last executing test programs: 10m48.472912302s ago: executing program 2 (id=3): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x2) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000828bd7000fbffffffffffffff00000000014100d000a5c57b67e32d2d85da974e7500cfa92000170000001effff3e6469623a6261746164765f736c6176655f31000000674912839e9903708f9238ff65bb7d55c4422ebe0fd0f8cb2e5acdff050f889880e80e1484efa8d246725901f5979edaef33ef1ab80206aeb84b2b5b2a4b3ffd48804e442996fd9e4456d548a1d434ffff00000000000055a8016123a16ff63e44a0dd9817d7c950bf69bfffe117d010055f876068a48d84128cc41efd5b6511fc36835fa6ad9226ecdcc2f35ea96402215d204fb98ee28ff66648cd2a21b6892f"], 0x3c}, 0x1, 0x0, 0x0, 0xc080}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrandom(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000380)={0x6, @raw_data="a5ca3354ab28de31bd93c26bd64d7bf250bcece4a58b1106d332fa7e1bb0444726d117b633124532524331259eaa03f9940b0a32d107a477724ff80b36b42487579f363b8e5610a08d8a0a12d1ada6944600a37331d008f81a320c3a85daf423dff45be2f01ebd9aae667ed95076ff9e27abf9327382593d33543d09e008931ce64fcb93f9092f36a7d01153df0323d10b5131f0e012d6f6bb7da8a72daaccc16ef2580ee1b9205a4291527255a77c32da0de9cb1e870be47419492ade788ccd03de171beda98f00"}) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x301, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x3, 0xd, 0x6}, 0x29}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48020}, 0x20000840) socket$netlink(0x10, 0x3, 0x14) r5 = syz_open_dev$sndpcmc(&(0x7f0000000280), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_DROP(r5, 0x4143, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4000040) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x20004820) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[0x0, 0x0], 0x42af}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000146e405e04bd84be89010403010902240001000000000904ed0002ff5d810009050303000000050009058a0321d2ada77009bf557023bc44652f1b29180c0e04ec2155813108808985b93be37398a96d4baad033d11ae565da66b92878d0bc2ea066918915727fe3500cca9e207e3fef031f7f60061800b14c1328c177cf29d3b4b205d2c7742662"], 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) 10m44.896569722s ago: executing program 2 (id=7): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r4, 0x0, 0x0, 0x4008810) recvmsg$unix(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060) ioprio_set$uid(0x3, 0x0, 0x0) 10m29.758536715s ago: executing program 32 (id=7): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r4, 0x0, 0x0, 0x4008810) recvmsg$unix(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060) ioprio_set$uid(0x3, 0x0, 0x0) 10m2.000469754s ago: executing program 1 (id=101): socket(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x3, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x2c, r3, 0x1, 0x4070bd26, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x814810, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES64, @ANYBLOB=',wfdno=', @ANYRESDEC, @ANYRESOCT]) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x43) acct(&(0x7f0000000140)='./file0\x00') openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 9m59.348445062s ago: executing program 1 (id=105): socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$nl_netfilter(0x10, 0x3, 0xc) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x3, 0x80000006}, 0x0, 0x0) 9m56.132249946s ago: executing program 1 (id=107): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 9m55.917945703s ago: executing program 1 (id=110): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 9m55.71733908s ago: executing program 1 (id=112): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) listen(r0, 0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r1, &(0x7f0000001dc0)={&(0x7f00000000c0)={0xa, 0x4e22, 0x7, @loopback, 0x2}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000000)='&', 0x20000}], 0x1}, 0x85) accept4(r0, 0x0, 0x0, 0x80000) 9m53.291297036s ago: executing program 1 (id=117): socket(0x23, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) close(r1) socket$inet6_icmp(0xa, 0x2, 0x3a) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000055c0), 0x3fffffffffffea0, 0x300, 0x0) 9m38.136014625s ago: executing program 33 (id=117): socket(0x23, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) close(r1) socket$inet6_icmp(0xa, 0x2, 0x3a) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000055c0), 0x3fffffffffffea0, 0x300, 0x0) 2m56.024347367s ago: executing program 5 (id=2139): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000700)=@deltaction={0x14, 0x31, 0x800, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m55.93945842s ago: executing program 5 (id=2141): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20000080) 2m55.890996175s ago: executing program 5 (id=2142): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendto$inet6(r0, &(0x7f0000000800), 0x0, 0x880, 0x0, 0x0) 2m55.773399754s ago: executing program 5 (id=2143): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9, 0x0, 0xffffffffffffffff, 0x19}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000010040)) pipe(&(0x7f0000000140)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m55.547277188s ago: executing program 5 (id=2145): socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x110003, 0x0, 0x9}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r0], 0x1c}}, 0x0) 2m55.492364583s ago: executing program 5 (id=2149): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001500192340834b80040d8c560a067fbc45ff810540010000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) sendmmsg(r1, &(0x7f0000000600)=[{{&(0x7f0000000480)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000500)=[{&(0x7f00000001c0)='|.', 0x2}], 0x1}}], 0x1, 0x4010) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, 0x17, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x800) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073717a30000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000f40)={r6, &(0x7f0000000200), 0x0}, 0x20) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x9, 0x8, 0x1}, 0x48) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x8}, {r7, 0x2721}], 0x2, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000000104e95463160000000000000000000f0500010001"], 0x1c}}, 0x54) close(r9) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="520000001000010001000000000000000000000040b3a84583bf6c5ee92d1958b32a", @ANYRES32=0x0, @ANYBLOB="0000000028120700080004008100000008001b0000000000"], 0x30}}, 0x4004090) 2m40.205385919s ago: executing program 34 (id=2149): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001500192340834b80040d8c560a067fbc45ff810540010000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) sendmmsg(r1, &(0x7f0000000600)=[{{&(0x7f0000000480)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000500)=[{&(0x7f00000001c0)='|.', 0x2}], 0x1}}], 0x1, 0x4010) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, 0x17, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x800) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073717a30000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000f40)={r6, &(0x7f0000000200), 0x0}, 0x20) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x9, 0x8, 0x1}, 0x48) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x8}, {r7, 0x2721}], 0x2, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000000104e95463160000000000000000000f0500010001"], 0x1c}}, 0x54) close(r9) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="520000001000010001000000000000000000000040b3a84583bf6c5ee92d1958b32a", @ANYRES32=0x0, @ANYBLOB="0000000028120700080004008100000008001b0000000000"], 0x30}}, 0x4004090) 44.848805924s ago: executing program 0 (id=2674): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001340)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {}, {0xfff6, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0xa92c}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}}, 0x4000010) 44.306880032s ago: executing program 0 (id=2678): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rseq(&(0x7f0000000680), 0x20, 0x0, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) 42.876480192s ago: executing program 0 (id=2679): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xa0}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 41.373782602s ago: executing program 0 (id=2681): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) 41.295134126s ago: executing program 0 (id=2682): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x10000, 0x2, 0x101, 0x1, 0x1, 0x1a, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 41.117105334s ago: executing program 0 (id=2686): r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4d0086d0492082a6d000000010902"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x1c001, 0x0) syz_open_procfs(r0, &(0x7f00000003c0)='net/ptype\x00') 11.164348471s ago: executing program 6 (id=2773): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0xa0000004}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, 0x0, 0x33) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) 9.901227308s ago: executing program 6 (id=2774): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xdc}, 0x0) 7.8485225s ago: executing program 3 (id=2775): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000200000000fddbdf257f0000010b9cf2065905b43b000000000000000000000000000000000000000000000004000000000a0060", @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000004000000000000000fdffffffffffffff02000000000000000000000000000000feffffffffffffff00000000000000000000000000000000000000000000000009000000000000400001020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 7.786953965s ago: executing program 3 (id=2776): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000400000002000000000000ea5d00000000000003551681903263853500000000020100000000002e003f7c0f41a4926b68ba05f7a4c2"], 0x0, 0x34}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="1414000021200000300012800c0001006d6163766c616e0020000280080001001000000006000400aaaaaaaaaa2900000800030000000000000003000000000008000500", @ANYRES32=0x0, @ANYBLOB="1b114d780b274a39002d7cf25363e2c6766031c580f588aed71195a6ae43f20c9e37590709f4dc090107d28e715776728bc513e7950dee0463db5fa234693886ec1fda040dc67d9ed607888fc567875ae14ec5f5973bc2ea4422a0fca07d644c15de309345538b1fac3358599022b7457742"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x30}, &(0x7f00000002c0)=0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0) landlock_restrict_self(r4, 0xb) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r5 = openat$binderfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, &(0x7f00000003c0), 0x5005) r7 = dup3(r6, r1, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r10, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r10, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) 7.422016283s ago: executing program 3 (id=2778): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000002ac0), 0x0, 0x101400) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x6, &(0x7f00000006c0)=@raw=[@tail_call, @exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 7.303233483s ago: executing program 4 (id=2779): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000140)=0x9) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) 7.160608896s ago: executing program 3 (id=2780): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x200c000) 7.074329881s ago: executing program 6 (id=2781): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000400)={0x18, 0x1402, 0x1, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x4850) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 6.981474062s ago: executing program 4 (id=2782): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001340)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {}, {0xfff6, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0xa92c}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}}, 0x4000010) 6.895306041s ago: executing program 7 (id=2783): socket$nl_generic(0x11, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) rmdir(0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) 6.88631176s ago: executing program 6 (id=2784): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_l2cap(r5, 0x0, 0x0) dup(r4) syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000003c0)={0x1, r2}) 3.519744672s ago: executing program 4 (id=2785): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000200000000fddbdf257f0000010b9cf2065905b43b000000000000000000000000000000000000000000000004000000000a0060", @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000004000000000000000fdffffffffffffff02000000000000000000000000000000feffffffffffffff00000000000000000000000000000000000000000000000009000000000000400001020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 3.345812688s ago: executing program 6 (id=2786): socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r0], 0x1000f) 3.224592514s ago: executing program 3 (id=2787): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 3.209328853s ago: executing program 4 (id=2788): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000580)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1ff, 0x0, 0x0, {[@window={0x3, 0x3, 0x1}]}}}}}}}}, 0x0) 3.108390169s ago: executing program 7 (id=2789): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000002ac0), 0x0, 0x101400) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x6, &(0x7f00000006c0)=@raw=[@tail_call, @exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 2.927292162s ago: executing program 4 (id=2790): r0 = syz_open_dev$evdev(0x0, 0x727, 0x8000) ioctl$EVIOCGREP(r0, 0x80084503, 0x0) 2.849742918s ago: executing program 7 (id=2791): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802000002000000000000000d0000008500000053000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000120000850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca", 0xbc}], 0x1}, 0x0) socket(0x10, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r3, @ANYBLOB="138000002b9201002400128009000100626f6e64000000001400028008", @ANYRES16=r1], 0x44}}, 0x8000) 2.669538934s ago: executing program 4 (id=2792): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x3554000) fadvise64(0xffffffffffffffff, 0x85f5, 0x4000000005, 0x4) 2.585089862s ago: executing program 7 (id=2793): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000400)={0x18, 0x1402, 0x1, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x4850) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 2.405953802s ago: executing program 7 (id=2794): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001340)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {}, {0xfff6, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0xa92c}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}}, 0x4000010) 2.311801539s ago: executing program 6 (id=2795): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_l2cap(r5, 0x0, 0x0) dup(r4) syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000003c0)={0x1, r2}) 540.009415ms ago: executing program 7 (id=2796): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x200c000) 0s ago: executing program 3 (id=2797): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000200000000fddbdf257f0000010b9cf2065905b43b000000000000000000000000000000000000000000000004000000000a0060", @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000004000000000000000fdffffffffffffff02000000000000000000000000000000feffffffffffffff00000000000000000000000000000000000000000000000009000000000000400001020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) kernel console output (not intermixed with test programs): 5215][ T8869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.750'. [ 400.985507][ T5622] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 401.129446][ T5795] IPVS: starting estimator thread 0... [ 401.135519][ T5622] usb 1-1: Using ep0 maxpacket: 32 [ 401.137442][ T5622] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.137469][ T5622] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.137489][ T5622] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 401.137525][ T5622] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 401.137545][ T5622] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.177407][ T5622] usb 1-1: config 0 descriptor?? [ 401.215596][ T8873] IPVS: using max 8 ests per chain, 19200 per kthread [ 401.713425][ T5622] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0009/input/input24 [ 401.800293][ T5622] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0009/input/input25 [ 401.964451][ T5622] kye 0003:0458:5011.0009: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 401.991990][ T8885] vlan2: entered promiscuous mode [ 402.189225][ T8894] netlink: 'syz.6.760': attribute type 1 has an invalid length. [ 402.306482][ T8898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.761'. [ 402.630161][ T8904] random: crng reseeded on system resumption [ 402.767238][ C0] kye 0003:0458:5011.0009: usb_submit_urb(ctrl) failed: -1 [ 402.905582][ T820] usb 1-1: reset high-speed USB device number 18 using dummy_hcd [ 403.847183][ T820] usb 1-1: device descriptor read/64, error -32 [ 404.040531][ T8929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.771'. [ 404.218036][ T8934] IPVS: ip_vs_add_dest(): server weight less than zero [ 405.114959][ T8936] vlan0: entered promiscuous mode [ 405.908621][ T8957] random: crng reseeded on system resumption [ 406.022579][ T8972] kvm: kvm [8971]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 406.220705][ T9] usb 1-1: USB disconnect, device number 18 [ 406.385095][ T5795] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 407.405513][ T5795] usb 6-1: Using ep0 maxpacket: 32 [ 407.410698][ T5795] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.410727][ T5795] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.410748][ T5795] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 407.410786][ T5795] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 407.410807][ T5795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.427150][ T5795] usb 6-1: config 0 descriptor?? [ 407.952487][ T8989] netlink: 'syz.6.790': attribute type 17 has an invalid length. [ 407.952507][ T8989] netlink: 8 bytes leftover after parsing attributes in process `syz.6.790'. [ 407.952529][ T8989] bond0: option all_slaves_active: invalid value (39) [ 408.239159][ T5795] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.000A/input/input26 [ 408.802081][ T5795] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.000A/input/input27 [ 408.962579][ T9006] kvm: kvm [9005]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 409.079032][ T9004] random: crng reseeded on system resumption [ 409.520677][ T5795] kye 0003:0458:5011.000A: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.5-1/input0 [ 409.783701][ T9018] netlink: 'syz.6.805': attribute type 1 has an invalid length. [ 409.953589][ T9018] 8021q: adding VLAN 0 to HW filter on device bond1 [ 409.955959][ T9] usb 6-1: reset high-speed USB device number 5 using dummy_hcd [ 410.479809][ T9033] netlink: 48 bytes leftover after parsing attributes in process `syz.5.812'. [ 410.480765][ T9033] bridge_slave_0: left allmulticast mode [ 410.480793][ T9033] bridge_slave_0: left promiscuous mode [ 410.508197][ T9033] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.509798][ T9032] netlink: 'syz.0.811': attribute type 17 has an invalid length. [ 410.509815][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.811'. [ 411.372352][ T9033] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 411.628260][ T9032] bond0: option all_slaves_active: invalid value (39) [ 412.397980][ T9049] random: crng reseeded on system resumption [ 412.945519][ T9] usb 6-1: device descriptor read/64, error -71 [ 413.255577][ T9] usb 6-1: reset high-speed USB device number 5 using dummy_hcd [ 413.955904][ T9094] netlink: 'syz.0.831': attribute type 2 has an invalid length. [ 413.955927][ T9094] netlink: 'syz.0.831': attribute type 2 has an invalid length. [ 415.646205][ T9100] block nbd0: shutting down sockets [ 416.275625][ T5622] usb 6-1: reset high-speed USB device number 5 using dummy_hcd [ 416.532632][ T9109] random: crng reseeded on system resumption [ 416.559615][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.5.842'. [ 416.592204][ T9117] vlan0: entered promiscuous mode [ 416.788561][ T1250] IPVS: starting estimator thread 0... [ 416.794158][ T9123] IPVS: ip_vs_add_dest(): server weight less than zero [ 416.885604][ T9124] IPVS: using max 8 ests per chain, 19200 per kthread [ 417.138878][ T835] usb 6-1: USB disconnect, device number 5 [ 417.577628][ T9136] ieee802154 phy1 wpan1: encryption failed: -22 [ 419.388274][ T9152] block nbd0: shutting down sockets [ 419.522998][ T5724] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 419.735913][ T5724] usb 7-1: Using ep0 maxpacket: 32 [ 420.112780][ T5724] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.112811][ T5724] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.112825][ T5724] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 420.112848][ T5724] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 420.112859][ T5724] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.145026][ T5724] usb 7-1: config 0 descriptor?? [ 420.379305][ T9159] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.633601][ T5724] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.000B/input/input28 [ 420.652425][ T9170] random: crng reseeded on system resumption [ 420.672716][ T9179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.860'. [ 420.787089][ T5724] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.000B/input/input29 [ 421.023320][ T5724] kye 0003:0458:5011.000B: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.6-1/input0 [ 421.877829][ C0] kye 0003:0458:5011.000B: usb_submit_urb(ctrl) failed: -1 [ 422.847168][ T5724] usb 7-1: USB disconnect, device number 3 [ 423.060095][ T9197] block nbd0: server does not support multiple connections per device. [ 423.060309][ T9197] block nbd0: shutting down sockets [ 423.738294][ T9220] random: crng reseeded on system resumption [ 423.925532][ T5724] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 424.101986][ T5724] usb 7-1: Using ep0 maxpacket: 32 [ 424.106623][ T5724] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.106652][ T5724] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.106671][ T5724] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 424.106709][ T5724] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 424.106728][ T5724] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.122707][ T5724] usb 7-1: config 0 descriptor?? [ 424.639180][ T5724] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.000C/input/input30 [ 424.757520][ T9248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.881'. [ 425.920826][ T9253] IPVS: ip_vs_add_dest(): server weight less than zero [ 426.268137][ T5724] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.000C/input/input31 [ 426.472269][ T9254] block nbd0: shutting down sockets [ 426.710421][ T5724] kye 0003:0458:5011.000C: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.6-1/input0 [ 426.791608][ T5724] usb 7-1: USB disconnect, device number 4 [ 427.255016][ T9276] fido_id[9276]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 427.302466][ T9282] netlink: 'syz.5.889': attribute type 1 has an invalid length. [ 427.544304][ T9282] 8021q: adding VLAN 0 to HW filter on device bond2 [ 427.674579][ T9290] bond2: (slave ip6gretap1): making interface the new active one [ 427.684807][ T9290] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 427.898015][ T9296] random: crng reseeded on system resumption [ 428.215815][ T835] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 428.509167][ T835] usb 6-1: Using ep0 maxpacket: 32 [ 428.536464][ T835] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.536493][ T835] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.536513][ T835] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 428.536586][ T835] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 428.536641][ T835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.867371][ T835] usb 6-1: config 0 descriptor?? [ 430.050003][ T59] block nbd6: Receive control failed (result -32) [ 430.359369][ T835] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.000D/input/input32 [ 430.810834][ T9308] nbd6: detected capacity change from 0 to 63 [ 431.008821][ T9263] block nbd6: Dead connection, failed to find a fallback [ 431.008844][ T9263] block nbd6: shutting down sockets [ 431.008856][ T9263] blk_print_req_error: 138 callbacks suppressed [ 431.008867][ T9263] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.008888][ T9263] buffer_io_error: 138 callbacks suppressed [ 431.008898][ T9263] Buffer I/O error on dev nbd6, logical block 0, async page read [ 431.009050][ T9263] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.009070][ T9263] Buffer I/O error on dev nbd6, logical block 1, async page read [ 431.009205][ T9263] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.009225][ T9263] Buffer I/O error on dev nbd6, logical block 2, async page read [ 431.009358][ T9263] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.009379][ T9263] Buffer I/O error on dev nbd6, logical block 3, async page read [ 431.011133][ T9263] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.011158][ T9263] Buffer I/O error on dev nbd6, logical block 0, async page read [ 431.011293][ T9263] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.011314][ T9263] Buffer I/O error on dev nbd6, logical block 1, async page read [ 431.011448][ T9263] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.011468][ T9263] Buffer I/O error on dev nbd6, logical block 2, async page read [ 431.011601][ T9263] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.011621][ T9263] Buffer I/O error on dev nbd6, logical block 3, async page read [ 431.011766][ T9263] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.011787][ T9263] Buffer I/O error on dev nbd6, logical block 0, async page read [ 431.011919][ T9263] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.011940][ T9263] Buffer I/O error on dev nbd6, logical block 1, async page read [ 431.018091][ T9263] ldm_validate_partition_table(): Disk read failed. [ 431.023182][ T9263] Dev nbd6: unable to read RDB block 0 [ 431.028303][ T9263] nbd6: unable to read partition table [ 431.054158][ T9263] ldm_validate_partition_table(): Disk read failed. [ 431.056243][ T9263] Dev nbd6: unable to read RDB block 0 [ 431.058303][ T9263] nbd6: unable to read partition table [ 431.316375][ T835] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.000D/input/input33 [ 431.351114][ T835] kye 0003:0458:5011.000D: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.5-1/input0 [ 431.628587][ T9323] netlink: 'syz.4.902': attribute type 2 has an invalid length. [ 431.908301][ T9333] netlink: 'syz.5.907': attribute type 17 has an invalid length. [ 431.908320][ T9333] netlink: 8 bytes leftover after parsing attributes in process `syz.5.907'. [ 431.908341][ T9333] bond0: option all_slaves_active: invalid value (39) [ 432.353092][ T5614] usb 6-1: USB disconnect, device number 6 [ 432.647042][ T9358] sctp: [Deprecated]: syz.3.914 (pid 9358) Use of int in maxseg socket option. [ 432.647042][ T9358] Use struct sctp_assoc_value instead [ 432.652604][ T9358] netlink: 'syz.3.914': attribute type 2 has an invalid length. [ 432.741458][ T9354] random: crng reseeded on system resumption [ 432.794792][ T9346] block nbd0: server does not support multiple connections per device. [ 432.795113][ T9346] block nbd0: shutting down sockets [ 433.562416][ T9372] netlink: 'syz.0.921': attribute type 17 has an invalid length. [ 433.562435][ T9372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.921'. [ 433.562457][ T9372] bond0: option all_slaves_active: invalid value (39) [ 433.850672][ T9383] nbd: nbd3 already in use [ 434.237100][ T9399] netlink: 'syz.5.931': attribute type 2 has an invalid length. [ 434.296099][ T9406] netlink: 'syz.3.935': attribute type 9 has an invalid length. [ 434.362355][ T9409] netlink: 'syz.5.936': attribute type 17 has an invalid length. [ 434.362372][ T9409] netlink: 8 bytes leftover after parsing attributes in process `syz.5.936'. [ 434.362400][ T9409] bond0: option all_slaves_active: invalid value (39) [ 435.010134][ T9434] netlink: 'syz.0.947': attribute type 9 has an invalid length. [ 435.046342][ T9435] netlink: 'syz.6.946': attribute type 2 has an invalid length. [ 436.196721][ T9460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.957'. [ 436.202670][ T9460] netlink: 24 bytes leftover after parsing attributes in process `syz.4.957'. [ 436.334971][ T9464] netlink: 'syz.5.959': attribute type 9 has an invalid length. [ 436.448556][ T9470] netlink: 'syz.4.960': attribute type 2 has an invalid length. [ 437.150458][ T9484] netlink: 24 bytes leftover after parsing attributes in process `syz.3.967'. [ 437.529972][ T9494] netlink: 24 bytes leftover after parsing attributes in process `syz.6.970'. [ 437.780073][ T9501] netlink: 'syz.3.972': attribute type 9 has an invalid length. [ 437.891852][ T9504] netlink: 'syz.0.974': attribute type 2 has an invalid length. [ 438.032885][ T9506] nbd: nbd3 already in use [ 438.951125][ T9531] netlink: 'syz.6.986': attribute type 2 has an invalid length. [ 439.044772][ T9529] kvm: kvm [9528]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 439.111382][ T9534] nbd: nbd6 already in use [ 439.296559][ T9536] openvswitch: netlink: Unknown key attributes 2 [ 439.419296][ T9538] netlink: 'syz.0.989': attribute type 17 has an invalid length. [ 439.419403][ T9538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.989'. [ 439.419426][ T9538] bond0: option all_slaves_active: invalid value (39) [ 439.898577][ T9553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.992'. [ 439.927723][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.600354][ T9570] netlink: 'syz.6.1002': attribute type 17 has an invalid length. [ 440.600375][ T9570] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1002'. [ 440.600397][ T9570] bond0: option all_slaves_active: invalid value (39) [ 441.807671][ T9598] netlink: 'syz.0.1013': attribute type 17 has an invalid length. [ 441.807693][ T9598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1013'. [ 441.807714][ T9598] bond0: option all_slaves_active: invalid value (39) [ 442.219519][ T9609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1015'. [ 443.170977][ T9631] netlink: 'syz.6.1025': attribute type 2 has an invalid length. [ 443.598758][ T9636] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1027'. [ 444.390894][ T9662] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1036'. [ 444.393912][ T9654] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1034'. [ 444.593483][ T9667] netlink: 'syz.0.1038': attribute type 2 has an invalid length. [ 444.974363][ T9674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1039'. [ 444.974654][ T9674] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 444.974667][ T9674] IPv6: NLM_F_CREATE should be set when creating new route [ 445.247439][ T9679] netlink: 'syz.5.1041': attribute type 17 has an invalid length. [ 445.247459][ T9679] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1041'. [ 445.247481][ T9679] bond0: option all_slaves_active: invalid value (39) [ 445.818874][ T9699] netlink: 'syz.0.1049': attribute type 2 has an invalid length. [ 445.987301][ T9709] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1051'. [ 446.072587][ T9711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1054'. [ 446.380389][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1055'. [ 446.544462][ T9716] random: crng reseeded on system resumption [ 447.525932][ T9737] netlink: 'syz.6.1062': attribute type 2 has an invalid length. [ 447.584708][ T9740] netlink: 'syz.4.1063': attribute type 1 has an invalid length. [ 447.717708][ T9745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1065'. [ 447.785004][ T9740] 8021q: adding VLAN 0 to HW filter on device bond3 [ 447.944131][ T9753] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1067'. [ 448.155571][ T5724] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 448.315531][ T9766] random: crng reseeded on system resumption [ 448.326471][ T5724] usb 4-1: Using ep0 maxpacket: 32 [ 448.328964][ T5724] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 448.329004][ T5724] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 448.329025][ T5724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.347421][ T5724] usb 4-1: config 0 descriptor?? [ 448.419049][ T5724] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 448.576911][ T9781] netlink: 'syz.0.1077': attribute type 2 has an invalid length. [ 448.775627][ T9790] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1080'. [ 449.374339][ T9821] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1092'. [ 450.917460][ T5724] usb 4-1: USB disconnect, device number 8 [ 451.303969][ T9904] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1131'. [ 451.615489][ T5724] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 451.775583][ T5724] usb 1-1: Using ep0 maxpacket: 32 [ 451.778496][ T5724] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.778529][ T5724] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 451.778567][ T5724] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 451.778587][ T5724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.788635][ T5724] usb 1-1: config 0 descriptor?? [ 451.810734][ T5724] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 451.845086][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1138'. [ 451.894206][ T9928] IPVS: ip_vs_add_dest(): server weight less than zero [ 453.582752][ T9971] netlink: 'syz.5.1156': attribute type 2 has an invalid length. [ 453.951317][ T9983] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1161'. [ 454.007552][ T9983] IPVS: ip_vs_add_dest(): server weight less than zero [ 454.395042][ T820] usb 1-1: USB disconnect, device number 19 [ 454.619671][T10003] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1169'. [ 454.653269][T10005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1170'. [ 454.653289][T10005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1170'. [ 454.653312][T10005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1170'. [ 454.735989][T10003] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1169'. [ 454.871440][T10007] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1171'. [ 455.285533][ T835] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 455.311528][T10033] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1181'. [ 455.311546][T10033] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1181'. [ 455.311569][T10033] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1181'. [ 455.384519][ T4183] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.384908][ T4183] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.384946][ T4183] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.384978][ T4183] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.506460][ T835] usb 1-1: Using ep0 maxpacket: 32 [ 455.509682][ T835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.509707][ T835] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 455.509744][ T835] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 455.509764][ T835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.563634][ T835] usb 1-1: config 0 descriptor?? [ 455.591840][ T835] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 455.610799][T10041] IPVS: ip_vs_add_dest(): server weight less than zero [ 456.300218][T10064] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 456.300251][T10064] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 456.300287][T10064] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 456.400612][T10064] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 456.551458][T10065] random: crng reseeded on system resumption [ 457.175754][T10085] nbd: nbd6 already in use [ 457.176480][T10085] block nbd6: NBD_DISCONNECT [ 457.176511][T10085] block nbd6: Send disconnect failed -32 [ 458.089721][ T5724] usb 1-1: USB disconnect, device number 20 [ 458.353938][T10128] nbd: must specify at least one socket [ 458.429178][T10132] netlink: 'syz.5.1218': attribute type 2 has an invalid length. [ 458.429200][T10132] netlink: 'syz.5.1218': attribute type 2 has an invalid length. [ 458.561405][T10129] random: crng reseeded on system resumption [ 459.304154][T10147] mac80211_hwsim hwsim13 wlan0: entered promiscuous mode [ 459.365525][ T5724] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 459.535469][ T5724] usb 1-1: Using ep0 maxpacket: 32 [ 459.539185][ T5724] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.539209][ T5724] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 459.539237][ T5724] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 459.539249][ T5724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.551412][ T5724] usb 1-1: config 0 descriptor?? [ 459.615572][ T5724] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 459.774242][T10167] overlayfs: missing 'workdir' [ 460.836971][T10185] random: crng reseeded on system resumption [ 460.923640][ T37] audit: type=1326 audit(1778291696.612:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10186 comm="syz.5.1239" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd188b6cdd9 code=0x0 [ 461.479994][T10206] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 461.800091][T10218] netlink: 'syz.5.1249': attribute type 1 has an invalid length. [ 461.863646][T10218] 8021q: adding VLAN 0 to HW filter on device bond3 [ 462.130640][T10223] random: crng reseeded on system resumption [ 462.301193][T10236] __nla_validate_parse: 4 callbacks suppressed [ 462.301211][T10236] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1255'. [ 462.301226][T10236] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1255'. [ 462.301249][T10236] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1255'. [ 462.345121][ T5614] usb 1-1: USB disconnect, device number 21 [ 462.429969][ T3766] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.430185][ T3766] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.430217][ T3766] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.430242][ T3766] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.004798][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1259'. [ 463.004862][T10255] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1259'. [ 465.426787][ T5724] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 465.524917][T10281] overlayfs: missing 'workdir' [ 465.554302][T10280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1273'. [ 465.577171][ T5724] usb 4-1: Using ep0 maxpacket: 32 [ 465.579441][ T5724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.579468][ T5724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.579489][ T5724] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 465.579527][ T5724] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 465.579548][ T5724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.647910][ T5724] usb 4-1: config 0 descriptor?? [ 468.041360][ T5724] usbhid 4-1:0.0: can't add hid device: -71 [ 468.041476][ T5724] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 468.061717][ T5724] usb 4-1: USB disconnect, device number 9 [ 469.224261][T10335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1294'. [ 469.301586][T10335] vlan0: entered promiscuous mode [ 471.765646][T10373] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1308'. [ 471.765671][T10373] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1308'. [ 471.984683][T10378] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1307'. [ 473.393010][T10395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1316'. [ 473.393031][T10395] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1316'. [ 475.552468][T10424] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1322'. [ 476.305489][ T5795] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 476.473597][ T5795] usb 7-1: Using ep0 maxpacket: 32 [ 476.490761][ T5795] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.490789][ T5795] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.490809][ T5795] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 476.490848][ T5795] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 476.490868][ T5795] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.561754][ T5795] usb 7-1: config 0 descriptor?? [ 476.968759][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 476.969174][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 476.969334][ T5795] usbhid 7-1:0.0: can't add hid device: -32 [ 476.969439][ T5795] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 476.975968][ T5795] usb 7-1: USB disconnect, device number 5 [ 479.471975][T10482] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1348'. [ 480.254006][T10504] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1352'. [ 480.361617][T10510] netlink: 'syz.0.1356': attribute type 2 has an invalid length. [ 481.979911][T10532] netlink: 'syz.6.1366': attribute type 1 has an invalid length. [ 483.470525][T10539] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 483.470525][T10539] Please contact the netfilter-devel mailing list or update your nftables rules. [ 484.102422][T10563] pim6reg1: entered promiscuous mode [ 484.102438][T10563] pim6reg1: entered allmulticast mode [ 484.394292][T10568] tipc: Trying to set illegal importance in message [ 484.874647][T10587] netlink: 'syz.0.1386': attribute type 1 has an invalid length. [ 487.336961][ T1250] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 487.485528][ T1250] usb 5-1: Using ep0 maxpacket: 32 [ 487.487780][ T1250] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.487807][ T1250] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.487827][ T1250] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 487.487864][ T1250] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 487.487883][ T1250] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.556683][ T1250] usb 5-1: config 0 descriptor?? [ 487.791130][T10686] random: crng reseeded on system resumption [ 487.976351][ T1250] usbhid 5-1:0.0: can't add hid device: -71 [ 487.976472][ T1250] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 488.008522][ T1250] usb 5-1: USB disconnect, device number 5 [ 488.080807][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 489.568084][T10736] 8021q: VLANs not supported on gre0 [ 489.630190][T10728] random: crng reseeded on system resumption [ 489.941973][T10747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1459'. [ 490.307968][T10757] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 490.686324][T10774] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1467'. [ 491.776659][T10787] block nbd0: server does not support multiple connections per device. [ 491.815021][T10787] block nbd0: shutting down sockets [ 492.504779][T10793] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 492.717268][T10797] kvm: kvm [10796]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 492.906358][T10811] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1480'. [ 493.789966][T10838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 493.792385][T10836] pim6reg1: entered promiscuous mode [ 493.792406][T10836] pim6reg1: entered allmulticast mode [ 494.111415][T10842] kvm: kvm [10841]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 494.442748][T10861] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1496'. [ 494.662544][T10863] pim6reg1: entered promiscuous mode [ 494.662567][T10863] pim6reg1: entered allmulticast mode [ 494.971720][T10880] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1505'. [ 495.026848][T10882] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 495.290535][T10888] kvm: kvm [10887]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 495.454541][T10899] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1513'. [ 495.740180][T10911] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1517'. [ 495.994865][T10919] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 496.025255][T10919] bond4: (slave lo): Enslaving as an active interface with an up link [ 496.038301][T10919] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 496.332894][T10926] kvm: kvm [10925]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 497.170193][T10943] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1531'. [ 497.565083][T10958] kvm: kvm [10956]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 497.749755][T10966] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 497.754646][T10966] bond3: (slave lo): Enslaving as an active interface with an up link [ 497.782111][T10966] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 498.264294][T10976] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1544'. [ 501.383703][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.451538][T11077] tipc: Invalid UDP bearer configuration [ 501.451633][T11077] tipc: Enabling of bearer rejected, failed to enable media [ 502.253559][T11108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1599'. [ 502.888138][T11132] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1611'. [ 502.890002][T11134] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1612'. [ 503.114427][T11141] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1615'. [ 504.619753][T11162] random: crng reseeded on system resumption [ 504.754768][T11172] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1625'. [ 504.774691][T11174] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1626'. [ 505.421692][T11193] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1634'. [ 505.568881][T11202] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1637'. [ 507.708697][T11217] random: crng reseeded on system resumption [ 508.365246][T11250] netlink: 'syz.3.1656': attribute type 17 has an invalid length. [ 508.373781][T11250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1656'. [ 508.373812][T11250] bond0: option all_slaves_active: invalid value (39) [ 508.445913][T11248] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1655'. [ 508.916067][T11272] pim6reg1: entered promiscuous mode [ 508.916093][T11272] pim6reg1: entered allmulticast mode [ 509.190829][T11281] tipc: Trying to set illegal importance in message [ 511.368963][T11297] netlink: 'syz.0.1671': attribute type 17 has an invalid length. [ 511.368982][T11297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1671'. [ 511.556189][T11297] bond0: option all_slaves_active: invalid value (39) [ 512.786209][T11325] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1681'. [ 513.909804][T11353] netlink: 'syz.5.1689': attribute type 17 has an invalid length. [ 513.909824][T11353] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1689'. [ 513.909847][T11353] bond0: option all_slaves_active: invalid value (39) [ 514.566684][T11358] tipc: Trying to set illegal importance in message [ 514.722200][T11368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1695'. [ 514.971169][T11375] netlink: 'syz.5.1698': attribute type 2 has an invalid length. [ 515.131364][T11383] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1702'. [ 515.233603][T11383] vlan3: entered promiscuous mode [ 516.057075][T11410] tipc: Trying to set illegal importance in message [ 516.263069][T11420] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1715'. [ 516.305671][T11420] vlan0: entered promiscuous mode [ 516.305803][T11420] gretap0: entered promiscuous mode [ 516.607508][T11422] nbd0: detected capacity change from 0 to 63 [ 516.608899][T11425] block nbd0: NBD_DISCONNECT [ 516.626915][T11425] block nbd0: Disconnected due to user request. [ 516.626987][T11425] block nbd0: shutting down sockets [ 516.629287][ T9263] blk_print_req_error: 138 callbacks suppressed [ 516.629303][ T9263] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.629334][ T9263] buffer_io_error: 138 callbacks suppressed [ 516.629344][ T9263] Buffer I/O error on dev nbd0, logical block 0, async page read [ 516.629525][ T9263] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.629546][ T9263] Buffer I/O error on dev nbd0, logical block 1, async page read [ 516.629679][ T9263] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.629700][ T9263] Buffer I/O error on dev nbd0, logical block 2, async page read [ 516.629834][ T9263] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.629855][ T9263] Buffer I/O error on dev nbd0, logical block 3, async page read [ 516.629999][ T9263] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.630020][ T9263] Buffer I/O error on dev nbd0, logical block 0, async page read [ 516.630154][ T9263] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.630174][ T9263] Buffer I/O error on dev nbd0, logical block 1, async page read [ 516.630313][ T9263] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.630334][ T9263] Buffer I/O error on dev nbd0, logical block 2, async page read [ 516.630464][ T9263] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.630485][ T9263] Buffer I/O error on dev nbd0, logical block 3, async page read [ 516.630623][ T9263] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 516.630644][ T9263] Buffer I/O error on dev nbd0, logical block 0, async page read [ 516.835673][ T5834] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 516.835704][ T5834] Buffer I/O error on dev nbd0, logical block 1, async page read [ 516.843428][ T9263] ldm_validate_partition_table(): Disk read failed. [ 516.861131][ T9263] Dev nbd0: unable to read RDB block 0 [ 516.913809][ T9263] nbd0: unable to read partition table [ 516.972892][ T9263] ldm_validate_partition_table(): Disk read failed. [ 516.980793][ T9263] Dev nbd0: unable to read RDB block 0 [ 516.989810][ T9263] nbd0: unable to read partition table [ 517.479446][T11458] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1729'. [ 518.115631][T11471] nbd5: detected capacity change from 0 to 63 [ 518.116072][T11474] block nbd5: NBD_DISCONNECT [ 518.117386][T11474] block nbd5: Disconnected due to user request. [ 518.117404][T11474] block nbd5: shutting down sockets [ 518.178516][ T8296] ldm_validate_partition_table(): Disk read failed. [ 518.184581][ T8296] Dev nbd5: unable to read RDB block 0 [ 518.190354][ T8296] nbd5: unable to read partition table [ 518.254025][ T8296] ldm_validate_partition_table(): Disk read failed. [ 518.260682][ T8296] Dev nbd5: unable to read RDB block 0 [ 518.273164][ T8296] nbd5: unable to read partition table [ 518.526888][T11482] kvm: kvm [11481]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 518.931660][T11502] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1745'. [ 519.225595][ T5614] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 519.370941][T11505] nbd4: detected capacity change from 0 to 63 [ 519.372268][T11506] block nbd4: NBD_DISCONNECT [ 519.372396][T11506] block nbd4: Disconnected due to user request. [ 519.372411][T11506] block nbd4: shutting down sockets [ 519.393081][ T9263] ldm_validate_partition_table(): Disk read failed. [ 519.395760][ T5614] usb 4-1: Using ep0 maxpacket: 32 [ 519.406980][ T5614] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.407008][ T5614] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.407031][ T5614] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 519.407068][ T5614] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 519.407087][ T5614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.409407][ T9263] Dev nbd4: unable to read RDB block 0 [ 519.456890][ T9263] nbd4: unable to read partition table [ 519.484360][ T5614] usb 4-1: config 0 descriptor?? [ 519.515066][ T9263] ldm_validate_partition_table(): Disk read failed. [ 519.538616][ T9263] Dev nbd4: unable to read RDB block 0 [ 519.548491][ T9263] nbd4: unable to read partition table [ 519.742060][T11516] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1750'. [ 519.913212][T11525] tipc: Trying to set illegal importance in message [ 520.108179][ T5614] usbhid 4-1:0.0: can't add hid device: -71 [ 520.108295][ T5614] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 520.114382][ T5614] usb 4-1: USB disconnect, device number 10 [ 520.166006][T11530] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1757'. [ 520.616753][T11543] nbd0: detected capacity change from 0 to 63 [ 520.618267][T11546] block nbd0: NBD_DISCONNECT [ 520.618384][T11546] block nbd0: Disconnected due to user request. [ 520.618399][T11546] block nbd0: shutting down sockets [ 520.699804][T11548] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1763'. [ 521.128461][T11566] kvm: kvm [11565]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 521.227104][T11576] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1773'. [ 521.374900][T11579] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1774'. [ 521.736459][T11599] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1781'. [ 521.861615][T11604] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1783'. [ 522.336589][T11617] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1788'. [ 522.483333][T11626] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1792'. [ 523.493662][T11671] netlink: 'syz.6.1805': attribute type 17 has an invalid length. [ 523.556025][T11671] bond0: option all_slaves_active: invalid value (39) [ 523.948513][ T37] audit: type=1326 audit(1778291759.552:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11674 comm="syz.5.1807" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd188b6cdd9 code=0x0 [ 524.795700][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 524.945486][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 524.947759][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.947787][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.947807][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 524.947843][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 524.947864][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.959816][T11702] __nla_validate_parse: 5 callbacks suppressed [ 524.959833][T11702] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1818'. [ 525.030200][ T9] usb 1-1: config 0 descriptor?? [ 525.062325][T11701] netlink: 'syz.6.1819': attribute type 17 has an invalid length. [ 525.062397][T11701] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1819'. [ 525.062421][T11701] bond0: option all_slaves_active: invalid value (39) [ 525.291449][T11708] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1820'. [ 525.741522][ T37] audit: type=1326 audit(1778291761.422:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11715 comm="syz.4.1825" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc4b08ccdd9 code=0x0 [ 526.003122][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 526.003238][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 526.057056][ T9] usb 1-1: USB disconnect, device number 22 [ 526.467203][T11735] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1831'. [ 527.195903][T11758] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1840'. [ 527.550774][ T37] audit: type=1326 audit(1778291763.242:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11761 comm="syz.6.1842" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb44cb3cdd9 code=0x0 [ 528.042235][T11776] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1847'. [ 528.457065][T11788] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1850'. [ 528.528754][T11786] kvm: kvm [11785]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 528.719721][T11788] bridge_slave_0: left allmulticast mode [ 528.719752][T11788] bridge_slave_0: left promiscuous mode [ 528.719982][T11788] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.804424][T11788] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 529.246624][ T37] audit: type=1804 audit(1778291764.912:6): pid=11804 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.1857" name="/newroot/251/memory.events" dev="tmpfs" ino=1316 res=1 errno=0 [ 529.365476][ T37] audit: type=1800 audit(1778291764.972:7): pid=11804 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.1857" name="memory.events" dev="tmpfs" ino=1316 res=0 errno=0 [ 529.413068][T11806] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 529.450263][T11806] bond4 (unregistering): Released all slaves [ 529.528182][T11818] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1860'. [ 529.528219][T11818] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1860'. [ 529.528575][T11818] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 530.441263][T11849] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1871'. [ 530.538231][T11859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1874'. [ 530.709433][T11862] netlink: 'syz.4.1875': attribute type 5 has an invalid length. [ 530.709451][T11862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1875'. [ 530.986810][T11866] kvm: kvm [11865]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 531.125719][T11874] nbd6: detected capacity change from 0 to 63 [ 531.133493][T11875] block nbd6: NBD_DISCONNECT [ 531.133600][T11875] block nbd6: Disconnected due to user request. [ 531.133615][T11875] block nbd6: shutting down sockets [ 531.186055][ C1] blk_print_req_error: 426 callbacks suppressed [ 531.186074][ C1] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 531.186255][ C1] buffer_io_error: 434 callbacks suppressed [ 531.186269][ C1] Buffer I/O error on dev nbd6, logical block 0, async page read [ 531.186525][ C1] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 531.186550][ C1] Buffer I/O error on dev nbd6, logical block 1, async page read [ 531.186621][ C1] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 531.186644][ C1] Buffer I/O error on dev nbd6, logical block 2, async page read [ 531.186714][ C1] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 531.186738][ C1] Buffer I/O error on dev nbd6, logical block 3, async page read [ 531.223923][ T9263] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 531.223957][ T9263] Buffer I/O error on dev nbd6, logical block 0, async page read [ 531.224098][ T9263] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 531.224119][ T9263] Buffer I/O error on dev nbd6, logical block 1, async page read [ 531.224244][ T9263] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 531.224263][ T9263] Buffer I/O error on dev nbd6, logical block 2, async page read [ 531.224386][ T9263] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 531.224406][ T9263] Buffer I/O error on dev nbd6, logical block 3, async page read [ 531.224542][ T9263] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 531.224562][ T9263] Buffer I/O error on dev nbd6, logical block 0, async page read [ 531.224686][ T9263] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 531.224705][ T9263] Buffer I/O error on dev nbd6, logical block 1, async page read [ 531.260230][ T9263] ldm_validate_partition_table(): Disk read failed. [ 531.268441][ T9263] Dev nbd6: unable to read RDB block 0 [ 531.382988][ T9263] nbd6: unable to read partition table [ 531.438882][ T9263] ldm_validate_partition_table(): Disk read failed. [ 531.449769][ T9263] Dev nbd6: unable to read RDB block 0 [ 531.469283][ T9263] nbd6: unable to read partition table [ 531.646306][T11892] netlink: 'syz.4.1887': attribute type 5 has an invalid length. [ 531.646326][T11892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1887'. [ 532.058405][T11912] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1896'. [ 532.131856][T11910] nbd0: detected capacity change from 0 to 63 [ 532.132488][T11914] block nbd0: NBD_DISCONNECT [ 532.138213][T11914] block nbd0: Disconnected due to user request. [ 532.138244][T11914] block nbd0: shutting down sockets [ 532.193734][ T9263] ldm_validate_partition_table(): Disk read failed. [ 532.200762][ T9263] Dev nbd0: unable to read RDB block 0 [ 532.211209][ T9263] nbd0: unable to read partition table [ 532.299646][ T9263] ldm_validate_partition_table(): Disk read failed. [ 532.305227][ T9263] Dev nbd0: unable to read RDB block 0 [ 532.322532][ T9263] nbd0: unable to read partition table [ 532.333329][T11921] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1900'. [ 532.651497][T11933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1905'. [ 532.756104][T11940] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1908'. [ 532.835954][T11943] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1909'. [ 533.715647][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 534.105714][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 534.327873][T11965] syz.4.1918 (11965): drop_caches: 2 [ 534.557970][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.558002][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.558024][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 534.558063][ T9] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 534.558084][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.463345][T11973] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1921'. [ 536.379895][ T9] usb 7-1: config 0 descriptor?? [ 536.931028][ T9] usb 7-1: can't set config #0, error -71 [ 536.931033][T11979] netlink: 'syz.0.1923': attribute type 5 has an invalid length. [ 536.931050][T11979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1923'. [ 537.762626][ T9] usb 7-1: USB disconnect, device number 6 [ 537.864981][T11985] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1925'. [ 538.059231][T11989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1927'. [ 538.105220][T11991] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1928'. [ 538.502519][T12010] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1934'. [ 538.748195][T12024] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1940'. [ 539.077156][T12037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1944'. [ 539.178184][T12042] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1945'. [ 539.221062][T12046] netlink: 'syz.6.1947': attribute type 1 has an invalid length. [ 539.304273][T12046] 8021q: adding VLAN 0 to HW filter on device bond4 [ 539.436562][T12046] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 539.539779][T12061] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1952'. [ 539.880083][T12074] syz.5.1955 (12074): drop_caches: 2 [ 541.125700][T12084] nbd0: detected capacity change from 0 to 63 [ 541.126135][T12085] block nbd0: NBD_DISCONNECT [ 541.126246][T12085] block nbd0: Disconnected due to user request. [ 541.126261][T12085] block nbd0: shutting down sockets [ 541.177514][ T5834] blk_print_req_error: 283 callbacks suppressed [ 541.177531][ T5834] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 541.177556][ T5834] buffer_io_error: 286 callbacks suppressed [ 541.177565][ T5834] Buffer I/O error on dev nbd0, logical block 0, async page read [ 541.177629][ T5834] Buffer I/O error on dev nbd0, logical block 1, async page read [ 541.177683][ T5834] Buffer I/O error on dev nbd0, logical block 2, async page read [ 541.177737][ T5834] Buffer I/O error on dev nbd0, logical block 3, async page read [ 541.178389][ T8296] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 541.178414][ T8296] Buffer I/O error on dev nbd0, logical block 0, async page read [ 541.178555][ T8296] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 541.178576][ T8296] Buffer I/O error on dev nbd0, logical block 1, async page read [ 541.178725][ T8296] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 541.178745][ T8296] Buffer I/O error on dev nbd0, logical block 2, async page read [ 541.178877][ T8296] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 541.178898][ T8296] Buffer I/O error on dev nbd0, logical block 3, async page read [ 541.179036][ T8296] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 541.179057][ T8296] Buffer I/O error on dev nbd0, logical block 0, async page read [ 541.179189][ T8296] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 541.179210][ T8296] Buffer I/O error on dev nbd0, logical block 1, async page read [ 541.179347][ T8296] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 541.179488][ T8296] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 541.179633][ T8296] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 541.191796][ T8296] ldm_validate_partition_table(): Disk read failed. [ 541.207092][ T8296] Dev nbd0: unable to read RDB block 0 [ 541.244482][ T8296] nbd0: unable to read partition table [ 541.300764][ T8296] ldm_validate_partition_table(): Disk read failed. [ 541.351475][ T8296] Dev nbd0: unable to read RDB block 0 [ 541.380850][ T8296] nbd0: unable to read partition table [ 541.500172][T12092] __nla_validate_parse: 1 callbacks suppressed [ 541.500190][T12092] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1963'. [ 541.912460][T12112] netlink: 'syz.0.1970': attribute type 1 has an invalid length. [ 542.013869][T12112] 8021q: adding VLAN 0 to HW filter on device bond3 [ 542.052988][T12114] vlan0: entered allmulticast mode [ 542.053008][T12114] bond3: entered allmulticast mode [ 542.387853][T12112] bond3: (slave geneve2): making interface the new active one [ 542.387876][T12112] geneve2: entered allmulticast mode [ 542.521243][T12116] syz.3.1971 (12116): drop_caches: 2 [ 542.961966][T12112] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 543.326329][T12124] nbd4: detected capacity change from 0 to 63 [ 543.326876][T12126] block nbd4: NBD_DISCONNECT [ 543.326991][T12126] block nbd4: Disconnected due to user request. [ 543.327006][T12126] block nbd4: shutting down sockets [ 543.349837][T12133] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1976'. [ 543.393820][ T9263] ldm_validate_partition_table(): Disk read failed. [ 543.399247][ T9263] Dev nbd4: unable to read RDB block 0 [ 543.413747][ T9263] nbd4: unable to read partition table [ 543.466006][ T9263] ldm_validate_partition_table(): Disk read failed. [ 543.472093][ T9263] Dev nbd4: unable to read RDB block 0 [ 543.474258][ T9263] nbd4: unable to read partition table [ 543.892224][ T1250] IPVS: starting estimator thread 0... [ 544.015503][T12162] IPVS: using max 9 ests per chain, 21600 per kthread [ 544.388573][T12167] syz.4.1986 (12167): drop_caches: 2 [ 544.763528][T12172] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1988'. [ 544.763593][T12172] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1988'. [ 545.688252][T12202] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2000'. [ 545.688283][T12202] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2000'. [ 545.767899][T12208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2003'. [ 545.871858][T12204] kvm: kvm [12203]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 546.354697][T12235] tipc: Trying to set illegal importance in message [ 546.504012][T12240] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2015'. [ 546.504043][T12240] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2015'. [ 546.961028][T12252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2020'. [ 547.328256][T12269] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2024'. [ 547.506157][T12271] tipc: Trying to set illegal importance in message [ 547.753544][T12278] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2027'. [ 547.823880][T12279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2026'. [ 547.962085][T12281] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2029'. [ 548.055702][T12281] bond0: entered promiscuous mode [ 548.055720][T12281] bond_slave_0: entered promiscuous mode [ 548.055932][T12281] bond_slave_1: entered promiscuous mode [ 548.089617][T12281] bridge1: port 1(bond0) entered blocking state [ 548.089826][T12281] bridge1: port 1(bond0) entered disabled state [ 548.090003][T12281] bond0: entered allmulticast mode [ 548.090017][T12281] bond_slave_0: entered allmulticast mode [ 548.090038][T12281] bond_slave_1: entered allmulticast mode [ 548.578905][T12299] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2037'. [ 548.597656][T12294] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2035'. [ 549.225015][T12319] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2043'. [ 551.041112][T12366] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2060'. [ 552.264033][T12386] fuse: Unknown parameter 'group_id00000000000000000000' [ 553.089539][T12337] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 553.089867][T12343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2051'. [ 553.626546][T12406] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2074'. [ 553.706458][T12414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2076'. [ 554.293645][T12436] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2085'. [ 554.354644][T12433] 8021q: adding VLAN 0 to HW filter on device bond4 [ 554.414572][T12438] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 555.084106][T12462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2093'. [ 555.154354][T12462] trusted_key: syz.4.2093 sent an empty control message without MSG_MORE. [ 555.256272][T12469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2097'. [ 555.344450][T12470] 8021q: adding VLAN 0 to HW filter on device bond6 [ 555.488651][T12473] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 555.604749][T12477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2099'. [ 555.675486][ T4917] Bluetooth: hci0: command 0x0406 tx timeout [ 555.921269][T12484] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2103'. [ 556.077707][T12492] nbd5: detected capacity change from 0 to 63 [ 556.078164][T12494] block nbd5: NBD_DISCONNECT [ 556.086267][T12494] block nbd5: Disconnected due to user request. [ 556.086366][ T8296] blk_print_req_error: 280 callbacks suppressed [ 556.086379][ T8296] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 556.086401][ T8296] buffer_io_error: 286 callbacks suppressed [ 556.086411][ T8296] Buffer I/O error on dev nbd5, logical block 1, async page read [ 556.086568][ T8296] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 556.086589][ T8296] Buffer I/O error on dev nbd5, logical block 2, async page read [ 556.086716][ T8296] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 556.086735][ T8296] Buffer I/O error on dev nbd5, logical block 3, async page read [ 556.086863][T12494] block nbd5: shutting down sockets [ 556.164778][T12501] fuse: Bad value for 'user_id' [ 556.164794][T12501] fuse: Bad value for 'user_id' [ 556.220896][ C1] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 556.220925][ C1] Buffer I/O error on dev nbd5, logical block 0, async page read [ 556.225294][ T8296] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 556.225404][ T8296] Buffer I/O error on dev nbd5, logical block 0, async page read [ 556.225555][ T8296] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 556.225574][ T8296] Buffer I/O error on dev nbd5, logical block 1, async page read [ 556.225704][ T8296] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 556.225724][ T8296] Buffer I/O error on dev nbd5, logical block 2, async page read [ 556.225858][ T8296] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 556.225878][ T8296] Buffer I/O error on dev nbd5, logical block 3, async page read [ 556.226013][ T8296] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 556.226034][ T8296] Buffer I/O error on dev nbd5, logical block 0, async page read [ 556.226158][ T8296] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 556.226270][ T8296] Buffer I/O error on dev nbd5, logical block 1, async page read [ 556.272252][ T8296] ldm_validate_partition_table(): Disk read failed. [ 556.277228][ T8296] Dev nbd5: unable to read RDB block 0 [ 556.281501][ T8296] nbd5: unable to read partition table [ 556.373788][ T8296] ldm_validate_partition_table(): Disk read failed. [ 556.444394][ T8296] Dev nbd5: unable to read RDB block 0 [ 556.487441][ T8296] nbd5: unable to read partition table [ 556.704450][T12506] netlink: 120 bytes leftover after parsing attributes in process `syz.5.2109'. [ 556.784976][T12517] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2113'. [ 557.227789][T12528] nbd0: detected capacity change from 0 to 63 [ 557.234316][T12532] block nbd0: NBD_DISCONNECT [ 557.235158][T12532] block nbd0: Disconnected due to user request. [ 557.235176][T12532] block nbd0: shutting down sockets [ 557.285232][ T8296] ldm_validate_partition_table(): Disk read failed. [ 557.298159][ T8296] Dev nbd0: unable to read RDB block 0 [ 557.304088][ T8296] nbd0: unable to read partition table [ 557.347929][ T8296] ldm_validate_partition_table(): Disk read failed. [ 557.350203][ T8296] Dev nbd0: unable to read RDB block 0 [ 557.352594][ T8296] nbd0: unable to read partition table [ 557.576292][T12541] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.581582][T12541] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.629926][T12546] netlink: 'syz.0.2123': attribute type 16 has an invalid length. [ 557.629943][T12546] netlink: 'syz.0.2123': attribute type 17 has an invalid length. [ 557.788187][T12548] kvm: kvm [12547]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 558.185037][T12566] __nla_validate_parse: 1 callbacks suppressed [ 558.185056][T12566] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2134'. [ 558.213250][T12567] netlink: 'syz.3.2135': attribute type 1 has an invalid length. [ 558.247947][T12546] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.248189][T12546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.253006][T12546] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.253136][T12546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.255480][T12561] nbd6: detected capacity change from 0 to 63 [ 558.256355][T12568] block nbd6: NBD_DISCONNECT [ 558.276748][T12568] block nbd6: Disconnected due to user request. [ 558.277766][T12568] block nbd6: shutting down sockets [ 558.372436][ T8296] ldm_validate_partition_table(): Disk read failed. [ 558.375269][ T8296] Dev nbd6: unable to read RDB block 0 [ 558.427469][T12575] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2136'. [ 558.464451][ T8296] nbd6: unable to read partition table [ 558.524839][ T8296] ldm_validate_partition_table(): Disk read failed. [ 558.541341][ T8296] Dev nbd6: unable to read RDB block 0 [ 558.554676][ T8296] nbd6: unable to read partition table [ 558.633381][T12546] 8021q: adding VLAN 0 to HW filter on device bond1 [ 558.643830][T12546] 8021q: adding VLAN 0 to HW filter on device bond2 [ 558.667608][T12546] vlan0: left allmulticast mode [ 558.667626][T12546] bond3: left allmulticast mode [ 558.667638][T12546] geneve2: left allmulticast mode [ 559.077909][T12567] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 559.365456][T12601] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2147'. [ 559.475488][T12598] nbd6: detected capacity change from 0 to 63 [ 559.478333][T12604] block nbd6: NBD_DISCONNECT [ 559.478446][T12604] block nbd6: Disconnected due to user request. [ 559.478461][T12604] block nbd6: shutting down sockets [ 559.537889][ T9263] ldm_validate_partition_table(): Disk read failed. [ 559.553590][ T9263] Dev nbd6: unable to read RDB block 0 [ 559.557799][ T9263] nbd6: unable to read partition table [ 559.593293][T12597] lo speed is unknown, defaulting to 1000 [ 559.607652][ T9263] ldm_validate_partition_table(): Disk read failed. [ 559.620802][ T9263] Dev nbd6: unable to read RDB block 0 [ 559.631960][ T9263] nbd6: unable to read partition table [ 559.869981][T12621] netlink: 'syz.3.2154': attribute type 1 has an invalid length. [ 560.056321][T12621] 8021q: adding VLAN 0 to HW filter on device bond5 [ 560.100059][T12597] lo speed is unknown, defaulting to 1000 [ 560.260225][T12597] lo speed is unknown, defaulting to 1000 [ 560.487737][T12631] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2158'. [ 560.593491][T12637] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2160'. [ 560.831065][T12645] nbd: nbd3 already in use [ 560.831324][T12645] block nbd3: NBD_DISCONNECT [ 560.831345][T12645] block nbd3: Send disconnect failed -32 [ 561.902542][T12657] syz.4.2166 (12657): drop_caches: 2 [ 564.011372][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.725454][T12670] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2171'. [ 565.947950][T12678] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2173'. [ 565.989845][T12597] infiniband sqz0: set active [ 565.989866][T12597] infiniband sqz0: added lo [ 566.050323][ T5614] lo speed is unknown, defaulting to 1000 [ 566.054614][T12597] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 566.070107][T12597] infiniband sqz0: Couldn't open port 1 [ 566.070381][T12597] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 566.070410][T12597] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 566.070446][T12597] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 566.150777][T12683] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2176'. [ 566.466888][T12597] RDS/IB: sqz0: added [ 566.474294][T12597] smc: adding ib device sqz0 with port count 1 [ 566.474648][T12597] smc: ib device sqz0 port 1 has no pnetid [ 566.950890][T12699] syz.0.2183 (12699): drop_caches: 2 [ 568.593276][ T5742] lo speed is unknown, defaulting to 1000 [ 568.620082][T12597] lo speed is unknown, defaulting to 1000 [ 569.795693][T12719] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2189'. [ 570.284796][T12597] lo speed is unknown, defaulting to 1000 [ 571.180960][T12744] syz.6.2198 (12744): drop_caches: 2 [ 572.499555][T12597] lo speed is unknown, defaulting to 1000 [ 573.982464][ T4917] block nbd3: Receive control failed (result -32) [ 574.066026][T12746] nbd3: detected capacity change from 0 to 63 [ 574.067145][ T8296] block nbd3: Dead connection, failed to find a fallback [ 574.067165][ T8296] block nbd3: shutting down sockets [ 574.067177][ T8296] blk_print_req_error: 579 callbacks suppressed [ 574.067187][ T8296] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 574.067208][ T8296] buffer_io_error: 582 callbacks suppressed [ 574.067217][ T8296] Buffer I/O error on dev nbd3, logical block 0, async page read [ 574.067362][ T8296] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 574.067383][ T8296] Buffer I/O error on dev nbd3, logical block 1, async page read [ 574.067518][ T8296] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 574.067538][ T8296] Buffer I/O error on dev nbd3, logical block 2, async page read [ 574.067669][ T8296] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 574.067690][ T8296] Buffer I/O error on dev nbd3, logical block 3, async page read [ 574.067870][ T8296] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 574.067891][ T8296] Buffer I/O error on dev nbd3, logical block 0, async page read [ 574.068027][ T8296] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 574.068047][ T8296] Buffer I/O error on dev nbd3, logical block 1, async page read [ 574.068189][ T8296] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 574.068210][ T8296] Buffer I/O error on dev nbd3, logical block 2, async page read [ 574.068340][ T8296] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 574.068359][ T8296] Buffer I/O error on dev nbd3, logical block 3, async page read [ 574.068500][ T8296] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 574.068521][ T8296] Buffer I/O error on dev nbd3, logical block 0, async page read [ 574.068654][ T8296] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 574.068674][ T8296] Buffer I/O error on dev nbd3, logical block 1, async page read [ 574.070454][ T8296] ldm_validate_partition_table(): Disk read failed. [ 574.071545][ T8296] Dev nbd3: unable to read RDB block 0 [ 574.072738][ T8296] nbd3: unable to read partition table [ 574.074634][T12747] block nbd3: NBD_DISCONNECT [ 574.074656][T12747] block nbd3: Send disconnect failed -32 [ 574.321348][ T8296] ldm_validate_partition_table(): Disk read failed. [ 574.328406][ T8296] Dev nbd3: unable to read RDB block 0 [ 574.332678][ T8296] nbd3: unable to read partition table [ 574.729820][T12762] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2205'. [ 575.065014][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 575.093053][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 575.117032][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 575.128479][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 575.133368][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 575.301916][T12774] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2209'. [ 575.303498][T12774] tipc: Invalid UDP bearer configuration [ 575.303540][T12774] tipc: Enabling of bearer rejected, failed to enable media [ 575.395840][T12597] lo speed is unknown, defaulting to 1000 [ 579.120368][ T4917] Bluetooth: hci1: command tx timeout [ 579.827870][T12794] syz.0.2213 (12794): drop_caches: 2 [ 579.947555][T12799] nbd6: detected capacity change from 0 to 63 [ 579.947994][T12804] block nbd6: NBD_DISCONNECT [ 579.948102][T12804] block nbd6: Disconnected due to user request. [ 579.948116][T12804] block nbd6: shutting down sockets [ 579.954075][ T8296] blk_print_req_error: 138 callbacks suppressed [ 579.954090][ T8296] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 579.954113][ T8296] buffer_io_error: 138 callbacks suppressed [ 579.954123][ T8296] Buffer I/O error on dev nbd6, logical block 0, async page read [ 579.954271][ T8296] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 579.954291][ T8296] Buffer I/O error on dev nbd6, logical block 1, async page read [ 579.954425][ T8296] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 579.954446][ T8296] Buffer I/O error on dev nbd6, logical block 2, async page read [ 579.954583][ T8296] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 579.954604][ T8296] Buffer I/O error on dev nbd6, logical block 3, async page read [ 579.954744][ T8296] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 579.954765][ T8296] Buffer I/O error on dev nbd6, logical block 0, async page read [ 579.995720][ T11] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 579.995749][ T11] Buffer I/O error on dev nbd6, logical block 1, async page read [ 579.995809][ T11] Buffer I/O error on dev nbd6, logical block 2, async page read [ 579.995863][ T11] Buffer I/O error on dev nbd6, logical block 3, async page read [ 579.996650][ T8296] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 579.996675][ T8296] Buffer I/O error on dev nbd6, logical block 0, async page read [ 579.996813][ T8296] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 579.996833][ T8296] Buffer I/O error on dev nbd6, logical block 1, async page read [ 579.996975][ T8296] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 579.997121][ T8296] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 580.012671][ T8296] ldm_validate_partition_table(): Disk read failed. [ 580.023055][ T8296] Dev nbd6: unable to read RDB block 0 [ 580.079663][ T8296] nbd6: unable to read partition table [ 580.182236][T12597] lo speed is unknown, defaulting to 1000 [ 580.197354][ T8296] ldm_validate_partition_table(): Disk read failed. [ 580.208375][ T8296] Dev nbd6: unable to read RDB block 0 [ 580.229339][ T8296] nbd6: unable to read partition table [ 580.379050][T12813] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2221'. [ 580.379070][T12813] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2221'. [ 580.766279][T12826] kvm: kvm [12822]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 580.991885][T12766] lo speed is unknown, defaulting to 1000 [ 581.207173][ T4917] Bluetooth: hci1: command tx timeout [ 582.181665][T12842] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2227'. [ 582.181736][T12842] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2227'. [ 583.283497][ T4917] Bluetooth: hci1: command tx timeout [ 584.709701][T12846] syz.0.2229 (12846): drop_caches: 2 [ 585.356858][ T4917] Bluetooth: hci1: command tx timeout [ 585.490296][T12863] kvm: kvm [12861]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 586.048034][T12873] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2237'. [ 586.073404][ T151] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.073424][ T151] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.443178][T12881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2239'. [ 586.524769][T12885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2241'. [ 586.734322][T12891] fuse: Bad value for 'rootmode' [ 586.882274][ T151] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.882305][ T151] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.402096][ T151] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.402131][ T151] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.782515][T12912] netlink: 'syz.0.2249': attribute type 1 has an invalid length. [ 587.869436][ T151] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.869456][ T151] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.962235][T12912] 8021q: adding VLAN 0 to HW filter on device bond5 [ 588.006520][T12917] bond5: (slave ip6gretap1): making interface the new active one [ 588.015808][T12917] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 588.336479][T12928] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2253'. [ 588.355766][T12766] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.355876][T12766] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.356336][T12766] bridge_slave_0: entered allmulticast mode [ 588.373072][T12766] bridge_slave_0: entered promiscuous mode [ 588.388295][T12933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2252'. [ 588.478631][T12766] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.478732][T12766] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.479027][T12766] bridge_slave_1: entered allmulticast mode [ 588.487956][T12766] bridge_slave_1: entered promiscuous mode [ 588.493703][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2253'. [ 588.783916][T12946] fuse: Bad value for 'rootmode' [ 588.927993][T12766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.949457][T12766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.503185][T12766] team0: Port device team_slave_0 added [ 589.512276][T12766] team0: Port device team_slave_1 added [ 590.267562][T12766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 590.267579][T12766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.267603][T12766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 590.331873][ T5262] 8021q: adding VLAN 0 to HW filter on device eth9 [ 590.334731][T12766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.334744][T12766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.334768][T12766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.536471][T12995] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2266'. [ 590.899127][ T151] bridge_slave_1: left allmulticast mode [ 590.899162][ T151] bridge_slave_1: left promiscuous mode [ 590.899759][ T151] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.999345][ T151] bond0: left allmulticast mode [ 590.999366][ T151] bond_slave_0: left allmulticast mode [ 590.999390][ T151] bond_slave_1: left allmulticast mode [ 590.999659][ T151] bridge1: port 1(bond0) entered disabled state [ 591.581156][T13005] netlink: 'syz.4.2270': attribute type 1 has an invalid length. [ 591.906215][ T151] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 592.216132][ T151] bond6 (unregistering): (slave geneve2): Releasing backup interface [ 592.475961][ T151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 592.495751][ T151] bond_slave_0: left promiscuous mode [ 592.538246][ T151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 592.555771][ T151] bond_slave_1: left promiscuous mode [ 592.598687][ T151] bond0 (unregistering): Released all slaves [ 592.604792][ T151] bond1 (unregistering): Released all slaves [ 592.675744][ T151] bond2 (unregistering): Released all slaves [ 592.692389][ T151] bond3 (unregistering): Released all slaves [ 592.735879][ T151] bond4 (unregistering): (slave lo): Releasing backup interface [ 592.757548][ T151] bond4 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 592.760244][ T151] bond4 (unregistering): Released all slaves [ 592.787990][ T151] bond5 (unregistering): Released all slaves [ 592.804619][ T151] bond6 (unregistering): Released all slaves [ 592.883693][T13002] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2269'. [ 592.883722][T13002] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2269'. [ 592.937213][T13005] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 592.949518][ T5614] lo speed is unknown, defaulting to 1000 [ 592.949543][ T5614] sqz0: Port: 1 Link DOWN [ 592.981155][ T5622] syz1: Port: 1 Link DOWN [ 593.035177][ T5614] lo speed is unknown, defaulting to 1000 [ 593.174857][T12766] hsr_slave_0: entered promiscuous mode [ 593.193871][T12766] hsr_slave_1: entered promiscuous mode [ 593.201791][T12766] debugfs: 'hsr0' already exists in 'hsr' [ 593.201814][T12766] Cannot create hsr debugfs directory [ 593.205685][T13016] fuse: Unknown parameter 'use00000000000000000000' [ 594.048758][T13047] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2280'. [ 594.426661][T13058] netlink: 'syz.6.2282': attribute type 1 has an invalid length. [ 594.612124][T13058] 8021q: adding VLAN 0 to HW filter on device bond5 [ 594.635127][T13062] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2284'. [ 594.635175][T13062] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2284'. [ 594.676001][ T5262] 8021q: adding VLAN 0 to HW filter on device eth10 [ 595.170629][T13073] random: crng reseeded on system resumption [ 595.265754][T13090] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2290'. [ 595.490789][T13095] netlink: 'syz.3.2291': attribute type 1 has an invalid length. [ 595.520558][T13085] syzkaller1: entered promiscuous mode [ 595.520582][T13085] syzkaller1: entered allmulticast mode [ 595.655822][T13095] 8021q: adding VLAN 0 to HW filter on device bond8 [ 595.804632][T13106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2293'. [ 596.042280][ T5262] 8021q: adding VLAN 0 to HW filter on device eth11 [ 596.099102][T12766] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 596.234582][T12766] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 596.265235][T13117] netlink: 'syz.6.2295': attribute type 1 has an invalid length. [ 596.279868][T12766] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 596.338660][T12766] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 596.380559][T13117] 8021q: adding VLAN 0 to HW filter on device bond6 [ 596.402728][T12766] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 596.698894][T12766] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 596.798854][T12766] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 596.976474][T12766] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 597.429929][T13159] netlink: 'syz.0.2302': attribute type 1 has an invalid length. [ 597.563252][T13138] syz.3.2300 (13138): drop_caches: 2 [ 597.691617][T13159] 8021q: adding VLAN 0 to HW filter on device bond6 [ 598.158239][ T5262] 8021q: adding VLAN 0 to HW filter on device eth12 [ 598.290496][T12766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 598.472950][T13183] random: crng reseeded on system resumption [ 598.548838][T12766] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.558525][ T996] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.558786][ T996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.685236][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.685672][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.932342][T13195] netlink: 'syz.6.2310': attribute type 1 has an invalid length. [ 599.010529][T13195] 8021q: adding VLAN 0 to HW filter on device bond7 [ 599.155879][T13204] netlink: 'syz.4.2313': attribute type 1 has an invalid length. [ 599.317205][T13204] 8021q: adding VLAN 0 to HW filter on device bond6 [ 599.380795][T13212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2311'. [ 600.294738][T13225] syz.6.2315 (13225): drop_caches: 2 [ 600.804363][T13242] netlink: 'syz.0.2323': attribute type 1 has an invalid length. [ 600.924350][T13242] 8021q: adding VLAN 0 to HW filter on device bond7 [ 601.098083][T13257] netlink: 'syz.0.2326': attribute type 1 has an invalid length. [ 601.211023][T13257] 8021q: adding VLAN 0 to HW filter on device bond8 [ 601.211665][T13251] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2324'. [ 601.374594][T13269] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2329'. [ 601.431992][T13270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2327'. [ 601.544096][T12766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.627232][T13277] syz.6.2331 (13277): drop_caches: 2 [ 602.448863][T13291] netlink: 'syz.3.2335': attribute type 1 has an invalid length. [ 602.563617][T13291] 8021q: adding VLAN 0 to HW filter on device bond9 [ 602.629361][T13293] bond9: (slave ip6gretap1): making interface the new active one [ 602.630870][T13293] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 602.790311][T13297] netlink: 'syz.6.2337': attribute type 1 has an invalid length. [ 602.882504][T13302] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2339'. [ 602.918525][T13297] 8021q: adding VLAN 0 to HW filter on device bond8 [ 605.899012][T13307] block nbd0: server does not support multiple connections per device. [ 605.899256][T13307] block nbd0: shutting down sockets [ 606.777362][T13320] syz.4.2343 (13320): drop_caches: 2 [ 606.934814][T12766] veth0_vlan: entered promiscuous mode [ 609.796072][T13335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2346'. [ 609.796147][T13335] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2346'. [ 610.680535][T12766] veth1_vlan: entered promiscuous mode [ 611.100845][T13343] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2348'. [ 611.957216][T12766] veth0_macvtap: entered promiscuous mode [ 611.991945][T12766] veth1_macvtap: entered promiscuous mode [ 612.050460][T12766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 612.100840][T12766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.131829][ T43] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.133344][ T43] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.133957][ T43] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.134152][ T43] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.166448][T13382] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2358'. [ 613.332939][T13319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.332958][T13319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.472927][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.472947][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.601820][T13386] syz.0.2360 (13386): drop_caches: 2 [ 613.661986][T13391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2362'. [ 614.267308][T13415] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2369'. [ 614.936695][T13422] ======================================================= [ 614.936695][T13422] WARNING: The mand mount option has been deprecated and [ 614.936695][T13422] and is ignored by this kernel. Remove the mand [ 614.936695][T13422] option from the mount to silence this warning. [ 614.936695][T13422] ======================================================= [ 615.106189][T13430] syz.0.2374 (13430): drop_caches: 2 [ 615.645952][T13426] lo speed is unknown, defaulting to 1000 [ 616.523555][T13471] syz.7.2389 (13471): drop_caches: 2 [ 617.899619][T13519] syz.7.2404 (13519): drop_caches: 2 [ 620.258604][T13570] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2417'. [ 620.524442][T13581] syz.3.2419 (13581): drop_caches: 2 [ 622.092704][T13602] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2427'. [ 623.407791][T13618] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 623.605942][T13633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2435'. [ 623.662145][T13638] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2441'. [ 623.905462][ T5622] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 624.057373][ T5622] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.057403][ T5622] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.057430][ T5622] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 624.057441][ T5622] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.097759][T13645] syz.7.2442 (13645): drop_caches: 2 [ 624.112599][ T5622] usb 5-1: config 0 descriptor?? [ 624.250889][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.543594][ T5622] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 624.556529][ T5622] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 624.556561][ T5622] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 624.556587][ T5622] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 624.556612][ T5622] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 624.556636][ T5622] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 624.556661][ T5622] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 624.618993][ T5622] arvo 0003:1E7D:30D4.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 624.800764][ T5622] arvo 0003:1E7D:30D4.000E: couldn't init struct arvo_device [ 624.800816][ T5622] arvo 0003:1E7D:30D4.000E: couldn't install keyboard [ 624.825476][ T5622] arvo 0003:1E7D:30D4.000E: probe with driver arvo failed with error -71 [ 624.845109][ T5622] usb 5-1: USB disconnect, device number 6 [ 625.092192][T13655] fido_id[13655]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 625.272260][T13673] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2454'. [ 629.136347][T13690] syz.4.2458 (13690): drop_caches: 2 [ 630.118110][T13711] netlink: 'syz.0.2467': attribute type 1 has an invalid length. [ 630.270581][T13711] 8021q: adding VLAN 0 to HW filter on device bond10 [ 630.306427][T13714] bond10: (slave geneve3): making interface the new active one [ 630.322497][T13714] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 630.381691][T13714] syz.0.2467 (13714) used greatest stack depth: 17952 bytes left [ 635.213972][T13744] syz.7.2479 (13744): drop_caches: 2 [ 637.955449][T13756] netlink: 'syz.4.2481': attribute type 1 has an invalid length. [ 638.041460][T13756] 8021q: adding VLAN 0 to HW filter on device bond8 [ 640.037325][T13794] block nbd0: shutting down sockets [ 641.180009][T13801] syz.4.2496 (13801): drop_caches: 2 [ 641.791705][T13818] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2501'. [ 641.981251][T13822] netlink: 'syz.0.2504': attribute type 1 has an invalid length. [ 642.038657][T13822] 8021q: adding VLAN 0 to HW filter on device bond11 [ 642.554896][T13840] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2510'. [ 645.150219][T13856] netlink: 'syz.3.2515': attribute type 1 has an invalid length. [ 645.193072][T13856] 8021q: adding VLAN 0 to HW filter on device bond11 [ 645.218657][T13856] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2515'. [ 645.298982][T13857] syz.6.2516 (13857): drop_caches: 2 [ 647.946452][ T5614] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 648.101034][T13896] netlink: 'syz.3.2529': attribute type 1 has an invalid length. [ 648.107310][ T5614] usb 5-1: Using ep0 maxpacket: 32 [ 648.120021][ T5614] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 648.120049][ T5614] usb 5-1: config 0 interface 0 has no altsetting 0 [ 648.120067][ T5614] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 648.120078][ T5614] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.128539][ T5614] usb 5-1: config 0 descriptor?? [ 648.153994][T13899] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2529'. [ 648.425709][T13896] 8021q: adding VLAN 0 to HW filter on device bond12 [ 648.428721][T13902] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2532'. [ 648.651527][ T5614] corsair-psu 0003:1B1C:1C09.000F: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.4-1/input0 [ 648.995446][ T5614] corsair-psu 0003:1B1C:1C09.000F: unable to initialize device (-71) [ 649.055964][ T5614] corsair-psu 0003:1B1C:1C09.000F: probe with driver corsair-psu failed with error -71 [ 649.084207][ T5614] usb 5-1: USB disconnect, device number 7 [ 649.635136][T13922] netlink: 'syz.4.2539': attribute type 1 has an invalid length. [ 650.436124][T13939] netlink: 'syz.0.2544': attribute type 1 has an invalid length. [ 650.485077][T13940] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2544'. [ 651.082404][T13922] 8021q: adding VLAN 0 to HW filter on device bond9 [ 652.027721][T13939] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 652.232517][T13946] syz.6.2546 (13946): drop_caches: 2 [ 652.574688][T13972] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2556'. [ 652.574857][T13970] netlink: 'syz.4.2557': attribute type 1 has an invalid length. [ 652.768792][T13977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2555'. [ 653.820578][T13970] 8021q: adding VLAN 0 to HW filter on device bond10 [ 655.526154][T13989] netlink: 'syz.7.2560': attribute type 1 has an invalid length. [ 655.571963][T13990] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2560'. [ 655.860756][T13989] 8021q: adding VLAN 0 to HW filter on device bond1 [ 655.999231][T14004] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2564'. [ 656.188905][T14008] syz.7.2567 (14008): drop_caches: 2 [ 656.270318][T14015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2569'. [ 656.287749][T14018] netlink: 'syz.3.2571': attribute type 1 has an invalid length. [ 656.423393][T14018] 8021q: adding VLAN 0 to HW filter on device bond13 [ 659.169659][T14033] netlink: 'syz.4.2575': attribute type 1 has an invalid length. [ 659.376168][T14037] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2575'. [ 659.667298][T14041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2576'. [ 659.671016][T14033] 8021q: adding VLAN 0 to HW filter on device bond11 [ 660.085681][T14061] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2583'. [ 660.125687][T14067] syz.6.2582 (14067): drop_caches: 2 [ 662.014897][T14081] netlink: 'syz.6.2590': attribute type 1 has an invalid length. [ 662.066488][T14085] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2590'. [ 662.284456][T14081] 8021q: adding VLAN 0 to HW filter on device bond11 [ 666.111125][T14103] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2596'. [ 666.682881][T14111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2598'. [ 666.801352][T14114] syz.4.2600 (14114): drop_caches: 2 [ 669.441195][T14132] netlink: 'syz.0.2605': attribute type 1 has an invalid length. [ 669.652513][T14135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2605'. [ 669.652617][T14135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2605'. [ 669.984101][T14132] 8021q: adding VLAN 0 to HW filter on device bond14 [ 673.385427][ T835] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 673.542598][ T835] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 673.542632][ T835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.542651][ T835] usb 4-1: Product: syz [ 673.542663][ T835] usb 4-1: Manufacturer: syz [ 673.542676][ T835] usb 4-1: SerialNumber: syz [ 674.159145][T14182] syz.6.2619 (14182): drop_caches: 2 [ 674.739548][ T835] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 674.739582][ T835] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 674.740704][ T835] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 674.831678][ T835] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 674.920157][T14196] netlink: 'syz.0.2623': attribute type 1 has an invalid length. [ 674.929411][ T835] usb 4-1: USB disconnect, device number 11 [ 675.016822][T14204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2623'. [ 675.016851][T14204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2623'. [ 675.154373][T14196] 8021q: adding VLAN 0 to HW filter on device bond15 [ 675.570684][T14218] syz.3.2631 (14218): drop_caches: 2 [ 679.901220][T14242] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2637'. [ 679.920305][T14243] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2636'. [ 681.158741][T14250] netlink: 'syz.3.2640': attribute type 1 has an invalid length. [ 681.235181][T14256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2640'. [ 681.235212][T14256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2640'. [ 681.325432][ T5795] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 681.328907][T14250] 8021q: adding VLAN 0 to HW filter on device bond14 [ 681.418770][T14253] syzkaller0: entered promiscuous mode [ 681.418794][T14253] syzkaller0: entered allmulticast mode [ 681.505409][ T5795] usb 7-1: Using ep0 maxpacket: 32 [ 681.507786][ T5795] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 681.507808][ T5795] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 681.507839][ T5795] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 681.507859][ T5795] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.513731][ T5795] usb 7-1: config 0 descriptor?? [ 681.616022][T14267] syz.3.2645 (14267): drop_caches: 2 [ 681.685412][ T5617] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 681.850151][ T5617] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 681.850205][ T5617] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 681.850227][ T5617] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.887235][ T5617] usb 1-1: config 0 descriptor?? [ 681.918203][ T5617] pwc: Askey VC010 type 2 USB webcam detected. [ 682.308153][ T5617] pwc: recv_control_msg error -32 req 02 val 2b00 [ 682.310374][ T5617] pwc: recv_control_msg error -32 req 02 val 2700 [ 682.338160][ T5617] pwc: recv_control_msg error -32 req 02 val 2c00 [ 682.341705][ T5617] pwc: recv_control_msg error -32 req 04 val 1000 [ 682.342499][ T5617] pwc: recv_control_msg error -32 req 04 val 1300 [ 682.343294][ T5617] pwc: recv_control_msg error -32 req 04 val 1400 [ 682.345138][ T5617] pwc: recv_control_msg error -32 req 02 val 2000 [ 682.381445][ T5617] pwc: recv_control_msg error -32 req 02 val 2100 [ 682.394268][ T5617] pwc: recv_control_msg error -32 req 04 val 1500 [ 682.401869][ T5617] pwc: recv_control_msg error -32 req 02 val 2500 [ 682.402576][ T5617] pwc: recv_control_msg error -32 req 02 val 2400 [ 682.403287][ T5617] pwc: recv_control_msg error -32 req 02 val 2600 [ 682.404113][ T5617] pwc: recv_control_msg error -32 req 02 val 2900 [ 682.404713][ T5617] pwc: recv_control_msg error -32 req 02 val 2800 [ 682.614238][ T5617] pwc: recv_control_msg error -71 req 04 val 1200 [ 682.693752][ T5617] pwc: Registered as video103. [ 682.707488][ T5617] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input35 [ 682.800739][ T5617] usb 1-1: USB disconnect, device number 23 [ 683.024230][T14290] nbd: must specify at least one socket [ 685.107149][T14295] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2651'. [ 685.677526][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.750691][ T5724] usb 7-1: USB disconnect, device number 7 [ 685.783501][T14319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2660'. [ 685.905483][ T5614] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 686.130767][T14329] nbd: must specify at least one socket [ 686.380057][ T5614] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 686.380089][ T5614] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 686.380113][ T5614] usb 8-1: config 0 interface 0 has no altsetting 0 [ 686.380144][ T5614] usb 8-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 686.380172][ T5614] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.656881][ T5614] usb 8-1: config 0 descriptor?? [ 688.722084][ T5614] usb 8-1: can't set config #0, error -71 [ 688.767340][ T5614] usb 8-1: USB disconnect, device number 2 [ 688.839007][T14342] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2667'. [ 689.605383][ T820] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 689.769499][T14362] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2673'. [ 689.772674][ T820] usb 8-1: Using ep0 maxpacket: 32 [ 689.774650][ T820] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 689.774698][ T820] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 689.774737][ T820] usb 8-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 689.774758][ T820] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.785186][ T820] usb 8-1: config 0 descriptor?? [ 689.796993][ T820] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 690.592442][T14374] nbd: must specify at least one socket [ 693.503892][ T8601] usb 8-1: USB disconnect, device number 3 [ 693.636530][T14396] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2684'. [ 693.936118][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 694.455524][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 694.457590][ T9] usb 1-1: config 0 has no interfaces? [ 694.457622][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 694.457643][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.470204][ T9] usb 1-1: config 0 descriptor?? [ 694.575391][ T5724] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 694.710817][ T9] usb 1-1: USB disconnect, device number 24 [ 694.783664][ T5724] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 694.783694][ T5724] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 694.783719][ T5724] usb 5-1: config 0 interface 0 has no altsetting 0 [ 694.783749][ T5724] usb 5-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 694.783768][ T5724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.844664][ T5724] usb 5-1: config 0 descriptor?? [ 694.850822][T14410] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 695.281460][ T5724] usbhid 5-1:0.0: can't add hid device: -71 [ 695.281572][ T5724] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 695.314638][ T5724] usb 5-1: USB disconnect, device number 8 [ 698.077471][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 698.317055][ T59] block nbd0: Receive control failed (result -32) [ 698.396560][ T835] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 698.688627][T14436] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2698'. [ 699.083652][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 699.125955][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 699.148074][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 699.149862][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 699.150517][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 699.588219][T14450] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2702'. [ 700.025588][ T5795] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 701.368226][ T4917] Bluetooth: hci5: command tx timeout [ 703.486109][ T4917] Bluetooth: hci5: command tx timeout [ 703.757702][ T4917] block nbd1: Receive control failed (result -32) [ 704.245435][ T5795] usb 5-1: device not accepting address 9, error -71 [ 704.427122][T14488] nbd3: detected capacity change from 0 to 63 [ 704.456719][T14492] block nbd3: NBD_DISCONNECT [ 704.473731][T14492] block nbd3: Disconnected due to user request. [ 704.473826][T14492] block nbd3: shutting down sockets [ 704.515569][ C0] blk_print_req_error: 136 callbacks suppressed [ 704.515587][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 704.515616][ C0] buffer_io_error: 138 callbacks suppressed [ 704.515626][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 704.515695][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 704.515719][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 704.515775][ C0] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 704.515798][ C0] Buffer I/O error on dev nbd3, logical block 2, async page read [ 704.515852][ C0] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 704.515874][ C0] Buffer I/O error on dev nbd3, logical block 3, async page read [ 704.519314][T14479] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 704.519340][T14479] Buffer I/O error on dev nbd3, logical block 0, async page read [ 704.519483][T14479] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 704.519504][T14479] Buffer I/O error on dev nbd3, logical block 1, async page read [ 704.519634][T14479] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 704.519655][T14479] Buffer I/O error on dev nbd3, logical block 2, async page read [ 704.519795][T14479] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 704.519815][T14479] Buffer I/O error on dev nbd3, logical block 3, async page read [ 704.519956][T14479] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 704.519976][T14479] Buffer I/O error on dev nbd3, logical block 0, async page read [ 704.520106][T14479] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 704.520126][T14479] Buffer I/O error on dev nbd3, logical block 1, async page read [ 704.582044][T14447] lo speed is unknown, defaulting to 1000 [ 704.585380][ T5795] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 704.724072][T14479] ldm_validate_partition_table(): Disk read failed. [ 704.742111][T14479] Dev nbd3: unable to read RDB block 0 [ 704.752063][T14479] nbd3: unable to read partition table [ 704.775435][ T5795] usb 5-1: Using ep0 maxpacket: 32 [ 704.798566][ T5795] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.798614][ T5795] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 704.798661][ T5795] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 704.798681][ T5795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.895150][T14479] ldm_validate_partition_table(): Disk read failed. [ 704.918874][ T5795] usb 5-1: config 0 descriptor?? [ 704.920135][T14479] Dev nbd3: unable to read RDB block 0 [ 704.948692][T14479] nbd3: unable to read partition table [ 704.988977][ T5795] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 705.205450][ T820] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 705.355792][ T820] usb 7-1: Using ep0 maxpacket: 32 [ 705.357965][ T820] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 705.360706][ T820] usb 7-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 705.360730][ T820] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.360749][ T820] usb 7-1: Product: syz [ 705.360762][ T820] usb 7-1: Manufacturer: syz [ 705.360774][ T820] usb 7-1: SerialNumber: syz [ 705.423469][ T820] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 705.515567][ T4917] Bluetooth: hci5: command tx timeout [ 705.748548][ T820] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 705.946844][ T5795] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 705.979250][ T820] usb 7-1: us122l: couldn't allocate write buffer [ 705.980139][ T820] snd-usb-us122l 7-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 706.007684][ T820] usb 7-1: USB disconnect, device number 8 [ 706.051403][T14479] udevd[14479]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 706.138473][ T5795] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 706.138503][ T5795] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 706.138527][ T5795] usb 4-1: config 0 interface 0 has no altsetting 0 [ 706.138554][ T5795] usb 4-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 706.138565][ T5795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.195663][ T5795] usb 4-1: config 0 descriptor?? [ 706.208419][T14519] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 706.418783][T14447] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.418938][T14447] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.419284][T14447] bridge_slave_0: entered allmulticast mode [ 706.421227][T14447] bridge_slave_0: entered promiscuous mode [ 706.424194][T14447] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.424346][T14447] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.424483][T14447] bridge_slave_1: entered allmulticast mode [ 706.428542][T14447] bridge_slave_1: entered promiscuous mode [ 706.530302][T14447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 706.534438][T14447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.618023][ T5795] usbhid 4-1:0.0: can't add hid device: -71 [ 706.618147][ T5795] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 706.648864][ T5795] usb 4-1: USB disconnect, device number 12 [ 707.595520][ T4917] Bluetooth: hci5: command tx timeout [ 708.015148][ T4917] block nbd2: Receive control failed (result -32) [ 708.186001][T14447] team0: Port device team_slave_0 added [ 708.536427][T14447] team0: Port device team_slave_1 added [ 708.601240][ T5795] usb 5-1: USB disconnect, device number 10 [ 708.704261][T14447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 708.704281][T14447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.704305][T14447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 708.724553][T14543] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2723'. [ 708.830447][T14447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 708.830462][T14447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.830486][T14447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 709.077414][ T4917] Bluetooth: hci0: hcon ffff888039270000 sent 1 < count 63489 [ 710.423903][T14565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 710.493322][T14447] hsr_slave_0: entered promiscuous mode [ 710.495219][T14447] hsr_slave_1: entered promiscuous mode [ 710.507506][T14447] debugfs: 'hsr0' already exists in 'hsr' [ 710.507529][T14447] Cannot create hsr debugfs directory [ 710.715474][ T5617] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 710.877671][ T5617] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 710.877701][ T5617] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 710.877725][ T5617] usb 8-1: config 0 interface 0 has no altsetting 0 [ 710.877755][ T5617] usb 8-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 710.877775][ T5617] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.881544][T14583] netlink: 'syz.4.2733': attribute type 1 has an invalid length. [ 710.901233][ T5617] usb 8-1: config 0 descriptor?? [ 710.902244][T14574] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 711.005084][T14585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2733'. [ 711.363441][ T5617] usbhid 8-1:0.0: can't add hid device: -71 [ 711.363552][ T5617] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 711.375664][ T5617] usb 8-1: USB disconnect, device number 5 [ 711.386338][T14583] 8021q: adding VLAN 0 to HW filter on device bond12 [ 711.503007][T14587] nbd: must specify a size in bytes for the device [ 711.792577][T14594] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2736'. [ 713.755991][T14447] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.756023][T14447] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.201351][T14634] netlink: 'syz.7.2746': attribute type 1 has an invalid length. [ 714.267553][T14640] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2746'. [ 714.308647][T14634] 8021q: adding VLAN 0 to HW filter on device bond3 [ 714.797373][T14643] nbd: must specify a size in bytes for the device [ 715.819926][T14447] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 715.819947][T14447] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.945372][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 715.985397][ T5617] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 716.108636][ T9] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 716.108667][ T9] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 716.108691][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 716.108722][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 716.108741][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.135460][ T5617] usb 4-1: Using ep0 maxpacket: 32 [ 716.140677][ T5617] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 716.140701][ T5617] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.140718][ T5617] usb 4-1: Product: syz [ 716.140730][ T5617] usb 4-1: Manufacturer: syz [ 716.140743][ T5617] usb 4-1: SerialNumber: syz [ 716.265763][ T9] usb 5-1: config 0 descriptor?? [ 716.266765][T14647] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 716.362007][ T5617] usb 4-1: config 0 descriptor?? [ 716.595071][ T5617] usb 4-1: selecting invalid altsetting 3 [ 716.595156][ T5617] comedi comedi5: could not set alternate setting 3 in high speed [ 716.595172][ T5617] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 716.753481][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 716.753597][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 716.881038][ T5617] usbdux 4-1:0.0: probe with driver usbdux failed with error -22 [ 716.889129][ T9] usb 5-1: USB disconnect, device number 11 [ 717.128615][T14447] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 717.128648][T14447] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.176484][ T5617] usb 4-1: USB disconnect, device number 13 [ 718.661387][T14447] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 718.661422][T14447] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.470720][T14706] nbd: must specify a size in bytes for the device [ 723.275730][T14720] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2764'. [ 727.128528][T14770] nbd3: detected capacity change from 0 to 63 [ 727.129598][T14771] block nbd3: NBD_DISCONNECT [ 727.129859][T14771] block nbd3: Disconnected due to user request. [ 727.129930][T14771] block nbd3: shutting down sockets [ 727.176148][ T11] blk_print_req_error: 138 callbacks suppressed [ 727.176165][ T11] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 727.176189][ T11] buffer_io_error: 138 callbacks suppressed [ 727.176199][ T11] Buffer I/O error on dev nbd3, logical block 0, async page read [ 727.176260][ T11] Buffer I/O error on dev nbd3, logical block 1, async page read [ 727.176323][ T11] Buffer I/O error on dev nbd3, logical block 2, async page read [ 727.176376][ T11] Buffer I/O error on dev nbd3, logical block 3, async page read [ 727.181004][T14479] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 727.181031][T14479] Buffer I/O error on dev nbd3, logical block 0, async page read [ 727.181175][T14479] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 727.181196][T14479] Buffer I/O error on dev nbd3, logical block 1, async page read [ 727.181327][T14479] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 727.181349][T14479] Buffer I/O error on dev nbd3, logical block 2, async page read [ 727.181485][T14479] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 727.181506][T14479] Buffer I/O error on dev nbd3, logical block 3, async page read [ 727.181669][T14479] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 727.181690][T14479] Buffer I/O error on dev nbd3, logical block 0, async page read [ 727.181823][T14479] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 727.181842][T14479] Buffer I/O error on dev nbd3, logical block 1, async page read [ 727.181974][T14479] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 727.182113][T14479] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 727.182262][T14479] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 727.191532][T14479] ldm_validate_partition_table(): Disk read failed. [ 727.201721][T14479] Dev nbd3: unable to read RDB block 0 [ 727.207337][T14479] nbd3: unable to read partition table [ 727.243531][T14479] ldm_validate_partition_table(): Disk read failed. [ 727.252811][T14479] Dev nbd3: unable to read RDB block 0 [ 727.263451][T14479] nbd3: unable to read partition table [ 731.402709][T14447] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 731.434416][T14447] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 731.446441][T14447] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 731.498830][T14447] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 731.501958][T14447] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 731.650725][T14447] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 731.653624][T14447] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 731.721494][T14447] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 731.875440][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 732.008344][T14826] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2791'. [ 732.027371][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.027421][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 732.027443][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.037447][T14447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 732.040682][ T9] usb 4-1: config 0 descriptor?? [ 732.069398][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 732.192989][T14447] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.226215][ T996] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.226735][ T996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.293191][ T996] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.293764][ T996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.472250][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 732.474462][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 732.480179][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 732.480843][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 732.481635][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 732.482412][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 732.483821][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 732.494059][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 732.494705][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 732.496395][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 732.506549][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 732.508767][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 732.509861][ T9] pwc: recv_control_msg error -32 req 02 val 2900 [ 733.303271][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 733.330706][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 734.690834][ T9] pwc: Registered as video103. [ 735.396155][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input36 [ 735.445381][ T151] unregister_netdevice: waiting for bond4 to become free. Usage count = 2 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 735.573432][ T9] usb 4-1: USB disconnect, device number 14