last executing test programs: 1m51.559615435s ago: executing program 0 (id=101): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @printk={@llu}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1m51.488895375s ago: executing program 0 (id=102): getxattr(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='ns'], 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000002e9c001100ac1414aa0000000000000000000000007f000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c040000000000000a"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m51.418535107s ago: executing program 0 (id=103): getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001480)) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x28, 0x0, 0x325, 0xfffffffe, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) ioctl$SIOCX25GFACILITIES(r0, 0x5411, &(0x7f0000001b80)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) dup(r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x40, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r2, &(0x7f00000003c0)=0x1000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}]}], {0xfffffffffffffd2f}}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x884) msync(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff, 0x4) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0xc00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x48}}, 0x0) 1m50.306498282s ago: executing program 0 (id=110): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r0, &(0x7f0000000040), 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f00000003c0)={'binder1\x00'}) openat$dlm_monitor(0xffffff9c, &(0x7f0000000040), 0x400, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x4}}, 0x20) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f00000005c0)=0xc) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) (async) write(r0, &(0x7f0000000040), 0x0) (async) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder-control\x00', 0x800, 0x0) (async) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f00000003c0)={'binder1\x00'}) (async) openat$dlm_monitor(0xffffff9c, &(0x7f0000000040), 0x400, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x4}}, 0x20) (async) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f00000005c0)=0xc) (async) 1m50.245859977s ago: executing program 0 (id=114): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x14, 0x28b}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SYMLINKAT={0x26, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)='./file1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd25, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe47, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0xffffffffffffff0b}]}, {0x4}, {0xc}, {0xfffffffffffffcf2, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4008003}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=' '], 0x40}}], 0x1, 0x40000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r7, 0x40086602, &(0x7f0000000000)) r8 = syz_create_resource$binfmt(&(0x7f0000000400)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$binfmt(0xffffffffffffff9c, r8, 0x41, 0x1ff) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYRESOCT=r6, @ANYRES8=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x38, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1, 0x84}}}, 0xc4}}, 0x20050800) fcntl$notify(r0, 0x402, 0x26) 1m47.487881283s ago: executing program 0 (id=129): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000003c0)="0f", 0x1}], 0x1}}, {{0x0, 0x1100, &(0x7f0000005c40)=[{&(0x7f00000000c0)='_', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000100)="19", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="d9b5", 0x2}], 0x1}}], 0x4, 0x608d8d0) 1m32.366225186s ago: executing program 32 (id=129): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000003c0)="0f", 0x1}], 0x1}}, {{0x0, 0x1100, &(0x7f0000005c40)=[{&(0x7f00000000c0)='_', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000100)="19", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="d9b5", 0x2}], 0x1}}], 0x4, 0x608d8d0) 46.017353836s ago: executing program 3 (id=392): getpgrp(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000400), 0x1, 0x0) lseek(r0, 0x8000000000000001, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, &(0x7f0000000100), 0x10) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r6, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r7 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) 44.904898488s ago: executing program 3 (id=398): syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000194023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 44.806948216s ago: executing program 3 (id=400): getxattr(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='ns'], 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac1414aa0000000000000000020000007f000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c040000000000000a"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 44.676853407s ago: executing program 3 (id=403): r0 = socket(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000040)=0x20) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xfffffffe, 0x0, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000000)=0xad640000, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) openat$khugepaged_scan(0xffffff9c, &(0x7f00000002c0), 0x1, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_buf(r5, 0x1, 0x4c, 0x0, &(0x7f0000000080)) 42.998066352s ago: executing program 3 (id=412): socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7060000050000008500000005000000bf0900000000000035090100000000009500000000001900b7020000000000007b9af8ff0000000065090000000000007baaf0ff00000000ad9900000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608000000000000850000000a000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 42.937024285s ago: executing program 3 (id=415): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x4000, 0x0) (async) r0 = socket$inet6(0xa, 0xa, 0xff) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xfbf, @empty}, 0x1c) (async) listen(r1, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) (async) r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000070961c40e90f55dbfb690102c9030902120001000000000904"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0xa840, 0x582) r4 = syz_open_dev$dri(0x0, 0x7, 0x220042) (async) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000380)={0x3, r7, r6}) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000440)={0x5, r7}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc01c64b9, &(0x7f0000000380)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0xa, 0x0, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01464ba, &(0x7f00000003c0)={0x0, r7, r8, 0xbbbbbbbb}) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000200)=ANY=[@ANYRES64=r2], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000000d0a010800000000000000000a0000010900020073945f44f563a812ad00010073797a31000000001c000380180000800c000180060001000d0000000800034000000001"], 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000300)={0x1, 0x77, 0x0, 0x0}) 27.824275418s ago: executing program 33 (id=415): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x4000, 0x0) (async) r0 = socket$inet6(0xa, 0xa, 0xff) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xfbf, @empty}, 0x1c) (async) listen(r1, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) (async) r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000070961c40e90f55dbfb690102c9030902120001000000000904"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0xa840, 0x582) r4 = syz_open_dev$dri(0x0, 0x7, 0x220042) (async) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000380)={0x3, r7, r6}) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000440)={0x5, r7}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc01c64b9, &(0x7f0000000380)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0xa, 0x0, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01464ba, &(0x7f00000003c0)={0x0, r7, r8, 0xbbbbbbbb}) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000200)=ANY=[@ANYRES64=r2], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000000d0a010800000000000000000a0000010900020073945f44f563a812ad00010073797a31000000001c000380180000800c000180060001000d0000000800034000000001"], 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000300)={0x1, 0x77, 0x0, 0x0}) 7.927685913s ago: executing program 1 (id=589): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc2c45512, &(0x7f0000000640)={{0x7, 0x2000000, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0xffffffff, 0xffff, 0x7, 0xfffffffd, 0x80000001, 0x0, 0x0, 0x1, 0xfffffffc, 0xfffffffd, 0x4400006, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0xfffffff5, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x3, 0x20000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7ffffbff, 0x4, 0x200, 0x0, 0x0, 0x0, 0x8000, 0xe73e, 0x0, 0x0, 0xffffffc7, 0x0, 0x4, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x81, 0x3, 0x7fff, 0x3883, 0x800, 0x402, 0x0, 0x0, 0x4, 0x8, 0xce5b, 0x0, 0x0, 0x0, 0x8, 0x408, 0x0, 0x8, 0x9, 0x100, 0x0, 0x1, 0x0, 0x0, 0x10004000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4cb, 0x0, 0x0, 0x0, 0x7, 0x0, 0xa, 0x0, 0x0, 0x3, 0x1, 0x788, 0xd4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) mkdir(&(0x7f0000000140)='./control\x00', 0x8) r3 = inotify_init1(0x800) inotify_add_watch(r3, &(0x7f0000000180)='./control\x00', 0x21000700) r4 = inotify_init() r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000380)='sched_switch\x00', r5}, 0x10) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, &(0x7f0000edfff0)={0x0, 0x989680}, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(r4, &(0x7f0000000080)='./control\x00', 0x2) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xffb) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_emit_ethernet(0x6a, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb4aa468739b85080600010800066f06000009fc2ec166df2021a8442f040001aaaaaaaaaa"], 0x0) fcntl$setstatus(r6, 0x4, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000180)='./control\x00', 0xa4000960) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x8001d, [0x7b, 0xe, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x0, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x2, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x4, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x85, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x8000, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x25fd, 0x1, 0x3b40, 0x0, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x5, 0x1002, 0x76c4, 0xfffffffd, 0x5, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x7, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x103, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0xa, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x5, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0x1354, 0xfffffffe, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x6, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x5, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x3, 0xf7df, 0x2, 0x2, 0x8, 0x8001, 0xff, 0x6, 0x4, 0x4, 0x200, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5f1, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x4, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) r8 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) sendmsg$NL80211_CMD_SET_REG(r9, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000a40)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r1, @ANYBLOB="020028bd7000ffdbdf251a0000009c0022803c000080080002000b00000008000200010000000800020007000000080007000101000008000200000000800800020053000000080006000008eaff1300008008000200e4cf00000819ab2234c978f82892000200070000000c00008008000200c32b63ebd9e37f0000003c000080080006000300000008000400010080000800040009000000080003000b00000008000400986500000800010002000000080002006c04000008009a004200000005009200d90000000800"], 0xc8}, 0x1, 0x0, 0x0, 0xc004040}, 0x4000004) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x807c2, 0x41414770, 0x33565348, 0x425, 0x10004, 0x3, 0x2, 0xfeedcafe, 0x3, 0x2, 0x1}}) 7.477851144s ago: executing program 1 (id=594): madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="d300000000"], 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x620c, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r2 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r3, 0x0) connect$netrom(r3, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x6}}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000002c0)={0x2, @sdr={0x3147504d, 0x1}}) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r4, 0x10c, 0x3, &(0x7f0000000040), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000095000000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r7}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) setpriority(0x0, 0x0, 0x10000) r8 = signalfd(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) signalfd(r5, &(0x7f00000002c0)={[0x4, 0x4]}, 0x8) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r8, 0x111, 0x3, 0xfffffffd, 0x4) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000340)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYRES16=r6], 0x70}}, 0x40) 6.930484867s ago: executing program 1 (id=595): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000380)={0xffff, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r13}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@fallback, r14, 0x2f, 0x13, r14, @void, @value=r0}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2c, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x2c}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r4, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 5.439064181s ago: executing program 1 (id=599): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newtaction={0xa4, 0x30, 0x20, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="ef7927bd7000fcdbdf2596fa0ad3180001801400027930000080000000000000009733717b8f82818132100958fe727929902e8a10f58e5f67a4988615c88b2d43532b4659309a62463ff786a57bae817e1df388f02160a78355bc2c56123c7a54c6d19408d4b30eed21"], 0x2c}, 0x1, 0x0, 0x0, 0x20000848}, 0x4000010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x8, 0x0, 0xffff}) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYRES32=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2df}, 0x94) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, 0x0, 0x0) openat$rdma_cm(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) r7 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000180)={0x40, 0x3, 0x4, 0x0, @lba=0xfffffffa, 0xb}) mkdir(&(0x7f0000000040)='./file0\x00', 0xc9) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file2\x00', 0x8, 0xdfcd) renameat2(0xffffffffffffffff, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 4.377435232s ago: executing program 5 (id=618): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x34, '\x00', 0x0, @fallback=0x1b, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35b", 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000380)={'wlan1\x00', 0x8000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050003000000000000000600000008000300", @ANYRES32=r10, @ANYBLOB="0a0018000300400303"], 0x28}}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r12 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r12, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r12, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.998171187s ago: executing program 5 (id=619): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') (async) umount2(&(0x7f0000000340)='./file0\x00', 0x0) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) unshare(0x40020000) 3.987470833s ago: executing program 5 (id=620): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1b, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a651, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.89745091s ago: executing program 5 (id=621): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x4004085) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000), &(0x7f0000000280)) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x80) syz_clone3(&(0x7f0000000280)={0x100000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0xe}, &(0x7f0000000500)=""/138, 0x7288c29731e721f4, &(0x7f0000000140)=""/48, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x5}, 0x58) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000040)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r4, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x7, 0xffffffffffffffff, 0x1}) ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, 0x0) r6 = socket(0x26, 0x80000, 0x6) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x38}, 0x14) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r6, 0xf503, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) r7 = openat$cuse(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r7, &(0x7f0000000240)={0x28, 0x2, 0x0, {0x3, 0x2, 0x10000}}, 0x28) 3.737514294s ago: executing program 1 (id=622): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x800038, 0x7, 0x3, 0x180, 0x6, 0x10, 0xf1, 0x100000001, 0x1, 0xca0, 0x0, 0x2000000002d, 0x0, 0x6, 0x0, 0xbd9], 0xffff1001, 0x43100}) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], 0x9, 0x5, 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000500)={0x3, r3, 0x0, 0x3, 0x6, 0xfa, 0x6c06b15f}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000300)={0x3, 0x0, [{0x80000001, 0x80000001, 0x4, 0x1, 0x6, 0x59, 0x9}, {0x7, 0x3b, 0x2, 0xc9, 0x6, 0x2, 0x3}, {0x80000019, 0x3, 0x0, 0x473, 0x5, 0x8, 0x5}]}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x100008000000009, 0x803, 0x0, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000100)={0xffff, 0x9, 0x5}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0xb, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x9, 0x75, 0x6, 0x36, 0x0, 0x2, 0xb4}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x1, 0x1, 0xa4, 0x5, 0x5}, {0x8000000, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe, 0x7}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0x6, 0xa0, 0xb, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x39, 0x0, 0x3000, 0x2024, 0x1, 0x0, 0x34f000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.925904019s ago: executing program 2 (id=628): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x3a, 0x9, 0x72bd27, 0x2, {0x12}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0x84}}, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 2.92154889s ago: executing program 2 (id=629): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1b, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a651, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.847855858s ago: executing program 2 (id=630): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @printk={@llu}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0}, 0x48) 2.738071658s ago: executing program 2 (id=631): socket(0x27, 0x5, 0x4005) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setrlimit(0x7, &(0x7f0000000180)={0x10001, 0xffffff7c}) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) prlimit64(r1, 0xd, &(0x7f0000000040)={0x3, 0x5}, &(0x7f00000000c0)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r3}, 0x38) r4 = socket$xdp(0x2c, 0x3, 0x0) socket(0x11, 0xf, 0x6) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) 2.397966879s ago: executing program 1 (id=632): io_setup(0x9, &(0x7f0000000b80)=0x0) r1 = openat$dlm_plock(0xffffff9c, &(0x7f0000000180), 0x101400, 0x0) syz_open_dev$video(0x0, 0x7efffffe, 0x101302) socket(0x2a, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff000090ffbfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008b9f922108574317f381dad08440000300012800b00010067656e6576650000200002800500030004000000140007000000000000000000", @ANYRES32=r8, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) setrlimit(0x7, &(0x7f0000000640)) 1.297940155s ago: executing program 2 (id=635): getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001480)) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCX25GFACILITIES(r0, 0x5411, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) dup(r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x3ffa, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r2, &(0x7f00000003c0)=0x1000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}]}], {0xfffffffffffffd2f}}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x884) msync(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff, 0x4) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0xc00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x48}}, 0x0) 735.917105ms ago: executing program 5 (id=636): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x9}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x48, r4, 0x1, 0x0, 0xfffffffd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MESH_SETUP={0x18, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x304000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x88, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x2004845}, 0x4040004) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r3) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r8, &(0x7f0000000000)={0x1d, r9}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0x1, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xfa, &(0x7f0000000680)=[{}, {}], 0x10, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0xfa, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000900)={0x0, @loopback, @loopback}, &(0x7f0000000940)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={0xffffffffffffffff, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xc3, &(0x7f0000000a40)=[{}], 0x8, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0xbe, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000d80)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0xb4, r7, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8c001}, 0x4040010) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r16, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000030601030000f60000000000000000000500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 711.211587ms ago: executing program 4 (id=637): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='b 8:* w'], 0x9) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000240)=0xfffffffffffffff9, 0x4) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @local, 0x6}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/229, 0xe5, 0x1, &(0x7f0000000180)=""/61, 0x3d}, &(0x7f0000000200)=0x40) 648.057577ms ago: executing program 4 (id=638): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1b, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a651, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 647.199772ms ago: executing program 4 (id=639): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @printk={@llu}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0}, 0x48) 567.872721ms ago: executing program 4 (id=640): r0 = getpgrp(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x1, &(0x7f0000000000)) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000040)=r0) r2 = syz_io_uring_setup(0x62b8, &(0x7f0000000080)={0x0, 0xab29, 0x2000, 0x3, 0x24}, &(0x7f0000000100), &(0x7f0000000140)) r3 = fanotify_init(0x0, 0x1000) fanotify_mark(r3, 0x40, 0x2a, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00') (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@private0}}, &(0x7f0000000380)=0xe4) mount$9p_xen(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x2020000, &(0x7f00000003c0)={'trans=xen,', {[{@dfltuid={'dfltuid', 0x3d, r4}}, {@afid={'afid', 0x3d, 0x8}}, {@cache_none}, {@aname={'aname', 0x3d, '\x00'}}, {@cache_loose}, {@cache_readahead}, {@version_L}], [{@obj_type={'obj_type', 0x3d, '\x00'}}, {@seclabel}, {@measure}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x63, 0x61, 0x38, 0x5, 0x64, 0x39, 0x31], 0x2d, [0x65, 0x63, 0x33, 0x37], 0x2d, [0x36, 0x66, 0x35, 0x31], 0x2d, [0x0, 0x65, 0x6a, 0x36], 0x2d, [0x39, 0x66, 0x62, 0x35, 0xc7c085517254df08, 0x37, 0x63, 0x33]}}}]}}) (async) prlimit64(r0, 0xd, &(0x7f00000004c0)={0xaf, 0x9}, &(0x7f0000000500)) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000540)={0x1000, 0x29, 0x100, 0xd, 0xad, 0x1}) (async) r6 = openat$comedi(0xffffff9c, &(0x7f0000000580)='/dev/comedi5\x00', 0x121042, 0x0) ioctl$COMEDI_DEVINFO(r6, 0x80b06401, &(0x7f00000005c0)) (async) close(r2) (async) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='xprtrdma_reply\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) (async) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000700)={0x0, 0x8, 0x2, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r7, 0xc4009420, &(0x7f0000000b00)={0x11, 0x5, {0x9, @struct={0x800, 0x7fff}, 0x0, 0x44, 0xffffffffffff7fff, 0x7f, 0xc4f3, 0x81, 0x28, @struct={0x5, 0x9}, 0x2, 0x3, [0x4, 0xfffffffffffffffd, 0x8001, 0xa, 0xdd, 0x1]}, {0x7fffffffffffffff, @usage=0x1, 0x0, 0x9, 0x1, 0x0, 0x68, 0x74, 0x40, @usage=0x7, 0x0, 0x6, [0x7, 0xffffffffffff8001, 0x8, 0xfffffffffffffff8, 0x200, 0xfff]}, {0x8, @struct={0x1000, 0x5}, r8, 0x9, 0x800, 0xb11, 0x0, 0x80, 0x40a, @usage=0xfff, 0x7, 0x4, [0x8, 0x1, 0x41, 0x58, 0x51d107d1, 0x9f1]}, {0x8916, 0x1000, 0x4}}) (async) preadv(r3, &(0x7f0000002040)=[{&(0x7f0000000f00)}, {&(0x7f0000000f40)=""/232, 0xe8}, {&(0x7f0000001040)=""/4096, 0x1000}], 0x3, 0x83d, 0xf7) (async) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCINQ(r9, 0x541b, &(0x7f0000002080)) (async) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000020c0)={'pcl812\x00', [0x5, 0x6, 0x100, 0x7, 0x0, 0x7, 0xb0d, 0x0, 0x7, 0xffff0000, 0x3, 0x745, 0x200000, 0x2, 0x4, 0x3, 0x8, 0x6, 0x101, 0x4, 0x1, 0xeb, 0x6, 0x0, 0x3, 0x1, 0x6, 0x7, 0x6, 0x0, 0x1, 0x800]}) setsockopt$sock_int(r9, 0x1, 0x4293bc1bebded058, &(0x7f0000002180), 0x4) (async) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000004, 0x100010, r9, 0x1a2d1000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f00000021c0)={0x2, [0x0, 0x0]}) (async) syz_open_dev$hiddev(&(0x7f0000002200), 0x1, 0x228002) mmap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000008, 0x30, r5, 0x2e271000) (async) r10 = openat$vsock(0xffffff9c, &(0x7f0000002240), 0x0, 0x0) bind$l2tp6(r10, &(0x7f0000002280)={0xa, 0x0, 0x4, @mcast1, 0x1d49, 0x2}, 0x20) (async) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f00000022c0), &(0x7f0000002300)=0x8) 567.570175ms ago: executing program 4 (id=641): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000380)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x2}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$nl_audit(0x10, 0x3, 0x9) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000020601080000000000000000000000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a697000f23d87e4412509d9218bf5453df962dcc212809725ddc1c2b4753215d331f00ffb8846364f3964cdc905e403"], 0x44}}, 0x8000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240fe8000000000000000000000000000bb1d1e2fe069e1178f4a5271ba459ec2c47534bbb3c34e66c420c7809f"], 0x44}, 0x1, 0x0, 0x0, 0x10000007}, 0x4000084) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000480)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000400)=[{0x200000000006, 0x0, 0x2, 0x7ffc0002}]}) capget(&(0x7f0000000040)={0x20080522}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, 0x0, 0x80) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) 2.601655ms ago: executing program 4 (id=642): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x40) openat$uinput(0xffffff9c, &(0x7f0000000180), 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x80002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r3, r3) setpgid(0x0, r3) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1f00, 0x12) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40100, 0x0) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) 1.740185ms ago: executing program 5 (id=643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x134, 0x30, 0x2, 0x0, 0x0, {}, [{0x120, 0x1, [@m_ct={0xd4, 0x2, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x2, 0xf}}, @TCA_CT_PARMS={0x18, 0x1, {0x4, 0x0, 0x8, 0x50f4, 0x5}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast2}]}, {0x67, 0x6, "feea826a7fcaa1dc7985dddf8a6d63aefbc7052cce770b9c2e59aa2aa08304fae156e66ec58517285f523357df93429d9a8856cd289abd4f1ab4f36fea52d657c9a243612b788899392c09f2f815bbd93127cd9b1d7baf94208c6313092cb42fa09bf2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x1}}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4800}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0xfffffd8a) (async, rerun: 64) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 64) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) (async, rerun: 64) r5 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r5, 0x402c5639, &(0x7f0000000140)={0x1, 0x5, 0x10}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x20000000) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 64) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x51, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x80c4) (async, rerun: 64) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a69700000000500040000ffed000900020073797a3200000000240007800c00028008000140ffffffff0c0001800800014080ffffff050014000200000005000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) 0s ago: executing program 2 (id=644): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x7c00, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r12}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@map, r13, 0x2f, 0x2034, r13}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2c, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x2c}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r3, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) kernel console output (not intermixed with test programs): T5955] Bluetooth: hci1: command tx timeout [ 67.377679][ T6048] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 67.405265][ T5955] Bluetooth: hci0: command tx timeout [ 67.408487][ T5955] Bluetooth: hci3: command tx timeout [ 67.410330][ T6048] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 67.415162][ T5955] Bluetooth: hci2: command tx timeout [ 67.416986][ T6048] team0: Port device dummy0 added [ 67.425410][ T6050] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 68.028960][ T6032] usb 7-1: config 0 has no interfaces? [ 68.035026][ T6032] usb 7-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 68.039078][ T6032] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.045949][ T6032] usb 7-1: config 0 descriptor?? [ 68.184953][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 68.258746][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.360954][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.668230][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.897778][ T828] usb 7-1: USB disconnect, device number 2 [ 69.405101][ T5948] Bluetooth: hci1: command tx timeout [ 69.495002][ T5948] Bluetooth: hci2: command tx timeout [ 69.495801][ T5957] Bluetooth: hci0: command tx timeout [ 69.500364][ T5955] Bluetooth: hci3: command tx timeout [ 70.511382][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.815298][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.865271][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.257707][ T6086] Zero length message leads to an empty skb [ 71.285251][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.288121][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.291623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.446613][ T6091] mkiss: ax0: crc mode is auto. [ 71.496028][ T5955] Bluetooth: hci1: command tx timeout [ 71.566281][ T5955] Bluetooth: hci2: command tx timeout [ 71.575273][ T5957] Bluetooth: hci0: command tx timeout [ 71.577833][ T5955] Bluetooth: hci3: command tx timeout [ 73.534956][ T53] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 73.688452][ T53] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 73.691842][ T53] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 73.696328][ T53] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 73.701452][ T53] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 73.707447][ T53] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 73.717159][ T53] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 73.720342][ T53] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 73.724115][ T53] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 73.744981][ T53] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 73.750063][ T53] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 73.761807][ T53] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 73.770626][ T53] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 73.780966][ T53] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 73.791143][ T53] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 73.794655][ T53] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 73.809976][ T53] usb 8-1: string descriptor 0 read error: -22 [ 73.815059][ T53] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 73.819154][ T53] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.865435][ T53] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 76.149012][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.151221][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.786115][ T6144] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 76.789039][ T6144] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 76.796204][ T6144] vhci_hcd vhci_hcd.0: Device attached [ 76.830558][ T6144] netlink: 'syz.0.24': attribute type 1 has an invalid length. [ 76.836530][ T6144] netlink: 56 bytes leftover after parsing attributes in process `syz.0.24'. [ 77.045195][ T6037] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 77.420669][ T6145] vhci_hcd: connection reset by peer [ 77.425785][ T97] vhci_hcd vhci_hcd.0: stop threads [ 77.428424][ T97] vhci_hcd vhci_hcd.0: release socket [ 77.431311][ T97] vhci_hcd vhci_hcd.0: disconnect device [ 77.454112][ T6153] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.534958][ T6087] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 77.547108][ T6153] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.625376][ T6153] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.700701][ T6153] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.705301][ T6087] usb 6-1: Using ep0 maxpacket: 32 [ 77.708983][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.26'. [ 77.718775][ T6151] vlan2: entered promiscuous mode [ 77.720498][ T6151] bond0: entered promiscuous mode [ 77.722342][ T6151] bond_slave_0: entered promiscuous mode [ 77.724439][ T6151] bond_slave_1: entered promiscuous mode [ 77.802463][ T94] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.815027][ T6087] usb 6-1: unable to get BOS descriptor or descriptor too short [ 77.817821][ T6087] usb 6-1: no configurations [ 77.822937][ T6087] usb 6-1: can't read configurations, error -22 [ 77.823325][ T94] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.829509][ T94] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.837806][ T94] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.235062][ T1341] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 78.379900][ T6165] syzkaller0: entered promiscuous mode [ 78.381979][ T6165] syzkaller0: entered allmulticast mode [ 78.749334][ T6168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33'. [ 78.811188][ T6171] 9p: Bad value for 'rfdno' [ 79.245395][ T6054] usb 8-1: USB disconnect, device number 2 [ 79.339430][ T1341] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 79.341857][ T1341] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 79.345561][ T1341] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 79.349663][ T1341] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 79.353191][ T1341] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 79.357760][ T1341] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 79.360165][ T1341] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 79.363518][ T1341] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 79.367334][ T1341] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 79.370997][ T1341] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 79.375972][ T1341] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 79.378417][ T1341] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 79.381926][ T1341] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 79.385831][ T1341] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 79.389555][ T1341] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 79.496697][ T6180] IPv6: addrconf: prefix option has invalid lifetime [ 79.844126][ T1341] usb 7-1: string descriptor 0 read error: -22 [ 79.847325][ T1341] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 79.850665][ T1341] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.865592][ T1341] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 79.923065][ T6188] IPVS: length: 191 != 8 [ 80.254865][ T53] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.419426][ T40] audit: type=1804 audit(1767340311.624:2): pid=6196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.41" name="/newroot/4/bus/bus" dev="overlay" ino=48 res=1 errno=0 [ 80.420099][ T6196] evm: overlay not supported [ 80.450726][ T40] audit: type=1804 audit(1767340311.654:3): pid=6196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.41" name="/newroot/4/bus/bus" dev="overlay" ino=48 res=1 errno=0 [ 80.464601][ T40] audit: type=1800 audit(1767340311.654:4): pid=6196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.41" name="bus" dev="overlay" ino=48 res=0 errno=0 [ 80.477140][ T53] usb 5-1: config 0 has no interfaces? [ 80.481529][ T53] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 80.484650][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.487704][ T53] usb 5-1: Product: syz [ 80.489051][ T53] usb 5-1: Manufacturer: syz [ 80.490577][ T53] usb 5-1: SerialNumber: syz [ 80.493353][ T53] usb 5-1: config 0 descriptor?? [ 80.783477][ T6096] usb 5-1: USB disconnect, device number 2 [ 80.900507][ T6202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.42'. [ 80.911964][ T6204] netlink: 676 bytes leftover after parsing attributes in process `syz.0.44'. [ 80.915850][ T6204] netlink: 676 bytes leftover after parsing attributes in process `syz.0.44'. [ 80.968729][ T6206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.45'. [ 80.971536][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.45'. [ 81.293152][ T6223] IPv6: addrconf: prefix option has invalid lifetime [ 81.464081][ T6227] netlink: 24 bytes leftover after parsing attributes in process `syz.3.53'. [ 81.520636][ T6229] netlink: 24 bytes leftover after parsing attributes in process `syz.3.53'. [ 81.534929][ T1341] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 81.707854][ T1341] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 81.712572][ T1341] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 81.724934][ T1341] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 81.729582][ T1341] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 81.734137][ T1341] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 81.740754][ T1341] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 81.747027][ T1341] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 81.755074][ T1341] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 81.759616][ T1341] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 81.763740][ T1341] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 81.779054][ T1341] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 81.781893][ T1341] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 81.786313][ T1341] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 81.790642][ T1341] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 81.794175][ T1341] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 81.821513][ T1341] usb 6-1: string descriptor 0 read error: -22 [ 81.824104][ T1341] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 81.834884][ T1341] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.846958][ T1341] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 82.326426][ T55] usb 6-1: USB disconnect, device number 4 [ 82.348593][ T53] usb 7-1: USB disconnect, device number 3 [ 82.414982][ T6037] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 82.454783][ T6236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.54'. [ 82.515725][ T6244] netlink: 676 bytes leftover after parsing attributes in process `syz.3.57'. [ 82.519444][ T6244] netlink: 676 bytes leftover after parsing attributes in process `syz.3.57'. [ 82.549154][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'. [ 82.552990][ T6242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'. [ 82.569429][ T6240] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 82.593889][ T6242] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 83.136099][ T6261] IPv6: addrconf: prefix option has invalid lifetime [ 83.592042][ T6271] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 83.596249][ T6270] binder: BINDER_SET_CONTEXT_MGR already set [ 83.596696][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.67'. [ 83.599103][ T6270] binder: 6268:6270 ioctl 4018620d 80000100 returned -16 [ 83.612359][ T6270] binder: 6268:6270 ioctl c0306201 80000640 returned -22 [ 83.615910][ T6271] binder: 6268:6271 ioctl c0306201 80000640 returned -22 [ 83.757343][ T6270] bond0: (slave bond_slave_1): Releasing backup interface [ 84.071903][ T6280] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 84.074661][ T6280] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 84.080345][ T6280] vhci_hcd vhci_hcd.0: Device attached [ 84.204926][ T828] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 84.229071][ T6287] netlink: 676 bytes leftover after parsing attributes in process `syz.2.70'. [ 84.232134][ T6287] netlink: 676 bytes leftover after parsing attributes in process `syz.2.70'. [ 84.355006][ T24] usb 44-1: SetAddress Request (2) to port 0 [ 84.357136][ T24] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 84.361924][ T828] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 84.364586][ T828] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 84.371399][ T828] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 84.376467][ T828] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 84.380552][ T828] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 84.386595][ T828] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 84.389205][ T828] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 84.392548][ T828] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 84.398422][ T828] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 84.402773][ T828] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 84.417544][ T828] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 84.426119][ T828] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 84.429932][ T828] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 84.434484][ T828] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 84.442824][ T828] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 84.449286][ T828] usb 5-1: string descriptor 0 read error: -22 [ 84.451637][ T828] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 84.455090][ T828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.471448][ T828] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 84.634388][ T6281] vhci_hcd: connection reset by peer [ 84.637723][ T1239] vhci_hcd vhci_hcd.3: stop threads [ 84.639885][ T1239] vhci_hcd vhci_hcd.3: release socket [ 84.643681][ T1239] vhci_hcd vhci_hcd.3: disconnect device [ 84.715385][ T6300] fuse: blksize only supported for fuseblk [ 86.766989][ T53] usb 5-1: USB disconnect, device number 3 [ 87.156900][ T6332] syz.1.81 uses obsolete (PF_INET,SOCK_PACKET) [ 87.245122][ T6308] adutux: adu_open - error, can't find device for minor 0 [ 87.492905][ T6337] IPv6: addrconf: prefix option has invalid lifetime [ 88.395001][ T6037] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 88.606299][ T6037] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 88.608729][ T6037] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 88.612023][ T6037] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 88.616069][ T6037] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 88.619831][ T6037] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 88.624900][ T6037] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 88.627619][ T6037] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 88.630951][ T6037] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 88.634577][ T6037] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 88.638456][ T6037] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 88.643269][ T6037] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 88.646206][ T6037] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 88.649996][ T6037] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 88.653723][ T6037] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 88.657556][ T6037] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 88.664091][ T6037] usb 7-1: string descriptor 0 read error: -22 [ 88.666533][ T6037] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 88.669512][ T6037] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.676827][ T6037] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 88.880256][ T6355] netlink: 676 bytes leftover after parsing attributes in process `syz.1.89'. [ 88.883945][ T6355] netlink: 676 bytes leftover after parsing attributes in process `syz.1.89'. [ 89.013907][ T6348] bond1: Removing last arp target with arp_interval on [ 89.405126][ T24] usb 44-1: device descriptor read/8, error -110 [ 89.424578][ T6367] IPv6: addrconf: prefix option has invalid lifetime [ 89.560896][ T6371] netlink: 'syz.3.95': attribute type 10 has an invalid length. [ 89.570227][ T6371] netlink: 40 bytes leftover after parsing attributes in process `syz.3.95'. [ 89.591665][ T6371] team0: Port device geneve0 added [ 89.806069][ T24] usb usb44-port1: attempt power cycle [ 89.987652][ T6386] netlink: 676 bytes leftover after parsing attributes in process `syz.0.99'. [ 89.991679][ T6386] netlink: 676 bytes leftover after parsing attributes in process `syz.0.99'. [ 90.007210][ T6388] lo speed is unknown, defaulting to 1000 [ 90.009382][ T6388] lo speed is unknown, defaulting to 1000 [ 90.013708][ T6388] lo speed is unknown, defaulting to 1000 [ 90.023898][ T6388] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 90.046221][ T6388] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 90.077653][ T6388] lo speed is unknown, defaulting to 1000 [ 90.081288][ T6388] lo speed is unknown, defaulting to 1000 [ 90.099331][ T6388] lo speed is unknown, defaulting to 1000 [ 90.101996][ T6388] lo speed is unknown, defaulting to 1000 [ 90.114719][ T6393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.102'. [ 90.399036][ T24] usb usb44-port1: unable to enumerate USB device [ 91.022545][ T6405] tmpfs: Bad value for 'mpol' [ 91.085605][ T6037] usb 7-1: USB disconnect, device number 4 [ 91.265462][ T6416] netlink: 676 bytes leftover after parsing attributes in process `syz.2.109'. [ 91.269506][ T6416] netlink: 676 bytes leftover after parsing attributes in process `syz.2.109'. [ 91.348036][ T6425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.112'. [ 91.486612][ T56] cfg80211: failed to load regulatory.db [ 92.608151][ T6443] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 92.611088][ T6443] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 92.626509][ T6443] vhci_hcd vhci_hcd.0: Device attached [ 92.736008][ T6450] block device autoloading is deprecated and will be removed. [ 92.777589][ T6452] netlink: 676 bytes leftover after parsing attributes in process `syz.3.120'. [ 92.874966][ T6343] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 93.432838][ T6444] vhci_hcd: connection reset by peer [ 93.435465][ T13] vhci_hcd vhci_hcd.0: stop threads [ 93.439070][ T13] vhci_hcd vhci_hcd.0: release socket [ 93.442483][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 96.459900][ T6489] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 96.462844][ T6489] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 96.489699][ T6489] vhci_hcd vhci_hcd.0: Device attached [ 96.503415][ T6489] netlink: 'syz.1.133': attribute type 1 has an invalid length. [ 96.518961][ T6489] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.529484][ T6489] __nla_validate_parse: 3 callbacks suppressed [ 96.529499][ T6489] netlink: 56 bytes leftover after parsing attributes in process `syz.1.133'. [ 96.539448][ T6496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.134'. [ 96.554732][ T6496] netlink: 156 bytes leftover after parsing attributes in process `syz.3.134'. [ 96.558938][ T6496] netlink: 156 bytes leftover after parsing attributes in process `syz.3.134'. [ 96.726203][ T56] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 96.752910][ T6499] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 96.755478][ T6499] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 96.773478][ T6499] vhci_hcd vhci_hcd.0: Device attached [ 96.786924][ T6490] vhci_hcd: connection reset by peer [ 96.790288][ T1239] vhci_hcd vhci_hcd.1: stop threads [ 96.792264][ T1239] vhci_hcd vhci_hcd.1: release socket [ 96.794220][ T1239] vhci_hcd vhci_hcd.1: disconnect device [ 97.045003][ T24] usb 42-1: SetAddress Request (2) to port 0 [ 97.049058][ T24] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 97.569458][ T6500] vhci_hcd: connection reset by peer [ 97.576369][ T1142] vhci_hcd vhci_hcd.2: stop threads [ 97.578511][ T1142] vhci_hcd vhci_hcd.2: release socket [ 97.580949][ T1142] vhci_hcd vhci_hcd.2: disconnect device [ 97.974909][ T6343] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 101.047066][ T6540] netlink: 24 bytes leftover after parsing attributes in process `syz.2.144'. [ 101.086516][ T6540] netlink: 24 bytes leftover after parsing attributes in process `syz.2.144'. [ 101.895071][ T56] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 102.125049][ T24] usb 42-1: device descriptor read/8, error -110 [ 102.129848][ T6557] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 102.132415][ T6557] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 102.155131][ T6557] vhci_hcd vhci_hcd.0: Device attached [ 102.183107][ T6557] netlink: 'syz.3.146': attribute type 1 has an invalid length. [ 102.260950][ T6561] netlink: 56 bytes leftover after parsing attributes in process `syz.3.146'. [ 102.825058][ T34] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 102.895955][ T24] usb usb42-port1: attempt power cycle [ 103.017037][ T6557] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.029844][ T6558] vhci_hcd: connection reset by peer [ 103.033026][ T1173] vhci_hcd vhci_hcd.3: stop threads [ 103.036040][ T1173] vhci_hcd vhci_hcd.3: release socket [ 103.038659][ T1173] vhci_hcd vhci_hcd.3: disconnect device [ 103.168280][ T6564] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.174393][ T6564] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.339916][ T6564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.352956][ T6564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.467422][ T24] usb usb42-port1: unable to enumerate USB device [ 103.654020][ T1142] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.660415][ T1142] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.670526][ T1142] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.673806][ T1142] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.205410][ T828] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 104.358330][ T6572] wireguard0: entered promiscuous mode [ 104.360430][ T6572] wireguard0: entered allmulticast mode [ 104.368573][ T828] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 104.371642][ T828] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 104.376677][ T828] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 104.382127][ T828] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 104.387424][ T828] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 104.393792][ T828] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 104.397763][ T828] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 104.402053][ T828] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 104.407584][ T828] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 104.412271][ T828] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 104.419387][ T828] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 104.422907][ T828] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 104.428031][ T828] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 104.433231][ T828] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 104.438429][ T828] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 104.446522][ T828] usb 8-1: string descriptor 0 read error: -22 [ 104.448865][ T828] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 104.451756][ T828] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.459999][ T828] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 105.045014][ T828] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 105.204960][ T828] usb 7-1: Using ep0 maxpacket: 32 [ 105.211346][ T6578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.152'. [ 105.221238][ T6578] vlan2: entered promiscuous mode [ 105.223337][ T6578] bond0: entered promiscuous mode [ 105.225749][ T6578] bond_slave_0: entered promiscuous mode [ 105.397326][ T828] usb 7-1: unable to get BOS descriptor or descriptor too short [ 105.402466][ T828] usb 7-1: no configurations [ 105.404446][ T828] usb 7-1: can't read configurations, error -22 [ 105.954954][ T6580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.153'. [ 107.062790][ T6593] netlink: 676 bytes leftover after parsing attributes in process `syz.1.157'. [ 107.066631][ T6593] netlink: 676 bytes leftover after parsing attributes in process `syz.1.157'. [ 107.574922][ T6032] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 107.725066][ T6032] usb 7-1: Using ep0 maxpacket: 32 [ 107.729774][ T6604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.161'. [ 107.738872][ T6604] vlan2: entered promiscuous mode [ 107.859905][ T6032] usb 7-1: unable to get BOS descriptor or descriptor too short [ 107.863327][ T6032] usb 7-1: no configurations [ 107.875053][ T6032] usb 7-1: can't read configurations, error -22 [ 107.954988][ T34] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 108.385131][ T6625] netlink: 676 bytes leftover after parsing attributes in process `syz.1.167'. [ 108.389464][ T6625] netlink: 676 bytes leftover after parsing attributes in process `syz.1.167'. [ 108.443067][ T6629] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 108.449580][ T6629] overlayfs: missing 'lowerdir' [ 108.515312][ T40] audit: type=1326 audit(1767340339.724:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.1.171" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x0 [ 108.557270][ T6635] netlink: 48 bytes leftover after parsing attributes in process `syz.2.170'. [ 108.563374][ T6635] netlink: 48 bytes leftover after parsing attributes in process `syz.2.170'. [ 109.463783][ T5955] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 109.470411][ T5955] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 109.474721][ T5955] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 109.479062][ T5955] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 109.482539][ T5955] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 109.516230][ T6646] netlink: 'syz.2.174': attribute type 8 has an invalid length. [ 109.582385][ T6643] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 109.585309][ T6643] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 109.598614][ T6643] vhci_hcd vhci_hcd.0: Device attached [ 109.737520][ T34] usb 8-1: USB disconnect, device number 3 [ 109.791579][ T6640] chnl_net:caif_netlink_parms(): no params data found [ 109.856949][ T56] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 109.959138][ T1173] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.994068][ T6640] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.996795][ T6640] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.999631][ T6640] bridge_slave_0: entered allmulticast mode [ 110.002387][ T6640] bridge_slave_0: entered promiscuous mode [ 110.008833][ T6640] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.011629][ T6640] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.017499][ T6640] bridge_slave_1: entered allmulticast mode [ 110.023769][ T6640] bridge_slave_1: entered promiscuous mode [ 110.048011][ T1173] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.072847][ T6640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.079555][ T6640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.097592][ T6640] team0: Port device team_slave_0 added [ 110.101336][ T6640] team0: Port device team_slave_1 added [ 110.116353][ T6640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.119269][ T6640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.130881][ T6640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.147828][ T1173] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.156354][ T6640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.158940][ T6640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.168948][ T6640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.193663][ T6640] hsr_slave_0: entered promiscuous mode [ 110.196229][ T6640] hsr_slave_1: entered promiscuous mode [ 110.198634][ T6640] debugfs: 'hsr0' already exists in 'hsr' [ 110.199361][ T6662] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 110.200442][ T6640] Cannot create hsr debugfs directory [ 110.202844][ T6662] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 110.205280][ T34] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 110.207938][ T6662] vhci_hcd vhci_hcd.0: Device attached [ 110.229195][ T6662] tmpfs: Unknown parameter 'qd' [ 110.255434][ T1173] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.330850][ T6640] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 110.357972][ T6640] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 110.365271][ T34] usb 8-1: Using ep0 maxpacket: 32 [ 110.372605][ T6657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.177'. [ 110.373423][ T6640] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 110.396802][ T6657] vlan2: entered promiscuous mode [ 110.399325][ T6657] bond0: entered promiscuous mode [ 110.401535][ T6657] bond_slave_0: entered promiscuous mode [ 110.404317][ T6657] bond_slave_1: entered promiscuous mode [ 110.426065][ T6640] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 110.471249][ T1173] bridge_slave_1: left allmulticast mode [ 110.473548][ T1173] bridge_slave_1: left promiscuous mode [ 110.474918][ T6032] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 110.477276][ T1173] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.489854][ T1173] bridge_slave_0: left allmulticast mode [ 110.491975][ T1173] bridge_slave_0: left promiscuous mode [ 110.492100][ T34] usb 8-1: unable to get BOS descriptor or descriptor too short [ 110.495214][ T1173] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.500109][ T34] usb 8-1: no configurations [ 110.503879][ T34] usb 8-1: can't read configurations, error -22 [ 110.505284][ T10] usb 42-1: SetAddress Request (6) to port 0 [ 110.513645][ T10] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 110.635024][ T6032] usb 7-1: Using ep0 maxpacket: 8 [ 110.640260][ T6032] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 110.650632][ T6032] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 110.657883][ T6032] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.666769][ T6032] usb 7-1: config 0 descriptor?? [ 110.807538][ T1173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.811870][ T6648] vhci_hcd: connection reset by peer [ 110.817565][ T1239] vhci_hcd vhci_hcd.1: stop threads [ 110.819837][ T1239] vhci_hcd vhci_hcd.1: release socket [ 110.820321][ T1173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.821885][ T1239] vhci_hcd vhci_hcd.1: disconnect device [ 110.829937][ T1173] bond0 (unregistering): Released all slaves [ 110.836865][ T1173] bond1 (unregistering): Released all slaves [ 110.903240][ T6032] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 110.904380][ T6672] netlink: 676 bytes leftover after parsing attributes in process `syz.1.178'. [ 110.912033][ T6672] netlink: 676 bytes leftover after parsing attributes in process `syz.1.178'. [ 110.916794][ T6640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.931672][ T6640] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.940576][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.943786][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.961618][ T1239] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.964616][ T1239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.001216][ T6675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.179'. [ 111.154295][ T6675] tc_dump_action: action bad kind [ 111.180726][ T6640] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.568539][ T1173] hsr_slave_0: left promiscuous mode [ 111.605503][ T1173] hsr_slave_1: left promiscuous mode [ 111.610592][ T1173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.613867][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.635336][ T5957] Bluetooth: hci4: command tx timeout [ 111.640714][ T1173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.644052][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.738529][ T1173] veth1_macvtap: left promiscuous mode [ 111.740938][ T1173] veth0_macvtap: left promiscuous mode [ 111.742877][ T1173] veth1_vlan: left promiscuous mode [ 111.744577][ T1173] veth0_vlan: left promiscuous mode [ 112.114856][ T1173] team0 (unregistering): Port device team_slave_1 removed [ 112.145812][ T1173] team0 (unregistering): Port device team_slave_0 removed [ 112.471609][ T6640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.665456][ T6081] usb 7-1: USB disconnect, device number 9 [ 112.682187][ T6663] vhci_hcd: connection reset by peer [ 112.684208][ T94] vhci_hcd vhci_hcd.2: stop threads [ 112.687523][ T94] vhci_hcd vhci_hcd.2: release socket [ 112.692671][ T94] vhci_hcd vhci_hcd.2: disconnect device [ 112.705461][ T6640] veth0_vlan: entered promiscuous mode [ 112.711324][ T6640] veth1_vlan: entered promiscuous mode [ 112.714924][ T6032] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 112.752201][ T6640] veth0_macvtap: entered promiscuous mode [ 112.774065][ T6640] veth1_macvtap: entered promiscuous mode [ 112.785877][ T6640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.792948][ T6640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.810401][ T94] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.825013][ T94] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.830293][ T94] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.835626][ T94] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.860565][ T6724] netlink: 676 bytes leftover after parsing attributes in process `syz.2.186'. [ 112.876897][ T6724] netlink: 676 bytes leftover after parsing attributes in process `syz.2.186'. [ 112.886566][ T6032] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 112.888176][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.889061][ T6032] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 112.891715][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.900166][ T6032] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.913321][ T97] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.916674][ T6032] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 112.916932][ T97] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.920181][ T6032] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 112.935059][ T6032] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 112.935088][ T6032] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 112.935103][ T6032] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.935116][ T6032] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 112.935129][ T6032] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 112.936010][ T6032] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 112.936033][ T6032] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 112.936046][ T6032] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.936059][ T6032] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 112.936072][ T6032] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 112.957832][ T6032] usb 6-1: string descriptor 0 read error: -22 [ 112.979572][ T6032] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 112.979601][ T6032] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.985998][ T6732] ucma_write: process 137 (syz.3.187) changed security contexts after opening file descriptor, this is not allowed. [ 112.986924][ T6732] tmpfs: Unknown parameter 'grpquota_büFp…-ÿÿ>_i×1šH7¤z×òÚEA1žû$*àD†êøÊ#Ÿ%æáÐÙ¨à•' [ 113.000588][ T6032] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 113.186581][ T40] audit: type=1326 audit(1767340344.394:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.2.188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 113.206527][ T40] audit: type=1326 audit(1767340344.404:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.2.188" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 113.554932][ T40] audit: type=1326 audit(1767340344.404:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.2.188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 113.555125][ T34] IPVS: starting estimator thread 0... [ 113.563431][ T40] audit: type=1326 audit(1767340344.404:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.2.188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 113.576218][ T40] audit: type=1326 audit(1767340344.404:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.2.188" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 113.585543][ T40] audit: type=1326 audit(1767340344.404:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.2.188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 113.592979][ T40] audit: type=1326 audit(1767340344.404:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.2.188" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 113.600458][ T40] audit: type=1326 audit(1767340344.404:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.2.188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 113.609959][ T40] audit: type=1326 audit(1767340344.404:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.2.188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 113.623749][ T40] audit: type=1326 audit(1767340344.424:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.2.188" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 113.664082][ T40] audit: type=1326 audit(1767340344.424:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.2.188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 113.745324][ T5957] Bluetooth: hci4: command tx timeout [ 113.774955][ T40] audit: type=1326 audit(1767340344.424:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.2.188" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 113.915110][ T6741] IPVS: using max 45 ests per chain, 108000 per kthread [ 114.190861][ T6764] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.202958][ T6763] process 'syz.3.193' launched './file1' with NULL argv: empty string added [ 114.210565][ T6763] netlink: 20 bytes leftover after parsing attributes in process `syz.3.193'. [ 114.213733][ T6763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.193'. [ 114.330582][ T6770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.194'. [ 114.804517][ T6781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.198'. [ 114.994914][ T56] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 115.371828][ T97] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.374518][ T97] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.745447][ T10] usb 42-1: device descriptor read/8, error -110 [ 115.816250][ T5957] Bluetooth: hci4: command tx timeout [ 116.838421][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.203'. [ 116.867018][ T10] usb usb42-port1: attempt power cycle [ 117.425705][ T10] usb usb42-port1: unable to enumerate USB device [ 117.464970][ T24] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 117.634884][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 117.645348][ T6816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.209'. [ 117.655398][ T6816] vlan2: entered promiscuous mode [ 117.725506][ T6841] netlink: 16 bytes leftover after parsing attributes in process `syz.3.213'. [ 117.774974][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 117.779266][ T24] usb 7-1: no configurations [ 117.782500][ T24] usb 7-1: can't read configurations, error -22 [ 117.885002][ T5957] Bluetooth: hci4: command tx timeout [ 118.287440][ T56] usb 6-1: USB disconnect, device number 5 [ 118.314355][ T6851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.214'. [ 118.346938][ T6854] netlink: 'syz.1.216': attribute type 8 has an invalid length. [ 118.518408][ T6868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.220'. [ 118.965092][ T56] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 119.015107][ T24] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 119.137941][ T56] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 119.142225][ T56] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 119.146841][ T56] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 119.153137][ T56] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 119.159663][ T56] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 119.166252][ T56] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 119.172134][ T56] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 119.178072][ T56] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 119.183474][ T56] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 119.189101][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 119.193608][ T56] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 119.199604][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 119.204512][ T24] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 119.210124][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 119.214922][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 119.220743][ T56] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 119.224771][ T56] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 119.229571][ T56] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 119.234252][ T56] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 119.245108][ T56] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 119.250793][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 119.254424][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 119.259711][ T24] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 119.275075][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 119.280695][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 119.295666][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 119.298912][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 119.302571][ T24] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 119.307990][ T56] usb 8-1: string descriptor 0 read error: -22 [ 119.310632][ T56] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 119.313641][ T56] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.317051][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 119.321253][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 119.335243][ T56] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 119.344356][ T24] usb 7-1: string descriptor 0 read error: -22 [ 119.352019][ T24] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 119.355830][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.380747][ T24] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 119.531023][ T6880] FAULT_INJECTION: forcing a failure. [ 119.531023][ T6880] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 119.537890][ T6880] CPU: 0 UID: 0 PID: 6880 Comm: syz.3.223 Not tainted syzkaller #0 PREEMPT(full) [ 119.537915][ T6880] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 119.537926][ T6880] Call Trace: [ 119.537933][ T6880] [ 119.537941][ T6880] dump_stack_lvl+0x16c/0x1f0 [ 119.537972][ T6880] should_fail_ex+0x512/0x640 [ 119.537997][ T6880] _copy_from_user+0x2e/0xd0 [ 119.538017][ T6880] adu_write+0x4f3/0xfd0 [ 119.538045][ T6880] ? __pfx_adu_write+0x10/0x10 [ 119.538073][ T6880] ? common_file_perm+0x1b1/0x500 [ 119.538093][ T6880] ? __pfx_default_wake_function+0x10/0x10 [ 119.538120][ T6880] ? bpf_lsm_file_permission+0x9/0x10 [ 119.538141][ T6880] ? security_file_permission+0x71/0x210 [ 119.538164][ T6880] ? rw_verify_area+0xcf/0x6c0 [ 119.538188][ T6880] ? __pfx_adu_write+0x10/0x10 [ 119.538204][ T6880] vfs_write+0x2a0/0x11d0 [ 119.538235][ T6880] ? __pfx_vfs_write+0x10/0x10 [ 119.538256][ T6880] ? find_held_lock+0x2b/0x80 [ 119.538277][ T6880] ? __fget_files+0x204/0x3c0 [ 119.538302][ T6880] ? __fget_files+0x20e/0x3c0 [ 119.538322][ T6880] ? __fget_files+0x160/0x3c0 [ 119.538348][ T6880] ksys_pwrite64+0x161/0x1a0 [ 119.538371][ T6880] ? __pfx_ksys_pwrite64+0x10/0x10 [ 119.538421][ T6880] __do_fast_syscall_32+0xe8/0x680 [ 119.538453][ T6880] do_fast_syscall_32+0x32/0x80 [ 119.538478][ T6880] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 119.538499][ T6880] RIP: 0023:0xf7f12579 [ 119.538514][ T6880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 119.538529][ T6880] RSP: 002b:00000000f540655c EFLAGS: 00000296 ORIG_RAX: 00000000000000b5 [ 119.538545][ T6880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000800 [ 119.538555][ T6880] RDX: 0000000000000009 RSI: 0000000000000007 RDI: 0000000000000000 [ 119.538564][ T6880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 119.538574][ T6880] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 119.538583][ T6880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 119.538604][ T6880] [ 119.657262][ T24] usb 8-1: USB disconnect, device number 6 [ 119.697611][ T53] usb 7-1: USB disconnect, device number 12 [ 119.705853][ T34] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 119.992227][ T6902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.228'. [ 120.036453][ T6906] netlink: 'syz.3.230': attribute type 8 has an invalid length. [ 120.054944][ T34] usb 9-1: Using ep0 maxpacket: 32 [ 120.059775][ T6890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.225'. [ 120.067867][ T6890] vlan2: entered promiscuous mode [ 120.069548][ T6890] bond0: entered promiscuous mode [ 120.071310][ T6890] bond_slave_0: entered promiscuous mode [ 120.073762][ T6890] bond_slave_1: entered promiscuous mode [ 120.109019][ T6908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.232'. [ 120.152919][ T34] usb 9-1: unable to get BOS descriptor or descriptor too short [ 120.155565][ T34] usb 9-1: no configurations [ 120.157539][ T34] usb 9-1: can't read configurations, error -22 [ 120.525212][ T24] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 120.836224][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 120.840929][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 120.916468][ T24] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.921411][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 120.929118][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 120.935211][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 120.937817][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 120.941932][ T24] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.948565][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 120.952680][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 120.958977][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 120.962207][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 120.974883][ T24] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.984944][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 120.990203][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 121.002852][ T24] usb 7-1: string descriptor 0 read error: -22 [ 121.006514][ T24] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 121.011633][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.013222][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.241'. [ 121.024184][ T24] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 121.139582][ T6939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.243'. [ 121.151237][ T6939] netlink: 80 bytes leftover after parsing attributes in process `syz.1.243'. [ 121.159343][ T6939] netlink: 80 bytes leftover after parsing attributes in process `syz.1.243'. [ 121.291472][ T6943] netlink: 'syz.1.244': attribute type 8 has an invalid length. [ 121.530710][ T6951] input: syz1 as /devices/virtual/input/input5 [ 122.065002][ T6032] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 122.224893][ T6032] usb 9-1: Using ep0 maxpacket: 32 [ 122.230431][ T6953] netlink: 12 bytes leftover after parsing attributes in process `syz.4.248'. [ 122.240864][ T6953] vlan2: entered promiscuous mode [ 122.341850][ T6032] usb 9-1: unable to get BOS descriptor or descriptor too short [ 122.348588][ T6032] usb 9-1: no configurations [ 122.350624][ T6032] usb 9-1: can't read configurations, error -22 [ 122.985952][ T6965] netlink: 'syz.4.253': attribute type 9 has an invalid length. [ 123.406980][ T6037] usb 7-1: USB disconnect, device number 13 [ 123.761530][ T6984] __nla_validate_parse: 1 callbacks suppressed [ 123.761552][ T6984] netlink: 24 bytes leftover after parsing attributes in process `syz.4.259'. [ 123.811461][ T6984] fuse: Invalid rootmode [ 124.629549][ T7014] netlink: 'syz.4.262': attribute type 8 has an invalid length. [ 125.024639][ T7020] netlink: 676 bytes leftover after parsing attributes in process `syz.4.263'. [ 125.055123][ T7020] netlink: 676 bytes leftover after parsing attributes in process `syz.4.263'. [ 125.287360][ T7022] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 126.498165][ T7037] input: syz0 as /devices/virtual/input/input6 [ 126.535593][ T7037] netlink: 'syz.4.268': attribute type 8 has an invalid length. [ 127.642300][ T6081] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 127.771614][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802569ec00: rx timeout, send abort [ 127.884047][ T7060] Invalid source name [ 127.886655][ T7060] UBIFS error (pid: 7060): cannot open "ubifs", error -22 [ 128.276278][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802569ec00: abort rx timeout. Force session deactivation [ 128.633208][ T7065] netlink: 24 bytes leftover after parsing attributes in process `syz.4.274'. [ 128.684302][ T7067] netlink: 24 bytes leftover after parsing attributes in process `syz.4.274'. [ 129.316335][ T6081] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 129.319582][ T6081] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 129.324343][ T6081] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 129.328755][ T6081] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 129.332393][ T6081] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 129.338314][ T6081] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 129.341350][ T6081] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 129.345867][ T6081] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 129.350114][ T6081] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 129.353681][ T6081] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 129.358788][ T6081] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 129.361803][ T6081] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 129.366973][ T6081] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 129.371678][ T6081] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 129.375654][ T6081] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 129.382758][ T6081] usb 6-1: string descriptor 0 read error: -22 [ 129.385374][ T6081] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 129.388410][ T6081] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.397194][ T6081] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 129.558148][ T7075] 9p: Bad value for 'rfdno' [ 130.806083][ T7100] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 130.808180][ T7100] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 130.811273][ T7100] vhci_hcd vhci_hcd.0: Device attached [ 130.839649][ T7100] netlink: 'syz.3.281': attribute type 1 has an invalid length. [ 130.919603][ T7100] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.928837][ T7104] netlink: 56 bytes leftover after parsing attributes in process `syz.3.281'. [ 130.934970][ T10] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 131.044997][ T34] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 131.094927][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 131.099713][ T7099] netlink: 12 bytes leftover after parsing attributes in process `syz.4.282'. [ 131.108646][ T7099] vlan2: entered promiscuous mode [ 131.179919][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 131.184617][ T10] usb 9-1: no configurations [ 131.186704][ T10] usb 9-1: can't read configurations, error -22 [ 131.350603][ T7101] vhci_hcd: connection reset by peer [ 131.353104][ T1173] vhci_hcd vhci_hcd.3: stop threads [ 131.356015][ T1173] vhci_hcd vhci_hcd.3: release socket [ 131.358453][ T1173] vhci_hcd vhci_hcd.3: disconnect device [ 131.425639][ T7106] netlink: 20 bytes leftover after parsing attributes in process `syz.2.283'. [ 131.430045][ T7106] netlink: 676 bytes leftover after parsing attributes in process `syz.2.283'. [ 131.749264][ T7112] mmap: syz.2.285 (7112) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 131.816610][ T24] usb 6-1: USB disconnect, device number 6 [ 132.225055][ T7129] netlink: 112 bytes leftover after parsing attributes in process `syz.3.292'. [ 132.362933][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.291'. [ 132.371354][ T7126] macvlan2: entered allmulticast mode [ 132.373211][ T7126] veth1_vlan: entered allmulticast mode [ 132.378742][ T7126] veth1_vlan: left allmulticast mode [ 133.175211][ T6054] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 133.325007][ T6054] usb 7-1: Using ep0 maxpacket: 32 [ 133.329332][ T7137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.294'. [ 133.342296][ T7137] vlan2: entered promiscuous mode [ 133.443757][ T6054] usb 7-1: unable to get BOS descriptor or descriptor too short [ 133.455322][ T6054] usb 7-1: no configurations [ 133.457429][ T6054] usb 7-1: can't read configurations, error -22 [ 133.614653][ T10] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 133.766683][ T10] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 133.769167][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 133.772646][ T10] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 133.776919][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 133.780971][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 133.785564][ T10] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 133.788286][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 133.792067][ T10] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 133.796190][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 133.799916][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 133.804396][ T10] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 133.807252][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 133.810762][ T10] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 133.814654][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 133.819053][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 133.825410][ T10] usb 8-1: string descriptor 0 read error: -22 [ 133.827522][ T10] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 133.830651][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.838882][ T10] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 133.979342][ T7157] IPv6: addrconf: prefix option has invalid lifetime [ 134.025633][ T7159] netlink: 'syz.2.300': attribute type 8 has an invalid length. [ 134.764976][ T29] IPVS: starting estimator thread 0... [ 134.854960][ T7190] IPVS: using max 24 ests per chain, 57600 per kthread [ 135.999148][ T7203] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 136.138432][ T6054] usb 8-1: USB disconnect, device number 7 [ 136.215446][ T34] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 136.415547][ T7214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.313'. [ 137.569078][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.571622][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.691148][ T5955] Bluetooth: hci4: unexpected event 0x06 length: 4 > 3 [ 137.719985][ T7232] netlink: 'syz.4.317': attribute type 13 has an invalid length. [ 137.729461][ T7232] veth0_macvtap: left promiscuous mode [ 137.732264][ T7232] macvtap0: entered promiscuous mode [ 137.734191][ T7232] macvtap0: entered allmulticast mode [ 137.741921][ T7232] FAT-fs (nbd4): unable to read boot sector [ 137.860943][ T7241] netlink: 'syz.2.320': attribute type 8 has an invalid length. [ 139.725065][ T5955] Bluetooth: hci4: command 0x2016 tx timeout [ 139.959256][ T7266] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 139.963491][ T7266] overlay: filesystem on ./bus not supported as upperdir [ 140.102761][ T7273] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 140.104942][ T7273] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 140.110712][ T7273] vhci_hcd vhci_hcd.0: Device attached [ 140.354949][ T6037] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 140.518408][ T7274] vhci_hcd: connection reset by peer [ 140.522656][ T1149] vhci_hcd vhci_hcd.4: stop threads [ 140.524943][ T1149] vhci_hcd vhci_hcd.4: release socket [ 140.527005][ T1149] vhci_hcd vhci_hcd.4: disconnect device [ 141.144117][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.330'. [ 141.815512][ T5955] Bluetooth: hci4: command 0x2016 tx timeout [ 142.640786][ T7347] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 142.644252][ T7347] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 142.673786][ T7347] vhci_hcd vhci_hcd.0: Device attached [ 142.705328][ T7334] netlink: 'syz.2.336': attribute type 1 has an invalid length. [ 142.717811][ T7334] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.737002][ T7334] netlink: 56 bytes leftover after parsing attributes in process `syz.2.336'. [ 142.925058][ T6081] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 143.051573][ T7348] vhci_hcd: connection reset by peer [ 143.057589][ T97] vhci_hcd vhci_hcd.2: stop threads [ 143.064980][ T97] vhci_hcd vhci_hcd.2: release socket [ 143.073156][ T97] vhci_hcd vhci_hcd.2: disconnect device [ 143.126492][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.340'. [ 143.558040][ T7366] netlink: 'syz.4.343': attribute type 13 has an invalid length. [ 143.905810][ T7368] ceph: No mds server is up or the cluster is laggy [ 143.914419][ T29] libceph: connect (1)[c::]:6789 error -101 [ 143.918068][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 144.302042][ T7373] dlm: no locking on control device [ 144.811230][ T7366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 144.946661][ T7380] IPv6: addrconf: prefix option has invalid lifetime [ 145.281890][ T7391] syz.1.347 (7391): attempted to duplicate a private mapping with mremap. This is not supported. [ 145.414977][ T10] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 145.485067][ T6037] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 145.574941][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 145.581787][ T7389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.352'. [ 145.596724][ T7389] vlan2: entered promiscuous mode [ 145.738929][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 145.742260][ T10] usb 9-1: no configurations [ 145.744216][ T10] usb 9-1: can't read configurations, error -22 [ 146.568528][ T7433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.356'. [ 147.003490][ T7451] netlink: 'syz.1.360': attribute type 8 has an invalid length. [ 147.235139][ T7436] mkiss: ax0: crc mode is auto. [ 147.335578][ T7458] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 147.338054][ T7458] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 147.357317][ T7458] vhci_hcd vhci_hcd.0: Device attached [ 147.601874][ T7470] capability: warning: `syz.2.365' uses 32-bit capabilities (legacy support in use) [ 147.615211][ T34] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 147.761115][ T7458] netlink: 'syz.1.361': attribute type 1 has an invalid length. [ 147.870770][ T7464] netlink: 56 bytes leftover after parsing attributes in process `syz.1.361'. [ 148.031360][ T7482] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 148.033542][ T7482] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 148.036513][ T6081] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 148.045768][ T7482] vhci_hcd vhci_hcd.0: Device attached [ 148.049873][ T7458] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.060140][ T7485] can: request_module (can-proto-0) failed. [ 148.278499][ T7482] netlink: 'syz.4.367': attribute type 1 has an invalid length. [ 148.306513][ T6032] usb 45-1: new low-speed USB device number 3 using vhci_hcd [ 148.487916][ T7501] netlink: 56 bytes leftover after parsing attributes in process `syz.4.367'. [ 148.708656][ T7496] netlink: 16 bytes leftover after parsing attributes in process `syz.2.370'. [ 148.827826][ T7482] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.970295][ T7505] vlan2: entered promiscuous mode [ 148.972130][ T7505] vlan2: entered allmulticast mode [ 148.973851][ T7505] hsr_slave_1: entered allmulticast mode [ 149.383551][ T7483] vhci_hcd: connection reset by peer [ 149.385943][ T1173] vhci_hcd vhci_hcd.4: stop threads [ 149.387748][ T1173] vhci_hcd vhci_hcd.4: release socket [ 149.389554][ T1173] vhci_hcd vhci_hcd.4: disconnect device [ 149.662491][ T7459] vhci_hcd: connection reset by peer [ 149.665165][ T1173] vhci_hcd vhci_hcd.1: stop threads [ 149.667865][ T1173] vhci_hcd vhci_hcd.1: release socket [ 149.670363][ T1173] vhci_hcd vhci_hcd.1: disconnect device [ 150.212142][ T7509] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 151.005011][ T5957] Bluetooth: hci0: command 0x0c1a tx timeout [ 151.007498][ T7496] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 151.275336][ T7496] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 151.287659][ T7496] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 151.292154][ T7496] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 151.294442][ T7496] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 151.299836][ T7496] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 151.306843][ T7496] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 151.310276][ T7496] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 151.316475][ T7496] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 151.322142][ T7496] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 151.324704][ T7496] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 151.332460][ T7496] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 151.359943][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.377'. [ 151.428226][ T7522] netlink: 28 bytes leftover after parsing attributes in process `syz.1.377'. [ 151.585100][ T24] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 151.756567][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 151.758746][ T6087] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 151.763612][ T24] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 151.768196][ T24] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.773607][ T24] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 151.778268][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.862759][ T24] usbtmc 9-1:16.0: bulk endpoints not found [ 151.905135][ T6087] usb 8-1: Using ep0 maxpacket: 32 [ 151.921060][ T7534] netlink: 12 bytes leftover after parsing attributes in process `syz.3.379'. [ 151.932519][ T7534] vlan4: entered promiscuous mode [ 152.019568][ T6087] usb 8-1: unable to get BOS descriptor or descriptor too short [ 152.026490][ T6087] usb 8-1: no configurations [ 152.028537][ T6087] usb 8-1: can't read configurations, error -22 [ 152.754914][ T34] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 153.085048][ T5957] Bluetooth: hci0: command 0x0c1a tx timeout [ 153.325016][ T5957] Bluetooth: hci4: command 0x2016 tx timeout [ 153.325058][ T5955] Bluetooth: hci3: command 0x0c1a tx timeout [ 153.325148][ T5948] Bluetooth: hci2: command 0x0c1a tx timeout [ 153.396258][ T6032] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 153.589002][ T6081] usb 9-1: USB disconnect, device number 10 [ 153.778924][ T7558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.386'. [ 153.848468][ T7566] netlink: 676 bytes leftover after parsing attributes in process `syz.4.387'. [ 153.852812][ T7566] netlink: 676 bytes leftover after parsing attributes in process `syz.4.387'. [ 154.235033][ T6087] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 154.385019][ T6087] usb 8-1: Using ep0 maxpacket: 32 [ 154.390043][ T7573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.391'. [ 154.402049][ T7573] vlan4: entered promiscuous mode [ 154.494214][ T6087] usb 8-1: unable to get BOS descriptor or descriptor too short [ 154.502386][ T6087] usb 8-1: no configurations [ 154.504021][ T6087] usb 8-1: can't read configurations, error -22 [ 155.165630][ T5955] Bluetooth: hci0: command 0x0c1a tx timeout [ 155.405156][ T5955] Bluetooth: hci3: command 0x0c1a tx timeout [ 155.407240][ T5955] Bluetooth: hci4: command 0x2016 tx timeout [ 155.409373][ T5957] Bluetooth: hci2: command 0x0c1a tx timeout [ 156.276118][ T7586] syzkaller0: entered promiscuous mode [ 156.278527][ T7586] syzkaller0: entered allmulticast mode [ 156.509529][ T7589] netlink: 24 bytes leftover after parsing attributes in process `syz.4.396'. [ 156.592871][ T7590] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 156.595563][ T7590] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 156.599824][ T7590] vhci_hcd vhci_hcd.0: Device attached [ 156.646314][ T7590] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 156.749590][ T7594] IPv6: addrconf: prefix option has invalid lifetime [ 156.847209][ T6033] usb 45-1: new low-speed USB device number 4 using vhci_hcd [ 156.851150][ T7599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.400'. [ 157.350893][ T7591] vhci_hcd: connection reset by peer [ 157.485471][ T5948] Bluetooth: hci4: command 0x2016 tx timeout [ 157.488580][ T5948] Bluetooth: hci3: command 0x0c1a tx timeout [ 157.491213][ T5957] Bluetooth: hci2: command 0x0c1a tx timeout [ 157.557613][ T1173] vhci_hcd vhci_hcd.4: stop threads [ 157.560152][ T1173] vhci_hcd vhci_hcd.4: release socket [ 157.563430][ T1173] vhci_hcd vhci_hcd.4: disconnect device [ 157.815346][ T6081] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 158.205033][ T6081] usb 7-1: device descriptor read/64, error -71 [ 158.245309][ T24] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 158.414941][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 158.418925][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 158.424396][ T24] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 158.431965][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.434755][ T24] usb 9-1: Product: syz [ 158.436343][ T24] usb 9-1: Manufacturer: syz [ 158.438047][ T24] usb 9-1: SerialNumber: syz [ 158.442441][ T24] usb 9-1: config 0 descriptor?? [ 158.452857][ T24] gs_usb 9-1:0.0: Required endpoints not found [ 158.455198][ T6081] usb 7-1: new low-speed USB device number 17 using dummy_hcd [ 158.584937][ T6081] usb 7-1: device descriptor read/64, error -71 [ 158.796857][ T6081] usb usb7-port1: attempt power cycle [ 158.998394][ T7651] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 159.355082][ T6081] usb 7-1: new low-speed USB device number 18 using dummy_hcd [ 159.386258][ T6081] usb 7-1: device descriptor read/8, error -71 [ 159.681098][ T7658] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 159.684948][ T6081] usb 7-1: new low-speed USB device number 19 using dummy_hcd [ 159.715616][ T6081] usb 7-1: device descriptor read/8, error -71 [ 159.825461][ T6081] usb usb7-port1: unable to enumerate USB device [ 160.254668][ T7660] IPv6: addrconf: prefix option has invalid lifetime [ 160.328499][ T7662] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 160.330827][ T7662] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 160.333409][ T7662] vhci_hcd vhci_hcd.0: Device attached [ 160.395329][ T7663] input: syz1 as /devices/virtual/input/input7 [ 160.595103][ T6081] usb 40-1: SetAddress Request (2) to port 0 [ 160.598169][ T6081] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 160.615439][ T7666] vhci_hcd: connection closed [ 160.615729][ T1142] vhci_hcd vhci_hcd.1: stop threads [ 160.622718][ T1142] vhci_hcd vhci_hcd.1: release socket [ 160.625702][ T1142] vhci_hcd vhci_hcd.1: disconnect device [ 161.474902][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 161.577490][ T55] usb 9-1: USB disconnect, device number 11 [ 161.655030][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 161.660296][ T24] usb 6-1: config index 0 descriptor too short (expected 65, got 36) [ 161.670709][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.676924][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.684031][ T24] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 161.694231][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.708436][ T24] usb 6-1: config 0 descriptor?? [ 161.730340][ T24] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input8 [ 161.914108][ T7683] kAFS: unparsable volume name [ 161.920640][ T55] usb 6-1: USB disconnect, device number 7 [ 161.954942][ T6033] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 162.696725][ T55] libceph: connect (1)[c::]:6789 error -101 [ 162.706554][ T55] libceph: mon0 (1)[c::]:6789 connect error [ 162.798372][ T7692] ceph: No mds server is up or the cluster is laggy [ 162.958899][ T7701] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 162.962356][ T7701] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 162.979190][ T7701] vhci_hcd vhci_hcd.0: Device attached [ 163.024632][ T7701] netlink: 'syz.2.428': attribute type 1 has an invalid length. [ 163.075491][ T7701] 8021q: adding VLAN 0 to HW filter on device bond2 [ 163.140063][ T7707] netlink: 56 bytes leftover after parsing attributes in process `syz.2.428'. [ 163.245035][ T24] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 163.349860][ T7702] vhci_hcd: connection reset by peer [ 163.355219][ T13] vhci_hcd vhci_hcd.2: stop threads [ 163.357169][ T13] vhci_hcd vhci_hcd.2: release socket [ 163.365100][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 164.265569][ T29] usb 7-1: new low-speed USB device number 20 using dummy_hcd [ 164.416416][ T29] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 164.419176][ T29] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 164.422765][ T29] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 164.427286][ T29] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 164.431064][ T29] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 164.436146][ T29] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 164.439152][ T29] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 164.442609][ T29] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 164.446972][ T29] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 164.452698][ T29] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 164.457390][ T29] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 164.459815][ T29] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 164.463698][ T29] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 164.467739][ T29] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 164.472011][ T29] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 164.478895][ T29] usb 7-1: string descriptor 0 read error: -22 [ 164.481085][ T29] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 164.484391][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.496299][ T29] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 165.018264][ T7725] netlink: 36 bytes leftover after parsing attributes in process `syz.4.433'. [ 165.925879][ T6081] usb 40-1: device descriptor read/8, error -110 [ 166.077496][ T7730] netlink: 'syz.1.434': attribute type 10 has an invalid length. [ 166.081161][ T7730] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.084753][ T7730] team0: entered promiscuous mode [ 166.087810][ T7730] team_slave_0: entered promiscuous mode [ 166.090004][ T7730] team_slave_1: entered promiscuous mode [ 166.092208][ T7730] dummy0: entered promiscuous mode [ 166.095403][ T7730] bond0: (slave team0): Enslaving as an active interface with an up link [ 166.176328][ T7732] 9pnet_fd: Insufficient options for proto=fd [ 166.447661][ T6081] usb usb40-port1: attempt power cycle [ 166.925944][ T6037] usb 7-1: USB disconnect, device number 20 [ 167.103132][ T6081] usb usb40-port1: unable to enumerate USB device [ 167.124213][ T5957] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 167.200163][ T7745] 8021q: adding VLAN 0 to HW filter on device bond3 [ 167.237458][ T7751] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 167.240481][ T7751] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 167.245864][ T7751] vhci_hcd vhci_hcd.0: Device attached [ 167.288654][ T7751] netlink: 'syz.1.439': attribute type 1 has an invalid length. [ 167.371927][ T7758] netlink: 56 bytes leftover after parsing attributes in process `syz.1.439'. [ 167.386236][ T7751] 8021q: adding VLAN 0 to HW filter on device bond3 [ 167.515525][ T6033] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 167.764533][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 167.764553][ T40] audit: type=1326 audit(2000000001.669:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.2.443" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 167.845624][ T7752] vhci_hcd: connection reset by peer [ 167.847340][ T40] audit: type=1326 audit(2000000001.669:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.2.443" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 167.855225][ T4397] vhci_hcd vhci_hcd.1: stop threads [ 167.858002][ T4397] vhci_hcd vhci_hcd.1: release socket [ 167.859480][ T40] audit: type=1326 audit(2000000001.669:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.2.443" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 167.859737][ T4397] vhci_hcd vhci_hcd.1: disconnect device [ 167.867616][ T40] audit: type=1326 audit(2000000001.669:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.2.443" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 167.875649][ T40] audit: type=1326 audit(2000000001.669:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.2.443" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 167.882493][ T40] audit: type=1326 audit(2000000001.669:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.2.443" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 167.889892][ T40] audit: type=1326 audit(2000000001.669:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.2.443" exe="/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 167.931893][ T40] audit: type=1326 audit(2000000001.839:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.2.443" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 167.941360][ T40] audit: type=1326 audit(2000000001.859:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.2.443" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 167.956362][ T40] audit: type=1326 audit(2000000001.869:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.2.443" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 167.981339][ T5957] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 168.375133][ T24] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 168.727491][ T7774] 9p: Bad value for 'rfdno' [ 171.412007][ T6087] libceph: connect (1)[c::]:6789 error -101 [ 171.414636][ T6087] libceph: mon0 (1)[c::]:6789 connect error [ 171.563063][ T7805] ceph: No mds server is up or the cluster is laggy [ 171.718861][ T7813] loop2: detected capacity change from 0 to 7 [ 171.730435][ T7152] Dev loop2: unable to read RDB block 7 [ 171.734942][ T7152] loop2: unable to read partition table [ 171.739111][ T7152] loop2: partition table beyond EOD, truncated [ 171.748247][ T7813] Dev loop2: unable to read RDB block 7 [ 171.750845][ T7813] loop2: unable to read partition table [ 171.753489][ T7813] loop2: partition table beyond EOD, truncated [ 171.758384][ T7813] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 171.762557][ T7813] overlay: Unknown parameter 'dont_hash' [ 172.017034][ T7819] IPv6: addrconf: prefix option has invalid lifetime [ 172.615044][ T6033] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 173.020071][ T7841] netlink: 84 bytes leftover after parsing attributes in process `syz.2.465'. [ 173.985688][ T5948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 173.991157][ T5948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 173.995005][ T5948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 173.999554][ T5948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 174.003925][ T5948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 174.201420][ T7854] chnl_net:caif_netlink_parms(): no params data found [ 174.335685][ T7854] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.339410][ T7854] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.343310][ T7854] bridge_slave_0: entered allmulticast mode [ 174.347977][ T7854] bridge_slave_0: entered promiscuous mode [ 174.353435][ T7854] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.357051][ T7854] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.360723][ T7854] bridge_slave_1: entered allmulticast mode [ 174.371348][ T7854] bridge_slave_1: entered promiscuous mode [ 174.406076][ T7854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.409918][ T7867] IPv6: addrconf: prefix option has invalid lifetime [ 174.412085][ T7854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.450882][ T7854] team0: Port device team_slave_0 added [ 174.460621][ T7854] team0: Port device team_slave_1 added [ 174.552072][ T7854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.555018][ T7854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.566803][ T7854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.573058][ T7854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.576402][ T7854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.588279][ T7854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.647279][ T7854] hsr_slave_0: entered promiscuous mode [ 174.651026][ T7854] hsr_slave_1: entered promiscuous mode [ 174.654470][ T7854] debugfs: 'hsr0' already exists in 'hsr' [ 174.664959][ T7854] Cannot create hsr debugfs directory [ 174.980871][ T7854] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 174.986824][ T7854] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 174.991423][ T7854] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 174.997381][ T7854] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 175.056059][ T7854] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.059352][ T7854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.063751][ T7854] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.067259][ T7854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.137101][ T7854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.330239][ T7854] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.398780][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.404645][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.456106][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.458670][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.467105][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.470189][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.046342][ T5957] Bluetooth: hci1: command tx timeout [ 176.281567][ T7854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.438867][ T7913] IPv6: addrconf: prefix option has invalid lifetime [ 176.473976][ T7916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.479'. [ 176.513130][ T7854] veth0_vlan: entered promiscuous mode [ 176.530739][ T7854] veth1_vlan: entered promiscuous mode [ 176.569508][ T7854] veth0_macvtap: entered promiscuous mode [ 176.575569][ T7854] veth1_macvtap: entered promiscuous mode [ 176.593036][ T7854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.704997][ T7854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.715114][ T1143] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.718274][ T1143] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.729695][ T1143] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.738994][ T1143] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.935288][ T7892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.939017][ T94] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.942527][ T94] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.959691][ T7892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.557809][ T7942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.486'. [ 177.715297][ T7952] netlink: 'syz.1.489': attribute type 3 has an invalid length. [ 177.718364][ T7952] netlink: 'syz.1.489': attribute type 3 has an invalid length. [ 177.722885][ T7952] netlink: 16 bytes leftover after parsing attributes in process `syz.1.489'. [ 177.785969][ T7956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.491'. [ 178.141405][ T5957] Bluetooth: hci1: command tx timeout [ 178.545058][ T10] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 178.725011][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 178.737828][ T7963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.494'. [ 178.831371][ T7963] vlan2: entered promiscuous mode [ 178.985901][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 178.989783][ T10] usb 9-1: no configurations [ 178.991863][ T10] usb 9-1: can't read configurations, error -22 [ 179.195777][ T7974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.498'. [ 179.837012][ T7993] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.214939][ T5957] Bluetooth: hci1: command tx timeout [ 181.024331][ T8002] IPv6: addrconf: prefix option has invalid lifetime [ 181.365247][ T34] usb 9-1: new low-speed USB device number 14 using dummy_hcd [ 181.431572][ T8018] netlink: 68 bytes leftover after parsing attributes in process `syz.5.515'. [ 181.501588][ T8021] IPv6: addrconf: prefix option has invalid lifetime [ 181.537536][ T34] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 181.541723][ T34] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 181.546482][ T34] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x47, changing to 0x7 [ 181.551586][ T34] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 33458, setting to 0 [ 181.558625][ T34] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 181.562142][ T34] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 181.568072][ T34] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x47, changing to 0x7 [ 181.573832][ T34] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 33458, setting to 0 [ 181.580533][ T34] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 181.583839][ T34] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 181.589442][ T34] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x47, changing to 0x7 [ 181.595234][ T34] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 33458, setting to 0 [ 181.603381][ T34] usb 9-1: string descriptor 0 read error: -22 [ 181.615695][ T34] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 181.620006][ T34] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.708350][ T34] adutux 9-1:168.0: interrupt endpoints not found [ 181.959245][ T8004] syzkaller0: entered promiscuous mode [ 181.964730][ T8004] syzkaller0: entered allmulticast mode [ 182.395041][ T5957] Bluetooth: hci1: command tx timeout [ 182.883615][ T6177] usb 9-1: USB disconnect, device number 14 [ 183.107366][ T8039] bridge_slave_0: left promiscuous mode [ 183.109924][ T8039] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.153580][ T8041] netlink: 2128 bytes leftover after parsing attributes in process `syz.4.521'. [ 183.326842][ T8039] bridge_slave_1: left allmulticast mode [ 183.329153][ T8039] bridge_slave_1: left promiscuous mode [ 183.331703][ T8039] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.347348][ T8039] bond0: (slave bond_slave_0): Releasing backup interface [ 183.352303][ T8039] bond_slave_0: left promiscuous mode [ 183.760984][ T8049] netlink: 52 bytes leftover after parsing attributes in process `syz.5.524'. [ 183.879071][ T8039] bond0: (slave bond_slave_1): Releasing backup interface [ 183.886699][ T8039] bond_slave_1: left promiscuous mode [ 183.918090][ T8039] team0: Port device team_slave_0 removed [ 183.926849][ T8039] team0: Port device team_slave_1 removed [ 183.929940][ T8039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.933598][ T8039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.947417][ T8039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.950400][ T8039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.048466][ T8039] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 184.286418][ T8053] /dev/nullb0: Can't open blockdev [ 184.340714][ T8054] ======================================================= [ 184.340714][ T8054] WARNING: The mand mount option has been deprecated and [ 184.340714][ T8054] and is ignored by this kernel. Remove the mand [ 184.340714][ T8054] option from the mount to silence this warning. [ 184.340714][ T8054] ======================================================= [ 184.555025][ T56] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 184.685572][ T56] usb 10-1: device descriptor read/64, error -71 [ 184.706138][ T8066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.530'. [ 184.926204][ T56] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 185.065056][ T56] usb 10-1: device descriptor read/64, error -71 [ 185.186504][ T56] usb usb10-port1: attempt power cycle [ 185.195055][ T10] usb 7-1: new low-speed USB device number 21 using dummy_hcd [ 185.243419][ T8101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.541'. [ 185.355001][ T10] usb 7-1: Invalid ep0 maxpacket: 64 [ 185.494957][ T10] usb 7-1: new low-speed USB device number 22 using dummy_hcd [ 185.535074][ T56] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 185.555797][ T56] usb 10-1: device descriptor read/8, error -71 [ 185.644890][ T10] usb 7-1: Invalid ep0 maxpacket: 64 [ 185.647215][ T10] usb usb7-port1: attempt power cycle [ 185.795124][ T56] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 185.815825][ T56] usb 10-1: device descriptor read/8, error -71 [ 185.925270][ T56] usb usb10-port1: unable to enumerate USB device [ 185.958302][ T8111] /dev/nullb0: Can't open blockdev [ 186.005047][ T10] usb 7-1: new low-speed USB device number 23 using dummy_hcd [ 186.025410][ T10] usb 7-1: Invalid ep0 maxpacket: 64 [ 186.135698][ T8117] random: crng reseeded on system resumption [ 186.165587][ T10] usb 7-1: new low-speed USB device number 24 using dummy_hcd [ 186.206140][ T10] usb 7-1: Invalid ep0 maxpacket: 64 [ 186.208148][ T10] usb usb7-port1: unable to enumerate USB device [ 186.785027][ T56] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 186.934988][ T56] usb 6-1: Using ep0 maxpacket: 32 [ 186.942096][ T8123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.549'. [ 186.957406][ T8123] vlan2: entered promiscuous mode [ 187.027877][ T56] usb 6-1: unable to get BOS descriptor or descriptor too short [ 187.031234][ T56] usb 6-1: no configurations [ 187.033192][ T56] usb 6-1: can't read configurations, error -22 [ 187.106390][ T8125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.550'. [ 187.154498][ T8127] netlink: 'syz.4.551': attribute type 2 has an invalid length. [ 187.164287][ T8127] netlink: 244 bytes leftover after parsing attributes in process `syz.4.551'. [ 187.450991][ T8132] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 187.507194][ T8134] IPv6: addrconf: prefix option has invalid lifetime [ 187.569580][ T8143] FAULT_INJECTION: forcing a failure. [ 187.569580][ T8143] name failslab, interval 1, probability 0, space 0, times 1 [ 187.575128][ T8143] CPU: 0 UID: 0 PID: 8143 Comm: syz.4.555 Not tainted syzkaller #0 PREEMPT(full) [ 187.575153][ T8143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 187.575164][ T8143] Call Trace: [ 187.575171][ T8143] [ 187.575178][ T8143] dump_stack_lvl+0x16c/0x1f0 [ 187.575211][ T8143] should_fail_ex+0x512/0x640 [ 187.575232][ T8143] ? sctp_get_port_local+0xfbb/0x16e0 [ 187.575261][ T8143] should_failslab+0xc2/0x120 [ 187.575289][ T8143] __kmalloc_cache_noprof+0x80/0x800 [ 187.575308][ T8143] ? find_held_lock+0x2b/0x80 [ 187.575332][ T8143] ? sctp_add_bind_addr+0xae/0x3f0 [ 187.575358][ T8143] ? sctp_add_bind_addr+0xae/0x3f0 [ 187.575384][ T8143] sctp_add_bind_addr+0xae/0x3f0 [ 187.575410][ T8143] sctp_do_bind+0x2d6/0x760 [ 187.575435][ T8143] sctp_bind+0xac/0x140 [ 187.575454][ T8143] ? __pfx_sctp_bind+0x10/0x10 [ 187.575469][ T8143] inet6_bind+0x9a/0x120 [ 187.575496][ T8143] __sys_bind+0x1a7/0x260 [ 187.575518][ T8143] ? __pfx___sys_bind+0x10/0x10 [ 187.575534][ T8143] ? __fget_files+0x20e/0x3c0 [ 187.575567][ T8143] ? __pfx_ksys_write+0x10/0x10 [ 187.575598][ T8143] __ia32_sys_bind+0x71/0xb0 [ 187.575614][ T8143] ? lockdep_hardirqs_on+0x7c/0x110 [ 187.575639][ T8143] __do_fast_syscall_32+0xe8/0x680 [ 187.575670][ T8143] do_fast_syscall_32+0x32/0x80 [ 187.575697][ T8143] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 187.575719][ T8143] RIP: 0023:0xf703d579 [ 187.575733][ T8143] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 187.575750][ T8143] RSP: 002b:00000000f542d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000169 [ 187.575840][ T8143] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 187.575855][ T8143] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 187.575864][ T8143] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 187.575874][ T8143] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 187.575883][ T8143] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 187.575906][ T8143] [ 187.731608][ T8153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.559'. [ 187.766187][ T8158] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 187.939845][ T8168] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 188.017252][ T34] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 188.177986][ T34] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 188.181428][ T34] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 188.187043][ T34] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 188.196949][ T34] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 188.203293][ T34] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 188.210330][ T34] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 188.214095][ T34] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 188.224348][ T34] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 188.230170][ T34] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 188.238682][ T34] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 188.245130][ T34] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 188.252173][ T34] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 188.261518][ T34] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 188.270192][ T34] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 188.270792][ T8172] IPv6: addrconf: prefix option has invalid lifetime [ 188.281203][ T34] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 188.294632][ T34] usb 10-1: string descriptor 0 read error: -22 [ 188.301526][ T34] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 188.310783][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.330483][ T34] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 188.676116][ T8177] /dev/nullb0: Can't open blockdev [ 188.690633][ T8177] comedi comedi3: comedi_config --init_data is deprecated [ 189.249062][ T8184] FAULT_INJECTION: forcing a failure. [ 189.249062][ T8184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.254917][ T34] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 189.259622][ T8184] CPU: 2 UID: 0 PID: 8184 Comm: syz.4.567 Not tainted syzkaller #0 PREEMPT(full) [ 189.259672][ T8184] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 189.259684][ T8184] Call Trace: [ 189.259691][ T8184] [ 189.259699][ T8184] dump_stack_lvl+0x16c/0x1f0 [ 189.259733][ T8184] should_fail_ex+0x512/0x640 [ 189.259761][ T8184] _copy_to_user+0x32/0xd0 [ 189.259785][ T8184] simple_read_from_buffer+0xcb/0x170 [ 189.259815][ T8184] proc_fail_nth_read+0x197/0x240 [ 189.259848][ T8184] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 189.259882][ T8184] ? rw_verify_area+0xcf/0x6c0 [ 189.259906][ T8184] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 189.259938][ T8184] vfs_read+0x1e4/0xcf0 [ 189.259966][ T8184] ? __pfx___mutex_lock+0x10/0x10 [ 189.259999][ T8184] ? __pfx_vfs_read+0x10/0x10 [ 189.260023][ T8184] ? find_held_lock+0x2b/0x80 [ 189.260056][ T8184] ? __fget_files+0x20e/0x3c0 [ 189.260090][ T8184] ksys_read+0x12a/0x250 [ 189.260116][ T8184] ? __pfx_ksys_read+0x10/0x10 [ 189.260148][ T8184] __do_fast_syscall_32+0xe8/0x680 [ 189.260179][ T8184] do_fast_syscall_32+0x32/0x80 [ 189.260207][ T8184] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 189.260230][ T8184] RIP: 0023:0xf703d579 [ 189.260245][ T8184] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 189.260261][ T8184] RSP: 002b:00000000f542d590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 189.260279][ T8184] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f542d620 [ 189.260306][ T8184] RDX: 000000000000000f RSI: 00000000f73d6ff4 RDI: 0000000000000000 [ 189.260317][ T8184] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 189.260327][ T8184] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 189.260338][ T8184] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 189.260369][ T8184] [ 189.444875][ T34] usb 6-1: Using ep0 maxpacket: 32 [ 189.451447][ T8182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.566'. [ 189.458143][ T8188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.570'. [ 189.498547][ T8182] vlan2: entered promiscuous mode [ 189.679414][ T34] usb 6-1: unable to get BOS descriptor or descriptor too short [ 189.684465][ T34] usb 6-1: no configurations [ 189.687510][ T34] usb 6-1: can't read configurations, error -22 [ 189.783061][ T8197] mkiss: ax0: crc mode is auto. [ 189.801023][ T8198] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 189.803882][ T8198] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 189.815352][ T8198] vhci_hcd vhci_hcd.0: Device attached [ 189.853207][ T8197] fuse: Unknown parameter ' [ 189.853207][ T8197] 0x000000000000000c' [ 190.085908][ T6054] usb 46-1: SetAddress Request (2) to port 0 [ 190.088092][ T6054] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 190.432072][ T8199] vhci_hcd: connection reset by peer [ 190.434414][ T7323] vhci_hcd vhci_hcd.4: stop threads [ 190.437335][ T7323] vhci_hcd vhci_hcd.4: release socket [ 190.439708][ T7323] vhci_hcd vhci_hcd.4: disconnect device [ 191.815483][ T8221] netlink: 'syz.2.577': attribute type 4 has an invalid length. [ 192.043085][ T6037] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 192.066239][ T8225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.579'. [ 192.204913][ T6037] usb 9-1: Using ep0 maxpacket: 32 [ 192.209959][ T6037] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 192.212748][ T6037] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 192.218574][ T6037] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 192.223230][ T6037] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 192.228870][ T6037] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 192.232500][ T6037] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 192.242925][ T6037] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 192.247581][ T6037] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.253576][ T6037] usb 9-1: config 0 descriptor?? [ 192.477784][ T6037] usblp 9-1:0.0: usblp1: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 192.503789][ T6037] usb 9-1: USB disconnect, device number 15 [ 192.510554][ T6037] usblp1: removed [ 192.665211][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 192.685969][ T6177] usb 10-1: USB disconnect, device number 6 [ 192.835355][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 192.843036][ T8231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.581'. [ 192.895550][ T8231] vlan2: entered promiscuous mode [ 193.110947][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 193.113676][ T24] usb 6-1: no configurations [ 193.115446][ T24] usb 6-1: can't read configurations, error -22 [ 194.004916][ T6037] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 194.045541][ T34] usb 7-1: new low-speed USB device number 25 using dummy_hcd [ 194.154880][ T6037] usb 9-1: Using ep0 maxpacket: 32 [ 194.158151][ T6037] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 194.160790][ T6037] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 194.163497][ T6037] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 194.166404][ T6037] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 194.169398][ T6037] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 194.172466][ T6037] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 194.176657][ T6037] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 194.179160][ T6037] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.184326][ T6037] usb 9-1: config 0 descriptor?? [ 194.207025][ T34] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 194.209882][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 194.213768][ T34] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 194.217730][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 194.221995][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 194.226743][ T34] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 194.229112][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 194.232609][ T34] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 194.236708][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 194.240439][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 194.245254][ T34] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 194.247740][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 194.251204][ T34] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 194.256647][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 194.261539][ T34] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 194.270040][ T34] usb 7-1: string descriptor 0 read error: -22 [ 194.272709][ T34] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 194.277033][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.293767][ T34] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 194.390409][ T6037] usblp 9-1:0.0: usblp1: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 194.771398][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz.5.596'. [ 194.803308][ T8274] team0 (unregistering): Port device team_slave_0 removed [ 194.811014][ T8274] team0 (unregistering): Port device team_slave_1 removed [ 194.837828][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 194.837840][ T40] audit: type=1326 audit(2000000028.749:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8222 comm="syz.4.578" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 194.850266][ T40] audit: type=1326 audit(2000000028.759:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8222 comm="syz.4.578" exe="/syz-executor" sig=0 arch=40000003 syscall=27 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 194.857970][ T40] audit: type=1326 audit(2000000028.759:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8222 comm="syz.4.578" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 194.865054][ T40] audit: type=1326 audit(2000000028.759:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8222 comm="syz.4.578" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 194.872113][ T40] audit: type=1326 audit(2000000028.759:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8222 comm="syz.4.578" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 194.879422][ T40] audit: type=1326 audit(2000000028.759:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8222 comm="syz.4.578" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 195.164956][ T6054] usb 46-1: device descriptor read/8, error -110 [ 195.325101][ T828] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 195.484946][ T828] usb 10-1: Using ep0 maxpacket: 32 [ 195.489149][ T8287] netlink: 12 bytes leftover after parsing attributes in process `syz.5.598'. [ 195.498579][ T8287] vlan2: entered promiscuous mode [ 195.500685][ T8287] bond0: entered promiscuous mode [ 195.502871][ T8287] bond_slave_0: entered promiscuous mode [ 195.513214][ T8287] bond_slave_1: entered promiscuous mode [ 195.575640][ T6054] usb usb46-port1: attempt power cycle [ 195.600482][ T828] usb 10-1: unable to get BOS descriptor or descriptor too short [ 195.603326][ T828] usb 10-1: no configurations [ 195.605128][ T828] usb 10-1: can't read configurations, error -22 [ 196.122011][ T6177] usb 9-1: USB disconnect, device number 16 [ 196.145442][ T6054] usb usb46-port1: unable to enumerate USB device [ 196.148896][ T6177] usblp1: removed [ 196.556233][ T8305] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 196.558390][ T8305] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 196.561064][ T8305] vhci_hcd vhci_hcd.0: Device attached [ 196.687759][ T6054] usb 7-1: USB disconnect, device number 25 [ 196.761705][ T8312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.606'. [ 196.794924][ T8314] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 196.834964][ T6177] usb 40-1: SetAddress Request (6) to port 0 [ 196.837578][ T6177] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 197.031760][ T8325] netlink: 'syz.2.612': attribute type 1 has an invalid length. [ 197.040275][ T8306] vhci_hcd: connection reset by peer [ 197.042498][ T63] vhci_hcd vhci_hcd.1: stop threads [ 197.044431][ T63] vhci_hcd vhci_hcd.1: release socket [ 197.046559][ T63] vhci_hcd vhci_hcd.1: disconnect device [ 197.062430][ T8325] bond4: entered promiscuous mode [ 197.065909][ T8325] 8021q: adding VLAN 0 to HW filter on device bond4 [ 197.077199][ T8325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.612'. [ 197.095224][ T10] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 197.238796][ T8341] netlink: 'syz.5.618': attribute type 10 has an invalid length. [ 197.243978][ T8341] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 197.248669][ T8341] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 197.254925][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 197.259609][ T8317] netlink: 12 bytes leftover after parsing attributes in process `syz.4.608'. [ 197.268704][ T8317] vlan2: entered promiscuous mode [ 197.330833][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 197.334149][ T10] usb 9-1: no configurations [ 197.339214][ T10] usb 9-1: can't read configurations, error -22 [ 197.912278][ T8358] kvm: requested 158400 ns i8254 timer period limited to 200000 ns [ 197.918941][ T8358] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 197.935438][ T8358] kvm: requested 150019 ns i8254 timer period limited to 200000 ns [ 197.942169][ T8358] kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 197.948565][ T8358] kvm: requested 106438 ns i8254 timer period limited to 200000 ns [ 197.952620][ T8358] kvm: requested 182704 ns i8254 timer period limited to 200000 ns [ 197.980840][ T8358] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 197.985060][ T8358] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 197.990433][ T8358] kvm: requested 77942 ns i8254 timer period limited to 200000 ns [ 197.994537][ T8358] kvm: requested 176838 ns i8254 timer period limited to 200000 ns [ 198.208075][ T8370] pim6reg1: entered promiscuous mode [ 198.210025][ T8370] pim6reg1: entered allmulticast mode [ 198.336378][ T6054] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 198.495143][ T6054] usb 10-1: Using ep0 maxpacket: 16 [ 198.501907][ T6054] usb 10-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 198.506647][ T6054] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.509454][ T6054] usb 10-1: Product: syz [ 198.511025][ T6054] usb 10-1: Manufacturer: syz [ 198.513547][ T6054] usb 10-1: SerialNumber: syz [ 198.518026][ T6054] usb 10-1: config 0 descriptor?? [ 198.527793][ T6054] ssu100 10-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 198.602968][ T8376] IPv6: addrconf: prefix option has invalid lifetime [ 198.648958][ T8378] netlink: 92 bytes leftover after parsing attributes in process `syz.2.628'. [ 198.731848][ T6054] ssu100 10-1:0.0: probe with driver ssu100 failed with error -32 [ 199.039654][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.042248][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.113427][ T8391] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 200.115941][ T8391] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 200.129179][ T8391] vhci_hcd vhci_hcd.0: Device attached [ 200.160671][ T8397] netlink: 40 bytes leftover after parsing attributes in process `syz.4.634'. [ 200.302999][ T8391] netlink: 'syz.1.632': attribute type 1 has an invalid length. [ 200.427324][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.634'. [ 200.430138][ T8397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.465560][ T8397] netlink: 14 bytes leftover after parsing attributes in process `syz.4.634'. [ 200.539639][ T8400] netlink: 56 bytes leftover after parsing attributes in process `syz.1.632'. [ 200.629920][ T8391] 8021q: adding VLAN 0 to HW filter on device bond4 [ 200.714263][ T53] usb 10-1: USB disconnect, device number 9 [ 200.798505][ T8392] vhci_hcd: connection closed [ 200.798736][ T94] vhci_hcd vhci_hcd.1: stop threads [ 200.803307][ T94] vhci_hcd vhci_hcd.1: release socket [ 200.811768][ T94] vhci_hcd vhci_hcd.1: disconnect device [ 200.893631][ T8405] netlink: 40 bytes leftover after parsing attributes in process `syz.5.636'. [ 201.466125][ T40] audit: type=1326 audit(2000000035.379:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.4.641" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 201.526418][ T40] audit: type=1326 audit(2000000035.379:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.4.641" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 201.555129][ T40] audit: type=1326 audit(2000000035.379:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.4.641" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 201.575330][ T40] audit: type=1326 audit(2000000035.379:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.4.641" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 201.596105][ T40] audit: type=1326 audit(2000000035.379:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.4.641" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703d598 code=0x7ffc0000 [ 201.604445][ T40] audit: type=1326 audit(2000000035.379:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.4.641" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703d598 code=0x7ffc0000 [ 201.634896][ T40] audit: type=1326 audit(2000000035.379:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.4.641" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 201.643005][ T40] audit: type=1326 audit(2000000035.379:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.4.641" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 201.663600][ T8436] [ 201.664477][ T8436] ====================================================== [ 201.666956][ T8436] WARNING: possible circular locking dependency detected [ 201.669342][ T8436] syzkaller #0 Not tainted [ 201.671824][ T8436] ------------------------------------------------------ [ 201.674700][ T8436] syz.4.642/8436 is trying to acquire lock: [ 201.677287][ T8436] ffff88804a2e4c68 (&pipe->mutex){+.+.}-{4:4}, at: anon_pipe_write+0x15d/0x1bd0 [ 201.681141][ T8436] [ 201.681141][ T8436] but task is already holding lock: [ 201.684306][ T8436] ffff88806aaf6148 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4a6/0xd60 [ 201.685031][ T40] audit: type=1326 audit(2000000035.379:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.4.641" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703d598 code=0x7ffc0000 [ 201.688242][ T8436] [ 201.688242][ T8436] which lock already depends on the new lock. [ 201.688242][ T8436] [ 201.688250][ T8436] [ 201.688250][ T8436] the existing dependency chain (in reverse order) is: [ 201.688254][ T8436] [ 201.688254][ T8436] -> #3 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 201.688272][ T8436] __mutex_lock+0x1aa/0x1ca0 [ 201.688293][ T8436] autofs_notify_daemon+0x4a6/0xd60 [ 201.688307][ T8436] autofs_wait+0x10f3/0x1ac0 [ 201.688342][ T8436] autofs_mount_wait+0x132/0x3c0 [ 201.699630][ T40] audit: type=1326 audit(2000000035.379:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.4.641" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 201.702261][ T8436] autofs_d_automount+0x4b2/0x960 [ 201.702291][ T8436] __traverse_mounts+0x1b9/0x830 [ 201.702310][ T8436] step_into_slowpath+0x772/0xf50 [ 201.733312][ T8436] path_lookupat+0x627/0xc40 [ 201.735007][ T8436] filename_lookup+0x224/0x5f0 [ 201.737038][ T8436] kern_path+0x35/0x50 [ 201.738541][ T8436] lookup_bdev+0xd8/0x280 [ 201.740223][ T8436] resume_store+0x1d6/0x490 [ 201.742006][ T8436] kobj_attr_store+0x58/0x80 [ 201.743655][ T8436] sysfs_kf_write+0xf2/0x150 [ 201.745396][ T8436] kernfs_fop_write_iter+0x3af/0x570 [ 201.747507][ T8436] vfs_write+0x7d3/0x11d0 [ 201.749165][ T8436] ksys_write+0x12a/0x250 [ 201.751071][ T8436] __do_fast_syscall_32+0xe8/0x680 [ 201.753106][ T8436] do_fast_syscall_32+0x32/0x80 [ 201.754800][ T8436] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 201.757479][ T8436] [ 201.757479][ T8436] -> #2 (&of->mutex){+.+.}-{4:4}: [ 201.759887][ T8436] __mutex_lock+0x1aa/0x1ca0 [ 201.761952][ T8436] kernfs_seq_start+0x4f/0x2a0 [ 201.763841][ T8436] seq_read_iter+0x2c1/0x12d0 [ 201.765641][ T8436] kernfs_fop_read_iter+0x46c/0x610 [ 201.767717][ T8436] copy_splice_read+0x618/0xc20 [ 201.769735][ T8436] do_splice_read+0x285/0x370 [ 201.771672][ T8436] splice_direct_to_actor+0x2a1/0xa30 [ 201.773782][ T8436] do_splice_direct+0x174/0x240 [ 201.775706][ T8436] do_sendfile+0xb06/0xe50 [ 201.777392][ T8436] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 201.779505][ T8436] __do_fast_syscall_32+0xe8/0x680 [ 201.781889][ T8436] do_fast_syscall_32+0x32/0x80 [ 201.784703][ T8436] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 201.787739][ T8436] [ 201.787739][ T8436] -> #1 (&p->lock){+.+.}-{4:4}: [ 201.790893][ T8436] __mutex_lock+0x1aa/0x1ca0 [ 201.793155][ T8436] seq_read_iter+0xe1/0x12d0 [ 201.794939][ T8436] kernfs_fop_read_iter+0x46c/0x610 [ 201.797130][ T8436] copy_splice_read+0x618/0xc20 [ 201.798930][ T8436] do_splice_read+0x285/0x370 [ 201.800773][ T8436] splice_file_to_pipe+0x109/0x120 [ 201.803031][ T8436] do_sendfile+0x400/0xe50 [ 201.804743][ T8436] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 201.806922][ T8436] __do_fast_syscall_32+0xe8/0x680 [ 201.808812][ T8436] do_fast_syscall_32+0x32/0x80 [ 201.810793][ T8436] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 201.813747][ T8436] [ 201.813747][ T8436] -> #0 (&pipe->mutex){+.+.}-{4:4}: [ 201.817056][ T8436] __lock_acquire+0x1669/0x2890 [ 201.819346][ T8436] lock_acquire+0x179/0x330 [ 201.821906][ T8436] __mutex_lock+0x1aa/0x1ca0 [ 201.824391][ T8436] anon_pipe_write+0x15d/0x1bd0 [ 201.827323][ T8436] __kernel_write_iter+0x720/0xb10 [ 201.829943][ T8436] __kernel_write+0xf5/0x140 [ 201.832181][ T8436] autofs_notify_daemon+0x4db/0xd60 [ 201.834598][ T8436] autofs_wait+0x10f3/0x1ac0 [ 201.837181][ T8436] autofs_mount_wait+0x132/0x3c0 [ 201.839897][ T8436] autofs_d_automount+0x4b2/0x960 [ 201.842445][ T8436] __traverse_mounts+0x1b9/0x830 [ 201.845006][ T8436] step_into_slowpath+0x772/0xf50 [ 201.847545][ T8436] path_lookupat+0x627/0xc40 [ 201.849749][ T8436] filename_lookup+0x224/0x5f0 [ 201.852000][ T8436] kern_path+0x35/0x50 [ 201.854151][ T8436] lookup_bdev+0xd8/0x280 [ 201.856572][ T8436] resume_store+0x1d6/0x490 [ 201.859440][ T8436] kobj_attr_store+0x58/0x80 [ 201.861687][ T8436] sysfs_kf_write+0xf2/0x150 [ 201.863845][ T8436] kernfs_fop_write_iter+0x3af/0x570 [ 201.866481][ T8436] vfs_write+0x7d3/0x11d0 [ 201.868785][ T8436] ksys_write+0x12a/0x250 [ 201.871036][ T8436] __do_fast_syscall_32+0xe8/0x680 [ 201.873503][ T8436] do_fast_syscall_32+0x32/0x80 [ 201.876126][ T8436] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 201.879481][ T8436] [ 201.879481][ T8436] other info that might help us debug this: [ 201.879481][ T8436] [ 201.884181][ T8436] Chain exists of: [ 201.884181][ T8436] &pipe->mutex --> &of->mutex --> &sbi->pipe_mutex [ 201.884181][ T8436] [ 201.885323][ T6177] usb 40-1: device descriptor read/8, error -110 [ 201.889452][ T8436] Possible unsafe locking scenario: [ 201.889452][ T8436] [ 201.889466][ T8436] CPU0 CPU1 [ 201.889473][ T8436] ---- ---- [ 201.901028][ T8436] lock(&sbi->pipe_mutex); [ 201.903135][ T8436] lock(&of->mutex); [ 201.906072][ T8436] lock(&sbi->pipe_mutex); [ 201.909010][ T8436] lock(&pipe->mutex); [ 201.910800][ T8436] [ 201.910800][ T8436] *** DEADLOCK *** [ 201.910800][ T8436] [ 201.914222][ T8436] 5 locks held by syz.4.642/8436: [ 201.916490][ T8436] #0: ffff88802aff95f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 201.921346][ T8436] #1: ffff88802aeca420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 201.925332][ T8436] #2: ffff88804bcf1088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 201.929538][ T8436] #3: ffff888040ac70f8 (kn->active#65){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 201.933678][ T8436] #4: ffff88806aaf6148 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4a6/0xd60 [ 201.938539][ T8436] [ 201.938539][ T8436] stack backtrace: [ 201.941471][ T8436] CPU: 3 UID: 0 PID: 8436 Comm: syz.4.642 Not tainted syzkaller #0 PREEMPT(full) [ 201.941499][ T8436] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 201.941512][ T8436] Call Trace: [ 201.941519][ T8436] [ 201.941528][ T8436] dump_stack_lvl+0x116/0x1f0 [ 201.941563][ T8436] print_circular_bug+0x275/0x340 [ 201.941662][ T8436] check_noncircular+0x146/0x160 [ 201.941708][ T8436] __lock_acquire+0x1669/0x2890 [ 201.941726][ T8436] ? __kasan_check_byte+0x13/0x50 [ 201.941753][ T8436] lock_acquire+0x179/0x330 [ 201.941768][ T8436] ? anon_pipe_write+0x15d/0x1bd0 [ 201.941796][ T8436] ? __pfx___might_resched+0x10/0x10 [ 201.941821][ T8436] ? rcu_is_watching+0x12/0xc0 [ 201.941848][ T8436] __mutex_lock+0x1aa/0x1ca0 [ 201.941876][ T8436] ? anon_pipe_write+0x15d/0x1bd0 [ 201.941900][ T8436] ? is_bpf_text_address+0x94/0x1a0 [ 201.941926][ T8436] ? kernel_text_address+0x8d/0x100 [ 201.941947][ T8436] ? anon_pipe_write+0x15d/0x1bd0 [ 201.941972][ T8436] ? unwind_get_return_address+0x59/0xa0 [ 201.941997][ T8436] ? __bfs+0x148/0x290 [ 201.942028][ T8436] ? __pfx___mutex_lock+0x10/0x10 [ 201.942056][ T8436] ? check_irq_usage+0xe8/0xbc0 [ 201.942089][ T8436] ? anon_pipe_write+0x15d/0x1bd0 [ 201.942113][ T8436] anon_pipe_write+0x15d/0x1bd0 [ 201.942141][ T8436] ? lockdep_unlock+0x64/0xd0 [ 201.942164][ T8436] ? __lock_acquire+0x12c2/0x2890 [ 201.942181][ T8436] ? __pfx_anon_pipe_write+0x10/0x10 [ 201.942212][ T8436] ? lock_acquire+0x179/0x330 [ 201.942285][ T8436] ? __pfx_anon_pipe_write+0x10/0x10 [ 201.942320][ T8436] __kernel_write_iter+0x720/0xb10 [ 201.942347][ T8436] ? __pfx___kernel_write_iter+0x10/0x10 [ 201.942371][ T8436] ? __mutex_lock+0x27b/0x1ca0 [ 201.942402][ T8436] ? __kernel_text_address+0xd/0x40 [ 201.942424][ T8436] ? autofs_notify_daemon+0x45a/0xd60 [ 201.942446][ T8436] __kernel_write+0xf5/0x140 [ 201.942471][ T8436] ? __pfx___kernel_write+0x10/0x10 [ 201.942496][ T8436] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 201.942530][ T8436] autofs_notify_daemon+0x4db/0xd60 [ 201.942549][ T8436] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 201.942572][ T8436] ? kernfs_fop_write_iter+0x3af/0x570 [ 201.942671][ T8436] ? vfs_write+0x7d3/0x11d0 [ 201.942700][ T8436] ? ksys_write+0x12a/0x250 [ 201.942731][ T8436] ? lockdep_init_map_type+0x5c/0x270 [ 201.942752][ T8436] ? lockdep_init_map_type+0x5c/0x270 [ 201.942771][ T8436] autofs_wait+0x10f3/0x1ac0 [ 201.942794][ T8436] ? __pfx_autofs_wait+0x10/0x10 [ 201.942813][ T8436] ? __pfx_path_check_mount+0x10/0x10 [ 201.942832][ T8436] ? find_held_lock+0x2b/0x80 [ 201.942854][ T8436] ? path_has_submounts+0xcf/0x120 [ 201.942876][ T8436] ? do_raw_spin_unlock+0x172/0x230 [ 201.942898][ T8436] ? find_held_lock+0x2b/0x80 [ 201.942921][ T8436] autofs_mount_wait+0x132/0x3c0 [ 201.942941][ T8436] autofs_d_automount+0x4b2/0x960 [ 201.942962][ T8436] __traverse_mounts+0x1b9/0x830 [ 201.942982][ T8436] step_into_slowpath+0x772/0xf50 [ 201.943005][ T8436] ? __up_read+0x2d1/0x700 [ 201.943024][ T8436] ? __pfx_step_into_slowpath+0x10/0x10 [ 201.943047][ T8436] ? lookup_slow+0x30/0x70 [ 201.943070][ T8436] path_lookupat+0x627/0xc40 [ 201.943094][ T8436] filename_lookup+0x224/0x5f0 [ 201.943117][ T8436] ? __pfx_filename_lookup+0x10/0x10 [ 201.943146][ T8436] ? getname_kernel+0x52/0x370 [ 201.943162][ T8436] ? __asan_memcpy+0x3c/0x60 [ 201.943184][ T8436] kern_path+0x35/0x50 [ 201.943206][ T8436] lookup_bdev+0xd8/0x280 [ 201.943224][ T8436] ? __pfx_lookup_bdev+0x10/0x10 [ 201.943240][ T8436] ? __asan_memcpy+0x3c/0x60 [ 201.943262][ T8436] resume_store+0x1d6/0x490 [ 201.943284][ T8436] ? __pfx_resume_store+0x10/0x10 [ 201.943307][ T8436] ? find_held_lock+0x2b/0x80 [ 201.943330][ T8436] ? __pfx_resume_store+0x10/0x10 [ 201.943350][ T8436] kobj_attr_store+0x58/0x80 [ 201.943376][ T8436] ? __pfx_kobj_attr_store+0x10/0x10 [ 201.943401][ T8436] sysfs_kf_write+0xf2/0x150 [ 201.943419][ T8436] kernfs_fop_write_iter+0x3af/0x570 [ 201.943443][ T8436] ? __pfx_sysfs_kf_write+0x10/0x10 [ 201.943459][ T8436] vfs_write+0x7d3/0x11d0 [ 201.943482][ T8436] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 201.943510][ T8436] ? __pfx_vfs_write+0x10/0x10 [ 201.943535][ T8436] ? find_held_lock+0x2b/0x80 [ 201.943572][ T8436] ksys_write+0x12a/0x250 [ 201.943597][ T8436] ? __pfx_ksys_write+0x10/0x10 [ 201.943624][ T8436] __do_fast_syscall_32+0xe8/0x680 [ 201.943653][ T8436] do_fast_syscall_32+0x32/0x80 [ 201.943680][ T8436] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 201.943703][ T8436] RIP: 0023:0xf703d579 [ 201.943719][ T8436] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 201.943738][ T8436] RSP: 002b:00000000f540c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 201.943757][ T8436] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000040 [ 201.943769][ T8436] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 201.943779][ T8436] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 201.943789][ T8436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.943799][ T8436] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 201.943816][ T8436] [ 202.162714][ T8436] PM: Image not found (code -22) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 202.525774][ T6177] usb usb40-port1: attempt power cycle [ 202.595127][ T24] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 203.474438][ T94] bridge_slave_1: left allmulticast mode [ 203.476456][ T94] bridge_slave_1: left promiscuous mode [ 203.478507][ T94] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.482896][ T94] bridge_slave_0: left allmulticast mode [ 203.487480][ T94] bridge_slave_0: left promiscuous mode [ 203.489645][ T94] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.865278][ T94] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.868569][ T94] bond_slave_0: left promiscuous mode [ 203.871062][ T94] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.873957][ T94] bond_slave_1: left promiscuous mode [ 203.876294][ T94] bond0 (unregistering): (slave team0): Releasing backup interface [ 203.879110][ T94] team0: left promiscuous mode [ 203.880996][ T94] team_slave_0: left promiscuous mode [ 203.883297][ T94] team_slave_1: left promiscuous mode [ 203.885670][ T94] dummy0: left promiscuous mode [ 203.888070][ T94] bond0 (unregistering): Released all slaves [ 203.895258][ T6177] usb usb40-port1: unable to enumerate USB device [ 203.953393][ T94] bond1 (unregistering): Released all slaves [ 204.031137][ T94] bond2 (unregistering): Released all slaves [ 204.113723][ T94] bond3 (unregistering): Released all slaves [ 204.181477][ T94] bond4 (unregistering): Released all slaves [ 204.500108][ T94] hsr_slave_0: left promiscuous mode [ 204.503283][ T94] hsr_slave_1: left promiscuous mode [ 204.506441][ T94] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.510368][ T94] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.807849][ T94] team0 (unregistering): Port device team_slave_1 removed [ 204.834362][ T94] team0 (unregistering): Port device team_slave_0 removed [ 205.059138][ T94] team0 (unregistering): Port device dummy0 removed [ 205.432158][ T94] IPVS: stop unused estimator thread 0... [ 205.521496][ T94] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.606816][ T94] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.699846][ T94] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.788793][ T94] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.876848][ T94] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.929543][ T94] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.990929][ T94] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.070430][ T94] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.155726][ T94] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.210091][ T94] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.258706][ T94] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.329790][ T94] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.427557][ T94] bridge_slave_1: left allmulticast mode [ 206.429904][ T94] bridge_slave_1: left promiscuous mode [ 206.432535][ T94] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.441607][ T94] bridge_slave_0: left allmulticast mode [ 206.444209][ T94] bridge_slave_0: left promiscuous mode [ 206.447307][ T94] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.453454][ T94] bridge_slave_1: left allmulticast mode [ 206.458712][ T94] bridge_slave_1: left promiscuous mode [ 206.460757][ T94] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.465945][ T94] bridge_slave_0: left allmulticast mode [ 206.467789][ T94] bridge_slave_0: left promiscuous mode [ 206.469826][ T94] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.620498][ T94] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.624567][ T94] bond_slave_0: left promiscuous mode [ 206.628046][ T94] bond0 (unregistering): Released all slaves [ 206.696315][ T94] bond1 (unregistering): Released all slaves [ 206.769650][ T94] bond2 (unregistering): Released all slaves [ 206.843630][ T94] bond3 (unregistering): Released all slaves [ 206.924216][ T94] bond4 (unregistering): Released all slaves [ 207.136223][ T94] bond0 (unregistering): Released all slaves [ 207.203647][ T94] bond1 (unregistering): Released all slaves [ 207.321283][ T94] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.326184][ T94] bond_slave_0: left promiscuous mode [ 207.329863][ T94] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.333864][ T94] bond_slave_1: left promiscuous mode [ 207.336943][ T94] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 207.340110][ T94] mac80211_hwsim hwsim13 wlan1: left promiscuous mode [ 207.343926][ T94] bond0 (unregistering): Released all slaves [ 207.942885][ T94] hsr_slave_0: left promiscuous mode [ 207.945496][ T94] hsr_slave_1: left promiscuous mode [ 207.947433][ T94] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.949882][ T94] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.952733][ T94] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.955374][ T94] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.963437][ T94] hsr_slave_0: left promiscuous mode [ 207.965665][ T94] hsr_slave_1: left promiscuous mode [ 207.969142][ T94] hsr_slave_0: left promiscuous mode [ 207.971126][ T94] hsr_slave_1: left promiscuous mode [ 207.973357][ T94] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.976215][ T94] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.979958][ T94] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.983057][ T94] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.994695][ T94] veth1_macvtap: left promiscuous mode [ 207.998336][ T94] veth0_macvtap: left promiscuous mode [ 208.001226][ T94] veth1_vlan: left promiscuous mode [ 208.003795][ T94] veth0_vlan: left promiscuous mode [ 208.007006][ T94] veth1_macvtap: left promiscuous mode [ 208.009317][ T94] veth1_vlan: left promiscuous mode [ 208.011217][ T94] veth0_vlan: left promiscuous mode [ 208.014028][ T94] veth1_macvtap: left promiscuous mode [ 208.016158][ T94] veth0_macvtap: left promiscuous mode [ 208.018100][ T94] veth1_vlan: left promiscuous mode [ 208.019909][ T94] veth0_vlan: left promiscuous mode [ 208.167771][ T94] team0 (unregistering): Port device team_slave_1 removed [ 208.185930][ T94] team0 (unregistering): Port device team_slave_0 removed [ 209.522134][ T94] IPVS: stop unused estimator thread 0...