': attribute type 2 has an invalid length. [ 1234.707418][ T66] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1235.314213][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1235.379042][T17372] netlink: 'syz.4.3078': attribute type 1 has an invalid length. [ 1235.439294][ T6539] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1236.654314][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.758684][T17405] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3082'. [ 1237.849956][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 1237.849981][ T30] audit: type=1326 audit(1752003886.685:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17406 comm="syz.3.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715758e929 code=0x7ffc0000 [ 1237.914289][ T5968] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1237.935697][ T30] audit: type=1326 audit(1752003886.685:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17406 comm="syz.3.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715758e929 code=0x7ffc0000 [ 1238.025484][ T30] audit: type=1326 audit(1752003886.695:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17406 comm="syz.3.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f715758e929 code=0x7ffc0000 [ 1238.098295][ T30] audit: type=1326 audit(1752003886.695:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17406 comm="syz.3.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715758e929 code=0x7ffc0000 [ 1238.137763][ T5968] usb 7-1: Using ep0 maxpacket: 8 [ 1238.138749][ T30] audit: type=1326 audit(1752003886.695:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17406 comm="syz.3.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715758e929 code=0x7ffc0000 [ 1238.224258][ T5968] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.234863][ T5968] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 10 [ 1238.267687][ T5968] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1238.315827][ T5968] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1238.338709][ T5968] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.368799][ T5968] usb 7-1: Product: syz [ 1238.372996][ T5968] usb 7-1: Manufacturer: syz [ 1238.390561][ T5968] usb 7-1: SerialNumber: syz [ 1238.414551][ T5968] usb 7-1: config 0 descriptor?? [ 1238.435943][ T5968] cdc_ncm 7-1:0.0: CDC Union missing and no IAD found [ 1238.443200][ T5968] cdc_ncm 7-1:0.0: bind() failure [ 1238.555564][ T1087] net_ratelimit: 17 callbacks suppressed [ 1238.555580][ T1087] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1238.707319][ T6539] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1238.833528][ T6539] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1238.951907][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1239.090211][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1239.218383][ T1087] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1239.368048][ T6539] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1239.529215][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1239.668763][ T6539] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1239.832109][ T5917] usb 7-1: USB disconnect, device number 19 [ 1239.844590][ T66] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1240.882062][ T30] audit: type=1326 audit(1752003889.538:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17464 comm="syz.4.3117" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efddab8e929 code=0x0 [ 1241.010719][T17468] netlink: 'syz.4.3117': attribute type 4 has an invalid length. [ 1241.671386][T17495] random: crng reseeded on system resumption [ 1243.978182][ T1087] net_ratelimit: 28 callbacks suppressed [ 1243.978201][ T1087] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1244.118058][ T1087] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1244.292253][ T66] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1244.404802][ T1087] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1244.520838][ T6539] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1244.639309][ T6539] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1244.756188][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1244.873792][ T66] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1245.004081][ T66] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1245.184457][ T1087] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1246.914094][T17642] ptrace attach of "./syz-executor exec"[5833] was attempted by "./syz-executor exec"[17642] [ 1246.930267][T17642] overlayfs: failed to clone upperpath [ 1249.343843][ T6539] net_ratelimit: 26 callbacks suppressed [ 1249.343894][ T6539] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1249.642219][ T6247] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1249.851643][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1249.886832][T17735] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3240'. [ 1249.995488][ T3491] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1250.136775][ T3491] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1250.286260][ T3491] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1250.307219][T17758] tipc: Enabled bearer , priority 10 [ 1250.422272][ T3491] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1250.539713][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1250.657655][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1250.796541][ T6247] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1250.814669][T17783] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1250.945325][T17793] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3268'. [ 1251.071849][T17800] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3272'. [ 1251.366708][T17814] xt_CT: No such helper "snmp" [ 1251.384746][ T9] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1251.571631][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1251.588612][ T9] usb 7-1: config 6 has an invalid interface number: 200 but max is 0 [ 1251.607793][ T9] usb 7-1: config 6 has no interface number 0 [ 1251.623686][ T9] usb 7-1: config 6 interface 200 has no altsetting 0 [ 1251.667657][ T9] usb 7-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 1251.676988][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.696473][ T9] usb 7-1: Product: syz [ 1251.700959][T17838] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3290'. [ 1251.705602][ T9] usb 7-1: Manufacturer: syz [ 1251.724379][ T9] usb 7-1: SerialNumber: syz [ 1252.532295][T17879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3309'. [ 1253.410227][ T5844] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 1253.425375][T17921] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3328'. [ 1253.710179][ T30] audit: type=1326 audit(1752003901.530:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17931 comm="syz.4.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efddab8e929 code=0x7ffc0000 [ 1253.768879][ T30] audit: type=1326 audit(1752003901.530:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17931 comm="syz.4.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efddab8e929 code=0x7ffc0000 [ 1253.832346][ T30] audit: type=1326 audit(1752003901.558:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17931 comm="syz.4.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efddab8e929 code=0x7ffc0000 [ 1253.891180][ T30] audit: type=1326 audit(1752003901.558:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17931 comm="syz.4.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efddab8e929 code=0x7ffc0000 [ 1253.932272][T17938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3337'. [ 1253.939627][ T30] audit: type=1326 audit(1752003901.558:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17931 comm="syz.4.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efddab8e929 code=0x7ffc0000 [ 1253.949224][T17938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3337'. [ 1253.997364][ T30] audit: type=1326 audit(1752003901.568:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17931 comm="syz.4.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7efddab8e929 code=0x7ffc0000 [ 1254.046228][ T30] audit: type=1326 audit(1752003901.568:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17931 comm="syz.4.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efddab8e929 code=0x7ffc0000 [ 1254.081793][ T30] audit: type=1326 audit(1752003901.568:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17931 comm="syz.4.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efddab8e929 code=0x7ffc0000 [ 1254.128583][ T5844] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 1254.148184][ T30] audit: type=1326 audit(1752003901.568:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17931 comm="syz.4.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7efddab8e929 code=0x7ffc0000 [ 1254.202997][ T30] audit: type=1326 audit(1752003901.568:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17931 comm="syz.4.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efddab8e929 code=0x7ffc0000 [ 1254.327265][T17951] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3343'. [ 1254.432465][ T9] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 1254.462755][ T9] dvb-usb: bulk message failed: -71 (3/0) [ 1254.492444][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1254.537353][ T9] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 1254.548068][ T9] usb 7-1: media controller created [ 1254.632572][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1254.696546][ T9] dvb-usb: bulk message failed: -71 (6/0) [ 1254.713605][ T49] net_ratelimit: 31 callbacks suppressed [ 1254.713636][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1254.732367][ T9] dvb-usb: bulk message failed: -71 (6/0) [ 1254.738240][ T9] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 1254.754957][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input24 [ 1254.772085][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 1254.794572][ T9] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 1254.805950][T17972] netlink: 'syz.6.3354': attribute type 2 has an invalid length. [ 1254.814565][ T9] usb 7-1: USB disconnect, device number 20 [ 1254.870726][ T1087] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1254.919147][ T9] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 1254.986980][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1255.137770][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1255.305781][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1255.426846][T17999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3366'. [ 1255.494639][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1255.640215][ T1087] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1255.742952][T18014] overlayfs: failed to clone upperpath [ 1255.802039][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1255.862253][T18019] ip6tnl1: entered promiscuous mode [ 1255.871629][T18019] ip6tnl1: entered allmulticast mode [ 1255.938769][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1256.038899][ T5948] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 1256.046768][ T5948] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 1256.054258][ T5948] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 1256.061808][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1256.061945][ T9] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 1256.087505][ T5948] hid-generic 0003:0004:0000.0012: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1256.261483][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1256.274489][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1256.295708][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1256.309199][ T9] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1256.319111][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.327769][ T9] usb 6-1: Product: syz [ 1256.332666][ T9] usb 6-1: Manufacturer: syz [ 1256.337973][ T9] usb 6-1: SerialNumber: syz [ 1256.368302][ T9] usb 6-1: config 0 descriptor?? [ 1256.377422][T18017] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1256.384742][T18017] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1256.393062][ T9] usb 6-1: ucan: probing device on interface #0 [ 1257.052266][ T9] ucan 6-1:0.0: probe with driver ucan failed with error -71 [ 1257.603319][ T9] usb 6-1: USB disconnect, device number 32 [ 1258.576177][T18119] IPVS: Unknown mcast interface: vcan0 [ 1258.600067][T18124] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3423'. [ 1258.816484][T18120] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3421'. [ 1258.965110][T18143] netlink: 'syz.6.3431': attribute type 1 has an invalid length. [ 1259.958429][ T9] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1260.087060][ T12] net_ratelimit: 32 callbacks suppressed [ 1260.087078][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1260.129854][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1260.145189][ T9] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1260.156896][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.175946][T18194] loop6: detected capacity change from 0 to 63 [ 1260.189977][ T9] usb 6-1: config 0 descriptor?? [ 1260.191978][T18194] Buffer I/O error on dev loop6, logical block 0, async page read [ 1260.216160][T18194] Buffer I/O error on dev loop6, logical block 1, async page read [ 1260.226432][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1260.234035][T18194] Buffer I/O error on dev loop6, logical block 2, async page read [ 1260.248179][ T9] as10x_usb: device has been detected [ 1260.253058][T18194] Buffer I/O error on dev loop6, logical block 3, async page read [ 1260.263487][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1260.271064][T18194] Buffer I/O error on dev loop6, logical block 0, async page read [ 1260.288184][T18194] Buffer I/O error on dev loop6, logical block 1, async page read [ 1260.308308][T18194] Buffer I/O error on dev loop6, logical block 2, async page read [ 1260.317421][T18194] Buffer I/O error on dev loop6, logical block 3, async page read [ 1260.329090][ T9] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1260.336387][T18194] Buffer I/O error on dev loop6, logical block 0, async page read [ 1260.359757][T18194] Buffer I/O error on dev loop6, logical block 1, async page read [ 1260.370047][ T6247] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1260.401728][ T9] as10x_usb: error during firmware upload part1 [ 1260.421436][ T9] Registered device nBox DVB-T Dongle [ 1260.455084][ T5917] usb 6-1: USB disconnect, device number 33 [ 1260.503380][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1260.559624][ T5917] Unregistered device nBox DVB-T Dongle [ 1260.565228][ T5917] as10x_usb: device has been disconnected [ 1260.623099][ T6247] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1260.818769][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1261.253653][ T6247] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1261.380264][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1261.498581][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1261.561949][T18224] syzkaller1: entered promiscuous mode [ 1261.613961][T18224] syzkaller1: entered allmulticast mode [ 1261.669352][ T6247] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1261.748724][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1261.748740][ T30] audit: type=1326 audit(1752003909.051:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18230 comm="syz.2.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210db8e929 code=0x7ffc0000 [ 1261.835148][ T30] audit: type=1326 audit(1752003909.051:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18230 comm="syz.2.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210db8e929 code=0x7ffc0000 [ 1261.876682][ T30] audit: type=1326 audit(1752003909.088:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18230 comm="syz.2.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f210db8e929 code=0x7ffc0000 [ 1261.904087][ T9] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1261.935080][ T30] audit: type=1326 audit(1752003909.088:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18230 comm="syz.2.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210db8e929 code=0x7ffc0000 [ 1261.995537][ T30] audit: type=1326 audit(1752003909.088:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18230 comm="syz.2.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210db8e929 code=0x7ffc0000 [ 1262.057931][ T30] audit: type=1326 audit(1752003909.088:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18230 comm="syz.2.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f210db8e929 code=0x7ffc0000 [ 1262.111320][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1262.121507][ T30] audit: type=1326 audit(1752003909.088:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18230 comm="syz.2.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210db8e929 code=0x7ffc0000 [ 1262.121551][ T30] audit: type=1326 audit(1752003909.088:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18230 comm="syz.2.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210db8e929 code=0x7ffc0000 [ 1262.121591][ T30] audit: type=1326 audit(1752003909.088:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18230 comm="syz.2.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f210db8e929 code=0x7ffc0000 [ 1262.121630][ T30] audit: type=1326 audit(1752003909.098:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18230 comm="syz.2.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210db8e929 code=0x7ffc0000 [ 1262.418469][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1262.431691][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1262.790855][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.801761][ T9] usb 7-1: config 0 descriptor?? [ 1262.810042][ T9] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1263.943671][T18272] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3485'. [ 1264.025776][T18276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3487'. [ 1264.176312][T18283] IPVS: Unknown mcast interface: vcan0 [ 1264.418340][T18279] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3486'. [ 1264.889666][ T8762] usb 7-1: USB disconnect, device number 21 [ 1265.456225][ T12] net_ratelimit: 30 callbacks suppressed [ 1265.456244][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1265.517380][ T8762] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1265.594734][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1265.699187][ T8762] usb 7-1: Using ep0 maxpacket: 32 [ 1265.708165][ T8762] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1265.721202][ T6247] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1265.737527][ T8762] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1265.756301][ T8762] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1265.774188][ T8762] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.797539][ T8762] usb 7-1: config 0 descriptor?? [ 1265.849418][ T6539] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1265.971842][ T6247] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1266.095354][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1266.257946][ T6247] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1266.278864][ T8762] savu 0003:1E7D:2D5A.0013: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 1266.372732][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1266.436927][ T9] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1266.514517][ T6247] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1266.888185][ T5968] usb 7-1: USB disconnect, device number 22 [ 1266.978552][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1266.992146][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1267.005250][ T6247] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1267.019783][ T9] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1267.042069][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.093085][ T9] usb 6-1: config 0 descriptor?? [ 1267.263295][ T5844] Bluetooth: hci3: Malformed LE Event: 0x0b [ 1267.584305][ T9] cm6533_jd 0003:0D8C:0022.0014: unknown main item tag 0x0 [ 1267.616112][ T9] cm6533_jd 0003:0D8C:0022.0014: unknown main item tag 0x0 [ 1267.651934][ T9] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.0014/input/input25 [ 1267.702452][ T9] cm6533_jd 0003:0D8C:0022.0014: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 1267.800989][ T9] usb 6-1: USB disconnect, device number 34 [ 1268.195630][T18403] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_batadv, syncid = 4, id = 0 [ 1268.543663][ T9] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1268.714441][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 1268.735937][ T9] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1268.762970][ T9] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1268.779917][ T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1268.799442][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.815451][ T9] usb 7-1: Product: syz [ 1268.830583][ T9] usb 7-1: Manufacturer: syz [ 1268.849866][ T9] usb 7-1: SerialNumber: syz [ 1269.349563][ T9] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1269.437249][T18452] netlink: 'syz.2.3561': attribute type 1 has an invalid length. [ 1269.489307][T18452] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1269.541803][T18455] bond2: (slave gretap1): making interface the new active one [ 1269.551411][T18455] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1269.827764][ T5917] usb 7-1: USB disconnect, device number 23 [ 1270.768484][T18510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3580'. [ 1270.862656][ T6247] net_ratelimit: 31 callbacks suppressed [ 1270.862673][ T6247] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1271.001552][ T1087] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1271.162331][ T6247] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1271.236291][T18535] 9pnet_fd: Insufficient options for proto=fd [ 1271.313948][ T6539] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1271.472200][ T1087] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1271.611237][ T66] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1271.750316][ T6247] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1271.889184][ T6247] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1272.049558][ T1087] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1272.203678][ T6539] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1272.611747][T18583] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3611'. [ 1273.548629][T18600] netlink: 'syz.5.3619': attribute type 1 has an invalid length. [ 1273.640272][T18600] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1273.657803][T18600] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1273.668436][T18600] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1273.689928][T18600] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1273.715660][T18600] bond1: (slave geneve2): making interface the new active one [ 1273.739894][T18600] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1273.918157][T18614] trusted_key: encrypted_key: insufficient parameters specified [ 1274.372546][T18616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3625'. [ 1275.199693][T18632] overlayfs: failed to clone upperpath [ 1275.991258][T18666] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3644'. [ 1276.317814][ T3491] net_ratelimit: 31 callbacks suppressed [ 1276.317831][ T3491] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1276.355841][T18680] 9pnet_fd: Insufficient options for proto=fd [ 1276.460354][ T3491] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1276.567026][T18690] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3654'. [ 1276.625063][ T3491] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1276.777620][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1276.930364][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1277.338882][T18704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1277.347615][T18704] batadv_slave_0: entered promiscuous mode [ 1277.761083][T12541] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1277.940970][ T3491] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1278.079616][T12541] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1278.132105][ T5917] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1278.181493][T18722] 9pnet_fd: Insufficient options for proto=fd [ 1278.218993][T12541] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1278.303458][ T5917] usb 7-1: Using ep0 maxpacket: 8 [ 1278.321689][ T5917] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.352364][ T5917] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1278.364471][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1278.391226][ T5917] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1278.424997][ T5917] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1278.517050][ T5917] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1278.540627][ T5917] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.568016][ T5917] usbtmc 7-1:16.0: bulk endpoints not found [ 1279.450468][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1279.450481][ T30] audit: type=1804 audit(1752003925.617:1701): pid=18750 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.3678" name="file0" dev="tmpfs" ino=4693 res=1 errno=0 [ 1279.726617][T18762] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3683'. [ 1279.949096][T18760] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3682'. [ 1281.147223][ T8762] usb 7-1: USB disconnect, device number 24 [ 1281.431523][T18783] netlink: 'syz.2.3691': attribute type 7 has an invalid length. [ 1281.441601][T18783] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3691'. [ 1281.472748][T18793] IPVS: Error connecting to the multicast addr [ 1281.778763][ T6247] net_ratelimit: 22 callbacks suppressed [ 1281.778786][ T6247] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1281.836054][T18793] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3689'. [ 1281.846959][ T30] audit: type=1804 audit(1752003927.843:1702): pid=18806 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.3696" name="/newroot/552/bus/file0" dev="overlay" ino=2976 res=1 errno=0 [ 1281.917442][ T6247] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1282.066367][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1282.193462][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1282.397883][ T6247] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1282.526592][ T6539] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1282.548363][ T30] audit: type=1326 audit(1752003928.489:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18801 comm="syz.2.3695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210db8e929 code=0x7fc00000 [ 1283.059269][T18812] batadv_slave_0: entered promiscuous mode [ 1283.092568][ T30] audit: type=1326 audit(1752003928.489:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18801 comm="syz.2.3695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f210db8e929 code=0x7fc00000 [ 1283.167382][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1283.376901][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1283.520895][ T3491] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1283.637817][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1283.729902][T18833] syz_tun: entered allmulticast mode [ 1283.792801][T18831] syz_tun: left allmulticast mode [ 1283.804714][T18834] IPVS: Error connecting to the multicast addr [ 1284.384636][T18828] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3703'. [ 1287.194404][T12541] net_ratelimit: 14 callbacks suppressed [ 1287.194423][T12541] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1287.370152][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1287.540941][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1287.670087][ T3491] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1287.839603][ T3491] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1287.957030][ T6539] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1287.976062][T12541] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1288.075313][T12541] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1288.097586][T18879] overlayfs: failed to clone upperpath [ 1288.220315][T18883] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.3724'. [ 1288.230424][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1288.246627][T18883] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.3724'. [ 1288.272075][T18883] netlink: 584 bytes leftover after parsing attributes in process `syz.4.3724'. [ 1288.373859][ T6539] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1288.517911][T12541] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1289.477017][T18927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3741'. [ 1289.535946][T18927] vlan0: entered promiscuous mode [ 1289.552072][T18927] bridge0: entered promiscuous mode [ 1292.248056][T18969] netlink: 'syz.2.3756': attribute type 1 has an invalid length. [ 1293.024239][T18974] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1293.032860][T18974] bond3: (slave bond4): making interface the new active one [ 1293.042110][T18974] bond3: (slave bond4): Enslaving as an active interface with an up link [ 1293.051940][ T6539] net_ratelimit: 27 callbacks suppressed [ 1293.051954][ T6539] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1293.086504][T18987] bond3: (slave gretap2): Enslaving as a backup interface with an up link [ 1293.174312][ T6539] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1293.291720][T12541] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1293.368163][T18996] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3761'. [ 1293.441051][ T3491] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1293.765076][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1293.933204][ T6539] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1294.061866][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1294.328575][T14840] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1294.508785][ T6247] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1294.681215][ T6539] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1295.068060][T19031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3777'. [ 1296.673639][T19056] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3784'. [ 1296.689023][ T30] audit: type=1326 audit(1752003941.734:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19054 comm="syz.2.3785" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f210db8e929 code=0x0 [ 1298.432038][T19084] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 1298.468960][ T12] net_ratelimit: 20 callbacks suppressed [ 1298.468976][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1298.628353][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1298.798190][ T3491] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1298.936135][ T6539] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1299.096650][ T3491] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1299.225057][ T6539] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1299.496215][T12541] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1299.632369][ T66] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1299.800116][ T66] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1300.426684][ T6247] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1301.361947][T19126] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3809'. [ 1302.309776][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1303.864799][ T12] net_ratelimit: 22 callbacks suppressed [ 1303.864831][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1304.155829][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1304.357677][ T6539] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1304.520945][T19170] ufs: You didn't specify the type of your ufs filesystem [ 1304.520945][T19170] [ 1304.520945][T19170] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1304.520945][T19170] [ 1304.520945][T19170] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1304.549573][ T6539] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1304.560486][T19170] ufs: ufstype=old is supported read-only [ 1304.611991][T19170] ufs: ufs_fill_super(): bad magic number [ 1304.666452][ T66] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1304.822872][ T66] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1304.991915][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1305.137101][T12541] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1305.692510][ T66] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1305.984956][ T1087] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1307.053226][T19190] kvm: pic: non byte write [ 1307.081625][T19190] kvm: vcpu 0: requested 64 ns lapic timer period limited to 200000 ns [ 1309.220203][T19206] netlink: 176 bytes leftover after parsing attributes in process `syz.5.3835'. [ 1309.277472][ T6539] net_ratelimit: 19 callbacks suppressed [ 1309.277521][ T6539] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1309.680793][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1310.001110][ T6539] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1310.502375][T19217] : entered promiscuous mode [ 1310.662475][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1311.412607][ T3491] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1311.644238][T12541] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1311.794291][T14840] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1311.995270][T14840] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1312.147843][T14840] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1312.973965][T14840] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1314.000486][T19248] IPVS: Error connecting to the multicast addr [ 1314.178024][T19246] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3848'. [ 1314.536635][T19258] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1314.706192][T14840] net_ratelimit: 12 callbacks suppressed [ 1314.706211][T14840] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1314.893929][ T6539] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1315.083854][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1315.289384][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1315.522587][T12541] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1315.734057][T12541] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1315.964645][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1316.187240][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1316.423022][ T6539] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1316.627038][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1318.105210][T19281] binder_alloc: 19279: pid 19279 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1318.119003][T19281] binder_alloc: 19279: pid 19279 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1320.160724][ T3491] net_ratelimit: 13 callbacks suppressed [ 1320.160739][ T3491] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1320.446165][ T6247] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1320.832940][T12541] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1320.959044][ T6247] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1321.084915][T19314] tipc: Enabled bearer , priority 0 [ 1321.129751][ T6247] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1321.311616][ T6247] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1321.490622][T12541] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1321.906112][T12541] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1322.049185][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1322.242474][T19322] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3872'. [ 1322.286294][ T5917] tipc: Node number set to 2347162332 [ 1322.359911][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1322.455016][T19327] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005d: 0000 [#1] SMP KASAN PTI [ 1322.466934][T19327] KASAN: null-ptr-deref in range [0x00000000000002e8-0x00000000000002ef] [ 1322.475387][T19327] CPU: 0 UID: 0 PID: 19327 Comm: syz.4.3873 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 1322.487482][T19327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1322.497559][T19327] RIP: 0010:hfsc_qlen_notify+0x2e/0x160 [ 1322.503140][T19327] Code: 55 41 57 41 56 41 55 41 54 53 48 89 f3 49 bc 00 00 00 00 00 fc ff df e8 20 89 44 f8 4c 8d b3 ec 02 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 e8 00 00 00 41 8b 2e 31 ff 89 ee e8 39 [ 1322.522807][T19327] RSP: 0018:ffffc9000bb270b0 EFLAGS: 00010203 [ 1322.528885][T19327] RAX: 000000000000005d RBX: 0000000000000000 RCX: 0000000000080000 [ 1322.536881][T19327] RDX: ffffc9000c089000 RSI: 00000000000002ea RDI: 00000000000002eb [ 1322.544871][T19327] RBP: dffffc0000000000 R08: ffff88802f760000 R09: 0000000000000002 [ 1322.552858][T19327] R10: 00000000ffffffff R11: ffffffff897b9ba0 R12: dffffc0000000000 [ 1322.560846][T19327] R13: ffff88802279c000 R14: 00000000000002ec R15: ffff88802279c000 [ 1322.568847][T19327] FS: 00007efddba3c6c0(0000) GS:ffff888125c4f000(0000) knlGS:0000000000000000 [ 1322.577794][T19327] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1322.584393][T19327] CR2: 0000001b30a1aff8 CR3: 0000000045fbe000 CR4: 00000000003526f0 [ 1322.592387][T19327] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1322.600356][T19327] DR3: 3a810b1eb6134bdc DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1322.608322][T19327] Call Trace: [ 1322.611701][T19327] [ 1322.614630][T19327] qdisc_tree_reduce_backlog+0x299/0x480 [ 1322.620274][T19327] ? qdisc_tree_reduce_backlog+0x3c/0x480 [ 1322.626000][T19327] codel_change+0x859/0xae0 [ 1322.630509][T19327] ? is_dynamic_key+0xd6/0x1c0 [ 1322.635275][T19327] ? qdisc_alloc+0x789/0xaa0 [ 1322.639862][T19327] ? qdisc_create+0x12c/0xea0 [ 1322.644548][T19327] ? rtnetlink_rcv_msg+0x77c/0xb70 [ 1322.649666][T19327] ? netlink_rcv_skb+0x205/0x470 [ 1322.654607][T19327] ? netlink_unicast+0x758/0x8d0 [ 1322.659543][T19327] ? netlink_sendmsg+0x805/0xb30 [ 1322.664479][T19327] ? __sock_sendmsg+0x219/0x270 [ 1322.669335][T19327] ? ____sys_sendmsg+0x505/0x830 [ 1322.674277][T19327] ? ___sys_sendmsg+0x21f/0x2a0 [ 1322.679128][T19327] ? __x64_sys_sendmsg+0x19b/0x260 [ 1322.684332][T19327] ? __pfx_codel_change+0x10/0x10 [ 1322.689388][T19327] codel_init+0x1f7/0x3e0 [ 1322.693737][T19327] ? __pfx_codel_init+0x10/0x10 [ 1322.698588][T19327] qdisc_create+0x7a9/0xea0 [ 1322.703093][T19327] tc_modify_qdisc+0x1426/0x2010 [ 1322.708127][T19327] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1322.713433][T19327] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1322.718725][T19327] rtnetlink_rcv_msg+0x77c/0xb70 [ 1322.723675][T19327] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1322.728803][T19327] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1322.734258][T19327] ? ref_tracker_free+0x63a/0x7d0 [ 1322.739314][T19327] ? __copy_skb_header+0xa7/0x550 [ 1322.744341][T19327] ? __pfx_ref_tracker_free+0x10/0x10 [ 1322.749716][T19327] netlink_rcv_skb+0x205/0x470 [ 1322.754488][T19327] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1322.759942][T19327] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1322.765230][T19327] ? netlink_deliver_tap+0x2e/0x1b0 [ 1322.770430][T19327] ? netlink_deliver_tap+0x2e/0x1b0 [ 1322.775630][T19327] netlink_unicast+0x758/0x8d0 [ 1322.780408][T19327] netlink_sendmsg+0x805/0xb30 [ 1322.785181][T19327] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1322.790469][T19327] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1322.795770][T19327] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1322.801054][T19327] __sock_sendmsg+0x219/0x270 [ 1322.805737][T19327] ____sys_sendmsg+0x505/0x830 [ 1322.810501][T19327] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1322.815787][T19327] ? import_iovec+0x74/0xa0 [ 1322.820287][T19327] ___sys_sendmsg+0x21f/0x2a0 [ 1322.824972][T19327] ? __pfx____sys_sendmsg+0x10/0x10 [ 1322.830184][T19327] ? __fget_files+0x2a/0x420 [ 1322.834773][T19327] ? __fget_files+0x3a0/0x420 [ 1322.839455][T19327] __x64_sys_sendmsg+0x19b/0x260 [ 1322.844484][T19327] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1322.849955][T19327] ? rcu_is_watching+0x15/0xb0 [ 1322.854741][T19327] ? do_syscall_64+0xbe/0x3b0 [ 1322.859430][T19327] do_syscall_64+0xfa/0x3b0 [ 1322.863939][T19327] ? lockdep_hardirqs_on+0x9c/0x150 [ 1322.869148][T19327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1322.875214][T19327] ? clear_bhb_loop+0x60/0xb0 [ 1322.879898][T19327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1322.885799][T19327] RIP: 0033:0x7efddab8e929 [ 1322.890233][T19327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1322.909842][T19327] RSP: 002b:00007efddba3c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1322.918258][T19327] RAX: ffffffffffffffda RBX: 00007efddadb5fa0 RCX: 00007efddab8e929 [ 1322.926229][T19327] RDX: 0000000000000800 RSI: 0000200000000100 RDI: 0000000000000004 [ 1322.934201][T19327] RBP: 00007efddac10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1322.942184][T19327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1322.950182][T19327] R13: 0000000000000000 R14: 00007efddadb5fa0 R15: 00007ffc1f17cf18 [ 1322.958166][T19327] [ 1322.961191][T19327] Modules linked in: [ 1322.965298][T19327] ---[ end trace 0000000000000000 ]--- [ 1322.970834][T19327] RIP: 0010:hfsc_qlen_notify+0x2e/0x160 [ 1322.976415][T19327] Code: 55 41 57 41 56 41 55 41 54 53 48 89 f3 49 bc 00 00 00 00 00 fc ff df e8 20 89 44 f8 4c 8d b3 ec 02 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 e8 00 00 00 41 8b 2e 31 ff 89 ee e8 39 [ 1322.996066][T19327] RSP: 0018:ffffc9000bb270b0 EFLAGS: 00010203 [ 1323.002385][T19327] RAX: 000000000000005d RBX: 0000000000000000 RCX: 0000000000080000 [ 1323.010376][T19327] RDX: ffffc9000c089000 RSI: 00000000000002ea RDI: 00000000000002eb [ 1323.018398][T19327] RBP: dffffc0000000000 R08: ffff88802f760000 R09: 0000000000000002 [ 1323.026383][T19327] R10: 00000000ffffffff R11: ffffffff897b9ba0 R12: dffffc0000000000 [ 1323.034378][T19327] R13: ffff88802279c000 R14: 00000000000002ec R15: ffff88802279c000 [ 1323.042339][T19327] FS: 00007efddba3c6c0(0000) GS:ffff888125c4f000(0000) knlGS:0000000000000000 [ 1323.051290][T19327] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1323.057906][T19327] CR2: 0000001b30a1aff8 CR3: 0000000045fbe000 CR4: 00000000003526f0 [ 1323.065891][T19327] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1323.073854][T19327] DR3: 3a810b1eb6134bdc DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1323.081852][T19327] Kernel panic - not syncing: Fatal exception in interrupt [ 1323.089426][T19327] Kernel Offset: disabled [ 1323.093751][T19327] Rebooting in 86400 seconds..