last executing test programs: 3.67533733s ago: executing program 1 (id=1157): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000300800004d08000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000080000000200000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="020000e001"], 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$can_bcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=ANY=[@ANYBLOB="01000000300900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="020000e001"], 0x80}}, 0x11) 3.595660531s ago: executing program 1 (id=1159): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x586, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@ipv6_delroute={0x34, 0x19, 0x2, 0x70bd26, 0x25dfdbfb, {0xa, 0x20, 0x14, 0x1, 0x0, 0x3, 0xfd, 0x4, 0x800}, [@RTA_MARK={0x8, 0x10, 0x7fffffff}, @RTA_EXPIRES={0x8, 0x17, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x1000}]}, 0x34}, 0x1, 0x0, 0x0, 0x851}, 0x20000001) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x4040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000840)={0x24e, 0x8, 0x1, 0x5, 0x1, 0x4, 0xc, 0x7, r7}, 0x20) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x4, 0x9, 0x4}, 0x50) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) r8 = socket$inet6(0xa, 0x5, 0x0) sendmmsg$inet6(r8, &(0x7f0000002580), 0x0, 0x4000040) 3.253835408s ago: executing program 3 (id=1163): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x6, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0xb2, 0x26b7, 0x8, 0x7c}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {0x1, 0xb}, {0x8, 0x10}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0xfffffc01}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.13442366s ago: executing program 3 (id=1164): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0xa0000, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x80, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x4, 0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0x2, 0xb}, {0x7, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x2, 0x5, 0x1, 0x8}, 0xb, 0x0, 0x80008, 0x5, 0x8, 0x11, 0x9, 0xd, 0x9, 0x1, {0xffff1c72, 0x3, 0x1040, 0x102, 0x2, 0x2}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c860}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.002215882s ago: executing program 3 (id=1167): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB, @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") 2.878161755s ago: executing program 1 (id=1169): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[], &(0x7f0000000100)=""/141, 0x46, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0xfffffffffffffffe, {0x1, 0x6c756988582ecbf0, 0x4}, 0x2}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 2.62198565s ago: executing program 1 (id=1172): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x64, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) 2.350041205s ago: executing program 1 (id=1177): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x73) r1 = accept4(r0, 0x0, 0x0, 0x80000) write(r1, &(0x7f0000000040)="cb", 0xfffffdef) setsockopt$sock_int(r1, 0x1, 0x49, &(0x7f00000009c0)=0x3, 0x4) 1.761896097s ago: executing program 1 (id=1185): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[], 0x0) syz_usb_ep_write(r1, 0x82, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) 1.424183233s ago: executing program 4 (id=1195): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6000000000000000290000000b0000000008000000000000c910fe8000000000000000000000000000bbc9100000000000000000000000000000000107200000000006000000bb2c0000000000000000000000000000000000000000000000001800000000000000290000000400000000000000000000000801"], 0x180}, 0x50011) 1.317911075s ago: executing program 4 (id=1196): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r1, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvfrom$llc(r0, &(0x7f0000000480)=""/75, 0x4b, 0x1, &(0x7f0000000400)={0x1a, 0x206, 0x8, 0xb, 0x7, 0x20, @multicast}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.218418177s ago: executing program 3 (id=1197): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r3, 0x0, 0xfff0}, 0x8) 1.04701778s ago: executing program 4 (id=1198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x6, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0xb2, 0x26b7, 0x8, 0x7c}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0xfff3, 0xb}, {0x8, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x8, 0x9, 0xb9}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 999.961601ms ago: executing program 0 (id=1199): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) r1 = epoll_create(0xff9) socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000002300)={0x50, 0x0, r3, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r2, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r5, r2, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x300, 0x300, 0x0, 0x0, 0x0, 0x37a0}, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x2, 0x2000000}) 879.267683ms ago: executing program 0 (id=1201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002c00)={0x28, 0x4, 0x6, 0x301, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) 878.805664ms ago: executing program 4 (id=1202): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x6, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0xb2, 0x26b7, 0x8, 0x7c}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0x9, 0xb}, {0x0, 0xc}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 878.585674ms ago: executing program 2 (id=1203): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xbe, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) 801.965265ms ago: executing program 0 (id=1204): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x12, 0x14, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6}, 0x47) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 763.419026ms ago: executing program 2 (id=1205): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0xa0000, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x80, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x4, 0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0x2, 0xb}, {0x7, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x2, 0x5, 0x1, 0x8}, 0xb, 0x0, 0x80008, 0x5, 0x8, 0x11, 0x9, 0xd, 0x9, 0x1, {0xffff1c72, 0x3, 0x1040, 0x102, 0x2, 0x2}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c860}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 739.119556ms ago: executing program 0 (id=1206): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a010200000000000000000a0000050900030093797a30000000000900010073797a3100000000080007006e617400140004800800024054dd5e54080001400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0xfdef) 738.853456ms ago: executing program 4 (id=1207): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, r3}, 0x14) syz_emit_ethernet(0x66, &(0x7f0000000140)={@random="9d3e485beb27", @random="78a4e8c9ab61", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "727893", 0x30, 0x3a, 0x0, @private1, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0xadd, {0x0, 0x6, "6b329f", 0x0, 0x3a, 0x0, @private0, @local}}}}}}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r6, 0x8983, 0x0) bind$can_raw(r6, 0x0, 0x0) read(r0, 0x0, 0x0) 617.306258ms ago: executing program 4 (id=1208): socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaab06f1b71aa0000000000000800450000280000000000068078ac1414bb0d0014aa00004e22f1699dabe574fcf96e745605b1757e55f99329db0c4050c7fb59cf8571bc675a185ec45a93afda0569346786dc69a0f7deff9b68ece62dd40b9c7003f643043af115f6f024c02f7c32cf01f0752895fd7c35b17430a5bdcf98133fec820822acf715a0f2f85331a9a2db551dc4233179e6076702cd6301b11fd39bac48dd21bac1ff3ac27f8d98c2625032640bc16c351030cbab52f8665505a3ecd8ef6a6b5cf9171541391cf0db1edec0aa0457f0d246d095a0fdcd7ee224f534b4760a1f6e8578b726f53f973857b748880cf512da9917a4813513b80b60807a9d2fdfe306d7cbf2ad7cc5d0861e65b4", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRESHEX=r0], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0xfffffffffffffe87) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de328758952e0000", 0x57) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[], 0x14}}, 0x80) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f00000004c0)}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket(0x10, 0x2, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$sock_ax25_SIOCDELRT(r4, 0x890c, &(0x7f0000000540)={@default, @bcast, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) unshare(0x62040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES8, @ANYRESHEX=r4, @ANYRES16=r3, @ANYRESDEC, @ANYRESHEX=0x0, @ANYRES16=r1], 0x30}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x4000800) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r0, &(0x7f0000002840), 0x0, 0x0) 616.926789ms ago: executing program 2 (id=1209): unshare(0x2040400) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$xdp(r0, &(0x7f0000000000)={0x2c, 0x2, 0x0, 0x21}, 0x10) 547.66801ms ago: executing program 0 (id=1210): socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0xa, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2000000, 0xd50, 0x0, &(0x7f00000002c0)="fef351f6b11f421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 463.251492ms ago: executing program 2 (id=1211): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) r1 = epoll_create(0xff9) socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000002300)={0x50, 0x0, r3, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r2, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r5, r2, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x300, 0x300, 0x0, 0x0, 0x0, 0x37a0}, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x2, 0x2000000}) 441.470812ms ago: executing program 0 (id=1212): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x64, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) 402.298033ms ago: executing program 2 (id=1213): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x4, 0x8, 0x8, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0x0, 0xfffffffd}, 0x50) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448e3, &(0x7f0000000100)={0x0, 0x4000, '\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000480)={0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xa}, 0x1c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, 0x0, &(0x7f0000000200)) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x26e1, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYBLOB], 0x30}}, 0x0) socket$kcm(0x10, 0x2, 0x0) 257.933206ms ago: executing program 3 (id=1214): unshare(0x26020480) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x6, 0xfffffffffffffffc, &(0x7f0000000000)=0x5e) 192.635567ms ago: executing program 3 (id=1215): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r4}, 0x10) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 0s ago: executing program 2 (id=1216): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x6, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0xb2, 0x26b7, 0x8, 0x7c}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0x9, 0xb}, {0x0, 0xc}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): USB WDM device [ 71.518878][ T4184] snd_usb_toneport: probe of 5-1:0.0 failed with error -22 [ 71.544571][ T4226] cdc_wdm 4-1:1.0: Unknown control protocol [ 72.228960][ T4465] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 72.258612][ T4467] tipc: Enabled bearer , priority 0 [ 72.266057][ T4467] device syzkaller0 entered promiscuous mode [ 72.288452][ T4467] tipc: Resetting bearer [ 72.308137][ T4466] tipc: Resetting bearer [ 72.315541][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 72.344894][ T4466] tipc: Disabling bearer [ 72.568078][ T4472] tipc: Enabled bearer , priority 0 [ 72.590627][ T4472] tipc: Resetting bearer [ 72.605131][ T4471] tipc: Disabling bearer [ 72.837133][ T26] kauditd_printk_skb: 34 callbacks suppressed [ 72.837144][ T26] audit: type=1326 audit(1759039707.341:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4474 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9733907ec9 code=0x7ffc0000 [ 72.871636][ T4476] netlink: 92 bytes leftover after parsing attributes in process `syz.2.60'. [ 72.895391][ T26] audit: type=1326 audit(1759039707.371:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4474 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f9733907ec9 code=0x7ffc0000 [ 72.925115][ T26] audit: type=1326 audit(1759039707.371:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4474 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9733907ec9 code=0x7ffc0000 [ 72.949886][ T26] audit: type=1326 audit(1759039707.371:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4474 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f9733907ec9 code=0x7ffc0000 [ 73.010027][ T26] audit: type=1326 audit(1759039707.481:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4474 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9733907ec9 code=0x7ffc0000 [ 73.080866][ T4483] tipc: Enabled bearer , priority 0 [ 73.087897][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 73.111230][ T26] audit: type=1326 audit(1759039707.481:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4474 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9733907ec9 code=0x7ffc0000 [ 73.133550][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 73.179211][ T4483] tipc: Resetting bearer [ 73.187683][ T26] audit: type=1326 audit(1759039707.541:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4474 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9733907ec9 code=0x7ffc0000 [ 73.238664][ T26] audit: type=1326 audit(1759039707.541:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4474 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9733907ec9 code=0x7ffc0000 [ 73.267694][ T4482] tipc: Disabling bearer [ 73.278532][ T4226] usb 4-1: USB disconnect, device number 3 [ 73.319770][ T26] audit: type=1326 audit(1759039707.541:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4474 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9733907ec9 code=0x7ffc0000 [ 73.415038][ T26] audit: type=1326 audit(1759039707.541:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4474 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9733907ec9 code=0x7ffc0000 [ 73.479215][ T4488] syz.3.63 uses obsolete (PF_INET,SOCK_PACKET) [ 74.092238][ T4501] tipc: Enabled bearer , priority 0 [ 74.127511][ T4501] device syzkaller0 entered promiscuous mode [ 74.144145][ T4184] usb 5-1: USB disconnect, device number 2 [ 74.173253][ T4501] tipc: Resetting bearer [ 74.217752][ T4500] tipc: Resetting bearer [ 74.278020][ T4500] tipc: Disabling bearer [ 74.313273][ T4506] tipc: Enabled bearer , priority 0 [ 74.347005][ T4226] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 74.373023][ T4505] tipc: Resetting bearer [ 74.433374][ T4504] tipc: Disabling bearer [ 74.550702][ T4517] tipc: Enabled bearer , priority 0 [ 74.576075][ T4517] tipc: Resetting bearer [ 74.585653][ T4515] tipc: Disabling bearer [ 74.632659][ T4226] usb 1-1: Using ep0 maxpacket: 16 [ 74.773257][ T4226] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.782641][ T2301] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.797381][ T4226] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.829211][ T4226] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 74.850855][ T4226] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 74.981870][ T4542] tipc: Enabled bearer , priority 0 [ 74.992252][ T4542] device syzkaller0 entered promiscuous mode [ 75.001937][ T4226] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 75.011888][ T4226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 75.043745][ T4542] tipc: Resetting bearer [ 75.060812][ T4540] tipc: Resetting bearer [ 75.068134][ T4226] usb 1-1: SerialNumber: syz [ 75.093246][ T4540] tipc: Disabling bearer [ 75.133300][ T4226] hub 1-1:1.0: bad descriptor, ignoring hub [ 75.152705][ T2301] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 75.172557][ T4226] hub: probe of 1-1:1.0 failed with error -5 [ 75.192593][ T1107] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 75.211907][ T2301] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 75.213913][ T4226] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 75.254686][ T2301] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 75.291131][ T2301] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 75.318718][ T2301] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 75.442630][ T1107] usb 4-1: Using ep0 maxpacket: 8 [ 75.502873][ T2301] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 75.536319][ T4498] raw-gadget.1 gadget: fail, usb_ep_set_wedge returned -11 [ 75.544998][ T2301] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 75.562632][ T1107] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 75.603868][ T1107] usb 4-1: config 0 interface 0 has no altsetting 0 [ 75.646905][ T2301] usb 3-1: Product: syz [ 75.680988][ T2301] usb 3-1: Manufacturer: syz [ 75.686803][ T4498] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 75.824022][ T2301] cdc_wdm 3-1:1.0: skipping garbage [ 75.832319][ T2301] cdc_wdm 3-1:1.0: skipping garbage [ 75.842655][ T1107] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 75.932746][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.091822][ T1107] usb 4-1: Product: syz [ 76.132393][ T1107] usb 4-1: Manufacturer: syz [ 76.168962][ T1107] usb 4-1: SerialNumber: syz [ 76.177187][ T2301] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 76.208546][ T2301] cdc_wdm 3-1:1.0: Unknown control protocol [ 76.254661][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 76.266106][ T1107] usb 4-1: config 0 descriptor?? [ 76.336506][ T1107] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 76.553916][ T1107] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 76.572651][ T1107] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 76.601528][ T1107] snd_usb_toneport: probe of 4-1:0.0 failed with error -22 [ 76.649440][ T1107] usb 1-1: USB disconnect, device number 3 [ 77.040965][ T4614] tipc: Started in network mode [ 77.073983][ T4614] tipc: Node identity b2f6e932e81c, cluster identity 4711 [ 77.119930][ T4614] tipc: Enabled bearer , priority 0 [ 77.143740][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 77.191957][ T4614] tipc: Resetting bearer [ 77.240757][ T4613] tipc: Disabling bearer [ 77.462379][ T4285] usb 3-1: USB disconnect, device number 2 [ 77.506130][ T4625] tipc: Enabled bearer , priority 0 [ 77.609964][ T4624] tipc: Resetting bearer [ 77.621752][ T4623] tipc: Disabling bearer [ 77.863727][ T4637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.940659][ T4642] tipc: Enabled bearer , priority 0 [ 77.966487][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 77.969365][ T4642] device syzkaller0 entered promiscuous mode [ 77.978463][ T4638] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 78.073084][ T4642] tipc: Resetting bearer [ 78.108300][ T4640] tipc: Resetting bearer [ 78.123821][ T2301] usb 4-1: USB disconnect, device number 4 [ 78.157097][ T4640] tipc: Disabling bearer [ 78.191340][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 78.191352][ T26] audit: type=1326 audit(1759039712.691:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4644 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe518cb9ec9 code=0x7ffc0000 [ 78.235580][ T26] audit: type=1326 audit(1759039712.691:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4644 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe518cb9ec9 code=0x7ffc0000 [ 78.261378][ T26] audit: type=1326 audit(1759039712.691:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4644 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fe518cb9ec9 code=0x7ffc0000 [ 78.349764][ T26] audit: type=1326 audit(1759039712.701:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4644 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe518cb9ec9 code=0x7ffc0000 [ 78.387827][ T4653] netlink: 28 bytes leftover after parsing attributes in process `syz.0.99'. [ 78.462913][ T26] audit: type=1326 audit(1759039712.701:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4644 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fe518cb9ec9 code=0x7ffc0000 [ 78.551106][ T26] audit: type=1326 audit(1759039712.811:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4644 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe518cb9ec9 code=0x7ffc0000 [ 78.580515][ T26] audit: type=1326 audit(1759039712.811:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4644 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe518cb9ec9 code=0x7ffc0000 [ 78.672520][ T26] audit: type=1326 audit(1759039712.821:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4644 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fe518cb9ec9 code=0x7ffc0000 [ 78.923169][ T2301] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 79.278521][ T4665] tipc: Enabling of bearer rejected, failed to enable media [ 79.292705][ T2301] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 79.301300][ T2301] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 79.342164][ T2301] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 79.376600][ T2301] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 79.410130][ T2301] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 79.547728][ T4676] tipc: Enabled bearer , priority 0 [ 79.602666][ T2301] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 79.631435][ T2301] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 79.642615][ T2301] usb 3-1: Product: syz [ 79.646790][ T2301] usb 3-1: Manufacturer: syz [ 79.714178][ T2301] cdc_wdm 3-1:1.0: skipping garbage [ 79.719422][ T2301] cdc_wdm 3-1:1.0: skipping garbage [ 79.727281][ T4676] tipc: Resetting bearer [ 79.777208][ T2301] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 79.792025][ T2301] cdc_wdm 3-1:1.0: Unknown control protocol [ 79.830297][ T4675] tipc: Disabling bearer [ 79.858800][ T26] audit: type=1804 audit(1759039714.361:84): pid=4678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.109" name="/newroot/19/file1" dev="fuse" ino=1 res=1 errno=0 [ 80.047801][ T4681] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 80.223003][ T4681] Zero length message leads to an empty skb [ 80.567346][ T4689] tipc: Enabled bearer , priority 0 [ 80.612358][ T4689] device syzkaller0 entered promiscuous mode [ 80.663728][ T4688] tipc: Resetting bearer [ 80.706723][ T4688] tipc: Disabling bearer [ 81.178747][ T4704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.118'. [ 81.236036][ T4704] unsupported nlmsg_type 40 [ 81.374984][ T13] cfg80211: failed to load regulatory.db [ 81.402217][ T4706] tipc: Enabling of bearer rejected, failed to enable media [ 81.666543][ T13] usb 3-1: USB disconnect, device number 3 [ 81.930065][ T4718] tipc: Started in network mode [ 81.972106][ T4718] tipc: Node identity ea26fa835597, cluster identity 4711 [ 82.014929][ T4718] tipc: Enabled bearer , priority 0 [ 82.029266][ T4721] tipc: Resetting bearer [ 82.070699][ T26] audit: type=1326 audit(1759039716.571:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4724 comm="syz.1.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9733907ec9 code=0x7ffc0000 [ 82.189680][ T4716] tipc: Disabling bearer [ 82.359344][ T4733] device syzkaller0 entered promiscuous mode [ 82.454845][ T4738] tipc: Enabled bearer , priority 0 [ 82.483932][ T4732] tipc: Resetting bearer [ 82.609531][ T4732] tipc: Disabling bearer [ 82.796597][ T4753] tipc: Enabling of bearer rejected, failed to enable media [ 82.902525][ T2301] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 83.262763][ T2301] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 83.272664][ T2301] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 83.283362][ T4244] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 83.332511][ T2301] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 83.342741][ T2301] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 83.366804][ T2301] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 83.522537][ T4244] usb 1-1: Using ep0 maxpacket: 8 [ 83.533472][ T2301] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 83.545366][ T2301] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 83.575835][ T2301] usb 4-1: Product: syz [ 83.592360][ T2301] usb 4-1: Manufacturer: syz [ 83.642903][ T4244] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 83.654788][ T2301] cdc_wdm 4-1:1.0: skipping garbage [ 83.660017][ T2301] cdc_wdm 4-1:1.0: skipping garbage [ 83.674796][ T4244] usb 1-1: config 0 interface 0 has no altsetting 0 [ 83.703279][ T2301] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 83.731261][ T2301] cdc_wdm 4-1:1.0: Unknown control protocol [ 83.814868][ T4778] tipc: Enabled bearer , priority 0 [ 83.831868][ T4778] tipc: Resetting bearer [ 83.882024][ T4777] tipc: Disabling bearer [ 83.888779][ T4244] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 83.915319][ T4244] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.932776][ T4244] usb 1-1: Product: syz [ 83.937098][ T4244] usb 1-1: Manufacturer: syz [ 83.941898][ T4244] usb 1-1: SerialNumber: syz [ 83.968504][ T4244] usb 1-1: config 0 descriptor?? [ 84.015045][ T4244] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 84.243702][ T4244] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 84.261140][ T4244] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 84.279502][ T4790] tipc: Enabled bearer , priority 0 [ 84.324855][ T4790] device syzkaller0 entered promiscuous mode [ 84.330388][ T4244] snd_usb_toneport: probe of 1-1:0.0 failed with error -22 [ 84.380399][ T4789] tipc: Resetting bearer [ 84.416544][ T4789] tipc: Disabling bearer [ 84.433418][ T4792] tipc: Enabled bearer , priority 0 [ 84.441605][ T4792] device syzkaller0 entered promiscuous mode [ 84.507520][ T4792] tipc: Resetting bearer [ 84.538834][ T4791] tipc: Resetting bearer [ 84.590627][ T4791] tipc: Disabling bearer [ 85.122953][ T4804] tipc: Enabling of bearer rejected, failed to enable media [ 85.571151][ T2301] usb 1-1: USB disconnect, device number 4 [ 85.586047][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 85.586060][ T26] audit: type=1326 audit(1759039720.091:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4818 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a2c4aec9 code=0x7ffc0000 [ 85.696096][ T4244] usb 4-1: USB disconnect, device number 5 [ 85.728296][ T4826] tipc: Enabled bearer , priority 0 [ 85.735970][ T26] audit: type=1326 audit(1759039720.091:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4818 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a2c4aec9 code=0x7ffc0000 [ 85.770113][ T4826] device syzkaller0 entered promiscuous mode [ 85.783450][ T4828] tipc: Enabling of bearer rejected, failed to enable media [ 85.794490][ T26] audit: type=1326 audit(1759039720.121:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4818 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fd0a2c4aec9 code=0x7ffc0000 [ 85.834804][ T4825] tipc: Resetting bearer [ 85.904341][ T26] audit: type=1326 audit(1759039720.211:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4818 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a2c4aec9 code=0x7ffc0000 [ 85.955207][ T4825] tipc: Disabling bearer [ 86.044025][ T26] audit: type=1326 audit(1759039720.211:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4818 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a2c4aec9 code=0x7ffc0000 [ 86.140516][ T26] audit: type=1326 audit(1759039720.221:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4818 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fd0a2c4aec9 code=0x7ffc0000 [ 86.267696][ T4854] tipc: Enabling of bearer rejected, failed to enable media [ 86.837164][ T4879] tipc: Enabled bearer , priority 0 [ 86.871058][ T4879] device syzkaller0 entered promiscuous mode [ 86.872554][ T4285] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 86.906370][ T4882] netlink: 'syz.1.174': attribute type 4 has an invalid length. [ 87.007184][ T4883] netlink: 'syz.1.174': attribute type 4 has an invalid length. [ 87.037942][ T4878] tipc: Resetting bearer [ 87.133047][ T4878] tipc: Disabling bearer [ 87.197530][ T4883] syz.1.174 (4883) used greatest stack depth: 20960 bytes left [ 87.299072][ T4886] tipc: Enabling of bearer rejected, failed to enable media [ 87.312830][ T4285] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 87.352225][ T4285] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 87.379410][ T4888] tipc: Enabled bearer , priority 0 [ 87.392647][ T4285] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 87.412787][ T4888] device syzkaller0 entered promiscuous mode [ 87.432266][ T4285] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 87.492050][ T4888] tipc: Resetting bearer [ 87.504585][ T4285] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 87.532398][ T4887] tipc: Resetting bearer [ 87.592121][ T4887] tipc: Disabling bearer [ 87.682743][ T4285] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 87.728510][ T4285] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 87.752738][ T4285] usb 1-1: Product: syz [ 87.761502][ T4285] usb 1-1: Manufacturer: syz [ 87.833458][ T4285] cdc_wdm 1-1:1.0: skipping garbage [ 87.844577][ T4285] cdc_wdm 1-1:1.0: skipping garbage [ 87.862096][ T4285] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 87.878652][ T4285] cdc_wdm 1-1:1.0: Unknown control protocol [ 87.900069][ T4898] netlink: 44 bytes leftover after parsing attributes in process `syz.1.177'. [ 88.168021][ T4910] tipc: Enabling of bearer rejected, failed to enable media [ 88.266668][ T4919] tipc: Enabled bearer , priority 0 [ 88.342583][ T4924] device syzkaller0 entered promiscuous mode [ 88.384328][ T4917] tipc: Resetting bearer [ 88.426108][ T4917] tipc: Disabling bearer [ 88.444501][ T4931] tipc: Enabling of bearer rejected, failed to enable media [ 88.755281][ T4914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.827941][ T26] audit: type=1326 audit(1759039723.331:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4951 comm="syz.1.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9733907ec9 code=0x7ffc0000 [ 89.056934][ T4964] netlink: 28 bytes leftover after parsing attributes in process `syz.1.193'. [ 89.066319][ T26] audit: type=1326 audit(1759039723.331:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4951 comm="syz.1.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f9733907ec9 code=0x7ffc0000 [ 89.132690][ T4226] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 89.149369][ T26] audit: type=1326 audit(1759039723.331:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4951 comm="syz.1.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9733907ec9 code=0x7ffc0000 [ 89.228374][ T26] audit: type=1326 audit(1759039723.331:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4951 comm="syz.1.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f9733907ec9 code=0x7ffc0000 [ 89.412719][ T4226] usb 3-1: Using ep0 maxpacket: 8 [ 89.427435][ T4971] tipc: Enabled bearer , priority 0 [ 89.473630][ T4971] tipc: Resetting bearer [ 89.520883][ T4970] tipc: Disabling bearer [ 89.554343][ T23] usb 1-1: USB disconnect, device number 5 [ 89.572791][ T4226] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 89.596339][ T4226] usb 3-1: config 0 interface 0 has no altsetting 0 [ 89.750172][ T4977] tipc: Enabling of bearer rejected, failed to enable media [ 89.828560][ T4979] device syzkaller0 entered promiscuous mode [ 89.843159][ T4226] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 89.867026][ T4226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.902152][ T4226] usb 3-1: Product: syz [ 89.916778][ T4226] usb 3-1: Manufacturer: syz [ 89.921374][ T4226] usb 3-1: SerialNumber: syz [ 89.982886][ T4226] usb 3-1: config 0 descriptor?? [ 90.045204][ T4226] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 90.273835][ T4226] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 90.296834][ T4226] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 90.306087][ T5003] tipc: Enabled bearer , priority 0 [ 90.325546][ T5003] device syzkaller0 entered promiscuous mode [ 90.342910][ T4226] snd_usb_toneport: probe of 3-1:0.0 failed with error -22 [ 90.390165][ T5003] tipc: Resetting bearer [ 90.433888][ T5000] tipc: Resetting bearer [ 90.470372][ T5000] tipc: Disabling bearer [ 90.647298][ T5017] tipc: Enabled bearer , priority 0 [ 90.678815][ T5017] tipc: Resetting bearer [ 90.725158][ T5015] tipc: Disabling bearer [ 90.766568][ T5020] tipc: Enabling of bearer rejected, failed to enable media [ 90.862543][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 91.232740][ T23] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 91.237089][ T5036] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 91.261808][ T23] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 91.317222][ T5038] tipc: Enabled bearer , priority 0 [ 91.331773][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 91.335643][ T5038] device syzkaller0 entered promiscuous mode [ 91.366319][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 91.400404][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 91.448382][ T5038] tipc: Resetting bearer [ 91.485827][ T5037] tipc: Resetting bearer [ 91.541500][ T5037] tipc: Disabling bearer [ 91.600882][ T4285] usb 3-1: USB disconnect, device number 4 [ 91.609944][ T23] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 91.652856][ T23] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 91.671563][ T23] usb 4-1: Product: syz [ 91.690283][ T23] usb 4-1: Manufacturer: syz [ 91.768721][ T23] cdc_wdm 4-1:1.0: skipping garbage [ 91.782774][ T23] cdc_wdm 4-1:1.0: skipping garbage [ 91.811481][ T23] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 91.827933][ T23] cdc_wdm 4-1:1.0: Unknown control protocol [ 92.408669][ T5070] tipc: Enabled bearer , priority 0 [ 92.476068][ T5070] tipc: Resetting bearer [ 92.583730][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 92.583744][ T26] audit: type=1326 audit(1759039727.091:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5079 comm="syz.2.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a2c4aec9 code=0x7ffc0000 [ 92.614999][ T5068] tipc: Disabling bearer [ 92.640524][ T26] audit: type=1326 audit(1759039727.121:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5079 comm="syz.2.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fd0a2c4aec9 code=0x7ffc0000 [ 92.704134][ T26] audit: type=1326 audit(1759039727.121:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5079 comm="syz.2.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a2c4aec9 code=0x7ffc0000 [ 92.752315][ T5080] netlink: 28 bytes leftover after parsing attributes in process `syz.2.229'. [ 92.800441][ T26] audit: type=1326 audit(1759039727.121:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5079 comm="syz.2.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fd0a2c4aec9 code=0x7ffc0000 [ 92.808739][ T5086] tipc: Enabling of bearer rejected, failed to enable media [ 92.853273][ T26] audit: type=1326 audit(1759039727.211:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5079 comm="syz.2.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a2c4aec9 code=0x7ffc0000 [ 92.921135][ T26] audit: type=1326 audit(1759039727.211:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5079 comm="syz.2.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a2c4aec9 code=0x7ffc0000 [ 93.069825][ T26] audit: type=1326 audit(1759039727.241:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5079 comm="syz.2.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd0a2c4aec9 code=0x7ffc0000 [ 93.164953][ T26] audit: type=1326 audit(1759039727.241:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5079 comm="syz.2.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a2c4aec9 code=0x7ffc0000 [ 93.239240][ T26] audit: type=1326 audit(1759039727.241:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5079 comm="syz.2.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a2c4aec9 code=0x7ffc0000 [ 93.308360][ T26] audit: type=1326 audit(1759039727.241:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5079 comm="syz.2.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd0a2c4aec9 code=0x7ffc0000 [ 93.424708][ T5114] tipc: Enabled bearer , priority 0 [ 93.441446][ T5114] device syzkaller0 entered promiscuous mode [ 93.495357][ T5114] tipc: Resetting bearer [ 93.550041][ T5113] tipc: Resetting bearer [ 93.578588][ T23] usb 4-1: USB disconnect, device number 6 [ 93.617561][ T5113] tipc: Disabling bearer [ 93.651874][ T5119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'. [ 93.782537][ T2301] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 94.032623][ T2301] usb 1-1: Using ep0 maxpacket: 8 [ 94.152604][ T2301] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 94.255732][ T2301] usb 1-1: config 0 interface 0 has no altsetting 0 [ 94.432616][ T2301] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 94.441779][ T2301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.567185][ T5156] tipc: Enabling of bearer rejected, failed to enable media [ 94.597213][ T2301] usb 1-1: Product: syz [ 94.601517][ T2301] usb 1-1: Manufacturer: syz [ 94.702488][ T2301] usb 1-1: SerialNumber: syz [ 94.731221][ T5164] netlink: 28 bytes leftover after parsing attributes in process `syz.4.247'. [ 94.764511][ T2301] usb 1-1: config 0 descriptor?? [ 94.835627][ T2301] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 95.155209][ T2301] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 95.215334][ T2301] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 95.297680][ T2301] snd_usb_toneport: probe of 1-1:0.0 failed with error -22 [ 95.463247][ T5185] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 95.916954][ T5201] netlink: 'syz.3.256': attribute type 10 has an invalid length. [ 95.946662][ T5201] bond0: (slave wlan1): Opening slave failed [ 95.996422][ T5203] device syzkaller0 entered promiscuous mode [ 96.462846][ T5223] netlink: 28 bytes leftover after parsing attributes in process `syz.4.261'. [ 96.642728][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 96.772390][ T5232] tipc: Enabling of bearer rejected, failed to enable media [ 96.845866][ T4233] usb 1-1: USB disconnect, device number 6 [ 96.922547][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 97.028810][ T1107] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 97.042849][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.074218][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.104471][ T5251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.266'. [ 97.123410][ T5249] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 97.130043][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 97.152491][ T23] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 97.262767][ T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.292475][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 97.302642][ T1107] usb 5-1: Using ep0 maxpacket: 8 [ 97.325143][ T23] usb 3-1: SerialNumber: syz [ 97.330840][ T5259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.269'. [ 97.403590][ T23] hub 3-1:1.0: bad descriptor, ignoring hub [ 97.422536][ T23] hub: probe of 3-1:1.0 failed with error -5 [ 97.422810][ T1107] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 97.440296][ T23] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 97.476834][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.493638][ T5262] device syzkaller0 entered promiscuous mode [ 97.545017][ T1107] pvrusb2: Hardware description: Terratec Grabster AV400 [ 97.552087][ T1107] pvrusb2: ********** [ 97.582806][ T1107] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 97.608626][ T1107] pvrusb2: Important functionality might not be entirely working. [ 97.625299][ T1107] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 97.640087][ T1107] pvrusb2: ********** [ 97.669986][ T5270] tipc: Enabling of bearer rejected, failed to enable media [ 97.764163][ T2426] pvrusb2: Invalid write control endpoint [ 97.848149][ T5210] raw-gadget.0 gadget: fail, usb_ep_set_wedge returned -11 [ 97.962658][ T2426] pvrusb2: Invalid write control endpoint [ 97.968639][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 98.012948][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 98.027971][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 98.038507][ T2426] pvrusb2: Device being rendered inoperable [ 98.053308][ T13] usb 5-1: USB disconnect, device number 3 [ 98.064358][ T2426] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 98.107372][ T2426] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 98.146210][ T2426] pvrusb2: Attached sub-driver cx25840 [ 98.165494][ T5294] netlink: 48 bytes leftover after parsing attributes in process `syz.0.275'. [ 98.165613][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 98.229288][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 98.369513][ T5302] tipc: Enabling of bearer rejected, failed to enable media [ 98.592879][ T1107] usb 3-1: USB disconnect, device number 5 [ 98.943002][ T5333] device syzkaller0 entered promiscuous mode [ 99.089231][ T5337] tipc: Enabling of bearer rejected, failed to enable media [ 99.262166][ T5339] tipc: Cannot configure node identity twice [ 99.344942][ T5350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.287'. [ 99.427881][ T5363] tipc: Enabling of bearer rejected, failed to enable media [ 99.642664][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 100.013492][ T5389] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.299'. [ 100.055113][ T23] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 100.064493][ T5394] device syzkaller0 entered promiscuous mode [ 100.074065][ T23] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 100.112621][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 100.137507][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 100.150655][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 100.203140][ T5390] crypto_alloc_aead failed rc=-4 [ 100.270942][ T5402] tipc: Enabling of bearer rejected, failed to enable media [ 100.312615][ T23] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 100.344873][ T23] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 100.363269][ T23] usb 1-1: Product: syz [ 100.367467][ T23] usb 1-1: Manufacturer: syz [ 100.424339][ T5414] netlink: 28 bytes leftover after parsing attributes in process `syz.4.303'. [ 100.440037][ T23] cdc_wdm 1-1:1.0: skipping garbage [ 100.445691][ T21] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 100.463431][ T23] cdc_wdm 1-1:1.0: skipping garbage [ 100.486948][ T23] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 100.499472][ T23] cdc_wdm 1-1:1.0: Unknown control protocol [ 100.732563][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 100.864121][ T21] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.875681][ T21] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.910798][ T21] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 100.961032][ T21] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 101.011045][ T5435] tipc: Enabling of bearer rejected, failed to enable media [ 101.047422][ T5431] tipc: Cannot configure node identity twice [ 101.112760][ T21] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.127925][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 101.162654][ T21] usb 4-1: SerialNumber: syz [ 101.243479][ T21] hub 4-1:1.0: bad descriptor, ignoring hub [ 101.256174][ T21] hub: probe of 4-1:1.0 failed with error -5 [ 101.275060][ T21] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 101.505786][ T5445] tipc: Enabled bearer , priority 0 [ 101.526584][ T5445] device syzkaller0 entered promiscuous mode [ 101.579192][ T5445] tipc: Resetting bearer [ 101.608030][ T5444] tipc: Resetting bearer [ 101.652306][ T5444] tipc: Disabling bearer [ 101.680620][ T5385] raw-gadget.1 gadget: fail, usb_ep_set_wedge returned -11 [ 101.766902][ T5455] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 101.855119][ T5457] netlink: 28 bytes leftover after parsing attributes in process `syz.1.314'. [ 101.902061][ T5459] tipc: Enabling of bearer rejected, failed to enable media [ 102.209578][ T5474] tipc: Enabling of bearer rejected, failed to enable media [ 102.328199][ T21] usb 4-1: USB disconnect, device number 7 [ 102.396738][ T4244] usb 1-1: USB disconnect, device number 7 [ 102.640069][ T5498] netlink: 56 bytes leftover after parsing attributes in process `syz.2.325'. [ 102.811832][ T5502] tipc: Enabled bearer , priority 0 [ 102.841429][ T5502] device syzkaller0 entered promiscuous mode [ 102.870180][ T5504] tipc: Enabled bearer , priority 0 [ 102.897577][ T5504] device syzkaller0 entered promiscuous mode [ 102.923169][ T5502] tipc: Resetting bearer [ 102.979771][ T5504] tipc: Resetting bearer [ 103.025580][ T5499] tipc: Resetting bearer [ 103.040893][ T5499] tipc: Disabling bearer [ 103.069870][ T5503] tipc: Resetting bearer [ 103.083047][ T5503] tipc: Disabling bearer [ 103.111546][ T5512] tipc: Enabling of bearer rejected, failed to enable media [ 103.582713][ T4285] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 103.640822][ T5537] tipc: Enabled bearer , priority 0 [ 103.662342][ T5537] tipc: Resetting bearer [ 103.679675][ T5535] tipc: Disabling bearer [ 104.013280][ T4285] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 104.032161][ T4285] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 104.046281][ T4285] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 104.077287][ T4285] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 104.105537][ T4285] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 104.116990][ T21] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.128561][ T5550] netlink: 'syz.0.343': attribute type 1 has an invalid length. [ 104.221459][ T5550] device bond1 entered promiscuous mode [ 104.230898][ T5550] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.273007][ T26] kauditd_printk_skb: 38 callbacks suppressed [ 104.273019][ T26] audit: type=1804 audit(1759039738.781:154): pid=5558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.345" name="/newroot/84/file1" dev="fuse" ino=1 res=1 errno=0 [ 104.275948][ T5556] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.306537][ T4285] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 104.315659][ T4285] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 104.323745][ T4285] usb 4-1: Product: syz [ 104.327920][ T4285] usb 4-1: Manufacturer: syz [ 104.339209][ T5556] bond1: (slave bond2): making interface the new active one [ 104.376960][ T5556] device bond2 entered promiscuous mode [ 104.382794][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 104.389468][ T5556] bond1: (slave bond2): Enslaving as an active interface with an up link [ 104.400443][ T4285] cdc_wdm 4-1:1.0: skipping garbage [ 104.407076][ T4285] cdc_wdm 4-1:1.0: skipping garbage [ 104.414485][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 104.431009][ T4285] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 104.439370][ T4285] cdc_wdm 4-1:1.0: Unknown control protocol [ 104.479799][ T5565] tipc: Enabled bearer , priority 0 [ 104.496066][ T5565] tipc: Resetting bearer [ 104.512682][ T21] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.528069][ T21] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.540630][ T5562] tipc: Disabling bearer [ 104.551915][ T21] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 104.565065][ T21] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 104.672924][ T21] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 104.689696][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 104.700673][ T5575] netlink: 56 bytes leftover after parsing attributes in process `syz.4.352'. [ 104.706403][ T21] usb 2-1: SerialNumber: syz [ 104.739477][ T5579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.353'. [ 104.763432][ T21] hub 2-1:1.0: bad descriptor, ignoring hub [ 104.782114][ T21] hub: probe of 2-1:1.0 failed with error -5 [ 104.805748][ T21] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 105.122296][ T5600] tipc: Enabled bearer , priority 0 [ 105.149541][ T5600] tipc: Resetting bearer [ 105.165056][ T5598] tipc: Disabling bearer [ 105.202823][ T5536] raw-gadget.1 gadget: fail, usb_ep_set_wedge returned -11 [ 105.206125][ T5603] tipc: Enabled bearer , priority 0 [ 105.224902][ T5603] device syzkaller0 entered promiscuous mode [ 105.246266][ T5603] tipc: Resetting bearer [ 105.328526][ T5608] tipc: Enabling of bearer rejected, already enabled [ 105.437929][ T5613] netlink: 56 bytes leftover after parsing attributes in process `syz.0.367'. [ 105.590790][ T5614] netlink: 60 bytes leftover after parsing attributes in process `syz.4.368'. [ 105.723932][ T5625] netlink: 'syz.4.372': attribute type 1 has an invalid length. [ 105.786278][ T5625] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.872812][ T21] usb 2-1: USB disconnect, device number 3 [ 106.024216][ T5632] tipc: Enabling of bearer rejected, already enabled [ 106.156272][ T5639] tipc: Enabled bearer , priority 0 [ 106.219436][ T5639] tipc: Resetting bearer [ 106.233072][ T4244] tipc: Node number set to 1525344562 [ 106.296061][ T5644] tipc: Enabled bearer , priority 0 [ 106.303231][ T13] usb 4-1: USB disconnect, device number 8 [ 106.358255][ T5647] device syzkaller0 entered promiscuous mode [ 106.448070][ T5644] tipc: Resetting bearer [ 106.568690][ T5643] tipc: Resetting bearer [ 106.623230][ T5643] tipc: Disabling bearer [ 106.826287][ T5672] tipc: Enabling of bearer rejected, already enabled [ 106.873238][ T5676] device syzkaller0 entered promiscuous mode [ 107.011247][ T5685] tipc: Enabling of bearer rejected, already enabled [ 107.120142][ T26] audit: type=1804 audit(1759039741.621:155): pid=5683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.395" name="/newroot/81/file1" dev="fuse" ino=1 res=1 errno=0 [ 107.161278][ T5693] netlink: 'syz.1.400': attribute type 1 has an invalid length. [ 107.288650][ T23] tipc: Node number set to 2234617082 [ 107.348987][ T5698] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 107.382366][ T5698] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 107.402287][ T5698] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 107.431159][ T5698] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 107.450299][ T5698] bond1: (slave geneve2): making interface the new active one [ 107.466791][ T5698] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 107.480740][ T5709] device syzkaller0 entered promiscuous mode [ 107.500856][ T5712] tipc: Enabling of bearer rejected, already enabled [ 107.642390][ T5721] tipc: Enabling of bearer rejected, already enabled [ 107.723965][ T5718] syz.1.405 (5718) used greatest stack depth: 20864 bytes left [ 107.770933][ T5724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.409'. [ 107.798717][ T5724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.409'. [ 107.832415][ T5728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.865410][ T5728] device batadv_slave_0 entered promiscuous mode [ 108.125404][ T26] audit: type=1804 audit(1759039742.631:156): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.413" name="/newroot/85/file1" dev="fuse" ino=1 res=1 errno=0 [ 108.246229][ T5746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.416'. [ 108.269123][ T5746] device team_slave_0 entered promiscuous mode [ 108.275573][ T5746] device team_slave_1 entered promiscuous mode [ 108.282599][ T5746] device macvtap1 entered promiscuous mode [ 108.288448][ T5746] device team0 entered promiscuous mode [ 108.311679][ T5746] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 108.319998][ T5749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.416'. [ 108.340827][ T5749] device team0 left promiscuous mode [ 108.379543][ T5749] device team_slave_0 left promiscuous mode [ 108.385557][ T5749] device team_slave_1 left promiscuous mode [ 108.454115][ T5754] tipc: Enabling of bearer rejected, already enabled [ 108.543327][ T5757] device vlan2 entered promiscuous mode [ 108.548922][ T5757] device bond0 entered promiscuous mode [ 108.582542][ T5757] device bond_slave_0 entered promiscuous mode [ 108.589050][ T5757] device bond_slave_1 entered promiscuous mode [ 108.599320][ T5761] tipc: Enabled bearer , priority 0 [ 108.986458][ T26] audit: type=1804 audit(1759039743.491:157): pid=5778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.428" name="/newroot/62/file1" dev="fuse" ino=1 res=1 errno=0 [ 109.028555][ T5783] tipc: Enabling of bearer rejected, already enabled [ 109.184125][ T5793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.434'. [ 109.342258][ T5796] tipc: Enabling of bearer rejected, already enabled [ 109.613377][ T4285] tipc: Node number set to 1177106912 [ 109.638662][ T5806] netlink: 100 bytes leftover after parsing attributes in process `syz.3.439'. [ 109.807086][ T5810] IPv6: ADDRCONF(NETDEV_CHANGE): rose2: link becomes ready [ 109.903357][ T5816] tipc: Enabling of bearer rejected, already enabled [ 109.927807][ T26] audit: type=1804 audit(1759039744.431:158): pid=5819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.443" name="/newroot/90/file1" dev="fuse" ino=1 res=1 errno=0 [ 109.928147][ T5816] device syzkaller0 entered promiscuous mode [ 110.160255][ T5828] tipc: Enabling of bearer rejected, already enabled [ 110.797175][ T5852] tipc: Enabling of bearer rejected, already enabled [ 110.951072][ T5848] syz.4.457 (5848) used greatest stack depth: 17216 bytes left [ 111.169692][ T5859] tipc: Enabling of bearer rejected, already enabled [ 111.533069][ T5866] tipc: Enabled bearer , priority 0 [ 111.560870][ T5866] device syzkaller0 entered promiscuous mode [ 111.620915][ T5866] tipc: Resetting bearer [ 111.665829][ T26] audit: type=1804 audit(1759039746.171:159): pid=5875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.468" name="/newroot/95/file1" dev="fuse" ino=1 res=1 errno=0 [ 111.691338][ T5865] tipc: Resetting bearer [ 111.759688][ T5865] tipc: Disabling bearer [ 111.808094][ T5882] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 111.822427][ T5884] tipc: Enabled bearer , priority 0 [ 111.851818][ T5879] tipc: Resetting bearer [ 111.881810][ T5878] tipc: Disabling bearer [ 112.140185][ T5894] netlink: 'syz.2.475': attribute type 1 has an invalid length. [ 112.211347][ T5892] tipc: Enabled bearer , priority 0 [ 112.258147][ T5896] device syzkaller0 entered promiscuous mode [ 112.297725][ T5897] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 112.323259][ T5897] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 112.332263][ T5897] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 112.341625][ T5897] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 112.358767][ T5897] bond1: (slave geneve2): making interface the new active one [ 112.368604][ T5897] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 112.395758][ T5896] tipc: Resetting bearer [ 112.451896][ T5891] tipc: Resetting bearer [ 112.519921][ T5891] tipc: Disabling bearer [ 112.720283][ T5910] tipc: Enabled bearer , priority 0 [ 112.783202][ T5910] device syzkaller0 entered promiscuous mode [ 112.897048][ T5915] tipc: Resetting bearer [ 112.950470][ T5906] tipc: Resetting bearer [ 113.021008][ T5906] tipc: Disabling bearer [ 113.055542][ T5917] tipc: Enabled bearer , priority 0 [ 113.112581][ T4285] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 113.126618][ T5917] device syzkaller0 entered promiscuous mode [ 113.323073][ T5917] tipc: Resetting bearer [ 113.365700][ T4285] usb 1-1: Using ep0 maxpacket: 8 [ 113.392075][ T5916] tipc: Resetting bearer [ 113.473650][ T5916] tipc: Disabling bearer [ 113.492636][ T4285] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 113.518604][ T4285] usb 1-1: config 0 interface 0 has no altsetting 0 [ 113.712687][ T4285] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 113.737465][ T4285] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.769759][ T4285] usb 1-1: Product: syz [ 113.787208][ T4285] usb 1-1: Manufacturer: syz [ 113.817653][ T4285] usb 1-1: SerialNumber: syz [ 113.860973][ T4285] usb 1-1: config 0 descriptor?? [ 113.922311][ T4285] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 114.123679][ T4285] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 114.149199][ T4285] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 114.194137][ T4285] snd_usb_toneport: probe of 1-1:0.0 failed with error -22 [ 114.310705][ T5940] tipc: Enabled bearer , priority 0 [ 114.402279][ T5945] device syzkaller0 entered promiscuous mode [ 114.471432][ T5947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.495'. [ 114.611476][ T5950] tipc: Resetting bearer [ 114.678480][ T5939] tipc: Resetting bearer [ 114.756047][ T5939] tipc: Disabling bearer [ 114.893624][ T5959] netlink: 96 bytes leftover after parsing attributes in process `syz.3.498'. [ 115.062628][ T4309] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 115.365254][ T5967] tipc: Enabled bearer , priority 0 [ 115.383526][ T5967] device syzkaller0 entered promiscuous mode [ 115.420636][ T5967] tipc: Resetting bearer [ 115.441097][ T5966] tipc: Resetting bearer [ 115.442989][ T4309] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 115.487081][ T5966] tipc: Disabling bearer [ 115.496293][ T4309] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 115.516011][ T4285] usb 1-1: USB disconnect, device number 8 [ 115.525947][ T4309] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 115.583772][ T4309] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 115.604224][ T4309] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 115.695264][ T5976] netlink: 20 bytes leftover after parsing attributes in process `syz.1.504'. [ 115.752709][ T4309] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 115.771840][ T4309] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 115.790905][ T4309] usb 3-1: Product: syz [ 115.795239][ T4309] usb 3-1: Manufacturer: syz [ 115.853523][ T4309] cdc_wdm 3-1:1.0: skipping garbage [ 115.858752][ T4309] cdc_wdm 3-1:1.0: skipping garbage [ 115.898630][ T4309] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 115.923921][ T4309] cdc_wdm 3-1:1.0: Unknown control protocol [ 116.043417][ T5988] tipc: Enabled bearer , priority 0 [ 116.051340][ T5988] device syzkaller0 entered promiscuous mode [ 116.077326][ T5988] tipc: Resetting bearer [ 116.084881][ T5987] tipc: Resetting bearer [ 116.124773][ T5987] tipc: Disabling bearer [ 116.181442][ T6001] netlink: 284 bytes leftover after parsing attributes in process `syz.1.516'. [ 116.185442][ T5999] tipc: Enabling of bearer rejected, already enabled [ 116.293708][ T2301] usb 3-1: USB disconnect, device number 6 [ 116.329699][ T6009] device syzkaller0 entered promiscuous mode [ 116.440203][ T6013] tipc: Enabled bearer , priority 0 [ 116.449283][ T6013] device syzkaller0 entered promiscuous mode [ 116.496191][ T6013] tipc: Resetting bearer [ 116.542642][ T4309] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 116.570799][ T6010] tipc: Resetting bearer [ 116.593721][ T6010] tipc: Disabling bearer [ 116.706053][ T6021] netlink: 'syz.3.524': attribute type 1 has an invalid length. [ 116.802610][ T4309] usb 1-1: Using ep0 maxpacket: 8 [ 116.933683][ T6029] tipc: Enabling of bearer rejected, already enabled [ 116.937871][ T4309] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 116.989409][ T4309] usb 1-1: config 0 interface 0 has no altsetting 0 [ 117.152689][ T4309] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 117.171373][ T4309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.210468][ T4309] usb 1-1: Product: syz [ 117.227647][ T4309] usb 1-1: Manufacturer: syz [ 117.239746][ T4309] usb 1-1: SerialNumber: syz [ 117.258631][ T4309] usb 1-1: config 0 descriptor?? [ 117.308017][ T4309] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 117.350819][ T6042] device syzkaller0 entered promiscuous mode [ 117.533967][ T4309] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 117.541532][ T4309] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 117.563431][ T4309] snd_usb_toneport: probe of 1-1:0.0 failed with error -22 [ 117.676880][ T6052] tipc: Enabled bearer , priority 0 [ 117.698712][ T6052] device syzkaller0 entered promiscuous mode [ 117.739034][ T6052] tipc: Resetting bearer [ 117.767425][ T6051] tipc: Resetting bearer [ 117.794454][ T6051] tipc: Disabling bearer [ 117.882625][ T4184] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 118.107914][ T4285] usb 1-1: USB disconnect, device number 9 [ 118.181404][ T6067] tipc: Enabling not permitted [ 118.195986][ T6067] tipc: Enabling of bearer rejected, failed to enable media [ 118.301525][ T4184] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 118.319333][ T4184] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 118.336483][ T4184] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 118.361302][ T4184] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 118.380738][ T4184] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 118.397416][ T6073] team0: Port device team_slave_0 removed [ 118.489120][ T6083] tipc: Enabled bearer , priority 0 [ 118.498028][ T6083] device syzkaller0 entered promiscuous mode [ 118.525729][ T6083] tipc: Resetting bearer [ 118.533728][ T6082] tipc: Resetting bearer [ 118.542999][ T4184] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 118.552741][ T4184] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 118.560821][ T4184] usb 4-1: Product: syz [ 118.561636][ T6082] tipc: Disabling bearer [ 118.566053][ T4184] usb 4-1: Manufacturer: syz [ 118.589197][ T6085] tipc: Enabling of bearer rejected, already enabled [ 118.633556][ T4184] cdc_wdm 4-1:1.0: skipping garbage [ 118.644769][ T4184] cdc_wdm 4-1:1.0: skipping garbage [ 118.667437][ T4184] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 118.692921][ T4184] cdc_wdm 4-1:1.0: Unknown control protocol [ 118.808340][ T6094] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 119.020873][ T6104] device syzkaller0 entered promiscuous mode [ 119.042741][ T4184] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 119.075814][ T21] usb 4-1: USB disconnect, device number 9 [ 119.232159][ T6106] device syzkaller0 entered promiscuous mode [ 119.282513][ T4184] usb 3-1: Using ep0 maxpacket: 8 [ 119.420741][ T6110] tipc: Enabling of bearer rejected, already enabled [ 119.427620][ T4184] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 119.451421][ T4184] usb 3-1: config 0 interface 0 has no altsetting 0 [ 119.528504][ T6113] tipc: Enabled bearer , priority 0 [ 119.546158][ T4295] IPVS: stopping backup sync thread 6094 ... [ 119.546732][ T6113] device syzkaller0 entered promiscuous mode [ 119.645875][ T4184] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 119.660407][ T6113] tipc: Resetting bearer [ 119.682510][ T6118] netlink: 28 bytes leftover after parsing attributes in process `syz.3.568'. [ 119.703889][ T6112] tipc: Resetting bearer [ 119.727175][ T6112] tipc: Disabling bearer [ 119.733261][ T4184] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.777226][ T4184] usb 3-1: Product: syz [ 119.781443][ T4184] usb 3-1: Manufacturer: syz [ 119.814272][ T6123] tipc: Enabling of bearer rejected, already enabled [ 119.822828][ T4184] usb 3-1: SerialNumber: syz [ 119.861911][ T4184] usb 3-1: config 0 descriptor?? [ 119.916409][ T4184] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 120.052561][ T6136] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 120.134051][ T4184] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 120.155480][ T4184] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 120.198958][ T4184] snd_usb_toneport: probe of 3-1:0.0 failed with error -22 [ 120.421269][ T6146] tipc: Enabled bearer , priority 0 [ 120.439712][ T26] audit: type=1804 audit(1759039754.941:160): pid=6144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.576" name="/newroot/111/file1" dev="fuse" ino=1 res=1 errno=0 [ 120.521854][ T6146] device syzkaller0 entered promiscuous mode [ 120.578852][ T6145] tipc: Resetting bearer [ 120.734540][ T6145] tipc: Disabling bearer [ 120.752521][ T4184] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 120.935306][ T6161] tipc: Enabling of bearer rejected, failed to enable media [ 121.112688][ T4184] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 121.132081][ T4184] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 121.180543][ T4184] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 121.203975][ T4184] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 121.250596][ T4184] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 121.382624][ T4184] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 121.392311][ T4184] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 121.416748][ T4184] usb 5-1: Product: syz [ 121.426772][ T4184] usb 5-1: Manufacturer: syz [ 121.447794][ T26] audit: type=1804 audit(1759039755.951:161): pid=6181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.590" name="/newroot/119/file1" dev="fuse" ino=1 res=1 errno=0 [ 121.470385][ T6185] device syzkaller0 entered promiscuous mode [ 121.565319][ T4184] cdc_wdm 5-1:1.0: skipping garbage [ 121.580706][ T4184] cdc_wdm 5-1:1.0: skipping garbage [ 121.601289][ T4184] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 121.610053][ T4184] cdc_wdm 5-1:1.0: Unknown control protocol [ 121.980372][ T6202] tipc: Enabled bearer , priority 0 [ 121.996609][ T4184] usb 5-1: USB disconnect, device number 4 [ 122.044103][ T6205] device syzkaller0 entered promiscuous mode [ 122.073396][ T6204] tipc: Enabled bearer , priority 0 [ 122.097969][ T6204] device syzkaller0 entered promiscuous mode [ 122.131609][ T6201] tipc: Resetting bearer [ 122.189022][ T6201] tipc: Disabling bearer [ 122.215772][ T5747] usb 3-1: USB disconnect, device number 7 [ 122.249364][ T6204] tipc: Resetting bearer [ 122.752548][ T5747] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 123.007593][ T5747] usb 2-1: Using ep0 maxpacket: 8 [ 123.012198][ T6233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.605'. [ 123.152643][ T5747] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 123.174675][ T4226] tipc: Node number set to 3216112259 [ 123.215437][ T5747] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.224099][ T6242] tipc: Enabling of bearer rejected, already enabled [ 123.267307][ T6247] tipc: Enabling of bearer rejected, already enabled [ 123.402647][ T5747] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 123.422162][ T5747] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.478167][ T5747] usb 2-1: Product: syz [ 123.489604][ T5747] usb 2-1: Manufacturer: syz [ 123.494291][ T5747] usb 2-1: SerialNumber: syz [ 123.516110][ T5747] usb 2-1: config 0 descriptor?? [ 123.531810][ T6260] tipc: Enabling of bearer rejected, already enabled [ 123.552624][ T4285] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 123.555176][ T5747] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 123.738943][ T6266] tipc: Enabling of bearer rejected, already enabled [ 123.783514][ T5747] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 123.804076][ T5747] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 123.841435][ T5747] snd_usb_toneport: probe of 2-1:0.0 failed with error -22 [ 123.866318][ T6268] netlink: 32 bytes leftover after parsing attributes in process `syz.3.621'. [ 123.963491][ T4285] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 123.980757][ T4285] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 124.012003][ T4285] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 124.042747][ T4285] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 124.085022][ T4285] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 124.224348][ T6274] tipc: Enabling of bearer rejected, already enabled [ 124.263579][ T4285] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 124.279332][ T4285] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 124.297723][ T4285] usb 1-1: Product: syz [ 124.307665][ T4285] usb 1-1: Manufacturer: syz [ 124.376560][ T4285] cdc_wdm 1-1:1.0: skipping garbage [ 124.406923][ T4285] cdc_wdm 1-1:1.0: skipping garbage [ 124.456308][ T4285] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 124.475787][ T4285] cdc_wdm 1-1:1.0: Unknown control protocol [ 124.488610][ T6278] tipc: Enabling of bearer rejected, already enabled [ 124.680694][ T6287] tipc: Enabling of bearer rejected, already enabled [ 124.768764][ T6292] netlink: 16 bytes leftover after parsing attributes in process `syz.2.632'. [ 124.818058][ T5747] usb 1-1: USB disconnect, device number 10 [ 124.948151][ T6299] tipc: Enabling of bearer rejected, already enabled [ 125.685389][ T2301] usb 2-1: USB disconnect, device number 4 [ 125.801172][ T6328] tipc: Enabling of bearer rejected, already enabled [ 125.921218][ T6335] netlink: 'syz.3.647': attribute type 1 has an invalid length. [ 126.397879][ T6352] tipc: Enabling of bearer rejected, already enabled [ 126.553693][ T6363] tipc: Enabling of bearer rejected, already enabled [ 126.822286][ T6369] IPVS: Scheduler module ip_vs_sip not found [ 126.965437][ T6388] tipc: Enabling of bearer rejected, already enabled [ 127.080911][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 127.097307][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 127.116339][ T6393] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.150005][ T6396] tipc: Enabling of bearer rejected, already enabled [ 127.252276][ T6404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.675'. [ 127.470123][ T6411] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.711901][ T6422] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 127.918246][ T6433] device syzkaller0 entered promiscuous mode [ 128.113788][ T6411] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.184313][ T6411] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.261257][ T6411] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.343590][ T6411] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.356634][ T6411] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.369442][ T6411] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.382282][ T6411] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.505505][ T6439] tipc: Enabling of bearer rejected, already enabled [ 128.754840][ T6458] netlink: 24 bytes leftover after parsing attributes in process `syz.0.696'. [ 128.775944][ T6460] tipc: Enabled bearer , priority 0 [ 128.797147][ T6450] device syzkaller0 entered promiscuous mode [ 128.848751][ T6450] tipc: Resetting bearer [ 128.869883][ T6446] tipc: Resetting bearer [ 128.896624][ T6446] tipc: Disabling bearer [ 128.917693][ T6465] tipc: Enabling of bearer rejected, already enabled [ 128.927237][ T6467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.700'. [ 128.938441][ T6467] netlink: 'syz.0.700': attribute type 4 has an invalid length. [ 129.002191][ T6467] netlink: 'syz.0.700': attribute type 4 has an invalid length. [ 129.103853][ T6471] device syzkaller0 entered promiscuous mode [ 129.271378][ T6488] device syzkaller0 entered promiscuous mode [ 129.352494][ T2301] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 129.401085][ T6494] tipc: Enabling of bearer rejected, already enabled [ 129.663685][ T6503] tipc: Enabling of bearer rejected, already enabled [ 129.722610][ T2301] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 129.722639][ T2301] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 129.722658][ T2301] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 129.801393][ T2301] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 129.822897][ T2301] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 129.890040][ T6514] netlink: 24 bytes leftover after parsing attributes in process `syz.1.720'. [ 129.972703][ T2301] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 129.991947][ T2301] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 130.031743][ T2301] usb 5-1: Product: syz [ 130.049998][ T2301] usb 5-1: Manufacturer: syz [ 130.093543][ T2301] cdc_wdm 5-1:1.0: skipping garbage [ 130.108965][ T2301] cdc_wdm 5-1:1.0: skipping garbage [ 130.120442][ T2301] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 130.145024][ T2301] cdc_wdm 5-1:1.0: Unknown control protocol [ 130.187481][ T6526] tipc: Enabling of bearer rejected, already enabled [ 130.461350][ T6539] tipc: Enabling of bearer rejected, already enabled [ 130.533534][ T5747] usb 5-1: USB disconnect, device number 5 [ 130.924106][ T6555] tipc: Enabling of bearer rejected, already enabled [ 131.096904][ T6559] tipc: Enabling of bearer rejected, already enabled [ 131.232559][ T5747] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 131.278253][ T6561] netlink: 'syz.3.740': attribute type 3 has an invalid length. [ 131.438652][ T6566] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 131.475133][ T6566] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 131.482623][ T5747] usb 3-1: Using ep0 maxpacket: 8 [ 131.516364][ T6575] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 131.590982][ T6575] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 131.607039][ T5747] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 131.618551][ T5747] usb 3-1: config 0 interface 0 has no altsetting 0 [ 131.692754][ T4309] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 131.782911][ T5747] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 131.804185][ T5747] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.830578][ T6587] netlink: 'syz.4.751': attribute type 16 has an invalid length. [ 131.840356][ T5747] usb 3-1: Product: syz [ 131.850084][ T5747] usb 3-1: Manufacturer: syz [ 131.857446][ T6587] netlink: 'syz.4.751': attribute type 17 has an invalid length. [ 131.865583][ T5747] usb 3-1: SerialNumber: syz [ 131.874237][ T5747] usb 3-1: config 0 descriptor?? [ 131.942900][ T4309] usb 1-1: Using ep0 maxpacket: 16 [ 131.954515][ T5747] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 132.062888][ T4309] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.086533][ T4309] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.114084][ T4309] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 132.126141][ T4309] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 132.222859][ T4309] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 132.234294][ T4309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 132.243581][ T4309] usb 1-1: SerialNumber: syz [ 132.285030][ T4309] hub 1-1:1.0: bad descriptor, ignoring hub [ 132.292240][ T4309] hub: probe of 1-1:1.0 failed with error -5 [ 132.304512][ T4309] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 132.536469][ T6587] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.544630][ T6587] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.575423][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.581967][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.834292][ T2301] usb 1-1: USB disconnect, device number 11 [ 133.445481][ T6587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.557097][ T6587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.232623][ T5747] snd_usb_toneport 3-1:0.0: set_interface failed [ 134.249327][ T5747] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 134.270944][ T5747] snd_usb_toneport: probe of 3-1:0.0 failed with error -71 [ 134.281044][ T5747] usb 3-1: USB disconnect, device number 8 [ 134.357726][ T6587] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.366961][ T6587] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.375948][ T6587] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.384852][ T6587] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.480773][ T6591] tipc: Enabling of bearer rejected, already enabled [ 135.192636][ T4233] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 135.212977][ T4226] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 135.482542][ T4226] usb 5-1: Using ep0 maxpacket: 8 [ 135.487621][ T4233] usb 4-1: Using ep0 maxpacket: 16 [ 135.632842][ T4226] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 135.643671][ T4233] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.667198][ T4233] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.687955][ T4226] usb 5-1: config 0 interface 0 has no altsetting 0 [ 135.722804][ T4233] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 135.752866][ T4233] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 135.851696][ T6636] tipc: Enabling of bearer rejected, already enabled [ 135.892668][ T4226] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 135.902047][ T4233] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 135.931631][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 135.939915][ T4226] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.996620][ T4226] usb 5-1: Product: syz [ 136.000890][ T4233] usb 4-1: SerialNumber: syz [ 136.011596][ T4226] usb 5-1: Manufacturer: syz [ 136.042918][ T4226] usb 5-1: SerialNumber: syz [ 136.064986][ T4233] hub 4-1:1.0: bad descriptor, ignoring hub [ 136.070906][ T4233] hub: probe of 4-1:1.0 failed with error -5 [ 136.078150][ T4226] usb 5-1: config 0 descriptor?? [ 136.099538][ T4233] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 136.100242][ T6640] netlink: 'syz.2.768': attribute type 16 has an invalid length. [ 136.145019][ T4226] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 136.188679][ T6640] netlink: 'syz.2.768': attribute type 17 has an invalid length. [ 136.298401][ T4196] Bluetooth: hci4: link tx timeout [ 136.303877][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 136.313138][ T4196] Bluetooth: hci4: link tx timeout [ 136.318375][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.326087][ T4196] Bluetooth: hci4: link tx timeout [ 136.331224][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 136.338961][ T4196] Bluetooth: hci4: link tx timeout [ 136.344144][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.359094][ T4196] Bluetooth: hci4: link tx timeout [ 136.364972][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 136.372765][ T4196] Bluetooth: hci4: link tx timeout [ 136.377870][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.385584][ T4196] Bluetooth: hci4: link tx timeout [ 136.390705][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 136.398421][ T4196] Bluetooth: hci4: link tx timeout [ 136.403585][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.413658][ T4196] Bluetooth: hci4: link tx timeout [ 136.418776][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 136.426659][ T4196] Bluetooth: hci4: link tx timeout [ 136.431764][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.439450][ T4196] Bluetooth: hci4: link tx timeout [ 136.444603][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 136.452227][ T4196] Bluetooth: hci4: link tx timeout [ 136.457400][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.470751][ T4196] Bluetooth: hci4: link tx timeout [ 136.475969][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 136.483638][ T4196] Bluetooth: hci4: link tx timeout [ 136.488739][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.496488][ T4196] Bluetooth: hci4: link tx timeout [ 136.501602][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 136.509295][ T4196] Bluetooth: hci4: link tx timeout [ 136.514457][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.526349][ T4196] Bluetooth: hci4: link tx timeout [ 136.531513][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 136.539255][ T4196] Bluetooth: hci4: link tx timeout [ 136.544407][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.552032][ T4196] Bluetooth: hci4: link tx timeout [ 136.557214][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 136.564888][ T4196] Bluetooth: hci4: link tx timeout [ 136.570092][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.578279][ T4196] Bluetooth: hci4: link tx timeout [ 136.583456][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 136.591103][ T4196] Bluetooth: hci4: link tx timeout [ 136.592833][ T4233] usb 4-1: USB disconnect, device number 10 [ 136.596260][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.609750][ T4196] Bluetooth: hci4: link tx timeout [ 136.614881][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 136.622560][ T4196] Bluetooth: hci4: link tx timeout [ 136.627654][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.638727][ T4196] Bluetooth: hci4: link tx timeout [ 136.643897][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 136.651518][ T4196] Bluetooth: hci4: link tx timeout [ 136.656762][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.664440][ T4196] Bluetooth: hci4: link tx timeout [ 136.669553][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 136.677289][ T4196] Bluetooth: hci4: link tx timeout [ 136.682396][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.695275][ T4196] Bluetooth: hci4: link tx timeout [ 136.700416][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 136.708255][ T4196] Bluetooth: hci4: link tx timeout [ 136.713375][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.721025][ T4196] Bluetooth: hci4: link tx timeout [ 136.726194][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 136.734110][ T4196] Bluetooth: hci4: link tx timeout [ 136.739265][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.756796][ T4196] Bluetooth: hci4: link tx timeout [ 136.761926][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 136.769681][ T4196] Bluetooth: hci4: link tx timeout [ 136.774879][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.783064][ T4196] Bluetooth: hci4: link tx timeout [ 136.788206][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 136.795918][ T4196] Bluetooth: hci4: link tx timeout [ 136.801038][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.815619][ T4196] Bluetooth: hci4: link tx timeout [ 136.820740][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 136.828435][ T4196] Bluetooth: hci4: link tx timeout [ 136.833570][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.842896][ T4196] Bluetooth: hci4: link tx timeout [ 136.848029][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 136.855719][ T4196] Bluetooth: hci4: link tx timeout [ 136.860833][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.868618][ T4196] Bluetooth: hci4: link tx timeout [ 136.873774][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 136.881415][ T4196] Bluetooth: hci4: link tx timeout [ 136.886589][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.897080][ T4196] Bluetooth: hci4: link tx timeout [ 136.902203][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 136.909905][ T4196] Bluetooth: hci4: link tx timeout [ 136.915042][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.926458][ T4196] Bluetooth: hci4: link tx timeout [ 136.931586][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 136.939351][ T4196] Bluetooth: hci4: link tx timeout [ 136.944503][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.952121][ T4196] Bluetooth: hci4: link tx timeout [ 136.957268][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 136.964926][ T4196] Bluetooth: hci4: link tx timeout [ 136.970035][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.979412][ T4196] Bluetooth: hci4: link tx timeout [ 136.984570][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 136.992191][ T4196] Bluetooth: hci4: link tx timeout [ 136.997345][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 137.005012][ T4196] Bluetooth: hci4: link tx timeout [ 137.010106][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 137.017779][ T4196] Bluetooth: hci4: link tx timeout [ 137.022929][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 137.047539][ T4196] Bluetooth: hci4: link tx timeout [ 137.052700][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 137.060317][ T4196] Bluetooth: hci4: link tx timeout [ 137.065485][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 137.073153][ T4196] Bluetooth: hci4: link tx timeout [ 137.078245][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 137.085938][ T4196] Bluetooth: hci4: link tx timeout [ 137.091046][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 137.116426][ T4196] Bluetooth: hci4: link tx timeout [ 137.121562][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 137.129288][ T4196] Bluetooth: hci4: link tx timeout [ 137.134463][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 137.142098][ T4196] Bluetooth: hci4: link tx timeout [ 137.147263][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 137.154913][ T4196] Bluetooth: hci4: link tx timeout [ 137.160009][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 137.202721][ T4196] Bluetooth: hci4: link tx timeout [ 137.207852][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 137.215563][ T4196] Bluetooth: hci4: link tx timeout [ 137.220674][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 137.228354][ T4196] Bluetooth: hci4: link tx timeout [ 137.233489][ T4196] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 137.241103][ T4196] Bluetooth: hci4: link tx timeout [ 137.246260][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.022120][ T6640] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.029809][ T6640] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.172678][ T4226] snd_usb_toneport 5-1:0.0: set_interface failed [ 138.180304][ T4226] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 138.190534][ T4226] snd_usb_toneport: probe of 5-1:0.0 failed with error -71 [ 138.211146][ T4226] usb 5-1: USB disconnect, device number 6 [ 138.417464][ T5747] Bluetooth: hci4: command 0x0406 tx timeout [ 138.699224][ T6640] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.744014][ T6640] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.155735][ T6640] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.165069][ T6640] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.174346][ T6640] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.183995][ T6640] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.274194][ T6640] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 139.283283][ T6640] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 139.292230][ T6640] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 139.301480][ T6640] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 139.428659][ T6668] tipc: Enabling of bearer rejected, already enabled [ 139.871261][ T6693] tipc: Enabling of bearer rejected, failed to enable media [ 139.978245][ T6695] netlink: 'syz.1.788': attribute type 16 has an invalid length. [ 139.986356][ T6695] netlink: 'syz.1.788': attribute type 17 has an invalid length. [ 140.080327][ T6695] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.088254][ T6695] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.172648][ T1110] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 140.255065][ T6695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.269672][ T6695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.422671][ T1110] usb 4-1: Using ep0 maxpacket: 16 [ 140.499360][ T5750] Bluetooth: hci4: command 0x0406 tx timeout [ 140.562832][ T1110] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.573552][ T1110] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.584668][ T1110] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 140.594521][ T1110] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 140.694198][ T1110] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.703520][ T1110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 140.711507][ T1110] usb 4-1: SerialNumber: syz [ 140.773233][ T1110] hub 4-1:1.0: bad descriptor, ignoring hub [ 140.779192][ T1110] hub: probe of 4-1:1.0 failed with error -5 [ 140.787566][ T1110] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 140.874596][ T6695] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.883853][ T6695] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.892840][ T6695] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.901852][ T6695] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.988875][ T6695] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 140.998039][ T6695] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 141.007046][ T6695] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 141.016117][ T6695] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 141.052797][ T6704] tipc: Enabling of bearer rejected, already enabled [ 141.074636][ T6719] netlink: 144 bytes leftover after parsing attributes in process `syz.4.792'. [ 141.123748][ T6719] netlink: 'syz.4.792': attribute type 3 has an invalid length. [ 141.190477][ T6726] tipc: Enabling of bearer rejected, failed to enable media [ 141.303116][ T4184] usb 4-1: USB disconnect, device number 11 [ 141.362861][ T6742] tipc: Enabling of bearer rejected, failed to enable media [ 141.438119][ T6748] tipc: Enabling of bearer rejected, already enabled [ 141.734638][ T6767] tipc: Enabling of bearer rejected, already enabled [ 141.821595][ T6773] tipc: Enabling of bearer rejected, failed to enable media [ 142.045820][ T6782] tipc: Enabling of bearer rejected, already enabled [ 142.223782][ T6795] tipc: Enabling of bearer rejected, already enabled [ 142.325375][ T6800] tipc: Enabling of bearer rejected, failed to enable media [ 142.341642][ T6800] device syzkaller0 entered promiscuous mode [ 142.522273][ T6814] netlink: 144 bytes leftover after parsing attributes in process `syz.3.832'. [ 142.539439][ T6814] netlink: 'syz.3.832': attribute type 3 has an invalid length. [ 142.569555][ T6816] tipc: Enabling of bearer rejected, already enabled [ 142.680484][ T6822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.835'. [ 142.682527][ T23] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 142.809487][ T6830] tipc: Enabling of bearer rejected, failed to enable media [ 142.972570][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 142.980790][ T6844] tipc: Enabling of bearer rejected, already enabled [ 143.092644][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.112515][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.152965][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 143.186790][ T23] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 143.206714][ T6854] netlink: 144 bytes leftover after parsing attributes in process `syz.1.849'. [ 143.216098][ T5745] Bluetooth: hci4: command 0x0405 tx timeout [ 143.255493][ T6854] netlink: 'syz.1.849': attribute type 3 has an invalid length. [ 143.322788][ T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.335884][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 143.352930][ T23] usb 3-1: SerialNumber: syz [ 143.423313][ T23] hub 3-1:1.0: bad descriptor, ignoring hub [ 143.429269][ T23] hub: probe of 3-1:1.0 failed with error -5 [ 143.444816][ T23] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 143.494354][ T6865] netlink: 144 bytes leftover after parsing attributes in process `syz.0.855'. [ 143.523621][ T6863] tipc: Enabling of bearer rejected, failed to enable media [ 143.552506][ T6865] netlink: 'syz.0.855': attribute type 3 has an invalid length. [ 143.570752][ T6863] device syzkaller0 entered promiscuous mode [ 143.713996][ T6871] tipc: Enabling of bearer rejected, already enabled [ 143.986965][ T21] usb 3-1: USB disconnect, device number 9 [ 143.989637][ T6882] tipc: Enabling of bearer rejected, already enabled [ 144.022072][ T6881] netlink: 144 bytes leftover after parsing attributes in process `syz.4.864'. [ 144.053296][ T6881] netlink: 'syz.4.864': attribute type 3 has an invalid length. [ 144.231081][ T6890] tipc: Enabling of bearer rejected, failed to enable media [ 144.487244][ T6897] tipc: Enabling of bearer rejected, already enabled [ 144.699999][ T6904] netlink: 308 bytes leftover after parsing attributes in process `syz.3.873'. [ 144.754651][ T6908] tipc: Enabling of bearer rejected, already enabled [ 144.824895][ T6911] netlink: 144 bytes leftover after parsing attributes in process `syz.2.877'. [ 144.878770][ T6914] fuse: Bad value for 'fd' [ 144.899690][ T6911] netlink: 'syz.2.877': attribute type 3 has an invalid length. [ 145.131726][ T6921] tipc: Enabling of bearer rejected, failed to enable media [ 145.148176][ T6927] tipc: Enabling of bearer rejected, already enabled [ 145.330771][ T6940] tipc: Enabling of bearer rejected, already enabled [ 145.439661][ T6947] tipc: Enabling of bearer rejected, already enabled [ 145.463111][ T6949] netlink: 144 bytes leftover after parsing attributes in process `syz.3.891'. [ 145.486474][ T6949] netlink: 'syz.3.891': attribute type 3 has an invalid length. [ 145.494273][ T23] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 145.559450][ T6951] fuse: Bad value for 'fd' [ 145.565777][ T6953] netlink: 144 bytes leftover after parsing attributes in process `syz.3.893'. [ 145.576899][ T6953] netlink: 'syz.3.893': attribute type 3 has an invalid length. [ 145.685259][ T6957] IPv4: Oversized IP packet from 127.202.26.0 [ 145.742740][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 145.804967][ T6961] tipc: Enabling of bearer rejected, already enabled [ 145.863087][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.886371][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.925507][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 145.947534][ T23] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 145.962539][ T6967] device bond0 entered promiscuous mode [ 145.968194][ T6967] device bond_slave_0 entered promiscuous mode [ 145.975278][ T6967] device bond_slave_1 entered promiscuous mode [ 146.001178][ T6966] tipc: Enabling of bearer rejected, already enabled [ 146.032728][ T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 146.047454][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 146.071722][ T23] usb 3-1: SerialNumber: syz [ 146.125681][ T23] hub 3-1:1.0: bad descriptor, ignoring hub [ 146.133547][ T23] hub: probe of 3-1:1.0 failed with error -5 [ 146.140073][ T23] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 146.166258][ T6973] tipc: Enabling of bearer rejected, already enabled [ 146.237235][ T6975] fuse: Bad value for 'fd' [ 146.287355][ T6979] tipc: Enabling of bearer rejected, already enabled [ 146.530541][ T6990] tipc: Enabling of bearer rejected, already enabled [ 146.656026][ T4184] usb 3-1: USB disconnect, device number 10 [ 146.669810][ T6997] netlink: 20 bytes leftover after parsing attributes in process `syz.4.913'. [ 146.764740][ T6999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.914'. [ 146.818326][ T6999] tipc: Enabled bearer , priority 10 [ 146.885941][ T7007] tipc: Enabling of bearer rejected, failed to enable media [ 147.064128][ T7019] tipc: Enabling of bearer rejected, already enabled [ 147.109008][ T7023] netlink: 144 bytes leftover after parsing attributes in process `syz.4.924'. [ 147.140194][ T7023] netlink: 'syz.4.924': attribute type 3 has an invalid length. [ 147.359678][ T7036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.931'. [ 147.627471][ T7050] netlink: 144 bytes leftover after parsing attributes in process `syz.4.938'. [ 147.658099][ T7050] netlink: 'syz.4.938': attribute type 3 has an invalid length. [ 147.940180][ T7063] tipc: Enabling of bearer rejected, already enabled [ 147.972651][ T5743] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 148.242696][ T5743] usb 1-1: Using ep0 maxpacket: 16 [ 148.355058][ T7077] device syzkaller0 entered promiscuous mode [ 148.392822][ T5743] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.417189][ T5743] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.432086][ T7081] netlink: 144 bytes leftover after parsing attributes in process `syz.3.952'. [ 148.450612][ T5743] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 148.472755][ T7081] netlink: 'syz.3.952': attribute type 3 has an invalid length. [ 148.480662][ T5743] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 148.512610][ T7084] netlink: 'syz.4.954': attribute type 10 has an invalid length. [ 148.534489][ T7084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.554607][ T7084] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 148.587896][ T5743] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 148.598860][ T5743] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 148.614694][ T5743] usb 1-1: SerialNumber: syz [ 148.637116][ T7082] IPv6: NLM_F_CREATE should be specified when creating new route [ 148.645348][ T7085] netlink: 'syz.4.954': attribute type 10 has an invalid length. [ 148.653574][ T7085] netlink: 40 bytes leftover after parsing attributes in process `syz.4.954'. [ 148.673449][ T7085] device batadv0 entered promiscuous mode [ 148.683322][ T5743] hub 1-1:1.0: bad descriptor, ignoring hub [ 148.695706][ T7085] bond0: (slave batadv0): Releasing backup interface [ 148.696040][ T5743] hub: probe of 1-1:1.0 failed with error -5 [ 148.719534][ T5743] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 148.740364][ T7085] bridge0: port 3(batadv0) entered blocking state [ 148.756300][ T7085] bridge0: port 3(batadv0) entered disabled state [ 148.783407][ T7089] tipc: Enabling of bearer rejected, already enabled [ 148.822831][ T1237] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 148.832517][ T1237] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 148.848932][ T7092] netlink: 144 bytes leftover after parsing attributes in process `syz.1.957'. [ 148.893628][ T7092] netlink: 'syz.1.957': attribute type 3 has an invalid length. [ 149.132009][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.965'. [ 149.148720][ T7106] tipc: Enabled bearer , priority 10 [ 149.211752][ T26] audit: type=1804 audit(1759039783.711:162): pid=7112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.967" name="/newroot/198/file1" dev="fuse" ino=1 res=1 errno=0 [ 149.237955][ T5743] usb 1-1: USB disconnect, device number 12 [ 149.389950][ T7127] netlink: 144 bytes leftover after parsing attributes in process `syz.1.972'. [ 149.424587][ T7127] netlink: 'syz.1.972': attribute type 3 has an invalid length. [ 149.630345][ T7137] device syzkaller0 entered promiscuous mode [ 149.732777][ T5743] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 149.759857][ T7141] tipc: Enabled bearer , priority 10 [ 149.776457][ T4591] tipc: Resetting bearer [ 149.787643][ T26] audit: type=1804 audit(1759039784.291:163): pid=7143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.981" name="/newroot/216/file1" dev="fuse" ino=1 res=1 errno=0 [ 149.996763][ T7157] netlink: 'syz.3.988': attribute type 3 has an invalid length. [ 150.016830][ T7156] device syzkaller0 entered promiscuous mode [ 150.142680][ T5743] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 150.155922][ T5743] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.169169][ T5743] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 150.181977][ T5743] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.198889][ T5743] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.338786][ T5743] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 150.352444][ T5743] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 150.360647][ T5743] usb 3-1: Product: syz [ 150.372589][ T5743] usb 3-1: Manufacturer: syz [ 150.449712][ T5743] cdc_wdm 3-1:1.0: skipping garbage [ 150.455244][ T5743] cdc_wdm 3-1:1.0: skipping garbage [ 150.466737][ T5743] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 150.482457][ T5743] cdc_wdm 3-1:1.0: Unknown control protocol [ 150.654064][ T7131] cdc_wdm 3-1:1.0: Error submitting int urb - -90 [ 150.680972][ T5743] usb 3-1: USB disconnect, device number 11 [ 150.792380][ T26] audit: type=1804 audit(1759039785.291:164): pid=7174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.994" name="/newroot/168/file1" dev="fuse" ino=1 res=1 errno=0 [ 151.035980][ T7181] tipc: Enabled bearer , priority 10 [ 151.249708][ T7193] netlink: 'syz.1.1002': attribute type 3 has an invalid length. [ 151.536187][ T26] audit: type=1804 audit(1759039786.041:165): pid=7199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1007" name="/newroot/226/file1" dev="fuse" ino=1 res=1 errno=0 [ 151.889698][ T7226] __nla_validate_parse: 5 callbacks suppressed [ 151.889715][ T7226] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1016'. [ 151.994821][ T7232] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1018'. [ 152.030172][ T7232] netlink: 'syz.3.1018': attribute type 3 has an invalid length. [ 152.052544][ T4184] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 152.132490][ T5743] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 152.152714][ T23] tipc: Node number set to 3947750654 [ 152.330842][ T26] audit: type=1804 audit(1759039786.831:166): pid=7238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1022" name="/newroot/218/file1" dev="fuse" ino=1 res=1 errno=0 [ 152.412580][ T5743] usb 3-1: Using ep0 maxpacket: 8 [ 152.422802][ T4184] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 152.443410][ T4184] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.478777][ T4184] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 152.530669][ T4184] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.560870][ T4184] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.572832][ T5743] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 152.607313][ T5743] usb 3-1: config 0 interface 0 has no altsetting 0 [ 152.746588][ T4184] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 152.766028][ T4184] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 152.777826][ T4184] usb 5-1: Product: syz [ 152.782128][ T4184] usb 5-1: Manufacturer: syz [ 152.812795][ T5743] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 152.821898][ T5743] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.851907][ T7257] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1031'. [ 152.862847][ T4184] cdc_wdm 5-1:1.0: skipping garbage [ 152.868077][ T4184] cdc_wdm 5-1:1.0: skipping garbage [ 152.876396][ T5743] usb 3-1: Product: syz [ 152.882748][ T5743] usb 3-1: Manufacturer: syz [ 152.896904][ T5743] usb 3-1: SerialNumber: syz [ 152.905890][ T4184] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 152.911888][ T4184] cdc_wdm 5-1:1.0: Unknown control protocol [ 152.925821][ T5743] usb 3-1: config 0 descriptor?? [ 152.965302][ T5743] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 152.978668][ T7257] netlink: 'syz.1.1031': attribute type 3 has an invalid length. [ 153.020978][ T7263] device syzkaller0 left promiscuous mode [ 153.029633][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 153.070362][ T7220] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 153.134886][ T1110] usb 5-1: USB disconnect, device number 7 [ 153.143680][ T7265] device syzkaller0 entered promiscuous mode [ 153.176179][ T7267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1036'. [ 153.224077][ T5743] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 153.231652][ T5743] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 153.264289][ T5743] snd_usb_toneport: probe of 3-1:0.0 failed with error -22 [ 153.596854][ T7287] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1045'. [ 153.621947][ T7287] netlink: 'syz.3.1045': attribute type 3 has an invalid length. [ 153.786438][ T7293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1048'. [ 153.996000][ T7302] device syzkaller0 entered promiscuous mode [ 154.010425][ T7302] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 154.538866][ T7323] tipc: Enabled bearer , priority 0 [ 154.565894][ T4184] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 154.581412][ T7323] tipc: Resetting bearer [ 154.616919][ T7322] tipc: Disabling bearer [ 154.849027][ T5745] usb 3-1: USB disconnect, device number 12 [ 154.898740][ T7332] device syzkaller0 left promiscuous mode [ 154.932671][ T4184] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 154.950464][ T7334] device syzkaller0 entered promiscuous mode [ 154.958003][ T4184] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 154.979210][ T4184] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 154.988334][ T7336] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1068'. [ 155.006958][ T4184] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 155.023583][ T4184] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 155.156325][ T4184] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 155.175677][ T4184] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 155.198750][ T4184] usb 4-1: Product: syz [ 155.218648][ T4184] usb 4-1: Manufacturer: syz [ 155.250301][ T7348] device syzkaller0 entered promiscuous mode [ 155.275930][ T4184] cdc_wdm 4-1:1.0: skipping garbage [ 155.281195][ T4184] cdc_wdm 4-1:1.0: skipping garbage [ 155.317575][ T4184] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 155.481469][ T4184] usb 4-1: USB disconnect, device number 12 [ 155.584601][ T7359] tipc: Enabling of bearer rejected, already enabled [ 155.764002][ T7364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1080'. [ 156.145626][ T7375] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1086'. [ 156.154860][ T5750] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 156.166416][ T7375] netlink: 'syz.2.1086': attribute type 3 has an invalid length. [ 156.218732][ T7379] tipc: Enabling of bearer rejected, already enabled [ 156.326270][ T7381] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1098'. [ 156.362718][ T5750] usb 1-1: device descriptor read/64, error -71 [ 156.379288][ T7381] netlink: 'syz.2.1098': attribute type 3 has an invalid length. [ 156.462649][ T7388] tipc: Enabling of bearer rejected, already enabled [ 156.511811][ T7390] netlink: 'syz.2.1091': attribute type 3 has an invalid length. [ 156.657311][ T5750] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 156.820775][ T7407] tipc: Enabling of bearer rejected, already enabled [ 156.892780][ T5750] usb 1-1: device descriptor read/64, error -71 [ 156.899277][ T5745] Bluetooth: hci0: command 0x0c1a tx timeout [ 157.027708][ T5750] usb usb1-port1: attempt power cycle [ 157.072542][ T21] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 157.086716][ T7414] __nla_validate_parse: 1 callbacks suppressed [ 157.086731][ T7414] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1102'. [ 157.112173][ T7414] netlink: 'syz.2.1102': attribute type 3 has an invalid length. [ 157.432697][ T21] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 157.441391][ T21] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 157.458513][ T5750] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 157.472757][ T21] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 157.481749][ T21] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 157.512497][ T21] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 157.577894][ T5750] usb 1-1: device descriptor read/8, error -71 [ 157.652713][ T21] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 157.672473][ T21] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 157.690795][ T21] usb 5-1: Product: syz [ 157.695485][ T21] usb 5-1: Manufacturer: syz [ 157.734343][ T21] cdc_wdm 5-1:1.0: skipping garbage [ 157.739722][ T21] cdc_wdm 5-1:1.0: skipping garbage [ 157.745341][ T21] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 157.862695][ T5750] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 157.957509][ T5750] usb 1-1: device descriptor read/8, error -71 [ 158.102079][ T5750] usb usb1-port1: unable to enumerate USB device [ 158.220312][ T21] usb 5-1: USB disconnect, device number 8 [ 158.551589][ T7419] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1106'. [ 158.571575][ T7417] tipc: Enabling of bearer rejected, already enabled [ 158.591795][ T7420] device batadv_slave_1 entered promiscuous mode [ 158.599945][ T7419] netlink: 'syz.4.1106': attribute type 3 has an invalid length. [ 158.616218][ T7416] device batadv_slave_1 left promiscuous mode [ 158.876382][ T7435] tipc: Enabling of bearer rejected, already enabled [ 158.919660][ T7439] tipc: Enabling of bearer rejected, already enabled [ 158.982787][ T5745] Bluetooth: hci0: command 0x0406 tx timeout [ 159.125204][ T7449] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1117'. [ 159.166971][ T7451] tipc: Enabling of bearer rejected, already enabled [ 159.175930][ T7449] netlink: 'syz.4.1117': attribute type 3 has an invalid length. [ 159.302570][ T5745] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 159.379739][ T7461] tipc: Enabling of bearer rejected, already enabled [ 159.525997][ T26] audit: type=1804 audit(1759039794.031:167): pid=7465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1125" name="/newroot/247/file1" dev="fuse" ino=1 res=1 errno=0 [ 159.546957][ T4184] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 159.558452][ T7469] tipc: Enabled bearer , priority 0 [ 159.566675][ T7469] device syzkaller0 entered promiscuous mode [ 159.582651][ T5745] usb 4-1: Using ep0 maxpacket: 8 [ 159.588588][ T7469] tipc: Resetting bearer [ 159.609301][ T7468] tipc: Resetting bearer [ 159.617704][ T7468] tipc: Disabling bearer [ 159.628732][ T7474] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1129'. [ 159.639393][ T7474] netlink: 'syz.4.1129': attribute type 3 has an invalid length. [ 159.689469][ T7477] tipc: Enabling of bearer rejected, already enabled [ 159.712795][ T5745] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 159.732455][ T5745] usb 4-1: config 0 interface 0 has no altsetting 0 [ 159.746095][ T4184] usb 1-1: device descriptor read/64, error -71 [ 159.922830][ T5745] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 159.933904][ T5745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.953642][ T5745] usb 4-1: Product: syz [ 159.958030][ T5745] usb 4-1: Manufacturer: syz [ 159.963444][ T5745] usb 4-1: SerialNumber: syz [ 159.978225][ T5745] usb 4-1: config 0 descriptor?? [ 160.015361][ T5745] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 160.022585][ T4184] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 160.105942][ T7499] tipc: Enabling of bearer rejected, already enabled [ 160.166721][ T7503] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1140'. [ 160.179564][ T7503] netlink: 'syz.4.1140': attribute type 3 has an invalid length. [ 160.211548][ T26] audit: type=1804 audit(1759039794.711:168): pid=7504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1139" name="/newroot/207/file1" dev="fuse" ino=1 res=1 errno=0 [ 160.220668][ T7506] tipc: Enabling of bearer rejected, already enabled [ 160.248161][ T5745] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 160.250711][ T4184] usb 1-1: device descriptor read/64, error -71 [ 160.258756][ T5745] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 160.279222][ T5745] snd_usb_toneport: probe of 4-1:0.0 failed with error -22 [ 160.313063][ T7508] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1142'. [ 160.324496][ T7508] netlink: 'syz.2.1142': attribute type 3 has an invalid length. [ 160.338557][ T7510] tipc: Enabling of bearer rejected, already enabled [ 160.387835][ T4184] usb usb1-port1: attempt power cycle [ 160.402037][ T7512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1144'. [ 160.411872][ T7512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1144'. [ 160.421601][ T7512] netlink: 'syz.2.1144': attribute type 19 has an invalid length. [ 160.436043][ T7512] netlink: 'syz.2.1144': attribute type 20 has an invalid length. [ 160.450651][ T21] usb 4-1: USB disconnect, device number 13 [ 160.548114][ T7520] tipc: Enabling of bearer rejected, already enabled [ 160.602022][ T7524] tipc: Enabling of bearer rejected, already enabled [ 160.610691][ T7526] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1151'. [ 160.670717][ T7529] tipc: Enabling of bearer rejected, already enabled [ 160.731414][ T7533] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1154'. [ 160.803421][ T4184] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 160.813801][ T7536] tipc: Enabling of bearer rejected, failed to enable media [ 160.912705][ T4184] usb 1-1: device descriptor read/8, error -71 [ 161.051677][ T7548] tipc: Enabling of bearer rejected, already enabled [ 161.188392][ T4184] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 161.271866][ T7555] tipc: Enabling of bearer rejected, already enabled [ 161.292687][ T4184] usb 1-1: device descriptor read/8, error -71 [ 161.416573][ T4184] usb usb1-port1: unable to enumerate USB device [ 161.431792][ T7558] tipc: Enabling of bearer rejected, already enabled [ 161.498934][ T7562] validate_nla: 3 callbacks suppressed [ 161.498951][ T7562] netlink: 'syz.4.1166': attribute type 3 has an invalid length. [ 161.567643][ T7566] tipc: Enabling of bearer rejected, failed to enable media [ 161.626436][ T7568] tipc: Enabling of bearer rejected, already enabled [ 161.782585][ T4184] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 161.828134][ T7574] device bridge_slave_0 left promiscuous mode [ 161.834777][ T7574] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.871179][ T7574] device bridge_slave_1 left promiscuous mode [ 161.881365][ T7574] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.920115][ T7574] bond0: (slave bond_slave_0): Releasing backup interface [ 161.932252][ T7574] bond0: (slave bond_slave_1): Releasing backup interface [ 161.948409][ T7574] team0: Port device team_slave_0 removed [ 161.961199][ T7574] team0: Port device team_slave_1 removed [ 161.968850][ T7574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.981780][ T7574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.991676][ T7574] bond1: (slave geneve2): Releasing active interface [ 162.018103][ T7575] team0: Mode changed to "activebackup" [ 162.033645][ T7577] tipc: Enabling of bearer rejected, already enabled [ 162.083875][ T7580] tipc: Enabling of bearer rejected, already enabled [ 162.142891][ T4184] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 162.151564][ T4184] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 162.203546][ T4184] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 162.223895][ T4184] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 162.248893][ T7588] __nla_validate_parse: 2 callbacks suppressed [ 162.248909][ T7588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1178'. [ 162.272541][ T4184] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 162.291681][ T7590] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1179'. [ 162.313154][ T7590] netlink: 'syz.4.1179': attribute type 3 has an invalid length. [ 162.412819][ T4184] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 162.428352][ T4184] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 162.447071][ T4184] usb 4-1: Product: syz [ 162.461543][ T4184] usb 4-1: Manufacturer: syz [ 162.494612][ T7600] tipc: Enabling of bearer rejected, already enabled [ 162.523688][ T4184] cdc_wdm 4-1:1.0: skipping garbage [ 162.528938][ T4184] cdc_wdm 4-1:1.0: skipping garbage [ 162.548499][ T4184] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 162.621920][ T7605] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1184'. [ 162.730349][ T4184] usb 4-1: USB disconnect, device number 14 [ 162.768674][ T7613] fuse: Bad value for 'fd' [ 162.771063][ T7611] tipc: Enabling of bearer rejected, already enabled [ 162.858412][ T7617] tipc: Enabling of bearer rejected, already enabled [ 162.895427][ T7619] tipc: Enabling of bearer rejected, failed to enable media [ 162.963657][ T7621] tipc: Enabling of bearer rejected, already enabled [ 162.977604][ T7623] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1192'. [ 162.994220][ T7623] netlink: 'syz.0.1192': attribute type 3 has an invalid length. [ 163.095425][ T7629] device veth0 entered promiscuous mode [ 163.112161][ T7627] tipc: Enabling of bearer rejected, already enabled [ 163.126242][ T7629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1193'. [ 163.242499][ T5743] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 163.250455][ T7631] netlink: 'syz.4.1196': attribute type 1 has an invalid length. [ 163.321833][ T7631] device bond3 entered promiscuous mode [ 163.335852][ T7631] 8021q: adding VLAN 0 to HW filter on device bond3 [ 163.366422][ T7636] 8021q: adding VLAN 0 to HW filter on device bond4 [ 163.380134][ T7636] bond3: (slave bond4): making interface the new active one [ 163.388576][ T7636] device bond4 entered promiscuous mode [ 163.394932][ T7636] bond3: (slave bond4): Enslaving as an active interface with an up link [ 163.410061][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 163.462856][ T5743] usb 2-1: device descriptor read/64, error -71 [ 163.516326][ T7644] fuse: Bad value for 'fd' [ 163.529102][ T7646] tipc: Enabling of bearer rejected, already enabled [ 163.667609][ T7652] tipc: Enabling of bearer rejected, failed to enable media [ 163.752602][ T5743] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 163.769579][ T7658] tipc: Enabling of bearer rejected, already enabled [ 163.972686][ T5743] usb 2-1: device descriptor read/64, error -71 [ 164.015643][ T7674] fuse: Bad value for 'fd' [ 164.098227][ T5743] usb usb2-port1: attempt power cycle [ 164.120732][ T7679] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 164.131845][ T7679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 164.148625][ T7679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.178475][ T7679] device bridge_slave_0 left promiscuous mode [ 164.194747][ T7679] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.214035][ T7679] device bridge_slave_1 left promiscuous mode [ 164.220646][ T7679] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.248291][ T7679] bond0: (slave bond_slave_0): Releasing backup interface [ 164.263145][ T7679] device bond_slave_0 left promiscuous mode [ 164.303659][ T7679] bond0: (slave bond_slave_1): Releasing backup interface [ 164.313898][ T7679] device bond_slave_1 left promiscuous mode [ 164.351239][ T7679] team0: Port device team_slave_0 removed [ 164.374239][ T7679] team0: Port device team_slave_1 removed [ 164.381460][ T7679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.390109][ T7679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.397996][ T7679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.411028][ T7679] bond1: (slave bond2): Releasing backup interface [ 164.418845][ T7679] device bond2 left promiscuous mode [ 164.436235][ T7682] team0: Mode changed to "activebackup" [ 164.469495][ T7689] [ 164.471845][ T7689] ====================================================== [ 164.478863][ T7689] WARNING: possible circular locking dependency detected [ 164.485895][ T7689] syzkaller #0 Not tainted [ 164.490332][ T7689] ------------------------------------------------------ [ 164.497358][ T7689] syz.3.1215/7689 is trying to acquire lock: [ 164.503346][ T7689] ffff88805dfa3120 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_device_event+0x217/0x4f0 [ 164.512789][ T7689] [ 164.512789][ T7689] but task is already holding lock: [ 164.520171][ T7689] ffffffff8d238048 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x54e/0xe50 [ 164.528447][ T7689] [ 164.528447][ T7689] which lock already depends on the new lock. [ 164.528447][ T7689] [ 164.538854][ T7689] [ 164.538854][ T7689] the existing dependency chain (in reverse order) is: [ 164.547859][ T7689] [ 164.547859][ T7689] -> #1 (rtnl_mutex){+.+.}-{3:3}: [ 164.555216][ T7689] __mutex_lock_common+0x1eb/0x2390 [ 164.560953][ T7689] mutex_lock_nested+0x17/0x20 [ 164.566257][ T7689] ax25_setsockopt+0x830/0xa40 [ 164.571571][ T7689] __sys_setsockopt+0x2bf/0x3d0 [ 164.576936][ T7689] __x64_sys_setsockopt+0xb1/0xc0 [ 164.582573][ T7689] do_syscall_64+0x4c/0xa0 [ 164.587524][ T7689] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.593969][ T7689] [ 164.593969][ T7689] -> #0 (sk_lock-AF_AX25){+.+.}-{0:0}: [ 164.601600][ T7689] __lock_acquire+0x2c33/0x7c60 [ 164.606972][ T7689] lock_acquire+0x197/0x3f0 [ 164.612009][ T7689] lock_sock_nested+0x44/0x100 [ 164.617300][ T7689] ax25_device_event+0x217/0x4f0 [ 164.622757][ T7689] raw_notifier_call_chain+0xcb/0x160 [ 164.628666][ T7689] __dev_notify_flags+0x178/0x2d0 [ 164.634204][ T7689] dev_change_flags+0xe3/0x1a0 [ 164.639480][ T7689] dev_ifsioc+0x147/0xe70 [ 164.644333][ T7689] dev_ioctl+0x55f/0xe50 [ 164.649124][ T7689] sock_do_ioctl+0x222/0x2f0 [ 164.654233][ T7689] sock_ioctl+0x4ed/0x6e0 [ 164.659080][ T7689] __se_sys_ioctl+0xfa/0x170 [ 164.664203][ T7689] do_syscall_64+0x4c/0xa0 [ 164.669162][ T7689] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.675594][ T7689] [ 164.675594][ T7689] other info that might help us debug this: [ 164.675594][ T7689] [ 164.685832][ T7689] Possible unsafe locking scenario: [ 164.685832][ T7689] [ 164.693383][ T7689] CPU0 CPU1 [ 164.698755][ T7689] ---- ---- [ 164.704128][ T7689] lock(rtnl_mutex); [ 164.708128][ T7689] lock(sk_lock-AF_AX25); [ 164.715079][ T7689] lock(rtnl_mutex); [ 164.721589][ T7689] lock(sk_lock-AF_AX25); [ 164.726001][ T7689] [ 164.726001][ T7689] *** DEADLOCK *** [ 164.726001][ T7689] [ 164.734142][ T7689] 1 lock held by syz.3.1215/7689: [ 164.739166][ T7689] #0: ffffffff8d238048 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x54e/0xe50 [ 164.747886][ T7689] [ 164.747886][ T7689] stack backtrace: [ 164.753779][ T7689] CPU: 0 PID: 7689 Comm: syz.3.1215 Not tainted syzkaller #0 [ 164.761151][ T7689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 164.771225][ T7689] Call Trace: [ 164.774506][ T7689] [ 164.777440][ T7689] dump_stack_lvl+0x168/0x230 [ 164.782119][ T7689] ? load_image+0x3b0/0x3b0 [ 164.786618][ T7689] ? show_regs_print_info+0x20/0x20 [ 164.791821][ T7689] ? print_circular_bug+0x12b/0x1a0 [ 164.797025][ T7689] check_noncircular+0x274/0x310 [ 164.801962][ T7689] ? add_chain_block+0x940/0x940 [ 164.806894][ T7689] ? lockdep_lock+0xdc/0x1e0 [ 164.811485][ T7689] ? lockdep_unlock+0x134/0x2d0 [ 164.816334][ T7689] ? mark_lock+0x94/0x320 [ 164.820662][ T7689] __lock_acquire+0x2c33/0x7c60 [ 164.825520][ T7689] ? lock_chain_count+0x20/0x20 [ 164.830378][ T7689] ? mark_lock+0x94/0x320 [ 164.834707][ T7689] ? verify_lock_unused+0x140/0x140 [ 164.839901][ T7689] ? verify_lock_unused+0x140/0x140 [ 164.845097][ T7689] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 164.851076][ T7689] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 164.857066][ T7689] ? __local_bh_enable_ip+0x12a/0x1b0 [ 164.862433][ T7689] ? mark_lock+0x94/0x320 [ 164.866783][ T7689] lock_acquire+0x197/0x3f0 [ 164.871286][ T7689] ? ax25_device_event+0x217/0x4f0 [ 164.876390][ T7689] ? lock_chain_count+0x20/0x20 [ 164.881246][ T7689] ? read_lock_is_recursive+0x10/0x10 [ 164.886617][ T7689] ? __local_bh_enable_ip+0x12a/0x1b0 [ 164.891991][ T7689] ? lockdep_hardirqs_on+0x94/0x140 [ 164.897191][ T7689] ? __local_bh_enable_ip+0x12a/0x1b0 [ 164.902714][ T7689] ? _local_bh_enable+0xa0/0xa0 [ 164.907570][ T7689] lock_sock_nested+0x44/0x100 [ 164.912354][ T7689] ? ax25_device_event+0x217/0x4f0 [ 164.917479][ T7689] ax25_device_event+0x217/0x4f0 [ 164.922436][ T7689] raw_notifier_call_chain+0xcb/0x160 [ 164.927900][ T7689] __dev_notify_flags+0x178/0x2d0 [ 164.932924][ T7689] ? __dev_change_flags+0x6a0/0x6a0 [ 164.938124][ T7689] ? __dev_change_flags+0x4bb/0x6a0 [ 164.943325][ T7689] ? dev_get_flags+0x1c0/0x1c0 [ 164.948083][ T7689] ? do_raw_spin_unlock+0x11d/0x230 [ 164.953285][ T7689] dev_change_flags+0xe3/0x1a0 [ 164.958053][ T7689] dev_ifsioc+0x147/0xe70 [ 164.962387][ T7689] ? dev_ioctl+0x54e/0xe50 [ 164.966817][ T7689] ? dev_ioctl+0xe50/0xe50 [ 164.971429][ T7689] ? apparmor_capable+0x12c/0x190 [ 164.976455][ T7689] ? full_name_hash+0x8e/0xe0 [ 164.981138][ T7689] dev_ioctl+0x55f/0xe50 [ 164.985381][ T7689] ? _copy_from_user+0x111/0x170 [ 164.990331][ T7689] sock_do_ioctl+0x222/0x2f0 [ 164.995011][ T7689] ? sock_show_fdinfo+0xb0/0xb0 [ 164.999872][ T7689] sock_ioctl+0x4ed/0x6e0 [ 165.004201][ T7689] ? sock_poll+0x3f0/0x3f0 [ 165.008614][ T7689] ? bpf_lsm_file_ioctl+0x5/0x10 [ 165.013541][ T7689] ? security_file_ioctl+0x7c/0xa0 [ 165.018652][ T7689] ? sock_poll+0x3f0/0x3f0 [ 165.023067][ T7689] __se_sys_ioctl+0xfa/0x170 [ 165.027654][ T7689] do_syscall_64+0x4c/0xa0 [ 165.032064][ T7689] ? clear_bhb_loop+0x30/0x80 [ 165.036735][ T7689] ? clear_bhb_loop+0x30/0x80 [ 165.041454][ T7689] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.047355][ T7689] RIP: 0033:0x7f5c973d2ec9 [ 165.051767][ T7689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.071385][ T7689] RSP: 002b:00007f5c95619038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.079821][ T7689] RAX: ffffffffffffffda RBX: 00007f5c9762a090 RCX: 00007f5c973d2ec9 [ 165.087817][ T7689] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 165.095794][ T7689] RBP: 00007f5c97455f91 R08: 0000000000000000 R09: 0000000000000000 [ 165.103777][ T7689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.111748][ T7689] R13: 00007f5c9762a128 R14: 00007f5c9762a090 R15: 00007ffd12f2ebc8 [ 165.119760][ T7689] [ 165.124044][ T5743] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 165.140050][ T7689] ================================================================== [ 165.148135][ T7689] BUG: KASAN: use-after-free in ax25_dev_device_down+0x35e/0x520 [ 165.155891][ T7689] Write of size 4 at addr ffff88805f3439b8 by task syz.3.1215/7689 [ 165.163820][ T7689] [ 165.166160][ T7689] CPU: 0 PID: 7689 Comm: syz.3.1215 Not tainted syzkaller #0 [ 165.173626][ T7689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 165.183695][ T7689] Call Trace: [ 165.187013][ T7689] [ 165.189956][ T7689] dump_stack_lvl+0x168/0x230 [ 165.194655][ T7689] ? show_regs_print_info+0x20/0x20 [ 165.199874][ T7689] ? load_image+0x3b0/0x3b0 [ 165.204482][ T7689] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 165.209861][ T7689] print_address_description+0x60/0x2d0 [ 165.215429][ T7689] ? ax25_dev_device_down+0x35e/0x520 [ 165.220805][ T7689] kasan_report+0xdf/0x130 [ 165.225237][ T7689] ? ax25_dev_device_down+0x35e/0x520 [ 165.230603][ T7689] ? kfree+0xef/0x2a0 [ 165.234578][ T7689] kasan_check_range+0x27b/0x290 [ 165.239538][ T7689] ax25_dev_device_down+0x35e/0x520 [ 165.244750][ T7689] ax25_device_event+0x4b4/0x4f0 [ 165.249687][ T7689] raw_notifier_call_chain+0xcb/0x160 [ 165.255061][ T7689] __dev_notify_flags+0x178/0x2d0 [ 165.260084][ T7689] ? __dev_change_flags+0x6a0/0x6a0 [ 165.265279][ T7689] ? __dev_change_flags+0x4bb/0x6a0 [ 165.270560][ T7689] ? dev_get_flags+0x1c0/0x1c0 [ 165.275321][ T7689] ? do_raw_spin_unlock+0x11d/0x230 [ 165.280543][ T7689] dev_change_flags+0xe3/0x1a0 [ 165.285332][ T7689] dev_ifsioc+0x147/0xe70 [ 165.289661][ T7689] ? dev_ioctl+0x54e/0xe50 [ 165.294089][ T7689] ? dev_ioctl+0xe50/0xe50 [ 165.298786][ T7689] ? apparmor_capable+0x12c/0x190 [ 165.303818][ T7689] ? full_name_hash+0x8e/0xe0 [ 165.308508][ T7689] dev_ioctl+0x55f/0xe50 [ 165.312755][ T7689] ? _copy_from_user+0x111/0x170 [ 165.317710][ T7689] sock_do_ioctl+0x222/0x2f0 [ 165.322308][ T7689] ? sock_show_fdinfo+0xb0/0xb0 [ 165.327160][ T7689] sock_ioctl+0x4ed/0x6e0 [ 165.331486][ T7689] ? sock_poll+0x3f0/0x3f0 [ 165.335914][ T7689] ? bpf_lsm_file_ioctl+0x5/0x10 [ 165.340852][ T7689] ? security_file_ioctl+0x7c/0xa0 [ 165.345961][ T7689] ? sock_poll+0x3f0/0x3f0 [ 165.350378][ T7689] __se_sys_ioctl+0xfa/0x170 [ 165.354970][ T7689] do_syscall_64+0x4c/0xa0 [ 165.359383][ T7689] ? clear_bhb_loop+0x30/0x80 [ 165.364064][ T7689] ? clear_bhb_loop+0x30/0x80 [ 165.368737][ T7689] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.374641][ T7689] RIP: 0033:0x7f5c973d2ec9 [ 165.379053][ T7689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.398658][ T7689] RSP: 002b:00007f5c95619038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.407070][ T7689] RAX: ffffffffffffffda RBX: 00007f5c9762a090 RCX: 00007f5c973d2ec9 [ 165.415123][ T7689] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 165.423087][ T7689] RBP: 00007f5c97455f91 R08: 0000000000000000 R09: 0000000000000000 [ 165.431177][ T7689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.439209][ T7689] R13: 00007f5c9762a128 R14: 00007f5c9762a090 R15: 00007ffd12f2ebc8 [ 165.447186][ T7689] [ 165.450235][ T7689] [ 165.452600][ T7689] Allocated by task 6422: [ 165.456933][ T7689] __kasan_kmalloc+0xb5/0xf0 [ 165.461549][ T7689] ax25_dev_device_up+0x50/0x580 [ 165.466488][ T7689] ax25_device_event+0x483/0x4f0 [ 165.471421][ T7689] raw_notifier_call_chain+0xcb/0x160 [ 165.476800][ T7689] __dev_notify_flags+0x178/0x2d0 [ 165.481853][ T7689] dev_change_flags+0xe3/0x1a0 [ 165.486617][ T7689] dev_ifsioc+0x147/0xe70 [ 165.490968][ T7689] dev_ioctl+0x55f/0xe50 [ 165.495207][ T7689] sock_do_ioctl+0x222/0x2f0 [ 165.499833][ T7689] sock_ioctl+0x4ed/0x6e0 [ 165.504182][ T7689] __se_sys_ioctl+0xfa/0x170 [ 165.508887][ T7689] do_syscall_64+0x4c/0xa0 [ 165.513300][ T7689] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.519210][ T7689] [ 165.521554][ T7689] Freed by task 7689: [ 165.525525][ T7689] kasan_set_track+0x4b/0x70 [ 165.530117][ T7689] kasan_set_free_info+0x1f/0x40 [ 165.535059][ T7689] ____kasan_slab_free+0xd5/0x110 [ 165.540104][ T7689] slab_free_freelist_hook+0xea/0x170 [ 165.545497][ T7689] kfree+0xef/0x2a0 [ 165.549305][ T7689] ax25_dev_device_down+0x1c0/0x520 [ 165.554614][ T7689] ax25_device_event+0x4b4/0x4f0 [ 165.559558][ T7689] raw_notifier_call_chain+0xcb/0x160 [ 165.564934][ T7689] __dev_notify_flags+0x178/0x2d0 [ 165.569954][ T7689] dev_change_flags+0xe3/0x1a0 [ 165.574804][ T7689] dev_ifsioc+0x147/0xe70 [ 165.579144][ T7689] dev_ioctl+0x55f/0xe50 [ 165.583389][ T7689] sock_do_ioctl+0x222/0x2f0 [ 165.588009][ T7689] sock_ioctl+0x4ed/0x6e0 [ 165.592339][ T7689] __se_sys_ioctl+0xfa/0x170 [ 165.596928][ T7689] do_syscall_64+0x4c/0xa0 [ 165.601351][ T7689] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.607331][ T7689] [ 165.609656][ T7689] Last potentially related work creation: [ 165.615364][ T7689] kasan_save_stack+0x35/0x60 [ 165.620038][ T7689] kasan_record_aux_stack+0xb8/0x100 [ 165.625319][ T7689] insert_work+0x54/0x3d0 [ 165.629643][ T7689] __queue_work+0x9c5/0xd50 [ 165.634140][ T7689] queue_work_on+0x11d/0x1d0 [ 165.638724][ T7689] inet6addr_event+0x9c/0xc0 [ 165.643336][ T7689] atomic_notifier_call_chain+0x15d/0x280 [ 165.649059][ T7689] ipv6_add_addr+0xb30/0xde0 [ 165.653703][ T7689] addrconf_add_linklocal+0x280/0x6b0 [ 165.659259][ T7689] addrconf_addr_gen+0x4ee/0x620 [ 165.664227][ T7689] addrconf_init_auto_addrs+0x6d5/0xa80 [ 165.669768][ T7689] addrconf_notify+0xa6b/0xf00 [ 165.674533][ T7689] raw_notifier_call_chain+0xcb/0x160 [ 165.679914][ T7689] __dev_notify_flags+0x178/0x2d0 [ 165.684938][ T7689] dev_change_flags+0xe3/0x1a0 [ 165.689709][ T7689] dev_ifsioc+0x147/0xe70 [ 165.694038][ T7689] dev_ioctl+0x55f/0xe50 [ 165.698275][ T7689] sock_do_ioctl+0x222/0x2f0 [ 165.702862][ T7689] sock_ioctl+0x4ed/0x6e0 [ 165.707184][ T7689] __se_sys_ioctl+0xfa/0x170 [ 165.711767][ T7689] do_syscall_64+0x4c/0xa0 [ 165.716178][ T7689] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.722078][ T7689] [ 165.724396][ T7689] Second to last potentially related work creation: [ 165.730972][ T7689] kasan_save_stack+0x35/0x60 [ 165.735644][ T7689] kasan_record_aux_stack+0xb8/0x100 [ 165.740944][ T7689] call_rcu+0x182/0x930 [ 165.745120][ T7689] inetdev_event+0x771/0x1360 [ 165.749813][ T7689] raw_notifier_call_chain+0xcb/0x160 [ 165.755202][ T7689] unregister_netdevice_many+0xf57/0x18f0 [ 165.760936][ T7689] ip_tunnel_delete_nets+0x318/0x360 [ 165.766238][ T7689] cleanup_net+0x77b/0xb80 [ 165.770677][ T7689] process_one_work+0x863/0x1000 [ 165.775633][ T7689] worker_thread+0xaa8/0x12a0 [ 165.780342][ T7689] kthread+0x436/0x520 [ 165.784399][ T7689] ret_from_fork+0x1f/0x30 [ 165.788810][ T7689] [ 165.791131][ T7689] The buggy address belongs to the object at ffff88805f343900 [ 165.791131][ T7689] which belongs to the cache kmalloc-192 of size 192 [ 165.805181][ T7689] The buggy address is located 184 bytes inside of [ 165.805181][ T7689] 192-byte region [ffff88805f343900, ffff88805f3439c0) [ 165.818445][ T7689] The buggy address belongs to the page: [ 165.824101][ T7689] page:ffffea00017cd0c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5f343 [ 165.834337][ T7689] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 165.841882][ T7689] raw: 00fff00000000200 ffffea0000a74dc0 0000000800000004 ffff888016841a00 [ 165.850472][ T7689] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 165.859251][ T7689] page dumped because: kasan: bad access detected [ 165.865926][ T7689] page_owner tracks the page as allocated [ 165.871634][ T7689] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4191, ts 66101966523, free_ts 66062275699 [ 165.887691][ T7689] get_page_from_freelist+0x1b77/0x1c60 [ 165.893264][ T7689] __alloc_pages+0x1e1/0x470 [ 165.897873][ T7689] new_slab+0xb6/0x4b0 [ 165.901936][ T7689] ___slab_alloc+0x81e/0xdf0 [ 165.906524][ T7689] __kmalloc_node+0x200/0x3b0 [ 165.911308][ T7689] memcg_alloc_page_obj_cgroups+0x81/0x120 [ 165.917119][ T7689] slab_post_alloc_hook+0xba/0x380 [ 165.922233][ T7689] kmem_cache_alloc+0x100/0x290 [ 165.927087][ T7689] __d_alloc+0x2a/0x6f0 [ 165.931241][ T7689] d_alloc+0x47/0x1a0 [ 165.935218][ T7689] lookup_one_qstr_excl+0xc6/0x240 [ 165.940340][ T7689] filename_create+0x21e/0x450 [ 165.945102][ T7689] do_mkdirat+0x9d/0x5a0 [ 165.949340][ T7689] __x64_sys_mkdirat+0x85/0x90 [ 165.954099][ T7689] do_syscall_64+0x4c/0xa0 [ 165.958595][ T7689] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.964572][ T7689] page last free stack trace: [ 165.969233][ T7689] free_unref_page_prepare+0x637/0x6c0 [ 165.974691][ T7689] free_unref_page_list+0x122/0x7e0 [ 165.979890][ T7689] release_pages+0x184b/0x1bb0 [ 165.984688][ T7689] tlb_finish_mmu+0x164/0x2e0 [ 165.989362][ T7689] exit_mmap+0x3a6/0x5f0 [ 165.993602][ T7689] __mmput+0x115/0x3b0 [ 165.997675][ T7689] exit_mm+0x567/0x6c0 [ 166.001737][ T7689] do_exit+0x5a1/0x20a0 [ 166.005885][ T7689] do_group_exit+0x12e/0x300 [ 166.010472][ T7689] get_signal+0x6ca/0x12c0 [ 166.014880][ T7689] arch_do_signal_or_restart+0xc1/0x1300 [ 166.020513][ T7689] exit_to_user_mode_loop+0x9e/0x130 [ 166.025792][ T7689] exit_to_user_mode_prepare+0xee/0x180 [ 166.031328][ T7689] syscall_exit_to_user_mode+0x16/0x40 [ 166.036776][ T7689] do_syscall_64+0x58/0xa0 [ 166.041184][ T7689] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 166.047073][ T7689] [ 166.049390][ T7689] Memory state around the buggy address: [ 166.055010][ T7689] ffff88805f343880: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 166.063060][ T7689] ffff88805f343900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 166.071132][ T7689] >ffff88805f343980: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 166.079180][ T7689] ^ [ 166.085083][ T7689] ffff88805f343a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 166.093155][ T7689] ffff88805f343a80: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 166.101214][ T7689] ================================================================== [ 166.112146][ T7689] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 166.119365][ T7689] CPU: 0 PID: 7689 Comm: syz.3.1215 Tainted: G B syzkaller #0 [ 166.128148][ T7689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 166.138219][ T7689] Call Trace: [ 166.141504][ T7689] [ 166.144433][ T7689] dump_stack_lvl+0x168/0x230 [ 166.149140][ T7689] ? show_regs_print_info+0x20/0x20 [ 166.154349][ T7689] ? load_image+0x3b0/0x3b0 [ 166.158875][ T7689] panic+0x2c9/0x7f0 [ 166.162778][ T7689] ? bpf_jit_dump+0xd0/0xd0 [ 166.167285][ T7689] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 166.173265][ T7689] ? _raw_spin_unlock+0x40/0x40 [ 166.178126][ T7689] ? ax25_dev_device_down+0x35e/0x520 [ 166.183507][ T7689] check_panic_on_warn+0x80/0xa0 [ 166.188443][ T7689] ? ax25_dev_device_down+0x35e/0x520 [ 166.193820][ T7689] end_report+0x6d/0xf0 [ 166.197975][ T7689] kasan_report+0x102/0x130 [ 166.202515][ T7689] ? ax25_dev_device_down+0x35e/0x520 [ 166.208114][ T7689] ? kfree+0xef/0x2a0 [ 166.212104][ T7689] kasan_check_range+0x27b/0x290 [ 166.217046][ T7689] ax25_dev_device_down+0x35e/0x520 [ 166.222251][ T7689] ax25_device_event+0x4b4/0x4f0 [ 166.227189][ T7689] raw_notifier_call_chain+0xcb/0x160 [ 166.232576][ T7689] __dev_notify_flags+0x178/0x2d0 [ 166.237601][ T7689] ? __dev_change_flags+0x6a0/0x6a0 [ 166.242805][ T7689] ? __dev_change_flags+0x4bb/0x6a0 [ 166.248008][ T7689] ? dev_get_flags+0x1c0/0x1c0 [ 166.252771][ T7689] ? do_raw_spin_unlock+0x11d/0x230 [ 166.257972][ T7689] dev_change_flags+0xe3/0x1a0 [ 166.262743][ T7689] dev_ifsioc+0x147/0xe70 [ 166.267070][ T7689] ? dev_ioctl+0x54e/0xe50 [ 166.271491][ T7689] ? dev_ioctl+0xe50/0xe50 [ 166.275914][ T7689] ? apparmor_capable+0x12c/0x190 [ 166.280946][ T7689] ? full_name_hash+0x8e/0xe0 [ 166.285717][ T7689] dev_ioctl+0x55f/0xe50 [ 166.289964][ T7689] ? _copy_from_user+0x111/0x170 [ 166.295007][ T7689] sock_do_ioctl+0x222/0x2f0 [ 166.299603][ T7689] ? sock_show_fdinfo+0xb0/0xb0 [ 166.304464][ T7689] sock_ioctl+0x4ed/0x6e0 [ 166.308801][ T7689] ? sock_poll+0x3f0/0x3f0 [ 166.313221][ T7689] ? bpf_lsm_file_ioctl+0x5/0x10 [ 166.318175][ T7689] ? security_file_ioctl+0x7c/0xa0 [ 166.323290][ T7689] ? sock_poll+0x3f0/0x3f0 [ 166.327794][ T7689] __se_sys_ioctl+0xfa/0x170 [ 166.332432][ T7689] do_syscall_64+0x4c/0xa0 [ 166.336876][ T7689] ? clear_bhb_loop+0x30/0x80 [ 166.341557][ T7689] ? clear_bhb_loop+0x30/0x80 [ 166.346226][ T7689] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 166.352115][ T7689] RIP: 0033:0x7f5c973d2ec9 [ 166.356528][ T7689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.376129][ T7689] RSP: 002b:00007f5c95619038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.384544][ T7689] RAX: ffffffffffffffda RBX: 00007f5c9762a090 RCX: 00007f5c973d2ec9 [ 166.392517][ T7689] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 166.400482][ T7689] RBP: 00007f5c97455f91 R08: 0000000000000000 R09: 0000000000000000 [ 166.408460][ T7689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.416428][ T7689] R13: 00007f5c9762a128 R14: 00007f5c9762a090 R15: 00007ffd12f2ebc8 [ 166.424410][ T7689] [ 166.427730][ T7689] Kernel Offset: disabled [ 166.432062][ T7689] Rebooting in 86400 seconds..