last executing test programs: 13m7.355017269s ago: executing program 2 (id=90): syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1c, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f00000000c0)='./file1\x00', 0x10088, &(0x7f0000000580)=ANY=[], 0x1, 0x1ff, &(0x7f00000002c0)="$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") open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) rmdir(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x490, 0x0, 0x0) 13m6.024551307s ago: executing program 4 (id=107): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{0x0}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 13m5.874900478s ago: executing program 2 (id=109): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x38, r1, 0x10ada85e65c25349, 0x0, 0x8000000, {{0x6b}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) 13m5.757792849s ago: executing program 2 (id=110): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x8, 0x10, 0x20000000, 0x20004, 0x0, 0x0, {0x1}}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) 13m5.52269944s ago: executing program 2 (id=113): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b6fffec850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = io_uring_setup(0x203c, &(0x7f00000000c0)={0x0, 0xd4b5, 0x0, 0x3}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r3, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000740)={0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) fdatasync(r4) ftruncate(r4, 0x81ff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8010, r4, 0x0) 13m4.970887853s ago: executing program 4 (id=117): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000011000000000000000000a22a30456b880000145b41fe69e3ffff78616d3000000000000000000000000079616d3000000000000000000000000076657468315f742f5f626f6e640000000180c20000000000000000000180c20000000800000000000000b100000067010000900100007374617469737469630000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000646e61740000060000000000ff0300000000000000000000000000000000000010000000000000000180c20000000000bb8e66505c1aa6d062c3b52cffffffff000000006e666c6f670000000000000000000000000000000000000050000000121b6eb244c4f0fffbf04a000000007e4b000022569e338e2c551c2fc4a19597ba4c501c8b1f16fb7809c40aeea768e825383d2afb577ed2bb6dd99fd43741089cca6edb0041555449540000000000000000000000000626967e000000000000000000000008000000000000200000000000000000840200"/544]}, 0x298) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000002c0)=ANY=[@ANYRES8], 0x118) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) rmdir(0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x9, 0x0, 0x7fff, 0x0, 0x4}) 13m4.112795068s ago: executing program 2 (id=119): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='sched_switch\x00', r2}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2) 13m3.550810142s ago: executing program 4 (id=126): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x6}, {0x0, 0xffff}}}, 0x24}}, 0x0) 13m3.465196342s ago: executing program 2 (id=127): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 13m3.198797784s ago: executing program 32 (id=127): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 13m3.148701384s ago: executing program 4 (id=129): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b6fffec850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = io_uring_setup(0x203c, &(0x7f00000000c0)={0x0, 0xd4b5, 0x0, 0x3}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r3, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000740)={0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) fdatasync(r4) ftruncate(r4, 0x81ff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8010, r4, 0x0) 13m2.267349429s ago: executing program 4 (id=138): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x6}, {0x0, 0xffff}}}, 0x24}}, 0x0) 13m1.451120094s ago: executing program 4 (id=145): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) 13m1.016585716s ago: executing program 33 (id=145): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) 12m56.353186714s ago: executing program 1 (id=170): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=r1, @ANYBLOB="c5c876d700000000240012800b00010067726574617000001400028008000100", @ANYBLOB="06000e"], 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 12m56.245585175s ago: executing program 1 (id=171): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000001900), 0x802, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0xfffffffd, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xb8}}, 0x0) 12m56.105492375s ago: executing program 1 (id=173): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYRES32, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080015"], 0x54}}, 0x0) 12m55.881011307s ago: executing program 1 (id=175): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00'}) r1 = io_uring_setup(0x203c, &(0x7f00000000c0)={0x0, 0xd4b5, 0x0, 0x3}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r3, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000740)={0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) fdatasync(r4) ftruncate(r4, 0x81ff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8010, r4, 0x0) 12m54.982994112s ago: executing program 1 (id=183): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYRES32, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080015"], 0x54}}, 0x0) 12m53.61905505s ago: executing program 1 (id=186): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}], 0x1, 0xc044) 12m53.126659003s ago: executing program 34 (id=186): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}], 0x1, 0xc044) 7m23.494268238s ago: executing program 0 (id=1699): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0x0) fsopen(0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRESDEC=0x0, @ANYBLOB="ff0f"], 0x48) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = dup(r4) ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, &(0x7f0000000180)={{0x4, 0x9}, {0x4, 0x5}, 0xaee3, 0x7}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) 7m22.214243505s ago: executing program 0 (id=1702): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001180)={0x2c, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004884}, 0xc0) 7m21.719923307s ago: executing program 0 (id=1707): r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000007280)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x1, 0x0) 7m20.334333145s ago: executing program 0 (id=1708): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote}}}}) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x10000, 0x2, 0xdddd1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) iopl(0x3) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000080)={{{@in=@broadcast, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x40000000000000, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10000, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) sendmmsg(r6, &(0x7f0000000180), 0x400000000000077, 0x7600) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x480, &(0x7f0000000140), 0x1, 0x765, &(0x7f0000000800)="$eJzs3c1rHOUfAPDvbJKmv7Q/E0HQegoIGijdmBpbBQ8VDyJYKOjZdtlsQ80mW7Kb0oSAFhG8CCoeBL307Eu9efXlqv+FB2mpmhYrHiQyu7PpNtltN22SRffzgWmf55nZPPPdZ2aeZ/cZdgLoW+PpP7mIQxHxQRIxmpUnETFUTw1GnGhsd2tttZguSayvv/ZbUt/m5tpqMVpekzqQZR6LiO/fjTic21pvdXllrlAulxaz/GRt/vxkdXnlyLn5wmxptrRwbGp6+ujxZ48f27lY//hp5eC1D19+6qsTf73z6JX3f0jiRBzM1rXGsVPGYzx7T4bSt/AOL+10ZT2W9HoHuC/pqTnQOMvjUIzGQD0FAPyXvRUR6wBAn0n0/wDQZ5rfA9xcWy02l95+I7G3rr8YEfsb8TfnNxtrBrM5u/31edCRm0k2M9KYzEwiYmwH6h+PiM++eeOLdIldmocEaOftSxFxZmx86/U/2XLPwnY93cU245vyrn+wd75Nxz/PtRv/5TbGP3HH+KdhuM25ez/uff7nru5ANR2l478XWu5tu9USf2ZsIMv9vz7mG0rOniuX0mvbQxExEUPDaX7qLnVM3Pj7Rqd1reO/3z968/O0/vT/21vkrg4O3/mamUKt8CAxt7p+KeLxwXbxJxvtn7Rp/7TsVJd1vPL8e592WpfGn8bbXLbGv7vWL0c82bb9b9/Rltz1/sTJ+uEw2Two2vj6509G2pUf2dT+6ZLW3/wssBfS9h+5e/xjSev9mtXt1/Hj5dHvOq27d/ztj/99yev19L6s7GKhVlucitiXvLq1/Ojt1zbzze3T+CeeaH/+bz7+11v2If1MeKbL+Aev/frl/ce/u9L4Z7bV/ttPXLk1N9Cp/u7af7qemshKurn+dbuDD/LeAQAAAAAAAAAAAAAAAAAAAAAAAEC3chFxMJJcfiOdy+XzjWd4PxIjuXKlWjt8trK0MBP1Z2WPxVCu+VOXoy2/hzqV/R5+M390U/6ZiHg4Ij4e/l89ny9WyjO9Dh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMgc6PP8/9ctwr/cOANg1+3u9AwDAntP/A0D/0f8DQP/R/wNA/9H/A0D/0f8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwy06dPJku63+urRbT/MyF5aW5yoUjM6XqXH5+qZgvVhbP52crldlyKV+szN/r75UrlfPTsbB0cbJWqtYmq8srp+crSwu10+fmC7Ol06WhPYkKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALanurwyVyiXS4sSEhISG4leX5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/h3+CQAA///Q6StZ") r8 = syz_open_procfs(0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r8, 0x541b, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 7m15.695050661s ago: executing program 0 (id=1716): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) unlink(0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r9 = socket$packet(0x11, 0x3, 0x300) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r10}, 0x10) setsockopt$packet_fanout(r9, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000002040)=[{0x6, 0x8, 0x8}]}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r8}]}, 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000068000100030000000400008000000000000000000c00020002000000fa0000009af6b176c34fb2a3e7c62095f61e9cba440d"], 0x24}}, 0x4000) 7m13.954451132s ago: executing program 0 (id=1721): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) unshare(0x4040600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x83ff, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8, @ANYRESDEC, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYRES8, @ANYRES32, @ANYRES8, @ANYRESOCT, @ANYRESDEC, @ANYRES8, @ANYRES8], 0xff, 0x1f1, &(0x7f0000000440)="$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") getresgid(0x0, 0x0, &(0x7f0000001500)) syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x42004, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x159080, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) chdir(0x0) rmdir(&(0x7f00000001c0)='./file0\x00') 6m58.683529808s ago: executing program 35 (id=1721): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) unshare(0x4040600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x83ff, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8, @ANYRESDEC, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYRES8, @ANYRES32, @ANYRES8, @ANYRESOCT, @ANYRESDEC, @ANYRES8, @ANYRES8], 0xff, 0x1f1, &(0x7f0000000440)="$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") getresgid(0x0, 0x0, &(0x7f0000001500)) syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x42004, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x159080, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) chdir(0x0) rmdir(&(0x7f00000001c0)='./file0\x00') 9.492330867s ago: executing program 8 (id=4120): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9.027694839s ago: executing program 8 (id=4123): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) r5 = socket(0x840000000002, 0x3, 0xff) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) 7.765468617s ago: executing program 8 (id=4128): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b1efd036d7af273bce36015779c4cef58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be2661f2a395e41f7e31a8021e00b00104e0801d4de36e5fdc6c42a7b3ff13f2360a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694dff0f0000000000003a45404b04bf97c4fea679c032b363956cd8bac9626b5db1b07a0bd7cc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7f9be8173a9639a79fae885d05afe042c0e7821d406c967379e7521292d24d6c8034f2fc7c855a8945e9bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d736acb2f206fc538450a676d71c01175b8454eb92567e8f8a707b590d7219288e23ee0800000000000010a49fc8f4ff0300000000000000000000cb947d6017ad27714772ad790af252e648ef8c313c604324f5b306000000000000cf327a8f5dd89315b8c8650a70162bba30ad7804fa4140f1a754ffff000000ab744d306619dfb3a37d897662bee00189f43da46a908a235c84cbad335fd1d2f2ef93a6a70c8b8ece0e243eab05a34ab0a7e7e497065e5e282e284f8d5e8852a265d528075214af000000000070d42182d8f3a347d48289a824e5b7b238e27263a23c0b865f75331d888c72df1da4b290582f00024227f03204add786a87b23ceb17c25810e769fe2d6a7bd8e504843b66b1a8c7b364bd2194ba9c8f60ac0c9b18d8c1b9e1a736825c91b4dff0000c1c5dcffa295c2930000000000235d84b0193a5ea7c77cdb7de9ce1a59ab4158097b4dd13ebfaf4425c6855530b56a3320d85c8fe85f667998b1a7e589f486c107761108e4e230419fd27b6ad9c10b25c6b6ed84badbb970dcf133279dd355e41de944564bdab99c5c712a9fbc8e9691c775bb94f746505e1e748cf1710d52468b4b1625ce21612ed5e807dfb5f19f3267e5366b2c0b2a0be49ae476263c9407ac6c596bf3cf66204984f5aebf93d1caa220ea6969cea852fe9a7d1eee13f1f48722a69ad9fb850bd093a302b9250245900ad5c8e5f20ddf77ee3d5a168964fad1aa7347d36c502d02b1d96d753ef6fc354fc126070060c65c147651fca62c0a06939f40c90ebc3042e753fe91b5770b24f25c558736dd7e1e9fb214cbb04c5c6ee4c970b320ba6fb6ef4615f4092de54c519f4622e1224153463ea80248a45a95a189958f586d606dcaa9aac656cf95a2d35225cfb0e6f47486d5cbb04a590116d4de92e203e107d68728a189b0d537d2442beab2f8ce7b2dd357200dcd139e47267012fc2a2b6bad79be42a83b9d1ddaccbe0139f16ca1b9bc1103000000ed1ece54cfdbe04670bee9b42fccdc42033997e2e700b6edb2b49b5f2f6001ee0a9e5d1bee199ce9124a5cb479040000000000000049ead5b02d5ea1dcf6cdcf332fe94b3c1932d8d391754774a32c9b7e6ca4023bce2c7281d27a2cb62383ab3a3bb535650fbfb96c89936855eb7a485698f0d20c3eedd6123ef8f218d52ea2c346f80acb8b9a71856d2f2d1a7c6f45ee127b6a1d1ac1e243ed02e49e8aafe835919564af915965a050c37ceff855bd2dec3452c7c38f5dbf1ff1ff00020000000000006a1a029ea6540b40b2f797813af2c7d4ed235c2dc5f1dbbfcc52b2f55fd3f9f100c4891d0cb4c10ed01489bf235c45822594842da1b411346297a40bbf221bbf63ad3822575dcc01a3c34b5aa4e3750400000000000000fc0fd9c746cf0ed4b0343d00a154e6a869346256ffbd666a34414ab0f40bec45b1c24f02ac9bc20e69201968537dd4dc61323c8b6d3643183631664eeca616696fb30fe89c8bdb15037c801fca4a9c220fec5d14582a00b62548ddf2599e5ffc5330cefb8903d276eae21b0b4b20100ead8256636c7e754185e815dd21445cc965a0526da38021a3e540949494ef3041cfa5067f556a0af5c19d27ff4f61fa7762d7963c96853709e773f14c47eef784cb145ae9d6d37fc7b5d83e05ac773fcc429eae6826a9d207d4c39df8eed9cc2ae3f68df1c6495a82d02939b448bf8038521057714e6e644d633d2abe9e0b0025d16b7eff573f78364ed70a62a7b1e55311dc0193d47f9ecc8c7ad268dc6e2e75f8cc83315411bd6c6b88e1850ee757ac2f9e4d6ac510003717d5847a19e750db92d33d6bdc434d0b52b2eb4b1790459e35122f46b205120a54bf657da9fd55d43a89e333481de468f5984a69509e9eac7a5b39c004396e8cb3ab037fd62fa43f259f13ebc4b590e9ea07ea37689049c799cd444d45dabe3e3cf086768daa6816c37793d17a284d2828f5eab2d3d0bedd5334b7bb4c983fa9cd4bd86f0ad227901e83ef4871695380d25bea2929fa66382af6ddb89917ab100046151bd08fce74247955247daa1ea75139b9ce3771526503c7db3a4b3ff39301986c1fd9b5c42d39e768946c9a7ee8dd081bfb6ea5fa132ebdbe72d02ce9f2000000006f63ae8311afc4943c963d39e42c425fe268892f654febdaee43e95b5ae6749275e1ad8b8b279e1ae296e03a8d9386c8e199dc1f00000008000000000000000026c43493c622f041b47d329b248e8ccd92e9b17007ba2578eefcb59f50343722e6cba3be72fd037eb5fa243a395b5c83376a14414b32c2e8a33de8000000003927da2bec76f4e15c8bf3715c5bfe7b3617d0fcf9b5861554b5b76b8ae69c644a48931306a16cff8a38ea95553867e2c5fb1e99b1802e616345871b4611627874cfbe30fa5793c873ae6f75427f3eeda690147b9615b096d967c2d7f5ddf725f0544f8750a5ed04d6ca0f223506fec5d5e65bc67c59459f6113cf41c174a63a17fc79d0b777a0c903c0d2e7f79b6f9ce68a3b72315407040f6a09cadc25e87b7c6b4a3079c7989b4cf04b2581b555fa9a2d74392939b4dbaa9e620e22ab975ac3a5a329157762c1f29075fbdd39451a56b97c90e4fde6782a7c78e7fbe8400054dcafcd51e9eef2d2ea10a3f2636ac2239cef5d8505060de55f472aa89cb8e0188f2ee96cb1ae8dee3c03d0a942c6289cbc4499cea402bd0550520f4aae98c436f18a667ae4efeb5e6a4b1b3f53536145a87578eac8bfc1037acd9d9629449714ed1302714c3519fdd8529b5a86ce2fabb7f285fe73730000000000000000000000000000000073b6f8e9255567374cb2cc80be58fca5b1dc50d85342e56beda632edb7f0a4abcabae102fadfbffecc6b1549315dda8e09d18a7fe5e1574e4fad426b6ca211da39a16dffdd661a20b20c390e00004b002cd83b754c3d32819c823027b3cf8f8da6e63d099712be370bb2aa06debff931ea0a2e7aa0390000000000000045b6720d74c470d49e1e97d1668bb75ad994089d723c2eeaad3f857937fa3df615121a1841ed452dd395788e1a82efda18b41c06c948ef44af8500fbe1ee0828a3b047afb80435935b0f99b381dcf101e9a1593bdaab3bc88c70bf56995a4790a339e1b62516356644ed7df6db419d0976a5169e68e8bd4712552c5ec03f2818c17c4a5bf1e5ecd9bb40074a63c66b61f4779226a99dc5ff9c442e93991570797493569e6f9ccd6d73bcbce41022d4731fc61b6bf0188c74a21471332a546ffe8e9dd738aa2ca782ff5a547a1ad7c348c59ff99d1496404eafcd0333df8f2801d39ad0c82735af24b819efc2fd67c6a53835f0af6a51d1b9123f4b9af7fa2ee2ebf4bc2973cf04380b41aa7577e35bcd28446bfcea19aa85440fe0fdce12e53da7b8842b7527a34d1bcb16fcdc84f2c46a78c01c2ff463cdd0d65267b0822e899e893514583d181208175d08ff75223da84d53656eb7ab46ad442d70c67a6010029329aaf116308d57e77065464eb94ba18e680c2030b4212c135a3c3bbce1e8a6ae2c40886df003880d7aaa47b0f5cc928a95b71df6ba6cc6a65e3c6aa578e3e914e38e163a3c406a732ebd5edbef39356dc79a0bec54e399af1a1d4f6d15534aeabad0c325aa39d39e528b54b70ba3810edebb0c9adfe88e98aa272565bcd1cf5ba54c76282f7d8b5d9017e375335b398f3001e00a315662ad96445ed7db70"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xa, 0x0, 0x0, @void, @value}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f0000000100), 0xfd, 0x48f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() getdents64(0xffffffffffffffff, 0xffffffffffffffff, 0x43) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f008006000000e00001100630277", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) 7.389973779s ago: executing program 5 (id=4133): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)) 7.2562496s ago: executing program 7 (id=4134): timer_create(0x1, 0x0, 0x0) 7.055062471s ago: executing program 5 (id=4135): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x2, 0x3, 0x5, 0x9, 0xa, 0x40}, @mpls={[], @ipv6=@udp={0x2, 0x6, "3d885d", 0xc, 0x11, 0x1, @private0, @mcast2, {[], {0x4e22, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}, 0x42) 6.911404372s ago: executing program 7 (id=4137): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x8, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000880)='sched_process_fork\x00', r0}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5.965318037s ago: executing program 5 (id=4139): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) r5 = socket(0x840000000002, 0x3, 0xff) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) 5.944149917s ago: executing program 7 (id=4140): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'ip6gre0\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, 0x0, 0x0) 5.52299644s ago: executing program 3 (id=4141): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, 0x0, 0xc8) openat$misdntimer(0xffffff9c, &(0x7f0000000180), 0x2000, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x42b02, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, 0x0) socket$inet6(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) shutdown(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) 4.644399084s ago: executing program 5 (id=4142): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000004600)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x48}}, 0x20004010) 4.470041265s ago: executing program 8 (id=4143): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) sendmsg$inet(r2, 0x0, 0x800) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r4, 0x0, 0x0}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001e40)={r3, &(0x7f0000000300), 0x0}, 0x20) 4.326954986s ago: executing program 7 (id=4144): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 4.326230326s ago: executing program 5 (id=4145): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000002640)="d8750288189987d0fabb09b23a67772c615b02000000000000003be32aea3bb1ecc3e0814fb9b752a6d48b1d4d68a4282f76c2c6535ec3ec0fe9843311a22b58a46ed42fac8aa328ab4f578c0a1e080f", 0x50}], 0x1, 0x0, 0x0, 0x20000004}], 0x1, 0x44880) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000141) 4.115505247s ago: executing program 5 (id=4146): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb932"], 0xfdef) 4.105921487s ago: executing program 8 (id=4147): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) 4.068686577s ago: executing program 7 (id=4148): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113d00000000008514000002000000850000008900000095000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.815122239s ago: executing program 8 (id=4149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x2, 0x3, 0x5, 0x9, 0xa, 0x40}, @mpls={[], @ipv6=@udp={0x2, 0x6, "3d885d", 0xc, 0x11, 0x1, @private0, @mcast2, {[], {0x4e22, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}, 0x42) 3.811400559s ago: executing program 7 (id=4150): epoll_create1(0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4010, &(0x7f0000000140)={0xa, 0x4e24, 0xb, @mcast2, 0xc}, 0x1c) socket$kcm(0x10, 0x2, 0x4) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x80, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket(0x40000000015, 0x5, 0x0) socket(0x15, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}, 0x1, 0xba01}, 0x0) 3.6005357s ago: executing program 3 (id=4151): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb, 0xe0000000}, @sadb_x_sa2={0x2, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @private=0xa010102}}]}, 0x60}}, 0x0) socket$pptp(0x18, 0x1, 0x2) 3.334868412s ago: executing program 3 (id=4152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket(0x840000000002, 0x3, 0xff) connect$inet(r5, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) 2.364084098s ago: executing program 6 (id=4154): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) gettid() timer_create(0x0, 0x0, &(0x7f0000000080)) read$FUSE(r1, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0xa, 0x2) epoll_create1(0x80000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.358545017s ago: executing program 3 (id=4155): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x2, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) 2.206971858s ago: executing program 3 (id=4156): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000002640)="d8750288189987d0fabb09b23a67772c615b02000000000000003be32aea3bb1ecc3e0814fb9b752a6d48b1d4d68a4282f76c2c6535ec3ec0fe9843311a22b58a46ed42fac8aa328ab4f578c0a1e080f", 0x50}], 0x1, 0x0, 0x0, 0x20000004}], 0x1, 0x44880) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000141) 2.158915858s ago: executing program 3 (id=4157): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000004600)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x48}}, 0x20004010) 1.392488673s ago: executing program 6 (id=4158): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.267936904s ago: executing program 6 (id=4159): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) sendmsg$inet(r2, 0x0, 0x800) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r4, 0x0, 0x0}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001e40)={r3, &(0x7f0000000300), 0x0}, 0x20) 1.135136464s ago: executing program 6 (id=4160): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113d00000000008514000002000000850000008900000095000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.073851064s ago: executing program 6 (id=4161): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, 0x0, 0xc8) openat$misdntimer(0xffffff9c, &(0x7f0000000180), 0x2000, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x42b02, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, 0x0) socket$inet6(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) shutdown(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) 0s ago: executing program 6 (id=4162): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8]}}]}}]}, 0x9c}}, 0x0) kernel console output (not intermixed with test programs): im2: renamed from eth2 [ 720.694147][T15023] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 720.757506][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 720.926130][ T4267] Bluetooth: hci3: command 0x0419 tx timeout [ 722.418633][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 722.997338][ T4267] Bluetooth: hci3: command 0x0407 tx timeout [ 723.032223][T15023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 723.062118][T10006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 723.080844][T10006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 723.099167][T15023] 8021q: adding VLAN 0 to HW filter on device team0 [ 723.121060][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 723.137014][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 723.166178][ T4475] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.173328][ T4475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 723.190087][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 723.199052][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 723.208614][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 723.223182][ T4475] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.230339][ T4475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.241645][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 723.272629][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 723.281623][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 723.295547][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 723.344288][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 723.364729][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 723.374220][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 723.394455][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 723.410831][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 723.423974][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 723.437176][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 723.459490][T15023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 723.477437][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 723.911603][ T6992] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 723.923616][ T6992] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 723.938465][T15023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 724.216854][T10006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 724.226284][T10006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 724.262169][T10006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 724.278739][T10006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 724.298964][T15023] device veth0_vlan entered promiscuous mode [ 724.308392][T10006] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 724.320109][T10006] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 724.333633][T15023] device veth1_vlan entered promiscuous mode [ 724.382231][T10006] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 724.394076][T10006] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 724.406174][T10006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 724.425251][T10006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 724.444176][T15023] device veth0_macvtap entered promiscuous mode [ 724.464015][T15023] device veth1_macvtap entered promiscuous mode [ 724.500043][T15023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.516825][T15023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.520893][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 724.547620][T15023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.567324][T15023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.577812][T15023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.597302][T15023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.607182][T15023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.638362][T15023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.662079][T15023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 724.688909][T10006] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 724.711276][T10006] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 724.735000][T10006] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 724.761037][T10006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 724.796611][T15023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.812709][T15023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.826923][T15023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.828127][T15226] netlink: 7928 bytes leftover after parsing attributes in process `syz.8.3339'. [ 724.838055][T15023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.858471][T15023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.869783][T15023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.879659][T15023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.894031][T15023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.906378][T15023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 724.919688][T10006] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 724.931137][T10006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 724.956875][T15023] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.975188][T15023] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.996184][T15023] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.005795][T15023] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.099834][T15230] fuse: Unknown parameter 'fd0x0000000000000005' [ 725.177108][T10006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.198571][T10006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.258149][ T6992] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 725.289091][ T4475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.309486][ T4475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.329541][T10006] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 725.557525][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 725.801237][T15244] kvm [15242]: vcpu0, guest rIP: 0x1a3 disabled perfctr wrmsr: 0xc2 data 0x8000 [ 726.521404][ T4335] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 726.530757][ T4256] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 726.548854][ T4256] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 726.557822][ T4256] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 726.566203][ T4256] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 726.575700][ T4269] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 726.583298][ T4256] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 726.601724][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 726.730170][ T4335] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 726.757276][ T4335] usb 6-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 726.783744][ T4335] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 726.827495][ T4335] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 726.877178][T15270] fuse: Unknown parameter 'fd0x0000000000000005' [ 726.888988][ T4335] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 726.910346][ T4335] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 726.957401][ T4335] usb 6-1: Product: syz [ 726.961649][ T4335] usb 6-1: Manufacturer: syz [ 727.010811][ T4335] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 727.108454][T15267] chnl_net:caif_netlink_parms(): no params data found [ 727.501489][T15267] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.637469][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 727.660620][T15267] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.708367][T15267] device bridge_slave_0 entered promiscuous mode [ 727.744914][T15267] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.752466][T15267] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.761399][T15267] device bridge_slave_1 entered promiscuous mode [ 728.426359][T15267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.463587][T15267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.638301][T15267] team0: Port device team_slave_0 added [ 728.680808][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 728.694223][ T4256] Bluetooth: hci1: command 0x0409 tx timeout [ 728.701903][T15267] team0: Port device team_slave_1 added [ 728.709391][T15296] netlink: 7928 bytes leftover after parsing attributes in process `syz.8.3360'. [ 728.841332][T15267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 728.855915][T15267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 728.898145][T15267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 728.918769][T15267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 728.948540][T15267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 729.005617][T15267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 729.125420][ T6992] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.177529][ T4299] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 729.189396][T15267] device hsr_slave_0 entered promiscuous mode [ 729.215422][T15267] device hsr_slave_1 entered promiscuous mode [ 729.233073][T15267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 729.249723][T15267] Cannot create hsr debugfs directory [ 729.277933][ T6992] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.321325][ T4298] usb 6-1: USB disconnect, device number 27 [ 729.372381][ T4299] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 729.404696][ T4299] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 729.424097][ T4299] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 729.443407][ T4299] usb 9-1: config 0 interface 0 has no altsetting 0 [ 729.453393][ T4299] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 729.473683][ T4299] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 729.499131][ T4299] usb 9-1: config 0 interface 0 has no altsetting 0 [ 729.512403][ T4299] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 729.524228][ T4299] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 729.542529][ T4299] usb 9-1: config 0 interface 0 has no altsetting 0 [ 729.552362][ T4299] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 729.569193][ T4299] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 729.596355][ T4299] usb 9-1: config 0 interface 0 has no altsetting 0 [ 729.615460][ T6992] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.630844][ T4299] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 729.662621][ T4299] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 729.717465][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 730.394770][ T6992] team0: Port device netdevsim0 removed [ 730.406392][ T6992] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.496636][ T4299] usb 9-1: config 0 interface 0 has no altsetting 0 [ 730.517428][ T4299] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 730.526369][ T4299] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 730.543598][ T4299] usb 9-1: config 0 interface 0 has no altsetting 0 [ 730.577115][ T4299] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 730.595442][ T4299] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 730.637172][ T4299] usb 9-1: config 0 interface 0 has no altsetting 0 [ 730.645243][ T4299] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 730.663234][T15319] random: crng reseeded on system resumption [ 730.669721][ T4299] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 730.691625][ T4299] usb 9-1: config 0 interface 0 has no altsetting 0 [ 730.718480][ T4299] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 730.737326][ T4299] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 730.756174][ T4299] usb 9-1: Product: syz [ 730.764039][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 730.771553][ T4256] Bluetooth: hci1: command 0x041b tx timeout [ 730.779235][ T4299] usb 9-1: Manufacturer: syz [ 730.783975][ T4299] usb 9-1: SerialNumber: syz [ 730.807609][ T4299] usb 9-1: config 0 descriptor?? [ 730.831348][ T4299] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 731.351668][ T4341] usb 9-1: USB disconnect, device number 18 [ 731.528901][ T4341] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 731.706965][ T6992] tipc: Left network mode [ 731.798045][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 732.840886][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 732.848419][ T4256] Bluetooth: hci1: command 0x040f tx timeout [ 733.877558][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 734.581475][ T4299] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 734.920799][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 734.939745][ T4256] Bluetooth: hci1: command 0x0419 tx timeout [ 735.449101][T15267] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 735.469583][T15267] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 735.539181][ T4299] usb 6-1: config 0 has an invalid interface number: 32 but max is 0 [ 735.557488][ T4299] usb 6-1: config 0 has no interface number 0 [ 735.566070][ T4299] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 735.593306][ T4299] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.632371][ T4299] usb 6-1: Product: syz [ 735.662760][ T4299] usb 6-1: Manufacturer: syz [ 735.672883][ T4299] usb 6-1: SerialNumber: syz [ 735.708369][ T4299] usb 6-1: config 0 descriptor?? [ 735.718294][T15267] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 735.743211][T15267] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 735.957434][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 736.173153][ T6992] device hsr_slave_0 left promiscuous mode [ 736.186599][ T6992] device hsr_slave_1 left promiscuous mode [ 736.211449][ T6992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 736.234938][ T6992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 736.258644][ T6992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 736.292863][ T6992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 736.318096][ T6992] device bridge_slave_1 left promiscuous mode [ 736.354286][ T6992] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.433111][ T6992] device bridge_slave_0 left promiscuous mode [ 736.440875][ T6992] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.584000][ T6992] device dummy0 left promiscuous mode [ 736.617920][ T6992] device veth0_macvtap left promiscuous mode [ 736.624152][ T6992] device veth1_vlan left promiscuous mode [ 736.640501][ T6992] device veth0_vlan left promiscuous mode [ 736.997321][ T4256] Bluetooth: hci1: command 0x0407 tx timeout [ 737.000667][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 737.270077][ T6992] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 737.381108][ T4298] usb 6-1: USB disconnect, device number 28 [ 738.037432][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 738.272765][ T6992] team0 (unregistering): Port device team_slave_1 removed [ 738.333490][ T6992] team0 (unregistering): Port device team_slave_0 removed [ 738.417612][ T4341] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 738.438844][ T6992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 738.547659][ T6992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 738.637454][ T4341] usb 8-1: Using ep0 maxpacket: 8 [ 738.660299][ T4341] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 738.691039][ T4341] usb 8-1: config 0 has no interfaces? [ 738.713196][ T4341] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 738.736349][ T4341] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.754995][ T4341] usb 8-1: Product: syz [ 738.762512][ T4341] usb 8-1: Manufacturer: syz [ 738.776447][ T4341] usb 8-1: SerialNumber: syz [ 738.789835][ T4341] usb 8-1: config 0 descriptor?? [ 739.031778][ T4298] usb 8-1: USB disconnect, device number 15 [ 739.080521][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 740.117479][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 740.434473][T15474] binder: 15473:15474 ioctl c0306201 0 returned -14 [ 740.736946][ T6992] bond0 (unregistering): Released all slaves [ 740.855877][T15415] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3391'. [ 740.943223][T15484] tipc: Enabling of bearer rejected, media not registered [ 741.058948][T15267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.090623][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 741.099254][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 741.132384][T15267] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.157153][T15486] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 741.166951][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 741.184026][T15486] syzkaller0: linktype set to 0 [ 741.257391][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 741.281691][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 741.319237][ T5251] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.326795][ T5251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.352182][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 741.414521][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 741.425177][ T5251] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.432351][ T5251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.451211][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 741.468923][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 741.505010][T10010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 741.548361][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 741.607131][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 741.658927][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 741.689199][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 741.730747][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 741.762673][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 741.785976][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 741.813740][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 741.839980][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 741.860133][T15267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 741.887293][T15509] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3422'. [ 742.046240][ T4296] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 742.197497][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 742.250960][ T4296] usb 8-1: Using ep0 maxpacket: 16 [ 742.274987][ T4296] usb 8-1: config index 0 descriptor too short (expected 16456, got 72) [ 742.316425][ T4296] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 742.328449][T15267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 742.336672][ T4296] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 742.346112][T10010] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 742.354163][T10010] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 742.363821][ T4296] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 742.381031][ T4296] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 742.393500][ T4296] usb 8-1: config 0 has no interface number 0 [ 742.403623][ T4296] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 742.415152][ T4296] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 742.430449][ T4296] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 742.443818][ T4296] usb 8-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 742.461515][ T4296] usb 8-1: config 0 interface 125 has no altsetting 0 [ 742.469758][ T4296] usb 8-1: config 0 interface 125 has no altsetting 2 [ 742.498750][ T4296] usb 8-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 742.536607][ T4296] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.546509][ T4296] usb 8-1: Product: syz [ 742.551314][ T4296] usb 8-1: Manufacturer: syz [ 742.556077][ T4296] usb 8-1: SerialNumber: syz [ 742.577078][ T4296] usb 8-1: config 0 descriptor?? [ 742.592155][ T4296] usb 8-1: selecting invalid altsetting 2 [ 742.989757][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 743.002515][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 743.051627][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 743.065441][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 743.087136][T15267] device veth0_vlan entered promiscuous mode [ 743.105765][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 743.117655][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 743.144746][T15267] device veth1_vlan entered promiscuous mode [ 743.163540][T15553] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input21 [ 743.193548][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 743.211532][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 743.239033][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 743.272605][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 743.282482][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 743.293968][T15267] device veth0_macvtap entered promiscuous mode [ 743.318342][T15267] device veth1_macvtap entered promiscuous mode [ 743.339389][T15267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 743.351271][T15267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.362800][T15267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 743.373390][T15267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.397300][T15267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 743.412487][ T4296] parport0: fix this legacy no-device port driver! [ 743.416348][T15267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.442688][T15267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 743.456932][T15267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.474216][T15267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 743.486227][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 743.500000][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 743.509856][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 743.520151][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 743.551848][T15267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.579147][T15267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.597279][T15267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.623245][T15267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.627365][ T4341] usb 8-1: USB disconnect, device number 16 [ 743.643521][T15267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.667463][T15267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.686751][T15267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.697440][ T22] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 743.725407][T15267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.759007][T15267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 743.780911][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 743.798249][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 743.836529][T15267] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.850874][T15267] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.859833][T15267] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.868690][T15267] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.907833][ T22] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 743.932876][ T22] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 743.952765][ T22] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 743.955395][T15560] device syzkaller1 entered promiscuous mode [ 743.979966][ T22] usb 9-1: config 0 interface 0 has no altsetting 0 [ 744.006859][ T22] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 744.023414][ T22] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 744.036033][ T22] usb 9-1: config 0 interface 0 has no altsetting 0 [ 744.043894][T10010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.069042][T10010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.087640][ T22] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 744.097630][ T4475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.106039][ T4475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.136438][ T22] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 744.157299][ T22] usb 9-1: config 0 interface 0 has no altsetting 0 [ 744.173901][ T22] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 744.193643][ T22] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 744.205240][ T22] usb 9-1: config 0 interface 0 has no altsetting 0 [ 744.223675][ T22] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 744.230818][ T6992] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 744.242396][ T6992] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 744.251642][ T22] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 744.277448][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 744.294903][ T22] usb 9-1: config 0 interface 0 has no altsetting 0 [ 744.319034][ T22] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 744.336754][ T22] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 744.387421][ T22] usb 9-1: config 0 interface 0 has no altsetting 0 [ 744.420540][ T22] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 744.450035][ T22] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 744.491234][ T22] usb 9-1: config 0 interface 0 has no altsetting 0 [ 744.521132][ T22] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 744.547002][ T22] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 744.577031][ T22] usb 9-1: config 0 interface 0 has no altsetting 0 [ 744.596889][ T22] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 744.613437][ T22] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 744.643056][ T22] usb 9-1: Product: syz [ 744.647346][ T22] usb 9-1: Manufacturer: syz [ 744.670913][ T22] usb 9-1: SerialNumber: syz [ 744.690718][ T22] usb 9-1: config 0 descriptor?? [ 744.722222][ T22] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 744.945303][ T22] usb 9-1: USB disconnect, device number 19 [ 744.964286][ T22] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 745.317546][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 745.600328][T15619] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3458'. [ 745.609773][T15619] netlink: 'syz.5.3458': attribute type 7 has an invalid length. [ 745.619389][T15619] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3458'. [ 745.633767][T15619] device erspan0 entered promiscuous mode [ 745.640861][T15619] device batadv_slave_1 entered promiscuous mode [ 745.649419][T10010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 745.900042][ T22] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 746.219189][ T22] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 746.235123][ T22] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 746.244689][ T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.357421][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 746.525362][ T22] usb 7-1: config 0 descriptor?? [ 746.717008][ T22] pwc: Askey VC010 type 2 USB webcam detected. [ 746.976239][ T22] pwc: send_video_command error -71 [ 747.002019][ T22] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 747.037376][ T22] Philips webcam: probe of 7-1:0.0 failed with error -71 [ 747.083760][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.090159][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.137582][ T22] usb 7-1: USB disconnect, device number 28 [ 747.397525][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 747.567551][ T22] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 747.704689][T15665] loop8: detected capacity change from 0 to 512 [ 747.716386][ T4335] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 747.801320][T15665] EXT4-fs (loop8): Test dummy encryption mode enabled [ 747.810967][T15665] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal [ 748.111183][ T4335] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 748.167104][ T4335] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 748.297361][ T4335] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 748.336364][ T4335] usb 6-1: config 0 interface 0 has no altsetting 0 [ 748.369195][ T4335] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 748.386496][ T4335] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 748.389536][ T22] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 748.403511][ T4335] usb 6-1: config 0 interface 0 has no altsetting 0 [ 748.437468][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 748.466427][ T22] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 748.476504][ T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.535671][ T22] usb 7-1: config 0 descriptor?? [ 748.541324][ T4335] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 748.553920][ T22] pwc: Askey VC010 type 2 USB webcam detected. [ 748.556966][ T4335] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 748.576627][ T4335] usb 6-1: config 0 interface 0 has no altsetting 0 [ 748.589373][ T4335] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 748.623737][ T4335] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 748.670728][ T4335] usb 6-1: config 0 interface 0 has no altsetting 0 [ 748.692085][ T4335] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 748.723358][ T4335] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 748.743899][ T4335] usb 6-1: config 0 interface 0 has no altsetting 0 [ 748.797783][ T4335] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 748.831758][ T4335] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 748.850008][ T22] pwc: send_video_command error -71 [ 748.855903][ T22] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 748.863594][ T22] Philips webcam: probe of 7-1:0.0 failed with error -71 [ 748.873540][ T22] usb 7-1: USB disconnect, device number 29 [ 748.902887][ T4335] usb 6-1: config 0 interface 0 has no altsetting 0 [ 749.477448][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 749.746316][ T4335] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 749.787542][ T4335] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 749.807271][ T4335] usb 6-1: config 0 interface 0 has no altsetting 0 [ 749.825992][ T4335] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 749.847872][ T4335] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 749.863161][ T4335] usb 6-1: config 0 interface 0 has no altsetting 0 [ 749.873057][ T4335] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 749.915758][ T4335] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 749.934694][ T4335] usb 6-1: Product: syz [ 749.938970][ T4335] usb 6-1: Manufacturer: syz [ 749.943593][ T4335] usb 6-1: SerialNumber: syz [ 749.978655][ T4335] usb 6-1: config 0 descriptor?? [ 749.994292][ T4335] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 750.225698][ T4299] usb 6-1: USB disconnect, device number 29 [ 750.251143][ T4299] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 750.517418][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 751.557700][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 752.597519][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 752.627465][ T22] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 752.818163][ T22] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 752.838873][ T22] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 752.857408][ T22] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 752.881518][ T22] usb 9-1: config 0 interface 0 has no altsetting 0 [ 752.898534][ T22] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 752.920049][ T22] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 752.933526][ T22] usb 9-1: config 0 interface 0 has no altsetting 0 [ 752.942202][ T22] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 752.951361][ T22] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 752.964113][ T22] usb 9-1: config 0 interface 0 has no altsetting 0 [ 752.973162][ T22] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 752.996118][ T22] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 753.017293][ T22] usb 9-1: config 0 interface 0 has no altsetting 0 [ 753.025071][ T22] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 753.034735][ T22] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 753.046670][ T22] usb 9-1: config 0 interface 0 has no altsetting 0 [ 753.060171][ T22] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 753.069324][ T22] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 753.080288][ T22] usb 9-1: config 0 interface 0 has no altsetting 0 [ 753.093559][ T22] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 753.117567][ T22] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 753.134306][ T22] usb 9-1: config 0 interface 0 has no altsetting 0 [ 753.143476][ T22] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 753.153099][ T22] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 753.164114][ T22] usb 9-1: config 0 interface 0 has no altsetting 0 [ 753.173853][ T22] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 753.183097][ T22] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 753.196442][ T22] usb 9-1: Product: syz [ 753.202630][ T22] usb 9-1: Manufacturer: syz [ 753.207781][ T22] usb 9-1: SerialNumber: syz [ 753.222892][ T22] usb 9-1: config 0 descriptor?? [ 753.250911][ T22] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 753.387476][ T128] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 753.475477][ T4328] usb 9-1: USB disconnect, device number 20 [ 753.529439][ T4328] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 753.637501][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 754.378575][ T128] usb 8-1: config 0 has an invalid interface number: 32 but max is 0 [ 754.386712][ T128] usb 8-1: config 0 has no interface number 0 [ 754.395502][ T128] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 754.404800][ T128] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.413780][ T128] usb 8-1: Product: syz [ 754.418262][ T128] usb 8-1: Manufacturer: syz [ 754.423926][ T128] usb 8-1: SerialNumber: syz [ 754.430555][ T128] usb 8-1: config 0 descriptor?? [ 754.677539][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 755.525343][ T128] usb 8-1: USB disconnect, device number 17 [ 755.717462][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 756.757430][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 756.932882][ T4298] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 757.117381][ T4298] usb 8-1: Using ep0 maxpacket: 8 [ 757.126251][ T4298] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 757.145046][ T4298] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 757.188095][ T4298] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 757.212504][ T4298] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.222922][ T4298] usb 8-1: Product: syz [ 757.227149][ T4298] usb 8-1: Manufacturer: syz [ 757.231889][ T4298] usb 8-1: SerialNumber: syz [ 757.251767][ T4298] usb 8-1: config 0 descriptor?? [ 757.464365][ T128] usb 8-1: USB disconnect, device number 18 [ 757.797547][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 758.454457][ T128] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 758.663547][ T128] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 758.683135][ T128] usb 8-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 758.697074][ T128] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.726192][ T128] usb 8-1: config 0 descriptor?? [ 758.738661][ T128] usb 8-1: bad CDC descriptors [ 758.746282][ T128] usb 8-1: bad CDC descriptors [ 758.837574][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 758.949338][ T128] usb 8-1: USB disconnect, device number 19 [ 759.632164][ T14] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 759.861541][ T14] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 759.906208][ T14] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 759.935938][ T14] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 759.954434][ T14] usb 7-1: config 0 interface 0 has no altsetting 0 [ 759.976060][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 760.001183][ T14] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 760.011679][ T14] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 760.020642][ T14] usb 7-1: config 0 interface 0 has no altsetting 0 [ 760.042399][ T14] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 760.854571][ T14] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 760.863668][ T14] usb 7-1: config 0 interface 0 has no altsetting 0 [ 760.886925][ T14] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 760.908641][ T14] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 760.918207][ T14] usb 7-1: config 0 interface 0 has no altsetting 0 [ 760.953578][ T14] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 760.968696][ T14] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 760.980573][ T14] usb 7-1: config 0 interface 0 has no altsetting 0 [ 760.997536][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 760.999783][ T14] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.014834][ T14] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 761.023898][ T14] usb 7-1: config 0 interface 0 has no altsetting 0 [ 761.032589][ T14] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.042760][ T14] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 761.051703][ T14] usb 7-1: config 0 interface 0 has no altsetting 0 [ 761.059720][ T14] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.073528][ T14] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 761.093763][ T14] usb 7-1: config 0 interface 0 has no altsetting 0 [ 761.105492][ T14] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 761.114809][ T14] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 761.123488][ T14] usb 7-1: Product: syz [ 761.127716][ T14] usb 7-1: Manufacturer: syz [ 761.132388][ T14] usb 7-1: SerialNumber: syz [ 761.138984][ T14] usb 7-1: config 0 descriptor?? [ 761.175605][ T14] yurex 7-1:0.0: Could not find endpoints [ 761.331786][T15819] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3533'. [ 761.343848][T15819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 761.400992][ T14] usb 7-1: USB disconnect, device number 30 [ 761.472380][T15819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.673272][T15880] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3553'. [ 761.693101][T15880] device bridge_slave_1 left promiscuous mode [ 761.702797][T15880] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.719516][T15880] device bridge_slave_0 left promiscuous mode [ 761.727837][T15880] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.037674][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 763.077589][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 764.117449][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 764.617376][ T22] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 765.157466][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 765.537505][ T22] usb 6-1: Using ep0 maxpacket: 16 [ 765.551596][ T22] usb 6-1: config index 0 descriptor too short (expected 10258, got 18) [ 765.564613][ T22] usb 6-1: config 13 has too many interfaces: 47, using maximum allowed: 32 [ 765.585308][ T22] usb 6-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 765.595880][ T22] usb 6-1: config 13 has 0 interfaces, different from the descriptor's value: 47 [ 765.639567][ T22] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 765.658115][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.666162][ T22] usb 6-1: Product: syz [ 765.677173][ T22] usb 6-1: Manufacturer: syz [ 765.681999][ T22] usb 6-1: SerialNumber: syz [ 765.832698][ T14] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 765.911630][T15962] netlink: 'syz.7.3582': attribute type 1 has an invalid length. [ 765.932485][ T22] usb 6-1: USB disconnect, device number 30 [ 766.012073][T15962] 8021q: adding VLAN 0 to HW filter on device bond1 [ 766.029125][ T14] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 766.047376][ T14] usb 7-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 766.056927][T15965] bond1: (slave gretap1): making interface the new active one [ 766.059723][ T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.074914][T15965] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 766.086259][ T6992] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 766.096512][ T14] usb 7-1: config 0 descriptor?? [ 766.114793][ T14] rndis_wlan: probe of 7-1:0.0 failed with error -22 [ 766.122246][ T14] rndis_host: probe of 7-1:0.0 failed with error -22 [ 766.139148][T15962] device vlan2 entered promiscuous mode [ 766.164726][T15962] device bond1 entered promiscuous mode [ 766.174069][T15962] device gretap1 entered promiscuous mode [ 766.198784][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 766.324807][ T14] usb 7-1: USB disconnect, device number 31 [ 767.779170][T15995] SET target dimension over the limit! [ 767.788700][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 768.097469][ T4335] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 768.262126][T16014] netlink: 'syz.5.3598': attribute type 4 has an invalid length. [ 768.287309][ T4335] usb 9-1: Using ep0 maxpacket: 16 [ 768.308675][ T4335] usb 9-1: config index 0 descriptor too short (expected 16456, got 72) [ 768.329014][ T4335] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 768.366062][ T4335] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 768.394717][ T4335] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 768.433646][ T4335] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 768.453055][ T4335] usb 9-1: config 0 has no interface number 0 [ 768.473426][ T4335] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 768.497525][ T4335] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 768.511791][ T4335] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 768.533075][ T4335] usb 9-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 768.546541][ T4335] usb 9-1: config 0 interface 125 has no altsetting 0 [ 768.554963][ T4335] usb 9-1: config 0 interface 125 has no altsetting 2 [ 768.570948][ T4335] usb 9-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 768.580395][ T4335] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.588642][ T4335] usb 9-1: Product: syz [ 768.593055][ T4335] usb 9-1: Manufacturer: syz [ 768.597865][ T4335] usb 9-1: SerialNumber: syz [ 768.616829][ T4335] usb 9-1: config 0 descriptor?? [ 768.641897][ T4335] usb 9-1: selecting invalid altsetting 2 [ 768.838028][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 768.857432][ T14] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 769.050151][ T14] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 769.068795][ T14] usb 8-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 769.078317][ T14] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.098325][ T14] usb 8-1: config 0 descriptor?? [ 769.114326][ T14] rndis_wlan: probe of 8-1:0.0 failed with error -22 [ 769.122234][ T14] rndis_host: probe of 8-1:0.0 failed with error -22 [ 769.313710][ T4300] usb 8-1: USB disconnect, device number 20 [ 769.450908][ C0] usb 9-1: async_complete: urb error -71 [ 769.458284][ T4335] get_1284_register: usb error -71 [ 769.463506][ T4335] uss720: probe of 9-1:0.125 failed with error -71 [ 769.489174][ T4335] usb 9-1: USB disconnect, device number 21 [ 769.877785][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 770.917447][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 771.659113][T16043] netlink: 'syz.6.3608': attribute type 1 has an invalid length. [ 771.684412][T16043] 8021q: adding VLAN 0 to HW filter on device bond1 [ 771.734832][T16043] bond1: (slave gretap1): making interface the new active one [ 771.753871][T16043] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 771.797582][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 771.957465][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 771.972624][ T26] kauditd_printk_skb: 38 callbacks suppressed [ 771.972640][ T26] audit: type=1326 audit(1733224922.349:3174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16056 comm="syz.6.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209cd7ff19 code=0x7ffc0000 [ 772.036693][ T26] audit: type=1326 audit(1733224922.349:3175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16056 comm="syz.6.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209cd7ff19 code=0x7ffc0000 [ 772.099799][ T26] audit: type=1326 audit(1733224922.349:3176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16056 comm="syz.6.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f209cd7ff19 code=0x7ffc0000 [ 772.119313][T16064] netlink: 'syz.7.3614': attribute type 12 has an invalid length. [ 772.142902][ T26] audit: type=1326 audit(1733224922.349:3177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16056 comm="syz.6.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209cd7ff19 code=0x7ffc0000 [ 772.217898][ T26] audit: type=1326 audit(1733224922.349:3178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16056 comm="syz.6.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209cd7ff19 code=0x7ffc0000 [ 772.257273][ T26] audit: type=1326 audit(1733224922.349:3179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16056 comm="syz.6.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f209cd7ff19 code=0x7ffc0000 [ 772.286939][ T26] audit: type=1326 audit(1733224922.349:3180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16056 comm="syz.6.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209cd7ff19 code=0x7ffc0000 [ 772.320233][ T26] audit: type=1326 audit(1733224922.349:3181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16056 comm="syz.6.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209cd7ff19 code=0x7ffc0000 [ 772.437923][ T26] audit: type=1326 audit(1733224922.399:3182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16056 comm="syz.6.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f209cd7ff19 code=0x7ffc0000 [ 772.461300][ T26] audit: type=1326 audit(1733224922.399:3183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16056 comm="syz.6.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209cd7ff19 code=0x7ffc0000 [ 772.758064][ T22] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 772.997457][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 773.012384][ T22] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 773.157388][ T22] usb 8-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 773.206985][ T22] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.283658][ T22] usb 8-1: config 0 descriptor?? [ 773.323585][ T22] rndis_wlan: probe of 8-1:0.0 failed with error -22 [ 773.363584][ T22] rndis_host: probe of 8-1:0.0 failed with error -22 [ 773.503862][T16088] netlink: 'syz.3.3622': attribute type 1 has an invalid length. [ 773.519015][ T4299] usb 8-1: USB disconnect, device number 21 [ 773.565224][T16088] 8021q: adding VLAN 0 to HW filter on device bond1 [ 773.603559][ T4328] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 773.605116][T16091] bond1: (slave gretap1): making interface the new active one [ 773.624616][T16091] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 773.633804][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 773.797543][ T4328] usb 9-1: Using ep0 maxpacket: 16 [ 773.809965][ T4328] usb 9-1: config index 0 descriptor too short (expected 16456, got 72) [ 773.836352][ T4328] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 773.853438][ T4328] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 773.862539][ T4328] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 773.882866][ T4328] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 773.896604][ T4328] usb 9-1: config 0 has no interface number 0 [ 773.913790][ T4328] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 773.926392][ T4328] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 773.936562][ T4328] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 773.946792][ T4328] usb 9-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 773.961458][ T4328] usb 9-1: config 0 interface 125 has no altsetting 0 [ 773.972947][ T4328] usb 9-1: config 0 interface 125 has no altsetting 2 [ 774.001942][ T4328] usb 9-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 774.014703][ T4328] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.023019][ T4328] usb 9-1: Product: syz [ 774.027754][ T4328] usb 9-1: Manufacturer: syz [ 774.032449][ T4328] usb 9-1: SerialNumber: syz [ 774.037457][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 774.040700][ T4328] usb 9-1: config 0 descriptor?? [ 774.067825][ T4328] usb 9-1: selecting invalid altsetting 2 [ 774.577680][T16114] binder: BINDER_SET_CONTEXT_MGR already set [ 774.583766][T16114] binder: 16113:16114 ioctl 4018620d 20000040 returned -16 [ 775.077444][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 775.521357][ C0] usb 9-1: async_complete: urb error -71 [ 775.527723][ T4328] get_1284_register: usb error -71 [ 775.532932][ T4328] uss720: probe of 9-1:0.125 failed with error -71 [ 775.547623][T16123] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0 [ 775.568586][ T4328] usb 9-1: USB disconnect, device number 22 [ 775.977528][ T4328] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 776.057434][ T4299] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 776.070771][T16142] netlink: 'syz.3.3643': attribute type 4 has an invalid length. [ 776.117465][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 776.180071][ T4328] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 776.197008][ T4328] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 776.223858][ T4328] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.270494][ T4328] usb 6-1: config 0 descriptor?? [ 776.275375][ T4299] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 776.283960][ T4328] pwc: Askey VC010 type 2 USB webcam detected. [ 776.304595][ T4299] usb 8-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 776.324290][ T4299] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.349315][ T4299] usb 8-1: config 0 descriptor?? [ 776.368877][ T4299] rndis_wlan: probe of 8-1:0.0 failed with error -22 [ 776.376448][ T4299] rndis_host: probe of 8-1:0.0 failed with error -22 [ 776.494899][ T4328] pwc: send_video_command error -71 [ 776.504542][T16151] netlink: 'syz.6.3647': attribute type 10 has an invalid length. [ 776.506848][ T4328] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 776.520995][ T4328] Philips webcam: probe of 6-1:0.0 failed with error -71 [ 776.539420][ T4328] usb 6-1: USB disconnect, device number 31 [ 776.578416][ T4298] usb 8-1: USB disconnect, device number 22 [ 776.590985][T16151] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 776.601460][T16151] team0: Failed to send options change via netlink (err -105) [ 776.610830][T16151] team0: Port device netdevsim0 added [ 777.087734][ T4328] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 777.157638][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 777.187368][ T14] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 777.300143][ T4328] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 777.320786][ T4328] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 777.337397][ T4328] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.358879][ T4328] usb 6-1: config 0 descriptor?? [ 777.388559][ T4328] pwc: Askey VC010 type 2 USB webcam detected. [ 777.397509][ T14] usb 7-1: Using ep0 maxpacket: 16 [ 777.405619][ T14] usb 7-1: config index 0 descriptor too short (expected 10258, got 18) [ 777.422829][ T14] usb 7-1: config 13 has too many interfaces: 47, using maximum allowed: 32 [ 777.431829][ T14] usb 7-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 777.442310][ T14] usb 7-1: config 13 has 0 interfaces, different from the descriptor's value: 47 [ 777.474992][ T14] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 777.486549][ T14] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.495169][ T14] usb 7-1: Product: syz [ 777.499970][ T14] usb 7-1: Manufacturer: syz [ 777.504679][ T14] usb 7-1: SerialNumber: syz [ 777.732416][ T4335] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 777.741970][ C0] raw-gadget.1 gadget.6: ignoring, device is not running [ 777.749687][ C0] raw-gadget.1 gadget.6: ignoring, device is not running [ 777.784861][ T4328] pwc: recv_control_msg error -32 req 02 val 2b00 [ 777.796615][ T128] usb 7-1: USB disconnect, device number 32 [ 777.805743][ T4328] pwc: recv_control_msg error -32 req 02 val 2700 [ 777.836992][ T4328] pwc: recv_control_msg error -32 req 02 val 2c00 [ 777.856734][ T4328] pwc: recv_control_msg error -32 req 04 val 1000 [ 777.864994][ T4328] pwc: recv_control_msg error -32 req 04 val 1300 [ 777.894600][ T4328] pwc: recv_control_msg error -32 req 04 val 1400 [ 777.914141][ T4328] pwc: recv_control_msg error -32 req 02 val 2000 [ 777.921608][ T4328] pwc: recv_control_msg error -32 req 02 val 2100 [ 777.940978][ T4335] usb 8-1: Using ep0 maxpacket: 16 [ 777.948746][ T4335] usb 8-1: config index 0 descriptor too short (expected 16456, got 72) [ 777.970728][ T4335] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 777.980648][ T4335] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 777.989207][ T4335] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 777.997760][ T4335] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 778.006690][ T4335] usb 8-1: config 0 has no interface number 0 [ 778.013973][ T4335] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 778.025388][ T4335] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 778.036048][ T4335] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 778.046221][ T4335] usb 8-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 778.059683][ T4335] usb 8-1: config 0 interface 125 has no altsetting 0 [ 778.066511][ T4335] usb 8-1: config 0 interface 125 has no altsetting 2 [ 778.119024][ T4335] usb 8-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 778.135210][ T4335] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.143584][ T4335] usb 8-1: Product: syz [ 778.153083][ T4328] pwc: recv_control_msg error -71 req 02 val 2500 [ 778.162913][ T4335] usb 8-1: Manufacturer: syz [ 778.173667][ T4335] usb 8-1: SerialNumber: syz [ 778.179535][ T4328] pwc: recv_control_msg error -71 req 02 val 2400 [ 778.193747][ T4328] pwc: recv_control_msg error -71 req 02 val 2600 [ 778.197440][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 778.215943][ T4335] usb 8-1: config 0 descriptor?? [ 778.228996][ T4328] pwc: recv_control_msg error -71 req 02 val 2900 [ 778.244450][ T4335] usb 8-1: selecting invalid altsetting 2 [ 778.255848][ T4328] pwc: recv_control_msg error -71 req 02 val 2800 [ 778.266023][ T4328] pwc: recv_control_msg error -71 req 04 val 1100 [ 778.279045][ T4328] pwc: recv_control_msg error -71 req 04 val 1200 [ 778.301427][ T4328] pwc: Registered as video103. [ 778.315969][ T4328] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input22 [ 778.371267][ T4328] usb 6-1: USB disconnect, device number 32 [ 779.237475][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 779.327771][ T4335] get_1284_register timeout [ 779.370862][ T4335] uss720: probe of 8-1:0.125 failed with error -5 [ 779.378011][ C0] usb 8-1: async_complete: urb error -104 [ 779.569127][ T4335] usb 8-1: USB disconnect, device number 23 [ 780.277497][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 781.317474][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 781.507510][T16185] wlan1 speed is unknown, defaulting to 1000 [ 781.514066][T16185] wlan1 speed is unknown, defaulting to 1000 [ 781.521539][T16185] wlan1 speed is unknown, defaulting to 1000 [ 781.521588][T16193] netlink: 'syz.8.3660': attribute type 10 has an invalid length. [ 781.541399][T16199] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 781.553160][T16199] syzkaller0: linktype set to 0 [ 781.559430][T16185] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 781.621576][T16185] wlan1 speed is unknown, defaulting to 1000 [ 781.641160][T16185] wlan1 speed is unknown, defaulting to 1000 [ 781.681762][T16185] wlan1 speed is unknown, defaulting to 1000 [ 781.713298][T16185] wlan1 speed is unknown, defaulting to 1000 [ 781.720893][T16185] wlan1 speed is unknown, defaulting to 1000 [ 782.357407][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 782.499934][T16232] loop7: detected capacity change from 0 to 512 [ 782.594628][T16232] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm syz.7.3668: bg 0: block 5: invalid block bitmap [ 782.685895][T16232] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 782.751583][T16232] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.3668: invalid indirect mapped block 3 (level 2) [ 782.775944][T16232] EXT4-fs (loop7): 1 orphan inode deleted [ 782.799668][T16232] EXT4-fs (loop7): 1 truncate cleaned up [ 782.817129][T16232] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 783.262951][T16248] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 783.285236][T16248] syzkaller0: linktype set to 0 [ 783.397426][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 783.534924][ T26] kauditd_printk_skb: 41 callbacks suppressed [ 783.534971][ T26] audit: type=1326 audit(1733224933.909:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16251 comm="syz.5.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a017ff19 code=0x7ffc0000 [ 783.626171][ T26] audit: type=1326 audit(1733224933.909:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16251 comm="syz.5.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a017ff19 code=0x7ffc0000 [ 783.707960][ T26] audit: type=1326 audit(1733224933.949:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16251 comm="syz.5.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f79a017ff19 code=0x7ffc0000 [ 783.791610][ T26] audit: type=1326 audit(1733224933.949:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16251 comm="syz.5.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a017ff19 code=0x7ffc0000 [ 783.865939][ T26] audit: type=1326 audit(1733224933.949:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16251 comm="syz.5.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a017ff19 code=0x7ffc0000 [ 783.947426][ T26] audit: type=1326 audit(1733224933.949:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16251 comm="syz.5.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f79a017ff19 code=0x7ffc0000 [ 783.990775][ T26] audit: type=1326 audit(1733224934.059:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16251 comm="syz.5.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a017ff19 code=0x7ffc0000 [ 784.088585][ T26] audit: type=1326 audit(1733224934.059:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16251 comm="syz.5.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a017ff19 code=0x7ffc0000 [ 784.126995][ T26] audit: type=1326 audit(1733224934.059:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16251 comm="syz.5.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f79a017ff19 code=0x7ffc0000 [ 784.151657][ T26] audit: type=1326 audit(1733224934.059:3234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16251 comm="syz.5.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79a017ff19 code=0x7ffc0000 [ 784.232979][T15023] EXT4-fs (loop7): unmounting filesystem. [ 784.360958][ T128] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 784.437479][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 785.328046][ T128] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 785.346940][ T128] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 785.356339][ T128] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 785.366185][ T128] usb 7-1: config 0 interface 0 has no altsetting 0 [ 785.376756][ T128] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 785.395991][ T128] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 785.416767][ T128] usb 7-1: config 0 interface 0 has no altsetting 0 [ 785.437865][ T128] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 785.453035][ T128] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 785.477423][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 785.487265][ T128] usb 7-1: config 0 interface 0 has no altsetting 0 [ 785.496364][ T128] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 785.529004][ T128] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 785.545674][ T128] usb 7-1: config 0 interface 0 has no altsetting 0 [ 785.563791][ T128] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 785.577441][ T128] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 785.588605][ T128] usb 7-1: config 0 interface 0 has no altsetting 0 [ 785.597033][ T128] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 785.606257][ T128] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 785.616219][ T128] usb 7-1: config 0 interface 0 has no altsetting 0 [ 785.624598][ T128] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 785.634124][ T128] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 785.644155][ T128] usb 7-1: config 0 interface 0 has no altsetting 0 [ 785.653554][ T128] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 785.662800][ T128] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 785.672892][ T128] usb 7-1: config 0 interface 0 has no altsetting 0 [ 785.682431][ T128] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 785.691853][ T128] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 785.700917][ T128] usb 7-1: Product: syz [ 785.705411][ T128] usb 7-1: Manufacturer: syz [ 785.710195][ T128] usb 7-1: SerialNumber: syz [ 785.727853][ T128] usb 7-1: config 0 descriptor?? [ 785.754269][ T128] yurex 7-1:0.0: Could not find endpoints [ 785.978012][ T128] usb 7-1: USB disconnect, device number 33 [ 786.525027][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 787.558410][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 788.225348][T16299] binder: 16297:16299 ioctl c0306201 0 returned -14 [ 788.852774][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 789.357591][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807d6c9400: rx timeout, send abort [ 789.369608][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807d6c9400: 0x30000: (3) A timeout occurred and this is the connection abort to close the session. [ 789.877419][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 790.132467][T16343] binder: 16342:16343 ioctl c0306201 0 returned -14 [ 790.207316][T16345] netlink: 'syz.8.3707': attribute type 10 has an invalid length. [ 790.245232][T16345] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.263326][T16345] bond0: (slave team0): Enslaving as an active interface with an up link [ 790.905698][T16363] loop8: detected capacity change from 0 to 512 [ 790.917476][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 790.950470][T16363] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm syz.8.3714: bg 0: block 5: invalid block bitmap [ 790.965687][T16363] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 790.987263][T16363] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.3714: invalid indirect mapped block 3 (level 2) [ 791.010873][T16363] EXT4-fs (loop8): 1 orphan inode deleted [ 791.016729][T16363] EXT4-fs (loop8): 1 truncate cleaned up [ 791.022528][T16363] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 791.172865][T10166] EXT4-fs (loop8): unmounting filesystem. [ 791.303987][T16374] loop7: detected capacity change from 0 to 512 [ 791.393395][T16374] EXT4-fs (loop7): Test dummy encryption mode enabled [ 791.409112][T16374] EXT4-fs (loop7): can't mount with data=, fs mounted w/o journal [ 791.957453][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 791.959897][ T4256] Bluetooth: hci0: command 0x0401 tx timeout [ 792.009576][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 792.009594][ T26] audit: type=1326 audit(1733224942.389:3248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16377 comm="syz.8.3718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f2b7ff19 code=0x7ffc0000 [ 792.069609][ T26] audit: type=1326 audit(1733224942.429:3249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16377 comm="syz.8.3718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f00f2b7ff19 code=0x7ffc0000 [ 792.093992][ T26] audit: type=1326 audit(1733224942.429:3250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16377 comm="syz.8.3718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f2b7ff19 code=0x7ffc0000 [ 792.116775][ T26] audit: type=1326 audit(1733224942.429:3251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16377 comm="syz.8.3718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f2b7ff19 code=0x7ffc0000 [ 792.139657][ T26] audit: type=1326 audit(1733224942.439:3252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16377 comm="syz.8.3718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f00f2b7ff19 code=0x7ffc0000 [ 792.162420][ T26] audit: type=1326 audit(1733224942.439:3253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16377 comm="syz.8.3718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f2b7ff19 code=0x7ffc0000 [ 792.185434][ T26] audit: type=1326 audit(1733224942.439:3254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16377 comm="syz.8.3718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00f2b7ff19 code=0x7ffc0000 [ 792.218491][ T26] audit: type=1326 audit(1733224942.439:3255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16377 comm="syz.8.3718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f2b7ff19 code=0x7ffc0000 [ 792.243274][ T26] audit: type=1326 audit(1733224942.439:3256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16377 comm="syz.8.3718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f2b7ff19 code=0x7ffc0000 [ 792.266551][ T26] audit: type=1326 audit(1733224942.439:3257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16377 comm="syz.8.3718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00f2b7ff19 code=0x7ffc0000 [ 792.997404][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 793.271636][T16395] netlink: 'syz.3.3725': attribute type 10 has an invalid length. [ 793.377037][T16395] 8021q: adding VLAN 0 to HW filter on device team0 [ 793.399262][T16395] bond0: (slave team0): Enslaving as an active interface with an up link [ 793.753761][T16404] loop8: detected capacity change from 0 to 512 [ 793.813285][T16404] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm syz.8.3728: bg 0: block 5: invalid block bitmap [ 793.826438][T16404] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 793.835763][T16404] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.3728: invalid indirect mapped block 3 (level 2) [ 793.857911][T16404] EXT4-fs (loop8): 1 orphan inode deleted [ 793.863705][T16404] EXT4-fs (loop8): 1 truncate cleaned up [ 793.869535][T16404] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 794.037520][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 794.064124][T10166] EXT4-fs (loop8): unmounting filesystem. [ 795.077895][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 795.495103][T16438] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3739'. [ 795.504533][T16438] device bridge_slave_1 left promiscuous mode [ 795.510872][T16438] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.549246][T16438] device bridge_slave_0 left promiscuous mode [ 795.576666][T16438] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.117530][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 796.456279][T16459] wlan1 speed is unknown, defaulting to 1000 [ 796.545544][T16462] netlink: 'syz.5.3749': attribute type 4 has an invalid length. [ 797.157420][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 798.197481][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 798.232122][T16491] netlink: 'syz.6.3760': attribute type 10 has an invalid length. [ 798.677591][T15049] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 798.700209][ T4335] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 798.880107][T15049] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 798.899045][ T4335] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 798.910617][ T4335] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 798.921895][T15049] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 798.922424][ T4335] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 798.947271][T15049] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 798.955644][ T4335] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 798.967533][T15049] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 798.979527][ T4335] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.987732][ T4335] usb 9-1: Product: syz [ 798.990735][T15049] usb 8-1: config 0 interface 0 has no altsetting 0 [ 798.992203][ T4335] usb 9-1: Manufacturer: syz [ 799.003573][ T4335] usb 9-1: SerialNumber: syz [ 799.024643][T15049] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 799.031274][ T4335] cdc_mbim 9-1:1.0: skipping garbage [ 799.042235][ T4335] cdc_mbim 9-1:1.0: CDC Union missing and no IAD found [ 799.049708][ T4335] cdc_mbim 9-1:1.0: bind() failure [ 799.051641][T15049] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 799.087332][T15049] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 799.097098][T15049] usb 8-1: config 0 interface 0 has no altsetting 0 [ 799.107404][ T128] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 799.128599][T15049] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 799.138888][T15049] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 799.149979][T15049] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 799.159901][T15049] usb 8-1: config 0 interface 0 has no altsetting 0 [ 799.188137][T15049] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 799.197046][T15049] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 799.237390][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 799.244757][T15049] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 799.254751][T15049] usb 8-1: config 0 interface 0 has no altsetting 0 [ 799.262989][T15049] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 799.287277][T15049] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 799.317628][T15049] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 799.327672][T15049] usb 8-1: config 0 interface 0 has no altsetting 0 [ 799.328162][ T128] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 799.349472][T15049] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 799.358440][T15049] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 799.369507][T15049] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 799.375565][ T128] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 799.379282][T15049] usb 8-1: config 0 interface 0 has no altsetting 0 [ 799.406020][ T128] usb 6-1: config 0 has no interfaces? [ 799.406209][T15049] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 799.420516][ T128] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 799.420543][ T128] usb 6-1: config 0 has no interfaces? [ 799.422245][ T128] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 799.431162][T15049] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 799.457864][T15049] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 799.467100][ T128] usb 6-1: config 0 has no interfaces? [ 799.467680][T15049] usb 8-1: config 0 interface 0 has no altsetting 0 [ 799.478336][T15049] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 799.494894][ T128] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 799.499567][T15049] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 799.510622][ T128] usb 6-1: config 0 has no interfaces? [ 799.531291][ T128] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 799.534738][T15049] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 799.541577][ T128] usb 6-1: config 0 has no interfaces? [ 799.558055][T15049] usb 8-1: config 0 interface 0 has no altsetting 0 [ 799.564488][ T128] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 799.576013][ T128] usb 6-1: config 0 has no interfaces? [ 799.578024][T15049] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 799.592406][ T128] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 799.603075][T15049] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 799.610806][ T128] usb 6-1: config 0 has no interfaces? [ 799.621202][T16521] binder: BINDER_SET_CONTEXT_MGR already set [ 799.624489][ T128] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 799.627425][T15049] usb 8-1: Product: syz [ 799.641938][T16521] binder: 16520:16521 ioctl 4018620d 20000040 returned -16 [ 799.647312][ T128] usb 6-1: config 0 has no interfaces? [ 799.649358][T15049] usb 8-1: Manufacturer: syz [ 799.662680][ T128] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 799.667318][T15049] usb 8-1: SerialNumber: syz [ 799.676504][ T128] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 799.692855][ T128] usb 6-1: Product: syz [ 799.693717][T15049] usb 8-1: config 0 descriptor?? [ 799.697155][ T128] usb 6-1: Manufacturer: syz [ 799.710355][T15049] yurex 8-1:0.0: Could not submitting URB [ 799.726443][T15049] yurex: probe of 8-1:0.0 failed with error -5 [ 799.732698][ T128] usb 6-1: SerialNumber: syz [ 799.743321][ T128] usb 6-1: config 0 descriptor?? [ 799.826674][T16525] wlan1 speed is unknown, defaulting to 1000 [ 799.932633][T15049] usb 8-1: USB disconnect, device number 24 [ 799.986421][ T4296] usb 6-1: USB disconnect, device number 33 [ 800.277440][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 800.374558][T16534] netlink: 'syz.6.3775': attribute type 10 has an invalid length. [ 801.132205][T16555] wlan1 speed is unknown, defaulting to 1000 [ 801.317420][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 801.492821][T15049] usb 9-1: USB disconnect, device number 23 [ 802.292353][T16565] netlink: 'syz.8.3786': attribute type 10 has an invalid length. [ 802.357412][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 802.397735][T16567] netlink: 21 bytes leftover after parsing attributes in process `syz.3.3787'. [ 802.510186][T16571] netlink: 'syz.6.3789': attribute type 29 has an invalid length. [ 802.557691][T16571] netlink: 'syz.6.3789': attribute type 29 has an invalid length. [ 802.579961][T16573] netlink: 'syz.6.3789': attribute type 29 has an invalid length. [ 802.618808][T16571] netlink: 'syz.6.3789': attribute type 29 has an invalid length. [ 802.645804][T16571] netlink: 'syz.6.3789': attribute type 29 has an invalid length. [ 803.398228][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 803.640775][T16595] netlink: 'syz.7.3796': attribute type 29 has an invalid length. [ 803.664487][T16595] netlink: 'syz.7.3796': attribute type 29 has an invalid length. [ 803.707892][T16595] netlink: 'syz.7.3796': attribute type 29 has an invalid length. [ 803.716225][T16595] netlink: 'syz.7.3796': attribute type 29 has an invalid length. [ 803.937494][ T4300] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 804.026337][T16608] wlan1 speed is unknown, defaulting to 1000 [ 804.437509][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 804.755241][T16617] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 804.919901][ T4300] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 804.935551][ T4300] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 804.944945][ T4300] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.968224][ T4300] usb 9-1: config 0 descriptor?? [ 804.978511][ T4300] pwc: Askey VC010 type 2 USB webcam detected. [ 805.179636][ T4300] pwc: send_video_command error -71 [ 805.184927][ T4300] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 805.209761][ T4300] Philips webcam: probe of 9-1:0.0 failed with error -71 [ 805.221396][ T4300] usb 9-1: USB disconnect, device number 24 [ 805.547368][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 806.898009][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 807.320997][T16643] loop7: detected capacity change from 0 to 512 [ 807.957583][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 808.265561][T16643] EXT4-fs (loop7): Test dummy encryption mode enabled [ 808.997436][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 809.264191][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.347564][T16643] EXT4-fs (loop7): can't mount with data=, fs mounted w/o journal [ 809.387316][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.037495][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 810.120638][T16662] wlan1 speed is unknown, defaulting to 1000 [ 810.231450][T16665] device syzkaller1 entered promiscuous mode [ 810.430549][T16673] validate_nla: 1 callbacks suppressed [ 810.430571][T16673] netlink: 'syz.7.3821': attribute type 10 has an invalid length. [ 810.501323][T16673] 8021q: adding VLAN 0 to HW filter on device team0 [ 810.523484][T16673] bond0: (slave team0): Enslaving as an active interface with an up link [ 810.930824][T16688] loop8: detected capacity change from 0 to 512 [ 811.065707][T16688] EXT4-fs (loop8): Test dummy encryption mode enabled [ 811.074663][T16688] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal [ 811.077538][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 811.879832][T16696] netlink: 'syz.3.3830': attribute type 29 has an invalid length. [ 811.897661][T16696] netlink: 'syz.3.3830': attribute type 29 has an invalid length. [ 811.940755][T16699] netlink: 'syz.3.3830': attribute type 29 has an invalid length. [ 811.994262][T16696] netlink: 'syz.3.3830': attribute type 29 has an invalid length. [ 812.021120][T16696] netlink: 'syz.3.3830': attribute type 29 has an invalid length. [ 812.117403][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 812.350779][T16716] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3836'. [ 812.387148][T16713] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3836'. [ 813.157468][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 813.343855][T16706] device syzkaller1 entered promiscuous mode [ 813.634916][T16728] wlan1 speed is unknown, defaulting to 1000 [ 814.197415][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 815.237427][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 816.268307][T16778] netlink: 'syz.8.3858': attribute type 29 has an invalid length. [ 816.277398][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 816.298088][T16778] netlink: 'syz.8.3858': attribute type 29 has an invalid length. [ 816.324812][T16778] netlink: 'syz.8.3858': attribute type 29 has an invalid length. [ 816.354184][T16778] netlink: 'syz.8.3858': attribute type 29 has an invalid length. [ 817.317419][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 817.484698][T16786] device syzkaller1 entered promiscuous mode [ 818.357390][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 818.400728][T16812] delete_channel: no stack [ 819.397559][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 819.776298][ T4296] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 819.967366][ T4296] usb 6-1: Using ep0 maxpacket: 16 [ 819.974367][ T4296] usb 6-1: config index 0 descriptor too short (expected 10258, got 18) [ 820.013659][ T4296] usb 6-1: config 13 has too many interfaces: 47, using maximum allowed: 32 [ 820.048125][ T4296] usb 6-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 820.060405][ T26] kauditd_printk_skb: 146 callbacks suppressed [ 820.060421][ T26] audit: type=1326 audit(1733224970.439:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16852 comm="syz.7.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944237ff19 code=0x7ffc0000 [ 820.109872][ T4296] usb 6-1: config 13 has 0 interfaces, different from the descriptor's value: 47 [ 820.136693][ T4296] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 820.163229][ T26] audit: type=1326 audit(1733224970.439:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16852 comm="syz.7.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944237ff19 code=0x7ffc0000 [ 820.191764][ T4296] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.216077][ T4296] usb 6-1: Product: syz [ 820.226577][ T4296] usb 6-1: Manufacturer: syz [ 820.236463][ T4296] usb 6-1: SerialNumber: syz [ 820.241412][ T26] audit: type=1326 audit(1733224970.459:3406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16852 comm="syz.7.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f944237ff19 code=0x7ffc0000 [ 820.275733][ T26] audit: type=1326 audit(1733224970.459:3407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16852 comm="syz.7.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944237ff19 code=0x7ffc0000 [ 820.310995][ T26] audit: type=1326 audit(1733224970.459:3408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16852 comm="syz.7.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944237ff19 code=0x7ffc0000 [ 820.421517][ T26] audit: type=1326 audit(1733224970.459:3409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16852 comm="syz.7.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f944237ff19 code=0x7ffc0000 [ 820.437409][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 820.477715][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 820.521148][ T26] audit: type=1326 audit(1733224970.459:3410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16852 comm="syz.7.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944237ff19 code=0x7ffc0000 [ 820.523365][ T4299] usb 6-1: USB disconnect, device number 34 [ 820.550342][ T26] audit: type=1326 audit(1733224970.459:3411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16852 comm="syz.7.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f944237ff19 code=0x7ffc0000 [ 820.553735][T16864] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 820.585198][ T26] audit: type=1326 audit(1733224970.459:3412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16852 comm="syz.7.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944237ff19 code=0x7ffc0000 [ 820.630312][T16864] device syzkaller0 entered promiscuous mode [ 820.646992][ T26] audit: type=1326 audit(1733224970.459:3413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16852 comm="syz.7.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f944237ff19 code=0x7ffc0000 [ 820.717393][T16866] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 820.745252][T16866] device syzkaller0 entered promiscuous mode [ 821.477538][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 822.517430][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 823.557448][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 824.603019][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 825.637521][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 826.677481][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 827.588085][T16914] wlan1 speed is unknown, defaulting to 1000 [ 827.717546][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 828.757516][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 828.947493][ T22] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 829.055314][T16948] bond0: (slave macvlan2): Error: Slave device does not support XDP [ 829.131405][ T22] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 829.146893][ T22] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.171163][ T22] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 829.206983][ T22] usb 9-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 829.239462][ T22] usb 9-1: config 0 interface 0 has no altsetting 0 [ 829.275230][ T22] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.305087][ T22] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 829.337411][ T22] usb 9-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 829.352916][ T22] usb 9-1: config 0 interface 0 has no altsetting 0 [ 829.393645][ T22] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.426609][ T22] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 829.445136][ T22] usb 9-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 829.464055][ T22] usb 9-1: config 0 interface 0 has no altsetting 0 [ 829.475371][ T22] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.492206][ T22] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 829.515661][ T22] usb 9-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 829.537620][ T22] usb 9-1: config 0 interface 0 has no altsetting 0 [ 829.552846][ T22] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.565235][ T22] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 829.579715][ T22] usb 9-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 829.609175][T16970] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3925'. [ 829.617294][ T4328] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 829.625813][ T22] usb 9-1: config 0 interface 0 has no altsetting 0 [ 829.634309][ T22] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.649375][ T22] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 829.658420][ T22] usb 9-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 829.671453][ T22] usb 9-1: config 0 interface 0 has no altsetting 0 [ 829.685690][ T22] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.702105][ T22] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 829.726008][ T22] usb 9-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 829.739776][ T22] usb 9-1: config 0 interface 0 has no altsetting 0 [ 829.762128][ T22] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.773122][ T22] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 829.782556][ T22] usb 9-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 829.797467][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 829.808561][ T22] usb 9-1: config 0 interface 0 has no altsetting 0 [ 829.823336][ T22] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 829.842777][ T22] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 829.847140][ T4328] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 829.851404][ T22] usb 9-1: Product: syz [ 829.886142][ T22] usb 9-1: Manufacturer: syz [ 829.891876][ T22] usb 9-1: SerialNumber: syz [ 829.893045][ T4328] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.912785][ T22] usb 9-1: config 0 descriptor?? [ 829.932407][ T22] yurex 9-1:0.0: Could not find endpoints [ 829.935610][ T4328] usb 8-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 829.971396][ T4328] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 829.987785][ T4328] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.002287][ T4328] usb 8-1: Product: syz [ 830.017062][ T4328] usb 8-1: Manufacturer: syz [ 830.021760][ T4328] usb 8-1: SerialNumber: syz [ 830.143705][ T22] usb 9-1: USB disconnect, device number 25 [ 830.436320][ T4335] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 830.657909][ T4335] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 830.672983][ T4335] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 830.682525][ T4335] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 830.694062][ T4335] usb 7-1: config 0 interface 0 has no altsetting 0 [ 830.702302][ T4335] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 830.714300][ T4335] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 830.725509][ T4335] usb 7-1: config 0 interface 0 has no altsetting 0 [ 830.733789][ T4335] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 830.743025][ T4335] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 830.754246][ T4335] usb 7-1: config 0 interface 0 has no altsetting 0 [ 830.766355][ T4335] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 830.781678][ T4335] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 830.795256][ T4335] usb 7-1: config 0 interface 0 has no altsetting 0 [ 830.812757][ T4335] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 830.821850][ T4335] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 830.832837][ T4335] usb 7-1: config 0 interface 0 has no altsetting 0 [ 830.837529][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 830.841198][ T4335] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 830.859718][ T4335] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 830.921705][ T4335] usb 7-1: config 0 interface 0 has no altsetting 0 [ 830.941699][ T4335] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 830.957568][ T4335] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 830.979358][ T4335] usb 7-1: config 0 interface 0 has no altsetting 0 [ 831.014282][ T4335] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 831.029772][ T4335] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 831.049045][ T4335] usb 7-1: config 0 interface 0 has no altsetting 0 [ 831.056819][ T4328] cdc_mbim 8-1:1.0: bind() failure [ 831.073045][ T4335] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 831.082484][ T4328] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 831.093250][ T4335] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 831.104996][ T4328] cdc_ncm 8-1:1.1: bind() failure [ 831.129287][ T4335] usb 7-1: Product: syz [ 831.131963][T17000] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3937'. [ 831.133477][ T4335] usb 7-1: Manufacturer: syz [ 831.183605][ T4335] usb 7-1: SerialNumber: syz [ 831.202598][ T4335] usb 7-1: config 0 descriptor?? [ 831.237479][ T4335] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 831.283797][ T4335] usb 8-1: USB disconnect, device number 25 [ 831.524391][ T4328] usb 7-1: USB disconnect, device number 34 [ 831.562232][ T4328] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 831.877588][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 832.591929][T17024] netlink: 'syz.6.3946': attribute type 1 has an invalid length. [ 832.687528][T17024] 8021q: adding VLAN 0 to HW filter on device bond2 [ 832.778015][T17024] device vlan2 entered promiscuous mode [ 832.783617][T17024] device bond2 entered promiscuous mode [ 832.917463][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 833.447167][ T22] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 833.714521][ T22] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 833.791810][ T22] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 833.957437][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 834.033190][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.081864][ T22] usb 6-1: config 0 descriptor?? [ 834.144116][ T22] pwc: Askey VC010 type 2 USB webcam detected. [ 834.317065][T17047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.338430][T17047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.579173][ T22] pwc: recv_control_msg error -32 req 02 val 2b00 [ 834.588623][ T22] pwc: recv_control_msg error -32 req 02 val 2700 [ 834.598046][ T22] pwc: recv_control_msg error -32 req 02 val 2c00 [ 834.606649][ T22] pwc: recv_control_msg error -32 req 04 val 1000 [ 834.615821][ T22] pwc: recv_control_msg error -71 req 04 val 1300 [ 834.622853][ T22] pwc: recv_control_msg error -71 req 04 val 1400 [ 834.643098][ T22] pwc: recv_control_msg error -71 req 02 val 2000 [ 834.685553][ T22] pwc: recv_control_msg error -71 req 02 val 2100 [ 834.704495][ T22] pwc: recv_control_msg error -71 req 04 val 1500 [ 834.714325][ T22] pwc: recv_control_msg error -71 req 02 val 2500 [ 834.733098][ T22] pwc: recv_control_msg error -71 req 02 val 2400 [ 834.770354][ T22] pwc: recv_control_msg error -71 req 02 val 2600 [ 834.795772][ T22] pwc: recv_control_msg error -71 req 02 val 2900 [ 834.820991][ T22] pwc: recv_control_msg error -71 req 02 val 2800 [ 834.835074][ T22] pwc: recv_control_msg error -71 req 04 val 1100 [ 834.869159][ T22] pwc: recv_control_msg error -71 req 04 val 1200 [ 834.879031][ T22] pwc: Registered as video103. [ 834.907454][ T22] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input23 [ 834.953877][ T22] usb 6-1: USB disconnect, device number 35 [ 834.997398][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 835.621250][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 835.621269][ T26] audit: type=1326 audit(1733224985.999:3434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17105 comm="syz.8.3978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f2b7ff19 code=0x7ffc0000 [ 835.658564][T17111] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 835.684368][T17111] device syzkaller0 entered promiscuous mode [ 835.715378][ T26] audit: type=1326 audit(1733224985.999:3435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17105 comm="syz.8.3978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f2b7ff19 code=0x7ffc0000 [ 835.755942][ T26] audit: type=1326 audit(1733224986.039:3436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17105 comm="syz.8.3978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f00f2b7ff19 code=0x7ffc0000 [ 835.807486][ T26] audit: type=1326 audit(1733224986.039:3437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17105 comm="syz.8.3978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f2b7ff19 code=0x7ffc0000 [ 835.869672][ T26] audit: type=1326 audit(1733224986.039:3438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17105 comm="syz.8.3978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f2b7ff19 code=0x7ffc0000 [ 835.894245][ T26] audit: type=1326 audit(1733224986.049:3439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17105 comm="syz.8.3978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f00f2b7ff19 code=0x7ffc0000 [ 835.925699][ T26] audit: type=1326 audit(1733224986.089:3440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17105 comm="syz.8.3978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f2b7ff19 code=0x7ffc0000 [ 835.975372][ T26] audit: type=1326 audit(1733224986.089:3441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17105 comm="syz.8.3978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f2b7ff19 code=0x7ffc0000 [ 836.036845][ T26] audit: type=1326 audit(1733224986.119:3442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17105 comm="syz.8.3978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00f2b7ff19 code=0x7ffc0000 [ 836.059832][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 836.078140][ T26] audit: type=1326 audit(1733224986.119:3443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17105 comm="syz.8.3978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f2b7ff19 code=0x7ffc0000 [ 836.757543][ T4300] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 836.917371][ T4300] usb 8-1: device descriptor read/64, error -71 [ 837.077431][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 837.187480][ T4300] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 837.347581][ T4300] usb 8-1: device descriptor read/64, error -71 [ 837.485258][ T4300] usb usb8-port1: attempt power cycle [ 837.915455][ T4300] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 837.975388][ T4300] usb 8-1: device descriptor read/8, error -71 [ 838.117443][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 838.247418][ T4300] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 838.288344][ T4300] usb 8-1: device descriptor read/8, error -71 [ 838.413460][ T4300] usb usb8-port1: unable to enumerate USB device [ 838.800704][T17138] netlink: 'syz.5.3991': attribute type 1 has an invalid length. [ 838.862688][T17138] 8021q: adding VLAN 0 to HW filter on device bond1 [ 838.938938][T17138] device vlan2 entered promiscuous mode [ 838.944548][T17138] device bond1 entered promiscuous mode [ 838.979099][T17147] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3992'. [ 838.997343][T17147] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3992'. [ 839.048885][T17142] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3992'. [ 839.072998][T17148] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3992'. [ 839.157462][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 839.432979][T17168] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 839.448992][T17168] device syzkaller0 entered promiscuous mode [ 839.594129][ T4335] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 839.809305][ T4335] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 839.826852][ T4335] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.838261][ T4335] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 839.856614][ T4335] usb 9-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 839.909769][ T4335] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 839.938092][ T4335] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.946211][ T4335] usb 9-1: Product: syz [ 839.950949][ T4335] usb 9-1: Manufacturer: syz [ 839.955585][ T4335] usb 9-1: SerialNumber: syz [ 840.191089][T17164] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 840.198102][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 840.814826][T17164] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 841.035814][ T4335] cdc_mbim 9-1:1.0: bind() failure [ 841.049612][ T4335] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 841.058129][ T4335] cdc_ncm 9-1:1.1: bind() failure [ 841.237408][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 841.253270][ T4335] usb 9-1: USB disconnect, device number 26 [ 842.278134][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 842.803078][T17194] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 843.297380][ T4328] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 843.326664][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 843.487410][ T4328] usb 8-1: Using ep0 maxpacket: 16 [ 843.505193][ T4328] usb 8-1: config index 0 descriptor too short (expected 16456, got 72) [ 843.519442][ T4328] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 843.528006][ T4328] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 843.539415][ T4328] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 843.548439][ T4328] usb 8-1: config 0 has no interface number 0 [ 843.554816][ T4328] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 843.567012][ T4328] usb 8-1: config 0 interface 125 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 843.581062][ T4328] usb 8-1: config 0 interface 125 has no altsetting 0 [ 843.590625][ T4328] usb 8-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 843.599953][ T4328] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.627468][ T4328] usb 8-1: Product: syz [ 843.637598][ T4328] usb 8-1: Manufacturer: syz [ 843.642284][ T4328] usb 8-1: SerialNumber: syz [ 843.673563][ T4328] usb 8-1: config 0 descriptor?? [ 843.755189][ T26] kauditd_printk_skb: 83 callbacks suppressed [ 843.755207][ T26] audit: type=1326 audit(1733224994.129:3527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17216 comm="syz.3.4013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3317ff19 code=0x7ffc0000 [ 843.784848][ T26] audit: type=1326 audit(1733224994.139:3528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17216 comm="syz.3.4013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3317ff19 code=0x7ffc0000 [ 843.807808][ T26] audit: type=1326 audit(1733224994.169:3529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17216 comm="syz.3.4013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdf3317ff19 code=0x7ffc0000 [ 843.836612][ T26] audit: type=1326 audit(1733224994.169:3530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17216 comm="syz.3.4013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3317ff19 code=0x7ffc0000 [ 843.864656][ T26] audit: type=1326 audit(1733224994.169:3531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17216 comm="syz.3.4013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3317ff19 code=0x7ffc0000 [ 843.887696][ T26] audit: type=1326 audit(1733224994.189:3532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17216 comm="syz.3.4013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdf3317ff19 code=0x7ffc0000 [ 844.358145][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 845.397416][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 846.205132][ T4296] usb 8-1: USB disconnect, device number 30 [ 846.437686][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 846.802613][T17231] netlink: 'syz.3.4017': attribute type 29 has an invalid length. [ 846.944363][T17231] netlink: 'syz.3.4017': attribute type 29 has an invalid length. [ 847.164538][T17245] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 847.179828][T17245] device syzkaller0 entered promiscuous mode [ 847.477406][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 847.556329][ T4296] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 847.731733][ T4296] usb 8-1: device descriptor read/64, error -71 [ 848.015624][ T4296] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 848.210597][ T4296] usb 8-1: device descriptor read/64, error -71 [ 848.343091][ T4296] usb usb8-port1: attempt power cycle [ 848.523244][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 848.777369][ T4296] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 848.845897][ T4296] usb 8-1: device descriptor read/8, error -71 [ 849.122019][ T4296] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 849.183038][ T4296] usb 8-1: device descriptor read/8, error -71 [ 849.318216][ T4296] usb usb8-port1: unable to enumerate USB device [ 849.557408][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 850.597441][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 850.971686][ T4296] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 851.177600][ T4296] usb 8-1: Using ep0 maxpacket: 16 [ 851.199385][ T4296] usb 8-1: config index 0 descriptor too short (expected 16456, got 72) [ 851.375700][ T4296] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 851.416278][ T4296] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 851.471143][ T4296] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 851.521078][ T4296] usb 8-1: config 0 has no interface number 0 [ 851.537702][ T4296] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 851.579418][ T4296] usb 8-1: config 0 interface 125 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 851.602959][ T4296] usb 8-1: config 0 interface 125 has no altsetting 0 [ 851.625856][ T4296] usb 8-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 851.637414][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 851.679094][ T4296] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.733882][ T4296] usb 8-1: Product: syz [ 851.769837][ T4296] usb 8-1: Manufacturer: syz [ 851.774551][ T4296] usb 8-1: SerialNumber: syz [ 851.801091][ T4296] usb 8-1: config 0 descriptor?? [ 852.677430][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 853.493524][T17315] netlink: 'syz.3.4045': attribute type 29 has an invalid length. [ 853.517416][T17315] netlink: 'syz.3.4045': attribute type 29 has an invalid length. [ 853.574217][T17324] netlink: 'syz.5.4048': attribute type 29 has an invalid length. [ 853.618027][T17324] netlink: 'syz.5.4048': attribute type 29 has an invalid length. [ 853.717482][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 854.562375][ T4296] usb 8-1: USB disconnect, device number 35 [ 854.757404][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 854.803870][T17346] netlink: 'syz.3.4056': attribute type 1 has an invalid length. [ 854.836611][T17346] 8021q: adding VLAN 0 to HW filter on device bond2 [ 854.963111][T17344] loop7: detected capacity change from 0 to 512 [ 855.072504][T17344] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2759: inode #11: comm syz.7.4055: corrupted xattr block 95 [ 855.144698][T17344] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm syz.7.4055: bg 0: block 7: invalid block bitmap [ 855.160039][T17344] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 855.169398][T17344] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2925: inode #11: comm syz.7.4055: corrupted xattr block 95 [ 855.182967][T17344] EXT4-fs warning (device loop7): ext4_evict_inode:299: xattr delete (err -117) [ 855.197307][T17344] EXT4-fs (loop7): 1 orphan inode deleted [ 855.210697][T17344] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 855.797405][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 856.837406][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 857.057041][T15023] EXT4-fs (loop7): unmounting filesystem. [ 857.597512][ T22] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 857.867357][ T22] usb 7-1: Using ep0 maxpacket: 16 [ 857.877396][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 857.891611][ T22] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 857.906967][ T22] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 857.978149][ T22] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 858.027232][ T22] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 858.046481][ T22] usb 7-1: config 0 has no interface number 0 [ 858.056647][ T22] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 858.116211][ T22] usb 7-1: config 0 interface 125 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 858.144649][ T22] usb 7-1: config 0 interface 125 has no altsetting 0 [ 858.185607][ T22] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 858.194983][ T22] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.213613][ T22] usb 7-1: Product: syz [ 858.218258][ T22] usb 7-1: Manufacturer: syz [ 858.225641][ T22] usb 7-1: SerialNumber: syz [ 858.253075][ T22] usb 7-1: config 0 descriptor?? [ 858.917481][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 859.957452][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 860.284743][ T4296] usb 7-1: USB disconnect, device number 35 [ 860.997408][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 862.037405][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 862.658005][ T14] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 862.837645][ T14] usb 8-1: device descriptor read/64, error -71 [ 863.077398][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 863.857298][ T14] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 864.058040][ T14] usb 8-1: device descriptor read/64, error -71 [ 864.117383][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 864.189693][ T14] usb usb8-port1: attempt power cycle [ 864.607275][ T14] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 864.647967][ T14] usb 8-1: device descriptor read/8, error -71 [ 865.054987][ T14] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 865.097961][ T14] usb 8-1: device descriptor read/8, error -71 [ 865.157410][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 865.426163][ T14] usb usb8-port1: unable to enumerate USB device [ 866.084845][T17541] loop8: detected capacity change from 0 to 512 [ 866.197390][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 866.245580][T17541] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2759: inode #11: comm syz.8.4128: corrupted xattr block 95 [ 866.309499][T17541] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm syz.8.4128: bg 0: block 7: invalid block bitmap [ 866.356506][T17541] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 866.399905][T17541] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2925: inode #11: comm syz.8.4128: corrupted xattr block 95 [ 866.454516][T17541] EXT4-fs warning (device loop8): ext4_evict_inode:299: xattr delete (err -117) [ 866.500452][T17541] EXT4-fs (loop8): 1 orphan inode deleted [ 866.506488][T17541] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 867.237377][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 868.097095][ T4300] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 868.277611][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 869.105231][T17587] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 869.224957][T10166] EXT4-fs (loop8): unmounting filesystem. [ 869.297295][ T4300] usb 7-1: device descriptor read/64, error -71 [ 869.317497][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 869.567735][ T4300] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 869.737565][ T4300] usb 7-1: device descriptor read/64, error -71 [ 869.867515][ T4300] usb usb7-port1: attempt power cycle [ 869.963407][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.974661][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.284360][ T4300] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 870.328030][ T4300] usb 7-1: device descriptor read/8, error -71 [ 870.357457][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 870.963821][T17620] binder: 17619:17620 ioctl c018620c 20000040 returned -22 [ 871.406765][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 872.437409][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 873.486129][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 874.395009][T17642] ------------[ cut here ]------------ [ 874.401297][T17642] WARNING: CPU: 0 PID: 17642 at net/sched/sch_taprio.c:1020 taprio_get_start_time+0x162/0x190 [ 874.411636][T17642] Modules linked in: [ 874.415576][T17642] CPU: 0 PID: 17642 Comm: syz.6.4162 Not tainted 6.1.119-syzkaller #0 [ 874.423803][T17642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 874.433935][T17642] RIP: 0010:taprio_get_start_time+0x162/0x190 [ 874.440108][T17642] Code: 03 42 80 3c 30 00 74 08 48 89 ef e8 18 62 07 f9 48 89 5d 00 31 c0 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 5e d8 af f8 <0f> 0b b8 f2 ff ff ff eb e3 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 0b [ 874.460425][T17642] RSP: 0018:ffffc9000474edc0 EFLAGS: 00010283 [ 874.466663][T17642] RAX: ffffffff88dac392 RBX: 0000000000000003 RCX: 0000000000080000 [ 874.474991][T17642] RDX: ffffc9000db08000 RSI: 0000000000002633 RDI: 0000000000002634 [ 874.483068][T17642] RBP: ffff888076e992d4 R08: ffffffff88dac33f R09: fffffbfff2249889 [ 874.491214][T17642] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 874.499267][T17642] R13: 000000cb93bd9a02 R14: dffffc0000000000 R15: 0000000000000000 [ 874.507325][T17642] FS: 00007f209dc436c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 874.516303][T17642] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 874.517479][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 874.523031][T17642] CR2: 000000110c2e65af CR3: 0000000060ac0000 CR4: 00000000003506f0 [ 874.538115][T17642] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 874.546129][T17642] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 874.554180][T17642] Call Trace: [ 874.557526][T17642] [ 874.560492][T17642] ? __warn+0x15a/0x520 [ 874.564681][T17642] ? taprio_get_start_time+0x162/0x190 [ 874.570217][T17642] ? report_bug+0x2af/0x500 [ 874.574763][T17642] ? taprio_get_start_time+0x162/0x190 [ 874.580290][T17642] ? handle_bug+0x3d/0x70 [ 874.584674][T17642] ? exc_invalid_op+0x16/0x40 [ 874.589451][T17642] ? asm_exc_invalid_op+0x16/0x20 [ 874.594543][T17642] ? taprio_get_start_time+0x10f/0x190 [ 874.600068][T17642] ? taprio_get_start_time+0x162/0x190 [ 874.605546][T17642] ? taprio_get_start_time+0x162/0x190 [ 874.611051][T17642] taprio_change+0x4319/0x5600 [ 874.615848][T17642] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 874.621830][T17642] ? taprio_destroy+0x4a0/0x4a0 [ 874.626704][T17642] ? lockdep_init_map_type+0x9d/0x900 [ 874.632118][T17642] ? rtnetlink_rcv_msg+0x818/0xff0 [ 874.637288][T17642] ? netlink_rcv_skb+0x1cd/0x410 [ 874.642273][T17642] ? netlink_unicast+0x7d8/0x970 [ 874.647293][T17642] ? netlink_sendmsg+0xa26/0xd60 [ 874.652285][T17642] ? ____sys_sendmsg+0x5a5/0x8f0 [ 874.657302][T17642] ? __sys_sendmsg+0x2a9/0x390 [ 874.662203][T17642] ? memset+0x1f/0x40 [ 874.666224][T17642] ? fifo_init+0x41e/0x760 [ 874.670722][T17642] ? qdisc_peek_head+0x40/0x40 [ 874.675536][T17642] ? taprio_peek+0x590/0x590 [ 874.680280][T17642] qdisc_create+0x8a1/0x1220 [ 874.684912][T17642] ? qdisc_notify+0x390/0x390 [ 874.689662][T17642] ? lockdep_rtnl_is_held+0x22/0x30 [ 874.694892][T17642] tc_modify_qdisc+0xa0a/0x1d70 [ 874.699838][T17642] ? qdisc_offload_query_caps+0x170/0x170 [ 874.705620][T17642] ? qdisc_offload_query_caps+0x170/0x170 [ 874.711383][T17642] rtnetlink_rcv_msg+0x818/0xff0 [ 874.716366][T17642] ? rtnetlink_bind+0x80/0x80 [ 874.721123][T17642] ? __local_bh_enable_ip+0x164/0x1f0 [ 874.726517][T17642] ? __dev_queue_xmit+0x2d6/0x3d50 [ 874.731682][T17642] ? _local_bh_enable+0xa0/0xa0 [ 874.736581][T17642] ? __dev_queue_xmit+0x2d6/0x3d50 [ 874.741746][T17642] ? __dev_queue_xmit+0x173c/0x3d50 [ 874.746964][T17642] ? __dev_queue_xmit+0x2d6/0x3d50 [ 874.752213][T17642] ? netdev_core_pick_tx+0x320/0x320 [ 874.757593][T17642] ? ref_tracker_free+0x638/0x7d0 [ 874.762659][T17642] ? memcpy+0x3c/0x60 [ 874.766671][T17642] ? refcount_inc+0x80/0x80 [ 874.771212][T17642] ? __copy_skb_header+0x47b/0x600 [ 874.776347][T17642] netlink_rcv_skb+0x1cd/0x410 [ 874.781184][T17642] ? rtnetlink_bind+0x80/0x80 [ 874.785901][T17642] ? netlink_ack+0x1290/0x1290 [ 874.790724][T17642] ? __netlink_deliver_tap+0x73e/0x770 [ 874.796227][T17642] ? netlink_deliver_tap+0x2e/0x1b0 [ 874.801480][T17642] netlink_unicast+0x7d8/0x970 [ 874.806283][T17642] ? netlink_detachskb+0x90/0x90 [ 874.811261][T17642] ? __virt_addr_valid+0x45b/0x530 [ 874.816390][T17642] ? __phys_addr_symbol+0x2b/0x70 [ 874.821453][T17642] ? __check_object_size+0x4dd/0xa30 [ 874.826756][T17642] ? bpf_lsm_netlink_send+0x5/0x10 [ 874.831926][T17642] netlink_sendmsg+0xa26/0xd60 [ 874.836733][T17642] ? netlink_getsockopt+0x580/0x580 [ 874.842018][T17642] ? aa_sock_msg_perm+0x91/0x150 [ 874.847003][T17642] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 874.852771][T17642] ? security_socket_sendmsg+0x7d/0xa0 [ 874.858388][T17642] ? netlink_getsockopt+0x580/0x580 [ 874.863635][T17642] ____sys_sendmsg+0x5a5/0x8f0 [ 874.868476][T17642] ? __sys_sendmsg_sock+0x30/0x30 [ 874.873578][T17642] __sys_sendmsg+0x2a9/0x390 [ 874.878265][T17642] ? ____sys_sendmsg+0x8f0/0x8f0 [ 874.883271][T17642] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 874.889329][T17642] ? syscall_enter_from_user_mode+0x2e/0x230 [ 874.895360][T17642] ? lockdep_hardirqs_on+0x94/0x130 [ 874.900619][T17642] ? syscall_enter_from_user_mode+0x2e/0x230 [ 874.907148][T17642] do_syscall_64+0x3b/0xb0 [ 874.911635][T17642] ? clear_bhb_loop+0x45/0xa0 [ 874.916327][T17642] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 874.922266][T17642] RIP: 0033:0x7f209cd7ff19 [ 874.926710][T17642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 874.946374][T17642] RSP: 002b:00007f209dc43058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 874.954839][T17642] RAX: ffffffffffffffda RBX: 00007f209cf45fa0 RCX: 00007f209cd7ff19 [ 874.962882][T17642] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004 [ 874.970898][T17642] RBP: 00007f209cdf3986 R08: 0000000000000000 R09: 0000000000000000 [ 874.978936][T17642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 874.986960][T17642] R13: 0000000000000000 R14: 00007f209cf45fa0 R15: 00007ffc5560e5d8 [ 874.995046][T17642] [ 874.998123][T17642] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 875.005421][T17642] CPU: 0 PID: 17642 Comm: syz.6.4162 Not tainted 6.1.119-syzkaller #0 [ 875.013661][T17642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 875.023719][T17642] Call Trace: [ 875.027120][T17642] [ 875.030075][T17642] dump_stack_lvl+0x1e3/0x2cb [ 875.034780][T17642] ? nf_tcp_handle_invalid+0x642/0x642 [ 875.040273][T17642] ? panic+0x764/0x764 [ 875.044409][T17642] ? 0xffffffffa0004340 [ 875.048597][T17642] ? vscnprintf+0x59/0x80 [ 875.052945][T17642] panic+0x318/0x764 [ 875.056865][T17642] ? __warn+0x169/0x520 [ 875.061048][T17642] ? memcpy_page_flushcache+0xfc/0xfc [ 875.066451][T17642] __warn+0x348/0x520 [ 875.070441][T17642] ? taprio_get_start_time+0x162/0x190 [ 875.075933][T17642] report_bug+0x2af/0x500 [ 875.080464][T17642] ? taprio_get_start_time+0x162/0x190 [ 875.086055][T17642] handle_bug+0x3d/0x70 [ 875.090250][T17642] exc_invalid_op+0x16/0x40 [ 875.094785][T17642] asm_exc_invalid_op+0x16/0x20 [ 875.099654][T17642] RIP: 0010:taprio_get_start_time+0x162/0x190 [ 875.105748][T17642] Code: 03 42 80 3c 30 00 74 08 48 89 ef e8 18 62 07 f9 48 89 5d 00 31 c0 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 5e d8 af f8 <0f> 0b b8 f2 ff ff ff eb e3 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 0b [ 875.125382][T17642] RSP: 0018:ffffc9000474edc0 EFLAGS: 00010283 [ 875.131470][T17642] RAX: ffffffff88dac392 RBX: 0000000000000003 RCX: 0000000000080000 [ 875.139444][T17642] RDX: ffffc9000db08000 RSI: 0000000000002633 RDI: 0000000000002634 [ 875.147421][T17642] RBP: ffff888076e992d4 R08: ffffffff88dac33f R09: fffffbfff2249889 [ 875.155397][T17642] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 875.163382][T17642] R13: 000000cb93bd9a02 R14: dffffc0000000000 R15: 0000000000000000 [ 875.171377][T17642] ? taprio_get_start_time+0x10f/0x190 [ 875.176867][T17642] ? taprio_get_start_time+0x162/0x190 [ 875.182348][T17642] taprio_change+0x4319/0x5600 [ 875.187117][T17642] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 875.193059][T17642] ? taprio_destroy+0x4a0/0x4a0 [ 875.197921][T17642] ? lockdep_init_map_type+0x9d/0x900 [ 875.203308][T17642] ? rtnetlink_rcv_msg+0x818/0xff0 [ 875.208525][T17642] ? netlink_rcv_skb+0x1cd/0x410 [ 875.213478][T17642] ? netlink_unicast+0x7d8/0x970 [ 875.218424][T17642] ? netlink_sendmsg+0xa26/0xd60 [ 875.223386][T17642] ? ____sys_sendmsg+0x5a5/0x8f0 [ 875.228334][T17642] ? __sys_sendmsg+0x2a9/0x390 [ 875.233121][T17642] ? memset+0x1f/0x40 [ 875.237112][T17642] ? fifo_init+0x41e/0x760 [ 875.241547][T17642] ? qdisc_peek_head+0x40/0x40 [ 875.246350][T17642] ? taprio_peek+0x590/0x590 [ 875.250947][T17642] qdisc_create+0x8a1/0x1220 [ 875.255597][T17642] ? qdisc_notify+0x390/0x390 [ 875.260463][T17642] ? lockdep_rtnl_is_held+0x22/0x30 [ 875.265676][T17642] tc_modify_qdisc+0xa0a/0x1d70 [ 875.270552][T17642] ? qdisc_offload_query_caps+0x170/0x170 [ 875.276301][T17642] ? qdisc_offload_query_caps+0x170/0x170 [ 875.282034][T17642] rtnetlink_rcv_msg+0x818/0xff0 [ 875.287079][T17642] ? rtnetlink_bind+0x80/0x80 [ 875.291768][T17642] ? __local_bh_enable_ip+0x164/0x1f0 [ 875.297710][T17642] ? __dev_queue_xmit+0x2d6/0x3d50 [ 875.302838][T17642] ? _local_bh_enable+0xa0/0xa0 [ 875.307808][T17642] ? __dev_queue_xmit+0x2d6/0x3d50 [ 875.312929][T17642] ? __dev_queue_xmit+0x173c/0x3d50 [ 875.318143][T17642] ? __dev_queue_xmit+0x2d6/0x3d50 [ 875.323265][T17642] ? netdev_core_pick_tx+0x320/0x320 [ 875.328646][T17642] ? ref_tracker_free+0x638/0x7d0 [ 875.333674][T17642] ? memcpy+0x3c/0x60 [ 875.337661][T17642] ? refcount_inc+0x80/0x80 [ 875.342167][T17642] ? __copy_skb_header+0x47b/0x600 [ 875.347476][T17642] netlink_rcv_skb+0x1cd/0x410 [ 875.352254][T17642] ? rtnetlink_bind+0x80/0x80 [ 875.357050][T17642] ? netlink_ack+0x1290/0x1290 [ 875.361824][T17642] ? __netlink_deliver_tap+0x73e/0x770 [ 875.367306][T17642] ? netlink_deliver_tap+0x2e/0x1b0 [ 875.372517][T17642] netlink_unicast+0x7d8/0x970 [ 875.377385][T17642] ? netlink_detachskb+0x90/0x90 [ 875.382331][T17642] ? __virt_addr_valid+0x45b/0x530 [ 875.387454][T17642] ? __phys_addr_symbol+0x2b/0x70 [ 875.392489][T17642] ? __check_object_size+0x4dd/0xa30 [ 875.397785][T17642] ? bpf_lsm_netlink_send+0x5/0x10 [ 875.402913][T17642] netlink_sendmsg+0xa26/0xd60 [ 875.407696][T17642] ? netlink_getsockopt+0x580/0x580 [ 875.412928][T17642] ? aa_sock_msg_perm+0x91/0x150 [ 875.417901][T17642] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 875.423206][T17642] ? security_socket_sendmsg+0x7d/0xa0 [ 875.428712][T17642] ? netlink_getsockopt+0x580/0x580 [ 875.433938][T17642] ____sys_sendmsg+0x5a5/0x8f0 [ 875.439298][T17642] ? __sys_sendmsg_sock+0x30/0x30 [ 875.444469][T17642] __sys_sendmsg+0x2a9/0x390 [ 875.449082][T17642] ? ____sys_sendmsg+0x8f0/0x8f0 [ 875.454062][T17642] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 875.460075][T17642] ? syscall_enter_from_user_mode+0x2e/0x230 [ 875.466066][T17642] ? lockdep_hardirqs_on+0x94/0x130 [ 875.471272][T17642] ? syscall_enter_from_user_mode+0x2e/0x230 [ 875.477260][T17642] do_syscall_64+0x3b/0xb0 [ 875.481688][T17642] ? clear_bhb_loop+0x45/0xa0 [ 875.486379][T17642] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 875.492282][T17642] RIP: 0033:0x7f209cd7ff19 [ 875.496699][T17642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 875.516370][T17642] RSP: 002b:00007f209dc43058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 875.524790][T17642] RAX: ffffffffffffffda RBX: 00007f209cf45fa0 RCX: 00007f209cd7ff19 [ 875.532770][T17642] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004 [ 875.540741][T17642] RBP: 00007f209cdf3986 R08: 0000000000000000 R09: 0000000000000000 [ 875.548714][T17642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 875.556689][T17642] R13: 0000000000000000 R14: 00007f209cf45fa0 R15: 00007ffc5560e5d8 [ 875.564853][T17642] [ 875.568146][T17642] Kernel Offset: disabled [ 875.572624][T17642] Rebooting in 86400 seconds..