last executing test programs: 16m41.060006924s ago: executing program 0 (id=511): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0xc3}, 0x1, 0x100000000000000}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, @mcast2}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 16m40.12740271s ago: executing program 0 (id=519): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) wait4(0x0, 0x0, 0x80000000, 0x0) userfaultfd(0x80001) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlockall(0x3) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x72, 0x0, 0x0) 16m38.118787218s ago: executing program 0 (id=531): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = accept4(r0, 0x0, 0x0, 0x80000) sendto(r2, &(0x7f0000000200)=' ', 0x1, 0x84, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0x3e, 0x14142, 0x0, 0x0) 16m37.95211267s ago: executing program 0 (id=533): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x121096, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x9) 16m37.584966461s ago: executing program 0 (id=538): socket$inet6_sctp(0xa, 0x5, 0x84) io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x2fb7, 0x3000, 0x0, 0xfffffffa}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) pipe2$9p(&(0x7f0000001900), 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x303, 0x300}}) 16m36.28893404s ago: executing program 0 (id=553): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000100)=0x7, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 16m35.90852183s ago: executing program 32 (id=553): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000100)=0x7, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 12m40.98566245s ago: executing program 2 (id=1252): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_setup(0x6, 0x0) io_submit(0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r1, 0x2285, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, 0x0, 0x0) write$sndseq(r2, &(0x7f0000000200)=[{0xff, 0x0, 0x0, 0x0, @time={0x7}, {0x0, 0x3}, {}, @control={0x0, 0x0, 0x800}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x0, 0x4}, @raw32={[0x3, 0xffffffff, 0x5df]}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x3}, {}, @quote={{0x0, 0xfe}}}, {0x0, 0x0, 0x0, 0x5, @time, {0x2}, {0x0, 0x9}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x1, 0x2, 0x0, @tick=0x401, {}, {}, @connect}], 0x8c) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000300)) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000100)={0x20, 0x6, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x8c90) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r4, 0x0, 0x0) 12m37.844938332s ago: executing program 2 (id=1260): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r4, 0x101, 0x19, &(0x7f0000000400), &(0x7f0000000640)=0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r5, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r6, 0x0, 0x0) 12m35.988631652s ago: executing program 2 (id=1261): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() ptrace$getenv(0x4201, r1, 0x7, &(0x7f0000000100)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x37, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c80)=@generic={0x0, 0x0, 0x10}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000cc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x36, 0x8e, &(0x7f00000008c0)=""/142, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000d40), 0x0, 0x10, 0x200000}, 0x94) keyctl$read(0xb, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000400)={0xa, 0x2, 0xf, @loopback, 0x9}, 0x1c) sendto$inet6(r5, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 12m33.584423631s ago: executing program 2 (id=1265): r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x528, 0x4) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6005, 0x0, 0x7, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 12m27.489509849s ago: executing program 2 (id=1289): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='decodes i'], 0xc) r1 = socket(0x2, 0x80805, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@printk={@lld}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @sched_cls=0x37, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)=r9}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value, &(0x7f0000000340)=0x8) 12m23.456982928s ago: executing program 2 (id=1294): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) socket$unix(0x1, 0x1, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000040)=0x7, 0x9, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fremovexattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000"]) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0xce20, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x2, 0x0, @broadcast}, {0x2, 0xfffd, @broadcast}, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x3fce, 0x3}) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$video4linux(&(0x7f00000007c0), 0x5, 0x20040) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x0, 0x0, 0x0, 0x3, 0xff7, &(0x7f0000001e00)=""/4087}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES8=r0], 0x0) mknod(0x0, 0x8001420, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYRES16=r5, @ANYBLOB="ad3ff7b90a9e16fba43fedc940f643ae3a5e50fb3bf8bea8ee0ed412e78bad073d6845433ea75c35a258390c19c167ec54c0d47e586451c19b9fd2a09e04ea2ecc8e39f2910f7e9bd8bee9a5ea4461fffbfd05d42f3e289ff88a25bbded1f9daad3393942ae1c7a72de79bbe6bb1ed121878e6abbccbe25ffb3f6918d883c85269821baa0abe904229150c542659986592b54319988c0967c6956c115dd734b83184ceb3ed21abd66c7212ed1adee4139e1bc7c897958e39f20b591ac8"], 0x50) openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x2, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x0, 0x2, 0x5, &(0x7f0000000080)={0x8, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) get_mempolicy(0x0, 0x0, 0x782, &(0x7f0000fff000/0x1000)=nil, 0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 12m7.012375771s ago: executing program 33 (id=1294): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) socket$unix(0x1, 0x1, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000040)=0x7, 0x9, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fremovexattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000"]) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0xce20, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x2, 0x0, @broadcast}, {0x2, 0xfffd, @broadcast}, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x3fce, 0x3}) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$video4linux(&(0x7f00000007c0), 0x5, 0x20040) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x0, 0x0, 0x0, 0x3, 0xff7, &(0x7f0000001e00)=""/4087}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES8=r0], 0x0) mknod(0x0, 0x8001420, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYRES16=r5, @ANYBLOB="ad3ff7b90a9e16fba43fedc940f643ae3a5e50fb3bf8bea8ee0ed412e78bad073d6845433ea75c35a258390c19c167ec54c0d47e586451c19b9fd2a09e04ea2ecc8e39f2910f7e9bd8bee9a5ea4461fffbfd05d42f3e289ff88a25bbded1f9daad3393942ae1c7a72de79bbe6bb1ed121878e6abbccbe25ffb3f6918d883c85269821baa0abe904229150c542659986592b54319988c0967c6956c115dd734b83184ceb3ed21abd66c7212ed1adee4139e1bc7c897958e39f20b591ac8"], 0x50) openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x2, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x0, 0x2, 0x5, &(0x7f0000000080)={0x8, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) get_mempolicy(0x0, 0x0, 0x782, &(0x7f0000fff000/0x1000)=nil, 0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 4m45.566867263s ago: executing program 4 (id=5693): r0 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) syz_clone(0x100, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000002c0), &(0x7f0000000300)="63a7545b645572398bcb40d04c48ebcfe5e9d6054b3fdd8db22777bc7cd4659858fb27b157b7dddeab194d841be54321f9d60f8687d17a5f172e538812db3ef6feb660df698d855e4960c09ee1fe5db6fb343f267114881e90a69499af0f56b88a120fba30ead055ff29effa185a2e69f9dd2fcc07b38d1f19a61536514e3e6b092c4a0901e4f5d589") shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x89f6, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4m44.148833584s ago: executing program 4 (id=5698): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xd}, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(r0) 4m42.916067267s ago: executing program 4 (id=5701): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x208, 0x1ffe0000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x5, &(0x7f0000000140)=0x6, 0x4) recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 4m41.516716926s ago: executing program 4 (id=5709): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003b80)={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xf}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9, 0x4800, 0x1, 0x100, 0xe4, 0x80}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 4m40.194233964s ago: executing program 4 (id=5715): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) lstat(&(0x7f0000001c00)='./mnt\x00', &(0x7f0000001c40)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) getrlimit(0xb, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x54) 4m38.238357567s ago: executing program 4 (id=5719): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) 4m21.894721441s ago: executing program 34 (id=5719): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) 2m46.029639372s ago: executing program 7 (id=6090): openat$ptmx(0xffffffffffffff9c, 0x0, 0x60a80, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r3 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d2", 0x9}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYRES16=r5, @ANYRES32=r1, @ANYRESHEX=r0, @ANYRES32=r6, @ANYBLOB="bbd6f2a923b59591bf9fde6fffc0062130847e6302a00f5804a1fc7ca8b2795c1e346a7f6b88bf1c57c38da970f75ad6d675d49473cc1d52d6085f923f9b1d1428a771789e10f7a2dc705218a023653fdd62d79b706546bd68e2f34551d6"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x55, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b6090092aa722681a1ee3f88792f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24d796682495d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffc92915ff6e000000abf60400", [0xc]}) r7 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m41.588547108s ago: executing program 7 (id=6099): munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x7ff}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ptrace$ARCH_MAP_VDSO_32(0x1e, r1, 0xffffffffffffff80, 0x2002) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0xa, 0x3, 0x2) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0x9, @loopback, 0xd9b}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)}}], 0x1, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$loop(&(0x7f0000000500), 0x47ffffa, 0x60500) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4080015}, 0x4040040) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, &(0x7f0000000100)=0x40000000) r6 = syz_open_dev$video4linux(&(0x7f0000000540), 0x10000fc3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r6, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x1012, 0x221e, 0xffffeff6, 0xc251, 0x0, 0x1}) ioctl$KVM_CAP_PMU_CAPABILITY(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0xd4, 0x0, 0x8}) 2m40.542056783s ago: executing program 7 (id=6104): keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 2m36.244760898s ago: executing program 7 (id=6112): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') recvmmsg(r0, &(0x7f0000004cc0), 0x0, 0x2000, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000010c0)={'\x00', &(0x7f0000001040)=@ethtool_sfeatures}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x44b2, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c830}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socket(0x40000000015, 0x5, 0x0) mkdir(0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m33.575785929s ago: executing program 7 (id=6130): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) shutdown(r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702504000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r4, &(0x7f00000001c0)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0x1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYRES16=r8, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x20840}, 0x20008844) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ad0000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x24008811}, 0x4000004) 2m31.437859082s ago: executing program 7 (id=6138): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e20, @empty}, 0x269, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4004}) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, 0x0, 0x8040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x280, 0x55a6}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r5, 0x40046103, &(0x7f0000000300)={0x0, 0x6, 0xfffffff9, 0x9, 0x5, 0x1, 0xf7, 0x7f, 0x3, 0x1, 0x5, "f7d9d17d2756a832754d2db7a81004bd6b122e1a46766bc2f771d8be1f6c41e1"}) r6 = syz_open_dev$vim2m(&(0x7f0000000380), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') read$FUSE(r7, &(0x7f0000007100)={0x2020}, 0x941f) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 2m15.513073623s ago: executing program 35 (id=6138): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e20, @empty}, 0x269, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4004}) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, 0x0, 0x8040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x280, 0x55a6}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r5, 0x40046103, &(0x7f0000000300)={0x0, 0x6, 0xfffffff9, 0x9, 0x5, 0x1, 0xf7, 0x7f, 0x3, 0x1, 0x5, "f7d9d17d2756a832754d2db7a81004bd6b122e1a46766bc2f771d8be1f6c41e1"}) r6 = syz_open_dev$vim2m(&(0x7f0000000380), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') read$FUSE(r7, &(0x7f0000007100)={0x2020}, 0x941f) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) 7.740032103s ago: executing program 6 (id=7922): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040)=0x5, 0x4) 7.656965676s ago: executing program 6 (id=7924): r0 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) write(r0, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) 7.400827351s ago: executing program 6 (id=7929): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e24, 0x4, @local, 0x14}, 0x1c) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x3e, 0x4) 6.442770539s ago: executing program 6 (id=7957): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x62) 4.230244289s ago: executing program 8 (id=7986): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000000)={0x0, 0x0, 0x6}) 4.108801847s ago: executing program 8 (id=7989): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x34, r0, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0) 4.036872563s ago: executing program 8 (id=7992): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00'}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000400), 0x0}, 0x20) 3.966427191s ago: executing program 8 (id=7994): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x13, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) 3.297364657s ago: executing program 1 (id=8003): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [{0x8, 0x3}], {0x10, 0x3}, {0x20, 0x7}}, 0x2c, 0x1) setreuid(0xffffffffffffffff, 0xee01) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) 3.237304769s ago: executing program 6 (id=8005): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x7000000) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xfffffffe, 0x400000}) pipe(&(0x7f0000000080)) 2.987408061s ago: executing program 8 (id=8010): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) 2.960492959s ago: executing program 6 (id=8011): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) r1 = fcntl$dupfd(r0, 0x406, r0) read$FUSE(r1, 0x0, 0x0) 2.847606624s ago: executing program 1 (id=8014): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0x3) 2.783264246s ago: executing program 8 (id=8016): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r4, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r5 = socket$inet(0x2, 0x3, 0x6) r6 = dup3(r4, r5, 0x0) setsockopt$inet_int(r6, 0x0, 0x5, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r6, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xffff1337], [{0x0, 0x40000000, 0x0, 0x1}, {0x35, 0x39}, {0x9, 0x8}, {0x800000, 0x800001}, {0xffff}, {0x1ff}, {0xfffffffe, 0x1000}, {}, {}, {}, {0x0, 0x3}, {0x0, 0xe68b}], 0xc}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.737771662s ago: executing program 3 (id=8017): openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x95f5, 0x10100, 0x0, 0x89}, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x207a98, 0x363, 0x4, 0x0, 0x0) 2.49656199s ago: executing program 3 (id=8019): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0) 1.26712475s ago: executing program 1 (id=8023): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8) 764.761994ms ago: executing program 1 (id=8029): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r1, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x6, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 663.942937ms ago: executing program 1 (id=8030): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="390000fa461aa0fbe8ab80679467df91c09e8a722e34d7e484893ffa560200130011186809fc071200000f0023ff3f210000001770faf047145bc79e0b9971bcbedac0eead3374b1f10b97acf10fcb34894d37f5d3f6c760", 0x58}], 0x1) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x8842) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) 535.445863ms ago: executing program 5 (id=8032): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000070000000700000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 534.328374ms ago: executing program 3 (id=8033): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x3, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 455.566123ms ago: executing program 3 (id=8034): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) syslog(0x3, 0x0, 0x0) 368.798874ms ago: executing program 5 (id=8035): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 349.78741ms ago: executing program 3 (id=8036): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x94, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @val={0x6, 0x2, 0x2}, @val={0x5, 0x3, {0x7, 0xc7, 0x6}}, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x94}}, 0x20000014) 296.241055ms ago: executing program 1 (id=8037): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000700)={0x2020}, 0x2020) 240.760922ms ago: executing program 5 (id=8038): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000240)="09000000e70014000000d97bfbf788a8b30088a800000000000081000000266b", 0x20, 0x0, &(0x7f00000003c0)={0x11, 0x88a8, r2, 0x1, 0xc, 0x6, @random="47fe46d1ffce"}, 0x14) 179.983511ms ago: executing program 5 (id=8039): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008c"]) 128.924842ms ago: executing program 5 (id=8040): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_connect$uac1(0x6, 0xa3, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x3, 0x1, 0x6, 0xe8, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xe, 0x8}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x1ff, 0x1, 0x5, 0x9}, @mixer_unit={0xa, 0x24, 0x4, 0x1, 0x4, "3fe2c652c8"}, @mixer_unit={0xa, 0x24, 0x4, 0x3, 0x6, "8c798bdc01"}, @selector_unit={0x5, 0x24, 0x5, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x8000, 0x35, 0xc, "91c9b0c72f0117"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xc, 0xb, 0x4, {0x7, 0x25, 0x1, 0x0, 0x6, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xc, 0x5, 0x8, {0x7, 0x25, 0x1, 0x2, 0x7, 0x4}}}}}}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000040)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 24.741337ms ago: executing program 5 (id=8041): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=8042): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xf, "9687748e"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='@\nB'], 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): pc: Enabled bearer , priority 10 [ 623.976056][T13512] xt_l2tp: v2 tid > 0xffff: 1114244 [ 625.089459][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.089530][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.137841][ T61] Bluetooth: hci5: command 0x0406 tx timeout [ 627.502728][T13596] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2697'. [ 627.529318][T13596] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2697'. [ 628.266891][T13636] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2719'. [ 631.608053][T13712] netlink: 'syz.3.2753': attribute type 14 has an invalid length. [ 634.113817][T13773] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2774'. [ 636.351257][ T5852] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 636.547226][ T5852] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 636.547254][ T5852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.547275][ T5852] usb 5-1: Product: syz [ 636.547288][ T5852] usb 5-1: Manufacturer: syz [ 636.547301][ T5852] usb 5-1: SerialNumber: syz [ 636.567389][ T5852] usb 5-1: config 0 descriptor?? [ 637.040116][ T5852] airspy 5-1:0.0: Board ID: 00 [ 637.040145][ T5852] airspy 5-1:0.0: Firmware version: [ 638.390733][ T5852] airspy 5-1:0.0: usb_control_msg() failed -71 request 0e [ 638.407297][ T5852] airspy 5-1:0.0: Registered as swradio24 [ 638.407324][ T5852] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 638.458687][ T5852] usb 5-1: USB disconnect, device number 21 [ 641.261780][T13910] overlayfs: missing 'lowerdir' [ 643.461769][T13948] netlink: 'syz.3.2852': attribute type 4 has an invalid length. [ 643.899242][T13952] ref_ctr_offset mismatch. inode: 0x974 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 644.948846][T13988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2870'. [ 645.149995][T14004] netlink: 'syz.4.2878': attribute type 4 has an invalid length. [ 646.155819][T14053] program syz.6.2901 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 646.189378][T14055] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2898'. [ 646.621345][ T5947] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 646.781497][ T5947] usb 7-1: Using ep0 maxpacket: 32 [ 646.787822][ T5947] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 646.787854][ T5947] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.840878][ T5947] usb 7-1: config 0 descriptor?? [ 647.705817][ T5947] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 648.520558][ T5947] gspca_vc032x: reg_w err -71 [ 648.520669][ T5947] gspca_vc032x: I2c Bus Busy Wait 00 [ 648.520680][ T5947] gspca_vc032x: I2c Bus Busy Wait 00 [ 648.520688][ T5947] gspca_vc032x: I2c Bus Busy Wait 00 [ 648.520696][ T5947] gspca_vc032x: I2c Bus Busy Wait 00 [ 648.520704][ T5947] gspca_vc032x: I2c Bus Busy Wait 00 [ 648.520711][ T5947] gspca_vc032x: I2c Bus Busy Wait 00 [ 648.520719][ T5947] gspca_vc032x: I2c Bus Busy Wait 00 [ 648.520727][ T5947] gspca_vc032x: I2c Bus Busy Wait 00 [ 648.520734][ T5947] gspca_vc032x: I2c Bus Busy Wait 00 [ 648.520742][ T5947] gspca_vc032x: I2c Bus Busy Wait 00 [ 648.520749][ T5947] gspca_vc032x: I2c Bus Busy Wait 00 [ 648.520757][ T5947] gspca_vc032x: I2c Bus Busy Wait 00 [ 648.520763][ T5947] gspca_vc032x: I2c Bus Busy Wait 00 [ 648.520770][ T5947] gspca_vc032x: I2c Bus Busy Wait 00 [ 648.520779][ T5947] gspca_vc032x: I2c Bus Busy Wait 00 [ 648.520786][ T5947] gspca_vc032x: I2c Bus Busy Wait 00 [ 648.520799][ T5947] gspca_vc032x: I2c Bus Busy Wait 00 [ 648.520807][ T5947] gspca_vc032x: I2c Bus Busy Wait 00 [ 648.520815][ T5947] gspca_vc032x: Unknown sensor... [ 648.520887][ T5947] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 648.684253][ T5947] usb 7-1: USB disconnect, device number 8 [ 652.350823][T14184] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2959'. [ 652.478866][T14190] 9pnet_fd: Insufficient options for proto=fd [ 652.521246][ T5947] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 652.634061][T14196] loop8: detected capacity change from 0 to 8 [ 652.680046][T14196] Dev loop8: unable to read RDB block 8 [ 652.680100][T14196] loop8: unable to read partition table [ 652.680340][T14196] loop8: partition table beyond EOD, truncated [ 652.680373][T14196] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 652.701265][ T5947] usb 7-1: Using ep0 maxpacket: 32 [ 652.736922][ T5947] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 652.736956][ T5947] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.770064][ T5947] usb 7-1: config 0 descriptor?? [ 653.091779][ T5947] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 653.101017][ T5947] usb 7-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 653.101045][ T5947] usb 7-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 654.486529][T14233] 9pnet_fd: Insufficient options for proto=fd [ 654.600291][T14235] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2981'. [ 654.868540][T14251] 9pnet_fd: Insufficient options for proto=fd [ 656.074067][T14295] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3006'. [ 657.077314][T14322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3019'. [ 657.077342][T14322] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 657.241910][T14328] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3021'. [ 657.241951][T14328] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3021'. [ 658.132620][T14362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3038'. [ 658.144185][T14362] macvlan2: entered allmulticast mode [ 658.144207][T14362] veth1_vlan: entered allmulticast mode [ 658.350871][ T37] audit: type=1326 audit(1760076779.654:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14369 comm="syz.4.3043" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ea482eec9 code=0x0 [ 659.600330][T14428] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.600446][T14428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.627112][T14495] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3102'. [ 665.891089][T14628] could not open pipe file descriptor [ 668.872607][T14688] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3191'. [ 668.872632][T14688] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3191'. [ 668.872650][T14688] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3191'. [ 670.435493][T14725] dummy0: entered promiscuous mode [ 670.876131][T14725] dummy0: left promiscuous mode [ 673.720420][T14807] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3242'. [ 676.080341][T14902] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3285'. [ 676.173217][ C0] vkms_vblank_simulate: vblank timer overrun [ 676.832125][T14929] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3299'. [ 677.654345][ C0] vkms_vblank_simulate: vblank timer overrun [ 677.722719][ C0] vkms_vblank_simulate: vblank timer overrun [ 678.452176][T14954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3310'. [ 678.485287][T14954] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.485935][ C0] vkms_vblank_simulate: vblank timer overrun [ 680.473129][T15001] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3332'. [ 680.674902][T15011] netlink: 'syz.4.3335': attribute type 3 has an invalid length. [ 683.119978][T15108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3383'. [ 683.189380][T15111] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3386'. [ 686.282113][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.282183][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.767935][ T37] audit: type=1326 audit(1760076808.074:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15194 comm="syz.6.3421" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7940baeec9 code=0x0 [ 686.974242][T15207] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3425'. [ 687.370465][T15229] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 687.370500][T15229] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 687.370727][T15229] overlayfs: failed to get uuid (577/file0, err=-13); falling back to uuid=null. [ 690.897773][T15374] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3501'. [ 692.239852][T15394] batadv0: entered promiscuous mode [ 692.247226][T15394] macsec1: entered allmulticast mode [ 692.247247][T15394] batadv0: entered allmulticast mode [ 692.284433][T15394] batadv0: left allmulticast mode [ 692.292341][T15394] batadv0: left promiscuous mode [ 695.108433][T15455] tap0: tun_chr_ioctl cmd 1074025680 [ 699.307910][T15586] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3597'. [ 699.927684][T15623] tipc: Started in network mode [ 699.927714][T15623] tipc: Node identity ac14140f, cluster identity 4711 [ 699.928037][T15623] tipc: New replicast peer: 255.255.255.255 [ 699.930093][T15623] tipc: Enabled bearer , priority 10 [ 699.930772][T15623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3614'. [ 699.930791][T15623] tipc: Disabling bearer [ 701.371644][T15664] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3623'. [ 702.224414][T15694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3644'. [ 702.224449][T15694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3644'. [ 702.224465][T15694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3644'. [ 702.224490][T15694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3644'. [ 702.224505][T15694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3644'. [ 703.333058][T15732] sit0: entered promiscuous mode [ 703.333254][T15732] netlink: 'syz.1.3661': attribute type 1 has an invalid length. [ 703.333271][T15732] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3661'. [ 709.151883][T15868] overlayfs: failed to resolve './cgroup': -2 [ 709.682454][T15881] cgroup: fork rejected by pids controller in /syz6 [ 710.233868][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 710.392943][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 710.405280][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 710.405310][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.469829][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 710.469850][ T9] pvrusb2: ********** [ 710.469857][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 710.469869][ T9] pvrusb2: Important functionality might not be entirely working. [ 710.469878][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 710.469889][ T9] pvrusb2: ********** [ 710.662323][ T2363] pvrusb2: Invalid write control endpoint [ 710.824676][ T2363] pvrusb2: Invalid write control endpoint [ 710.824695][ T2363] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 710.824704][ T2363] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 710.824712][ T2363] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 710.824721][ T2363] pvrusb2: Device being rendered inoperable [ 710.856548][ T10] usb 5-1: USB disconnect, device number 22 [ 710.903601][ T2363] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 710.903717][ T2363] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 710.939261][ T2363] pvrusb2: Attached sub-driver cx25840 [ 710.939293][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 710.939303][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 712.711343][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 712.882832][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 712.882866][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 712.883330][ T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 712.883354][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.459022][ T9] usb 5-1: config 0 descriptor?? [ 713.870813][T16506] tty tty1: ldisc open failed (-12), clearing slot 0 [ 713.873757][T16507] tty tty1: ldisc open failed (-12), clearing slot 0 [ 714.300561][ T9] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0 [ 714.300599][ T9] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0 [ 714.300625][ T9] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0 [ 714.300651][ T9] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0 [ 714.300677][ T9] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0 [ 714.332102][ T9] cm6533_jd 0003:0D8C:0022.0011: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 714.760159][ T9] usb 5-1: USB disconnect, device number 23 [ 715.417463][T16551] netlink: 'syz.1.3790': attribute type 8 has an invalid length. [ 715.417485][T16551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3790'. [ 715.456795][T16551] bond0: entered promiscuous mode [ 715.456819][T16551] bond_slave_0: entered promiscuous mode [ 715.457056][T16551] bond_slave_1: entered promiscuous mode [ 715.504493][T16551] bond0: left promiscuous mode [ 715.504518][T16551] bond_slave_0: left promiscuous mode [ 715.504770][T16551] bond_slave_1: left promiscuous mode [ 715.943924][T16580] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3804'. [ 716.333083][T16598] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3813'. [ 716.542827][T16608] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 716.580056][ T5947] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 716.580134][ T5947] dvb_usb_az6027 7-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 716.661161][ T5947] usb 7-1: USB disconnect, device number 9 [ 717.211183][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 718.251185][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 718.710614][T16708] lo speed is unknown, defaulting to 1000 [ 719.291170][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 719.963210][T16759] autofs: Bad value for 'fd' [ 720.404147][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 720.434303][ C0] vkms_vblank_simulate: vblank timer overrun [ 720.666910][ C0] vkms_vblank_simulate: vblank timer overrun [ 720.720245][ T37] audit: type=1326 audit(1760076842.014:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16762 comm="syz.6.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7940baeec9 code=0x7ffc0000 [ 720.720306][ T37] audit: type=1326 audit(1760076842.024:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16762 comm="syz.6.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7940baeec9 code=0x7ffc0000 [ 720.757920][ C0] vkms_vblank_simulate: vblank timer overrun [ 720.781922][ T37] audit: type=1326 audit(1760076842.074:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16762 comm="syz.6.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7940baeec9 code=0x7ffc0000 [ 720.781976][ T37] audit: type=1326 audit(1760076842.074:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16762 comm="syz.6.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7940baeec9 code=0x7ffc0000 [ 720.782015][ T37] audit: type=1326 audit(1760076842.074:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16762 comm="syz.6.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7940baeec9 code=0x7ffc0000 [ 720.782055][ T37] audit: type=1326 audit(1760076842.084:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16762 comm="syz.6.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7940baeec9 code=0x7ffc0000 [ 720.782095][ T37] audit: type=1326 audit(1760076842.084:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16762 comm="syz.6.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7940baeec9 code=0x7ffc0000 [ 720.782135][ T37] audit: type=1326 audit(1760076842.084:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16762 comm="syz.6.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7940baeec9 code=0x7ffc0000 [ 720.782174][ T37] audit: type=1326 audit(1760076842.084:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16762 comm="syz.6.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7940baeec9 code=0x7ffc0000 [ 720.782215][ T37] audit: type=1326 audit(1760076842.084:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16762 comm="syz.6.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7940baeec9 code=0x7ffc0000 [ 721.028154][ C0] vkms_vblank_simulate: vblank timer overrun [ 721.451506][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 722.538444][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 722.975024][T16834] input: syz1 as /devices/virtual/input/input18 [ 723.611714][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 724.985417][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 725.113060][T10398] Bluetooth: hci2: unexpected cc 0x204b length: 9 > 3 [ 725.113110][T10398] Bluetooth: hci2: unexpected event for opcode 0x204b [ 725.471735][T16916] bridge0: entered allmulticast mode [ 725.519597][T16916] pim6reg: entered allmulticast mode [ 726.011408][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 726.742101][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 726.951258][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 726.965557][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.965590][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 726.965632][ T9] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 726.965654][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.996318][ T9] usb 7-1: config 0 descriptor?? [ 727.051784][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 727.415113][T16956] raw-gadget.0 gadget.6: fail, usb_ep_set_halt returned -11 [ 727.421782][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 727.421909][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 727.436514][ T9] usb 7-1: USB disconnect, device number 10 [ 727.702740][T17011] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 728.099494][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 728.403511][T17037] loop9: detected capacity change from 0 to 7 [ 728.410331][T17037] Dev loop9: unable to read RDB block 7 [ 728.410386][T17037] loop9: unable to read partition table [ 728.410609][T17037] loop9: partition table beyond EOD, truncated [ 728.410626][T17037] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 728.656554][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 728.656572][ T37] audit: type=1326 audit(1760076849.954:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17045 comm="syz.1.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e6a3eec9 code=0x7ffc0000 [ 728.656617][ T37] audit: type=1326 audit(1760076849.964:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17045 comm="syz.1.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e6a3eec9 code=0x7ffc0000 [ 728.658679][ T37] audit: type=1326 audit(1760076849.964:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17045 comm="syz.1.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fb6e6a3eec9 code=0x7ffc0000 [ 728.659035][ T37] audit: type=1326 audit(1760076849.964:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17045 comm="syz.1.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e6a3eec9 code=0x7ffc0000 [ 728.659525][ T37] audit: type=1326 audit(1760076849.964:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17045 comm="syz.1.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fb6e6a3eec9 code=0x7ffc0000 [ 728.782955][ T37] audit: type=1326 audit(1760076850.084:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17045 comm="syz.1.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e6a3eec9 code=0x7ffc0000 [ 728.902159][T17059] veth0: entered promiscuous mode [ 728.909704][T17059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4020'. [ 729.132344][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 730.066967][T17107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4040'. [ 730.381167][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 730.415175][T17121] syz.4.4049 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 730.551860][T17128] sock: sock_set_timeout: `syz.4.4051' (pid 17128) tries to set negative timeout [ 731.451357][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 731.484865][T17174] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.4074'. [ 732.493156][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 733.531182][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 734.839051][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 735.311218][T11856] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 735.463692][T11856] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 735.463725][T11856] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 735.466728][T11856] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 735.466758][T11856] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.466778][T11856] usb 7-1: Product: syz [ 735.466793][T11856] usb 7-1: Manufacturer: syz [ 735.466806][T11856] usb 7-1: SerialNumber: syz [ 735.774208][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 736.602584][T11856] cdc_ncm 7-1:1.0: bind() failure [ 736.624308][T11856] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 736.628200][T11856] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 736.649849][T11856] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 736.675403][T11856] usb 7-1: USB disconnect, device number 11 [ 736.811154][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 737.401397][T17372] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 737.406615][T17372] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 738.332245][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 738.332496][ C1] vkms_vblank_simulate: vblank timer overrun [ 738.594555][T17381] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4166'. [ 738.902020][ T1223] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 739.166212][ C1] vkms_vblank_simulate: vblank timer overrun [ 739.244083][ C1] vkms_vblank_simulate: vblank timer overrun [ 739.339890][ C1] vkms_vblank_simulate: vblank timer overrun [ 739.385105][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 739.559560][ C1] vkms_vblank_simulate: vblank timer overrun [ 739.700198][ C1] vkms_vblank_simulate: vblank timer overrun [ 739.774114][ T1223] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 739.774145][ T1223] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.786979][ T1223] usb 7-1: config 0 descriptor?? [ 739.816288][ T1223] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 740.002765][T17418] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4183'. [ 740.089955][T17421] netlink: 71 bytes leftover after parsing attributes in process `syz.4.4185'. [ 740.202621][ T1223] cpia1 7-1:0.0: unexpected state after lo power cmd: 00 [ 740.282318][T17430] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4187'. [ 740.411278][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 740.604869][ T1223] gspca_cpia1: usb_control_msg 02, error -32 [ 740.606614][ T1223] gspca_cpia1: usb_control_msg 02, error -71 [ 740.606631][ T1223] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0) [ 740.621710][ T1223] usb 7-1: USB disconnect, device number 12 [ 741.270297][T17482] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4209'. [ 741.270334][T17482] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4209'. [ 741.299625][T17487] vcan0: entered allmulticast mode [ 741.300115][T17487] pim6reg: left allmulticast mode [ 741.300238][T17487] vcan0: left allmulticast mode [ 741.300333][T17487] bridge0: left allmulticast mode [ 741.414865][ C1] vkms_vblank_simulate: vblank timer overrun [ 741.451270][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 741.501227][ T1223] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 741.716426][ T1223] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.716476][ T1223] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 741.716498][ T1223] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.726733][ T1223] usb 7-1: config 0 descriptor?? [ 741.910946][T17518] netlink: 'syz.4.4228': attribute type 29 has an invalid length. [ 741.920985][T17518] netlink: 'syz.4.4228': attribute type 29 has an invalid length. [ 741.932611][T17518] netlink: 500 bytes leftover after parsing attributes in process `syz.4.4228'. [ 741.952337][ T1223] usbhid 7-1:0.0: can't add hid device: -71 [ 741.952461][ T1223] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 741.967834][ T1223] usb 7-1: USB disconnect, device number 13 [ 742.471494][ T1223] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 742.554504][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 743.387326][ T1223] usb 7-1: Using ep0 maxpacket: 16 [ 743.389665][ T1223] usb 7-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 743.389698][ T1223] usb 7-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 743.389725][ T1223] usb 7-1: config 0 interface 0 has no altsetting 0 [ 743.389758][ T1223] usb 7-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 743.389781][ T1223] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.455539][ T1223] usb 7-1: config 0 descriptor?? [ 743.611662][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 743.874336][ T1223] hid-picolcd 0003:04D8:F002.0012: unknown main item tag 0x0 [ 743.933391][ T1223] hid-picolcd 0003:04D8:F002.0012: No report with id 0xf3 found [ 743.933470][ T1223] hid-picolcd 0003:04D8:F002.0012: No report with id 0xf4 found [ 744.071734][ C0] hid-picolcd 0003:04D8:F002.0012: invalid size value (65) for picolcd raw event (0) [ 744.273413][ T5859] usb 7-1: USB disconnect, device number 14 [ 744.860758][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 745.001083][T17624] autofs: Unknown parameter '0x0000000000000000' [ 745.808693][T17631] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 745.931353][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 746.500847][T17660] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4293'. [ 746.500869][T17660] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4293'. [ 746.524872][T17660] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4293'. [ 746.971311][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 747.295528][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.295570][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.011369][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 749.213463][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 750.282066][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 751.291272][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 751.473991][T17787] overlayfs: failed to clone lowerpath [ 752.331351][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 752.722526][T17827] autofs: Unknown parameter '0x0000000000000000' [ 753.371268][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 753.846895][T17843] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 754.904618][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 756.045569][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 757.177625][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 758.251447][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 758.510511][T17961] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4426'. [ 758.510674][T17961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 758.806114][T17961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.291438][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 759.506152][ T1223] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 759.653589][ T1223] usb 7-1: config 0 interface 0 has no altsetting 0 [ 759.653633][ T1223] usb 7-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 759.653657][ T1223] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.658918][ T1223] usb 7-1: config 0 descriptor?? [ 760.331424][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 760.691321][ T1223] radio-keene 7-1:0.0: V4L2 device registered as radio48 [ 760.890180][ T5859] usb 7-1: USB disconnect, device number 15 [ 761.369757][T18063] overlayfs: failed to clone upperpath [ 761.371493][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 762.459684][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 763.535093][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 764.571236][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 765.611192][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 766.651153][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 767.691192][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 768.731164][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 768.840041][T18239] netlink: 'syz.3.4551': attribute type 83 has an invalid length. [ 769.300092][T18259] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4558'. [ 769.300124][T18259] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4558'. [ 769.324580][T18259] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4558'. [ 769.324603][T18259] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4558'. [ 769.531257][ T9] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 769.705948][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 769.705980][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.705998][ T9] usb 5-1: Product: syz [ 769.706012][ T9] usb 5-1: Manufacturer: syz [ 769.706026][ T9] usb 5-1: SerialNumber: syz [ 769.771295][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 769.774235][ T9] usb 5-1: config 0 descriptor?? [ 770.010026][ T9] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 770.030394][T18288] all (unregistering): Released all slaves [ 771.017047][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 771.244796][ T37] audit: type=1326 audit(1760076892.554:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18310 comm="syz.6.4582" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7940baeec9 code=0x0 [ 771.256994][ T9] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 771.274264][ T9] usb 5-1: USB disconnect, device number 24 [ 771.879347][T18342] netlink: 'syz.4.4594': attribute type 10 has an invalid length. [ 772.003534][T18342] bridge0: port 3(netdevsim0) entered disabled state [ 772.009774][T18342] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 772.009809][T18342] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 772.010104][T18342] bridge0: port 3(netdevsim0) entered disabled state [ 772.091282][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 772.130735][T18342] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 772.130915][T18342] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 772.142207][T18342] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 772.142382][T18342] team0: Failed to send options change via netlink (err -105) [ 772.142397][T18342] team0: Port device netdevsim0 added [ 772.312961][ T5852] libceph: connect (1)[c::]:6789 error -101 [ 772.313132][ T5852] libceph: mon0 (1)[c::]:6789 connect error [ 772.331593][ T5852] libceph: connect (1)[c::]:6789 error -101 [ 772.331789][ T5852] libceph: mon0 (1)[c::]:6789 connect error [ 772.339662][ T5852] libceph: connect (1)[c::]:6789 error -101 [ 772.339852][ T5852] libceph: mon0 (1)[c::]:6789 connect error [ 772.575768][ T5879] libceph: connect (1)[c::]:6789 error -101 [ 772.575977][ T5879] libceph: mon0 (1)[c::]:6789 connect error [ 772.594874][ T5879] libceph: connect (1)[c::]:6789 error -101 [ 772.595075][ T5879] libceph: mon0 (1)[c::]:6789 connect error [ 773.030646][T18357] ceph: No mds server is up or the cluster is laggy [ 773.034618][T18351] ceph: No mds server is up or the cluster is laggy [ 773.084699][ T5879] libceph: connect (1)[c::]:6789 error -101 [ 773.084911][ T5879] libceph: mon0 (1)[c::]:6789 connect error [ 773.103605][ T5879] libceph: connect (1)[c::]:6789 error -101 [ 773.103802][ T5879] libceph: mon0 (1)[c::]:6789 connect error [ 773.141479][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 774.171414][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 775.211580][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 775.707549][T18464] netlink: 'syz.3.4647': attribute type 4 has an invalid length. [ 775.780746][T18467] netlink: 'syz.3.4647': attribute type 4 has an invalid length. [ 776.251228][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 777.291182][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 778.265338][T18561] bond_slave_0: entered promiscuous mode [ 778.265393][T18561] bond_slave_1: entered promiscuous mode [ 778.267836][T18561] bond_slave_0: left promiscuous mode [ 778.267895][T18561] bond_slave_1: left promiscuous mode [ 778.331281][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 778.964702][T18589] macvtap1: entered promiscuous mode [ 778.964726][T18589] vlan0: entered promiscuous mode [ 778.967069][T18589] macvtap1: entered allmulticast mode [ 778.967087][T18589] vlan0: entered allmulticast mode [ 778.967099][T18589] veth0_vlan: entered allmulticast mode [ 779.371196][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 779.530521][ T37] audit: type=1326 audit(1760076900.834:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18604 comm="syz.1.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e6a3eec9 code=0x7ffc0000 [ 779.536199][ T37] audit: type=1326 audit(1760076900.834:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18604 comm="syz.1.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e6a3eec9 code=0x7ffc0000 [ 779.606181][ T37] audit: type=1326 audit(1760076900.914:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18604 comm="syz.1.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb6e6a3eec9 code=0x7ffc0000 [ 779.628725][ T37] audit: type=1326 audit(1760076900.934:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18604 comm="syz.1.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e6a3eec9 code=0x7ffc0000 [ 779.628778][ T37] audit: type=1326 audit(1760076900.934:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18604 comm="syz.1.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e6a3eec9 code=0x7ffc0000 [ 779.710069][ T37] audit: type=1326 audit(1760076901.014:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18604 comm="syz.1.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb6e6a3eec9 code=0x7ffc0000 [ 779.710117][ T37] audit: type=1326 audit(1760076901.014:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18604 comm="syz.1.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e6a3eec9 code=0x7ffc0000 [ 779.710155][ T37] audit: type=1326 audit(1760076901.014:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18604 comm="syz.1.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e6a3eec9 code=0x7ffc0000 [ 779.741804][ T37] audit: type=1326 audit(1760076901.044:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18604 comm="syz.1.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb6e6a3eec9 code=0x7ffc0000 [ 779.741854][ T37] audit: type=1326 audit(1760076901.054:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18604 comm="syz.1.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e6a3eec9 code=0x7ffc0000 [ 780.412249][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 781.451189][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 782.491247][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 782.559654][T18674] ISOFS: Unable to identify CD-ROM format. [ 783.531205][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 783.947691][T18726] netlink: 'syz.4.4767': attribute type 1 has an invalid length. [ 784.315916][T18731] bond2: (slave bridge1): making interface the new active one [ 784.335204][T18731] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 784.572306][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 785.611184][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 785.731820][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 785.822630][T18772] bridge0: entered promiscuous mode [ 785.831378][T18772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4783'. [ 785.891175][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 785.894015][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.894046][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 785.894478][ T9] usb 5-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 785.894500][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.899771][ T9] usb 5-1: config 0 descriptor?? [ 786.394621][ T9] waltop 0003:172F:0032.0013: hidraw0: USB HID v0.81 Device [HID 172f:0032] on usb-dummy_hcd.4-1/input0 [ 786.605258][ T9] usb 5-1: USB disconnect, device number 25 [ 786.651206][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 787.542445][T18769] bridge0: left promiscuous mode [ 787.691164][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 788.152228][ T37] kauditd_printk_skb: 19 callbacks suppressed [ 788.152250][ T37] audit: type=1804 audit(1760076909.434:199): pid=18844 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.4814" name="/newroot/387/file0" dev="tmpfs" ino=1998 res=1 errno=0 [ 788.611191][ T5852] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 788.731206][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 788.768926][ T5852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.768959][ T5852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.772090][ T5852] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 788.772125][ T5852] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 788.772144][ T5852] usb 5-1: Manufacturer: syz [ 788.796182][ T5852] usb 5-1: config 0 descriptor?? [ 789.771218][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 789.840819][ T5852] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0014/input/input19 [ 789.977598][ T5852] uclogic 0003:256C:006D.0014: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 790.045317][ T5787] usb 5-1: USB disconnect, device number 26 [ 790.752960][T18949] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 790.811235][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 790.816615][ T5852] IPVS: starting estimator thread 0... [ 790.911274][T18954] IPVS: using max 9 ests per chain, 21600 per kthread [ 791.851173][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 792.891152][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 793.931195][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 794.294121][T19067] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 794.971208][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 795.630153][T19135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4947'. [ 796.011181][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 796.443627][T19162] overlayfs: failed to clone upperpath [ 796.458054][T10398] block nbd0: Receive control failed (result -32) [ 797.051177][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 798.091126][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 798.209302][T19209] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.4978'. [ 798.209326][T19209] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4978'. [ 799.131344][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 800.171153][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 801.211140][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 802.251160][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 802.595130][T19372] loop2: detected capacity change from 0 to 7 [ 802.619985][T19372] loop2: [ 802.620024][T19372] loop2: partition table partially beyond EOD, truncated [ 802.948277][T19388] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5060'. [ 802.963110][T19388] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5060'. [ 803.291168][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 804.136537][ T37] audit: type=1326 audit(1760076925.444:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19417 comm="syz.4.5073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea482eec9 code=0x7ffc0000 [ 804.139644][ T37] audit: type=1326 audit(1760076925.444:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19417 comm="syz.4.5073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea482eec9 code=0x7ffc0000 [ 804.139947][ T37] audit: type=1326 audit(1760076925.444:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19417 comm="syz.4.5073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f4ea482eec9 code=0x7ffc0000 [ 804.220090][ T37] audit: type=1326 audit(1760076925.524:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19417 comm="syz.4.5073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea482eec9 code=0x7ffc0000 [ 804.220354][ T37] audit: type=1326 audit(1760076925.524:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19417 comm="syz.4.5073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea482eec9 code=0x7ffc0000 [ 804.235028][ T37] audit: type=1326 audit(1760076925.544:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19417 comm="syz.4.5073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ea482eec9 code=0x7ffc0000 [ 804.235292][ T37] audit: type=1326 audit(1760076925.544:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19417 comm="syz.4.5073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea482eec9 code=0x7ffc0000 [ 804.235558][ T37] audit: type=1326 audit(1760076925.544:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19417 comm="syz.4.5073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea482eec9 code=0x7ffc0000 [ 804.238246][ T37] audit: type=1326 audit(1760076925.544:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19417 comm="syz.4.5073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f4ea482eec9 code=0x7ffc0000 [ 804.239192][ T37] audit: type=1326 audit(1760076925.544:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19417 comm="syz.4.5073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea482eec9 code=0x7ffc0000 [ 804.331108][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 805.371203][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 805.403816][T19452] kvm: Disabled LAPIC found during irq injection [ 805.523357][T19468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5093'. [ 805.524781][T19468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5093'. [ 806.411148][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 806.478114][T19507] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5112'. [ 807.121805][T19533] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 807.451179][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 808.501122][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 808.737356][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.737522][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.531129][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 810.299792][ T37] kauditd_printk_skb: 30 callbacks suppressed [ 810.299810][ T37] audit: type=1326 audit(1760076931.604:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19644 comm="syz.6.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7940baeec9 code=0x7ffc0000 [ 810.299853][ T37] audit: type=1326 audit(1760076931.604:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19644 comm="syz.6.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7940baeec9 code=0x7ffc0000 [ 810.300574][ T37] audit: type=1326 audit(1760076931.604:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19644 comm="syz.6.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7940baeec9 code=0x7ffc0000 [ 810.300872][ T37] audit: type=1326 audit(1760076931.604:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19644 comm="syz.6.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7940baeec9 code=0x7ffc0000 [ 810.403558][ T37] audit: type=1326 audit(1760076931.714:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19644 comm="syz.6.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7940baeec9 code=0x7ffc0000 [ 810.407252][ T37] audit: type=1326 audit(1760076931.714:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19644 comm="syz.6.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7940baeec9 code=0x7ffc0000 [ 810.410475][ T37] audit: type=1326 audit(1760076931.714:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19644 comm="syz.6.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7940baeec9 code=0x7ffc0000 [ 810.410527][ T37] audit: type=1326 audit(1760076931.714:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19644 comm="syz.6.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7940baeec9 code=0x7ffc0000 [ 810.410568][ T37] audit: type=1326 audit(1760076931.714:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19644 comm="syz.6.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f7940baeec9 code=0x7ffc0000 [ 810.475658][ T37] audit: type=1326 audit(1760076931.784:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19644 comm="syz.6.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7940baeec9 code=0x7ffc0000 [ 810.571106][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 811.421418][T19673] netlink: 'syz.3.5185': attribute type 16 has an invalid length. [ 811.421441][T19673] netlink: 'syz.3.5185': attribute type 17 has an invalid length. [ 811.438167][T19668] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 811.611182][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 811.640770][T19673] 8021q: adding VLAN 0 to HW filter on device team0 [ 811.681743][T19673] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 811.811441][T19683] 8021q: adding VLAN 0 to HW filter on device bond3 [ 812.651330][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 813.693250][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 814.104476][T19754] futex_wake_op: syz.6.5217 tries to shift op by 36; fix this program [ 814.731151][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 814.733820][T19775] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 814.951131][ T5787] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 815.104147][ T5787] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 815.104178][ T5787] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.123417][ T5787] usb 7-1: config 0 descriptor?? [ 815.771166][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 816.063032][T19825] netlink: 'syz.4.5249': attribute type 4 has an invalid length. [ 816.811105][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 816.960277][ T5787] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 816.960308][ T5787] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 816.960572][ T5787] asix 7-1:0.0: probe with driver asix failed with error -71 [ 817.081456][ T5787] usb 7-1: USB disconnect, device number 16 [ 817.852832][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 818.891115][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 819.175636][T19925] binder: 19924:19925 unknown command 0 [ 819.175658][T19925] binder: 19924:19925 ioctl c0306201 2000000003c0 returned -22 [ 819.561120][ T5879] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 819.720389][ T5879] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 819.720422][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.720442][ T5879] usb 5-1: Product: syz [ 819.720456][ T5879] usb 5-1: Manufacturer: syz [ 819.720470][ T5879] usb 5-1: SerialNumber: syz [ 819.764362][ T5879] usb 5-1: config 0 descriptor?? [ 819.931153][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 820.009508][ T5879] usb 5-1: USB disconnect, device number 27 [ 820.971115][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 821.720508][T20045] lo speed is unknown, defaulting to 1000 [ 822.021122][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 823.051133][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 824.091173][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 825.131283][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 826.171144][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 826.752006][T20147] ptrace attach of "./syz-executor exec"[10813] was attempted by ""[20147] [ 827.211089][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 827.792170][ T37] kauditd_printk_skb: 24 callbacks suppressed [ 827.792188][ T37] audit: type=1326 audit(1760076949.104:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20171 comm="syz.3.5402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32790eeec9 code=0x7ffc0000 [ 827.797046][ T37] audit: type=1326 audit(1760076949.104:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20171 comm="syz.3.5402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32790eeec9 code=0x7ffc0000 [ 827.800392][ T37] audit: type=1326 audit(1760076949.104:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20171 comm="syz.3.5402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f32790eeec9 code=0x7ffc0000 [ 827.800732][ T37] audit: type=1326 audit(1760076949.104:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20171 comm="syz.3.5402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32790eeec9 code=0x7ffc0000 [ 827.800873][ T37] audit: type=1326 audit(1760076949.104:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20171 comm="syz.3.5402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32790eeec9 code=0x7ffc0000 [ 827.830723][ T37] audit: type=1326 audit(1760076949.114:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20171 comm="syz.3.5402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f32790eeec9 code=0x7ffc0000 [ 827.830783][ T37] audit: type=1326 audit(1760076949.114:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20171 comm="syz.3.5402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32790eeec9 code=0x7ffc0000 [ 827.830825][ T37] audit: type=1326 audit(1760076949.114:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20171 comm="syz.3.5402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32790eeec9 code=0x7ffc0000 [ 827.830866][ T37] audit: type=1326 audit(1760076949.114:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20171 comm="syz.3.5402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f32790eeec9 code=0x7ffc0000 [ 827.830907][ T37] audit: type=1326 audit(1760076949.114:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20171 comm="syz.3.5402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32790eeec9 code=0x7ffc0000 [ 828.251132][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 829.300234][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 829.876294][T20227] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5425'. [ 829.876822][T20227] netem: unknown loss type 13 [ 829.876843][T20227] netem: change failed [ 830.799637][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 831.154660][T20252] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5434'. [ 831.851430][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 831.942036][T20282] /dev/nullb0: Can't lookup blockdev [ 832.409663][T20293] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 832.751331][ T1223] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 832.891393][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 832.914012][ T1223] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.914028][ T1223] usb 5-1: config 0 has no interfaces? [ 832.916886][ T1223] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 832.916903][ T1223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.916914][ T1223] usb 5-1: Product: syz [ 832.916922][ T1223] usb 5-1: Manufacturer: syz [ 832.916929][ T1223] usb 5-1: SerialNumber: syz [ 832.994660][ T1223] usb 5-1: config 0 descriptor?? [ 833.292471][ T1223] usb 5-1: USB disconnect, device number 28 [ 833.934127][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 833.982643][T20339] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5468'. [ 833.983485][T20339] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5468'. [ 834.524198][ C1] vkms_vblank_simulate: vblank timer overrun [ 835.030054][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 835.032160][ C1] vkms_vblank_simulate: vblank timer overrun [ 836.091414][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 836.796702][ C1] vkms_vblank_simulate: vblank timer overrun [ 837.154134][ T1223] kernel read not supported for file /video7 (pid: 1223 comm: kworker/0:2) [ 837.244384][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 837.244778][ C1] vkms_vblank_simulate: vblank timer overrun [ 837.801397][ C1] vkms_vblank_simulate: vblank timer overrun [ 837.924424][ C1] vkms_vblank_simulate: vblank timer overrun [ 838.154924][ C1] vkms_vblank_simulate: vblank timer overrun [ 838.252395][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 838.332372][ C1] vkms_vblank_simulate: vblank timer overrun [ 838.424097][ C1] vkms_vblank_simulate: vblank timer overrun [ 839.291363][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 840.331659][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 841.391028][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 841.868454][T20525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5544'. [ 842.411252][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 843.654641][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 845.020584][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 846.658256][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 847.748494][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 850.818220][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 850.940452][ C1] vkms_vblank_simulate: vblank timer overrun [ 851.851407][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 852.891653][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 853.778765][ C1] vkms_vblank_simulate: vblank timer overrun [ 853.931313][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 854.346922][ C1] vkms_vblank_simulate: vblank timer overrun [ 854.714659][ C1] vkms_vblank_simulate: vblank timer overrun [ 854.946769][ C1] vkms_vblank_simulate: vblank timer overrun [ 854.971532][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 855.835961][ C1] vkms_vblank_simulate: vblank timer overrun [ 856.011326][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 857.122750][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 858.172657][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 859.214457][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 859.832563][ T37] kauditd_printk_skb: 18 callbacks suppressed [ 859.832580][ T37] audit: type=1326 audit(1760076981.144:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20726 comm="syz.1.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e6a3eec9 code=0x7ffc0000 [ 859.832624][ T37] audit: type=1326 audit(1760076981.144:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20726 comm="syz.1.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e6a3eec9 code=0x7ffc0000 [ 859.842494][ T37] audit: type=1326 audit(1760076981.154:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20726 comm="syz.1.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb6e6a3eec9 code=0x7ffc0000 [ 859.842545][ T37] audit: type=1326 audit(1760076981.154:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20726 comm="syz.1.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e6a3eec9 code=0x7ffc0000 [ 859.842589][ T37] audit: type=1326 audit(1760076981.154:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20726 comm="syz.1.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e6a3eec9 code=0x7ffc0000 [ 859.861712][ T37] audit: type=1326 audit(1760076981.174:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20726 comm="syz.1.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb6e6a3eec9 code=0x7ffc0000 [ 859.861763][ T37] audit: type=1326 audit(1760076981.174:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20726 comm="syz.1.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e6a3eec9 code=0x7ffc0000 [ 859.861802][ T37] audit: type=1326 audit(1760076981.174:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20726 comm="syz.1.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e6a3eec9 code=0x7ffc0000 [ 859.879522][ T37] audit: type=1326 audit(1760076981.184:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20726 comm="syz.1.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fb6e6a3eec9 code=0x7ffc0000 [ 859.879574][ T37] audit: type=1326 audit(1760076981.184:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20726 comm="syz.1.5614" exe="/root/syz-executor" sig=0 arch=40000003 syscall=250 compat=1 ip=0x200000000006 code=0x7ffc0000 [ 860.251198][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 861.293166][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 862.680617][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 862.972762][T20777] Invalid ELF header magic: != ELF [ 863.691172][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 864.742605][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 865.749439][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 865.749457][ T37] audit: type=1326 audit(1760076987.054:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20800 comm="syz.1.5642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e6a3eec9 code=0x7ffc0000 [ 865.749577][ T37] audit: type=1326 audit(1760076987.054:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20800 comm="syz.1.5642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e6a3eec9 code=0x7ffc0000 [ 865.781212][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 865.824833][ T37] audit: type=1326 audit(1760076987.124:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20800 comm="syz.1.5642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb6e6a3eec9 code=0x7ffc0000 [ 865.824884][ T37] audit: type=1326 audit(1760076987.124:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20800 comm="syz.1.5642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e6a3eec9 code=0x7ffc0000 [ 865.824925][ T37] audit: type=1326 audit(1760076987.124:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20800 comm="syz.1.5642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e6a3eec9 code=0x7ffc0000 [ 865.824967][ T37] audit: type=1326 audit(1760076987.124:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20800 comm="syz.1.5642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6e6a3eec9 code=0x7ffc0000 [ 865.825006][ T37] audit: type=1326 audit(1760076987.124:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20800 comm="syz.1.5642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e6a3eec9 code=0x7ffc0000 [ 865.825045][ T37] audit: type=1326 audit(1760076987.134:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20800 comm="syz.1.5642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e6a3eec9 code=0x7ffc0000 [ 865.825084][ T37] audit: type=1326 audit(1760076987.134:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20800 comm="syz.1.5642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e6a3eec9 code=0x7ffc0000 [ 865.825122][ T37] audit: type=1326 audit(1760076987.134:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20800 comm="syz.1.5642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e6a3eec9 code=0x7ffc0000 [ 867.058750][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 867.755078][ C0] vkms_vblank_simulate: vblank timer overrun [ 867.907545][ C0] vkms_vblank_simulate: vblank timer overrun [ 867.982664][ C0] vkms_vblank_simulate: vblank timer overrun [ 868.283673][ C0] vkms_vblank_simulate: vblank timer overrun [ 868.578171][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 870.058760][ C0] vkms_vblank_simulate: vblank timer overrun [ 870.131615][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 870.132277][T11856] page_pool_release_retry() stalled pool shutdown: id 75, 1 inflight 60 sec [ 870.246204][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.246247][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.735991][T11856] Process accounting resumed [ 870.939446][ C0] vkms_vblank_simulate: vblank timer overrun [ 871.168934][ C0] vkms_vblank_simulate: vblank timer overrun [ 871.297467][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 871.369875][ C0] vkms_vblank_simulate: vblank timer overrun [ 871.490112][ C0] vkms_vblank_simulate: vblank timer overrun [ 872.225827][ C0] vkms_vblank_simulate: vblank timer overrun [ 872.377362][ C0] vkms_vblank_simulate: vblank timer overrun [ 872.502483][ C0] vkms_vblank_simulate: vblank timer overrun [ 872.565076][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 873.756028][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 874.952232][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 876.124685][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 877.131986][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 878.659481][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 880.015108][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 881.442747][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 882.731235][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 883.788308][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 885.591708][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 886.780680][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 887.095088][T21027] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 887.984035][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 889.345403][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 898.897868][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 900.261897][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 900.443691][T21086] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5738'. [ 901.292127][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 902.331114][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 904.051476][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 905.079399][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 905.096044][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 905.098212][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 905.116713][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 905.117744][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 905.131378][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 905.537646][T21126] lo speed is unknown, defaulting to 1000 [ 906.554019][T21139] Process accounting resumed [ 906.640997][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 906.883180][ C1] vkms_vblank_simulate: vblank timer overrun [ 906.973236][ C1] vkms_vblank_simulate: vblank timer overrun [ 907.294351][ C1] vkms_vblank_simulate: vblank timer overrun [ 907.384559][T10398] Bluetooth: hci3: command tx timeout [ 907.618633][ C1] vkms_vblank_simulate: vblank timer overrun [ 907.691332][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 907.998002][ C1] vkms_vblank_simulate: vblank timer overrun [ 908.899653][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 908.900074][ C1] vkms_vblank_simulate: vblank timer overrun [ 909.023880][T21126] chnl_net:caif_netlink_parms(): no params data found [ 909.319999][ C1] vkms_vblank_simulate: vblank timer overrun [ 909.383331][T21178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 909.384383][T21178] batadv_slave_0: entered promiscuous mode [ 909.404255][ C1] vkms_vblank_simulate: vblank timer overrun [ 909.507072][ C1] vkms_vblank_simulate: vblank timer overrun [ 909.531073][T10398] Bluetooth: hci3: command tx timeout [ 909.873805][ C1] vkms_vblank_simulate: vblank timer overrun [ 910.706677][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 910.707178][ C1] vkms_vblank_simulate: vblank timer overrun [ 910.838701][ C1] vkms_vblank_simulate: vblank timer overrun [ 911.280108][T21126] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.280288][T21126] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.280434][T21126] bridge_slave_0: entered allmulticast mode [ 911.316486][T21126] bridge_slave_0: entered promiscuous mode [ 911.333741][T21126] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.333968][T21126] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.335222][T21126] bridge_slave_1: entered allmulticast mode [ 911.338635][T21126] bridge_slave_1: entered promiscuous mode [ 911.595949][ C1] vkms_vblank_simulate: vblank timer overrun [ 911.673481][T10398] Bluetooth: hci3: command tx timeout [ 911.771177][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 912.707865][T21229] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5790'. [ 913.082126][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 913.293402][T21126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 913.318942][T21126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 914.101564][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 914.431096][T10398] Bluetooth: hci3: command tx timeout [ 914.695561][T21126] team0: Port device team_slave_0 added [ 914.718361][T21126] team0: Port device team_slave_1 added [ 915.131128][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 915.235313][T21126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 915.235331][T21126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 915.235364][T21126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 915.237827][T21126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 915.237841][T21126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 915.237864][T21126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 916.171055][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 917.292911][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 917.394345][T21126] hsr_slave_0: entered promiscuous mode [ 917.398539][T21126] hsr_slave_1: entered promiscuous mode [ 917.422193][T21126] debugfs: 'hsr0' already exists in 'hsr' [ 917.422222][T21126] Cannot create hsr debugfs directory [ 918.147404][T21306] 8021q: adding VLAN 0 to HW filter on device bond1 [ 918.219831][T21312] bond_slave_0: entered promiscuous mode [ 918.219886][T21312] bond_slave_1: entered promiscuous mode [ 918.221423][T21312] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 918.235099][T21312] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 918.332724][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 918.960681][T21126] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 919.046448][T21126] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 919.248749][T21126] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 919.371595][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 919.585771][T21126] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 920.530676][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 921.541573][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 922.581702][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 923.252953][T21126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 923.613754][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 924.445618][T21126] 8021q: adding VLAN 0 to HW filter on device team0 [ 924.485176][T20603] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.485293][T20603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 924.572815][T20610] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.572973][T20610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 924.680601][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 925.701109][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 926.105438][T21126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 926.860124][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 927.994277][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 929.598735][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 929.711431][T21126] veth0_vlan: entered promiscuous mode [ 929.730639][T21126] veth1_vlan: entered promiscuous mode [ 929.874706][T21126] veth0_macvtap: entered promiscuous mode [ 930.789960][T21126] veth1_macvtap: entered promiscuous mode [ 930.845933][T21126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 930.886582][T21126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 930.939571][T10231] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.940797][T10231] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.941272][T10231] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.941489][T10231] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.971644][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 932.265614][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 932.303381][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.303450][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.764257][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 935.784389][T21507] netlink: 'syz.3.5884': attribute type 1 has an invalid length. [ 935.784413][T21507] netlink: 'syz.3.5884': attribute type 4 has an invalid length. [ 935.784426][T21507] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.5884'. [ 936.145429][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 937.280491][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 937.361187][ T5989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.361208][ T5989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 937.518625][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.518644][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 938.331439][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 939.381292][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 939.389606][T21548] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 940.489720][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 941.681262][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 943.443531][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 945.374475][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 945.434396][ T37] kauditd_printk_skb: 38 callbacks suppressed [ 945.434413][ T37] audit: type=1326 audit(1760077066.749:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21641 comm="syz.6.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7940baeec9 code=0x7ffc0000 [ 945.434455][ T37] audit: type=1326 audit(1760077066.749:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21641 comm="syz.6.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7940baeec9 code=0x7ffc0000 [ 945.434493][ T37] audit: type=1326 audit(1760077066.749:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21641 comm="syz.6.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7940bad710 code=0x7ffc0000 [ 945.434696][ T37] audit: type=1326 audit(1760077066.749:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21641 comm="syz.6.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7940bad710 code=0x7ffc0000 [ 945.435330][ T37] audit: type=1326 audit(1760077066.749:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21641 comm="syz.6.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7940baeec9 code=0x7ffc0000 [ 945.435374][ T37] audit: type=1326 audit(1760077066.749:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21641 comm="syz.6.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7940baeec9 code=0x7ffc0000 [ 947.542258][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 948.983794][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 952.016478][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 953.778558][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 954.910475][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 957.434980][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 958.495794][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 959.747912][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 960.883387][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 962.081526][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 965.054923][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 966.196710][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 967.544521][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 968.440474][T21838] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5993'. [ 968.501447][T21838] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5993'. [ 968.593713][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 969.896932][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 970.316347][ C1] vkms_vblank_simulate: vblank timer overrun [ 970.705823][ C1] vkms_vblank_simulate: vblank timer overrun [ 971.497265][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 971.498063][ C1] vkms_vblank_simulate: vblank timer overrun [ 971.765035][ C1] vkms_vblank_simulate: vblank timer overrun [ 972.581558][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 972.772849][T21863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6005'. [ 972.921955][ C1] vkms_vblank_simulate: vblank timer overrun [ 973.305089][ C1] vkms_vblank_simulate: vblank timer overrun [ 973.444491][ C1] vkms_vblank_simulate: vblank timer overrun [ 973.962416][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 973.962981][ C1] vkms_vblank_simulate: vblank timer overrun [ 974.437594][ C1] vkms_vblank_simulate: vblank timer overrun [ 974.572406][T21887] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6010'. [ 974.576087][ C1] vkms_vblank_simulate: vblank timer overrun [ 974.711951][ C1] vkms_vblank_simulate: vblank timer overrun [ 974.812800][T21888] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6010'. [ 975.061737][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 976.520000][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 978.344992][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 978.674806][T21918] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6018'. [ 979.382836][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 980.411230][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 982.192928][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 983.407314][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 985.088628][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 985.313633][ C0] vkms_vblank_simulate: vblank timer overrun [ 985.534391][ C0] vkms_vblank_simulate: vblank timer overrun [ 985.767010][ C0] vkms_vblank_simulate: vblank timer overrun [ 985.872575][T22003] hub 2-0:1.0: USB hub found [ 985.876336][T22003] hub 2-0:1.0: 1 port detected [ 986.020769][ C0] vkms_vblank_simulate: vblank timer overrun [ 986.066130][ C0] vkms_vblank_simulate: vblank timer overrun [ 986.101160][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 986.315084][ C0] vkms_vblank_simulate: vblank timer overrun [ 986.611399][ C0] vkms_vblank_simulate: vblank timer overrun [ 987.142192][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 987.817556][ C0] vkms_vblank_simulate: vblank timer overrun [ 988.062149][ C0] vkms_vblank_simulate: vblank timer overrun [ 988.181108][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 989.176552][ C0] vkms_vblank_simulate: vblank timer overrun [ 989.232785][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 989.479160][ C0] vkms_vblank_simulate: vblank timer overrun [ 990.251201][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 992.091203][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 993.002377][T22066] netlink: 'syz.3.6066': attribute type 21 has an invalid length. [ 993.009230][T22066] netlink: 'syz.3.6066': attribute type 1 has an invalid length. [ 993.009279][T22066] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6066'. [ 993.578902][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 993.580133][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.580174][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.670111][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 994.822091][ C1] vkms_vblank_simulate: vblank timer overrun [ 995.089890][ C1] vkms_vblank_simulate: vblank timer overrun [ 995.932415][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 995.932851][ C1] vkms_vblank_simulate: vblank timer overrun [ 996.322607][ C1] vkms_vblank_simulate: vblank timer overrun [ 997.160384][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 997.160644][ C1] vkms_vblank_simulate: vblank timer overrun [ 997.482978][ C1] vkms_vblank_simulate: vblank timer overrun [ 998.272013][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 998.272160][ C1] vkms_vblank_simulate: vblank timer overrun [ 999.406119][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 999.409059][ C1] vkms_vblank_simulate: vblank timer overrun [ 999.612435][ C1] vkms_vblank_simulate: vblank timer overrun [ 999.749860][ C1] vkms_vblank_simulate: vblank timer overrun [ 1000.022633][T22134] loop6: detected capacity change from 0 to 524288000 [ 1001.478987][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1002.491182][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1003.674211][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1003.878668][ T37] audit: type=1804 audit(1760077125.189:368): pid=22172 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.6098" name="/newroot/525/file0" dev="tmpfs" ino=2736 res=1 errno=0 [ 1007.160201][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1007.272310][T22188] binder: 22173:22188 ioctl c0306201 200000000640 returned -22 [ 1008.211329][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1008.332229][ T37] audit: type=1326 audit(1760077129.649:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22204 comm="syz.7.6112" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f993bd4eec9 code=0x0 [ 1009.291329][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1010.331860][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1011.389058][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1011.768183][ C1] vkms_vblank_simulate: vblank timer overrun [ 1012.914244][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1012.914666][ C1] vkms_vblank_simulate: vblank timer overrun [ 1013.144423][ C1] vkms_vblank_simulate: vblank timer overrun [ 1013.515403][ C1] vkms_vblank_simulate: vblank timer overrun [ 1013.897380][ C1] vkms_vblank_simulate: vblank timer overrun [ 1013.938685][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1014.044739][ C1] vkms_vblank_simulate: vblank timer overrun [ 1014.182101][ C1] vkms_vblank_simulate: vblank timer overrun [ 1014.443995][ C1] vkms_vblank_simulate: vblank timer overrun [ 1014.570749][ C1] vkms_vblank_simulate: vblank timer overrun [ 1014.876008][ C1] vkms_vblank_simulate: vblank timer overrun [ 1014.971005][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1015.184618][ C1] vkms_vblank_simulate: vblank timer overrun [ 1016.442280][ C1] vkms_vblank_simulate: vblank timer overrun [ 1016.443679][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1017.451015][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1018.491144][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1019.541033][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1020.581098][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1021.620995][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1022.733920][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1023.781217][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1024.833863][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1026.882323][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1028.297919][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1029.174750][ C1] vkms_vblank_simulate: vblank timer overrun [ 1029.457467][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1029.458236][ C1] vkms_vblank_simulate: vblank timer overrun [ 1029.600553][ C1] vkms_vblank_simulate: vblank timer overrun [ 1029.974113][ C1] vkms_vblank_simulate: vblank timer overrun [ 1030.461881][ C1] vkms_vblank_simulate: vblank timer overrun [ 1030.491229][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1031.078655][ C1] vkms_vblank_simulate: vblank timer overrun [ 1031.079517][ T61] Bluetooth: hci3: command 0x0406 tx timeout [ 1031.894642][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1031.895056][ C1] vkms_vblank_simulate: vblank timer overrun [ 1031.968220][T22392] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1031.991273][T22392] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1031.999690][T22392] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1032.065871][T22392] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1032.066607][T22392] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1032.182248][ C1] vkms_vblank_simulate: vblank timer overrun [ 1032.245391][T22390] lo speed is unknown, defaulting to 1000 [ 1032.634650][ C1] vkms_vblank_simulate: vblank timer overrun [ 1033.279169][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1033.279605][ C1] vkms_vblank_simulate: vblank timer overrun [ 1033.502625][T22417] fuse: Bad value for 'fd' [ 1034.171211][T22392] Bluetooth: hci4: command tx timeout [ 1034.331707][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1034.732379][T22390] chnl_net:caif_netlink_parms(): no params data found [ 1034.927425][T22392] Bluetooth: hci5: unexpected event for opcode 0x2010 [ 1035.631461][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1036.840294][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1036.849766][T22392] Bluetooth: hci4: command tx timeout [ 1037.318101][ T61] Bluetooth: hci5: unexpected event for opcode 0x2060 [ 1037.372564][T22473] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1037.851226][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1038.071207][T22490] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1038.798644][ T9018] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.891121][ T61] Bluetooth: hci4: command tx timeout [ 1038.891198][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1038.951022][T11856] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 1039.103387][T11856] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.103416][T11856] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1039.106417][T11856] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1039.106445][T11856] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.106466][T11856] usb 7-1: Product: syz [ 1039.106479][T11856] usb 7-1: Manufacturer: syz [ 1039.106494][T11856] usb 7-1: SerialNumber: syz [ 1040.482446][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1040.511385][T11856] usb 7-1: 0:2 : does not exist [ 1040.511491][T11856] usb 7-1: unit 6 not found! [ 1040.568084][T11856] usb 7-1: USB disconnect, device number 17 [ 1040.968758][ T9018] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.973448][ T61] Bluetooth: hci4: command tx timeout [ 1041.004774][T22390] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.004989][T22390] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.005226][T22390] bridge_slave_0: entered allmulticast mode [ 1041.010668][T22390] bridge_slave_0: entered promiscuous mode [ 1041.602173][T22390] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.602306][T22390] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.602546][T22390] bridge_slave_1: entered allmulticast mode [ 1041.605313][T22390] bridge_slave_1: entered promiscuous mode [ 1041.740729][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1042.726310][ T9018] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.805840][T22390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1042.811315][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1042.831600][T22390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1044.136508][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1044.407312][ T9018] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.454870][T22390] team0: Port device team_slave_0 added [ 1044.460639][T22390] team0: Port device team_slave_1 added [ 1044.757614][T22675] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6298'. [ 1044.757644][T22675] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6298'. [ 1045.018349][T22675] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1045.074067][T22675] bond2 (unregistering): Released all slaves [ 1045.251526][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1045.329518][T22390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1045.329534][T22390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1045.329559][T22390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1045.340910][T22390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1045.340927][T22390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1045.340949][T22390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1046.474791][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1046.656009][T22390] hsr_slave_0: entered promiscuous mode [ 1046.659166][T22390] hsr_slave_1: entered promiscuous mode [ 1046.663033][T22390] debugfs: 'hsr0' already exists in 'hsr' [ 1046.663059][T22390] Cannot create hsr debugfs directory [ 1047.622679][ T9018] bridge_slave_1: left allmulticast mode [ 1047.622706][ T9018] bridge_slave_1: left promiscuous mode [ 1047.627267][ T9018] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.883233][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1047.964704][ T9018] bridge_slave_0: left allmulticast mode [ 1047.964733][ T9018] bridge_slave_0: left promiscuous mode [ 1047.964971][ T9018] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.944623][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1050.996354][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1052.021284][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1052.871796][ T9018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1052.931766][ T9018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1052.955949][ T9018] bond0 (unregistering): Released all slaves [ 1053.051381][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1053.790021][T22390] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1054.091124][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1054.512616][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.512715][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.834964][T22390] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1054.948600][T22390] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1054.987654][T22390] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1055.131222][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1055.928274][T22971] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6434'. [ 1056.064916][ T9018] hsr_slave_0: left promiscuous mode [ 1056.082486][ T9018] hsr_slave_1: left promiscuous mode [ 1056.083509][ T9018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1056.083545][ T9018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1056.125122][ T9018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1056.125149][ T9018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1056.171158][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1056.384862][ T9018] veth1_macvtap: left promiscuous mode [ 1056.384970][ T9018] veth0_macvtap: left promiscuous mode [ 1056.385231][ T9018] veth1_vlan: left promiscuous mode [ 1056.385415][ T9018] veth0_vlan: left promiscuous mode [ 1057.211187][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1058.251117][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1059.291200][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1060.331136][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1061.386234][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1061.839528][ T9018] team0 (unregistering): Port device team_slave_1 removed [ 1062.221956][ T9018] team0 (unregistering): Port device team_slave_0 removed [ 1062.411169][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1063.451192][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1064.496293][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1065.531241][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1066.171865][T22390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1066.197089][T22390] 8021q: adding VLAN 0 to HW filter on device team0 [ 1066.206619][T20610] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.206839][T20610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1066.217550][T20581] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.218479][T20581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1067.284099][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1067.667224][T22390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1068.331351][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1068.809244][T22390] veth0_vlan: entered promiscuous mode [ 1068.839152][T22390] veth1_vlan: entered promiscuous mode [ 1069.373311][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1070.215012][T22390] veth0_macvtap: entered promiscuous mode [ 1070.232772][T22390] veth1_macvtap: entered promiscuous mode [ 1070.411174][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1070.443957][T22390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1070.499456][T22390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1070.557559][T20581] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.568816][T20581] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.584572][T20581] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.595355][T20581] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.059008][ T9018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.059030][ T9018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.175397][T20585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.175420][T20585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.454202][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1073.756358][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1074.964262][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1075.157468][T23481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6665'. [ 1075.595853][ T37] audit: type=1326 audit(1760077197.904:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23500 comm="syz.8.6676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d668eec9 code=0x7ffc0000 [ 1075.595996][ T37] audit: type=1326 audit(1760077197.904:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23500 comm="syz.8.6676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d668eec9 code=0x7ffc0000 [ 1076.478961][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1076.504448][ T37] audit: type=1326 audit(1760077198.814:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23500 comm="syz.8.6676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7ff9d668eec9 code=0x7ffc0000 [ 1076.504503][ T37] audit: type=1326 audit(1760077198.814:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23500 comm="syz.8.6676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d668eec9 code=0x7ffc0000 [ 1076.757563][T23517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6682'. [ 1077.077873][T23529] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6690'. [ 1077.841889][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1078.946018][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1080.188520][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1081.212004][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1082.250989][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1083.291035][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1084.331001][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1085.176642][T23754] netlink: 'syz.8.6791': attribute type 9 has an invalid length. [ 1085.371040][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1086.411013][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1087.535667][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1087.776046][T23878] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6849'. [ 1087.792922][T23878] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1088.371824][T23905] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1088.570992][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1089.776232][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1090.811178][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1091.071561][T23996] 9pnet_fd: Insufficient options for proto=fd [ 1091.851254][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1092.002952][T24028] bridge_slave_0: invalid flags given to default FDB implementation [ 1093.437718][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1094.715884][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1095.772372][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1096.811182][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1097.771116][ T5947] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1097.851114][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1097.936770][ T5947] usb 9-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 1097.936800][ T5947] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.936818][ T5947] usb 9-1: Product: syz [ 1097.936831][ T5947] usb 9-1: Manufacturer: syz [ 1097.936846][ T5947] usb 9-1: SerialNumber: syz [ 1097.984074][ T5947] usb 9-1: config 0 descriptor?? [ 1097.998328][ T5947] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 1098.406049][T24232] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan1, syncid = 0, id = 0 [ 1098.409337][T24231] IPVS: stopping backup sync thread 24232 ... [ 1098.442546][ T5947] input: sonixb as /devices/platform/dummy_hcd.8/usb9/9-1/input/input20 [ 1098.635539][ T5859] usb 9-1: USB disconnect, device number 2 [ 1098.808215][T24253] 9pnet_fd: Insufficient options for proto=fd [ 1098.891180][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1099.937506][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1100.882210][ T37] audit: type=1326 audit(1760077223.194:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24329 comm="syz.3.7056" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f32790eeec9 code=0x0 [ 1100.971138][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1101.143709][ T37] audit: type=1326 audit(1760077223.454:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24347 comm="syz.8.7065" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff9d668eec9 code=0x0 [ 1101.571875][ C1] vkms_vblank_simulate: vblank timer overrun [ 1102.078642][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1102.079158][ C1] vkms_vblank_simulate: vblank timer overrun [ 1102.331662][ T5947] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1102.481256][ T5947] usb 7-1: Using ep0 maxpacket: 8 [ 1102.482534][ T5947] usb 7-1: too many configurations: 128, using maximum allowed: 8 [ 1102.504894][ T5947] usb 7-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1102.504924][ T5947] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1102.504943][ T5947] usb 7-1: Product: syz [ 1102.504958][ T5947] usb 7-1: Manufacturer: syz [ 1102.518285][ T5947] usb 7-1: config 0 descriptor?? [ 1102.567556][ T5947] gspca_main: 2770:9120 too many config [ 1102.792332][ C1] vkms_vblank_simulate: vblank timer overrun [ 1103.053046][ C1] vkms_vblank_simulate: vblank timer overrun [ 1103.086833][ C1] vkms_vblank_simulate: vblank timer overrun [ 1103.131390][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1103.868215][ C1] vkms_vblank_simulate: vblank timer overrun [ 1103.996277][ C1] vkms_vblank_simulate: vblank timer overrun [ 1104.171460][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1104.389529][T24444] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7105'. [ 1104.389556][T24444] netlink: 76 bytes leftover after parsing attributes in process `syz.8.7105'. [ 1104.432604][ T9] usb 7-1: USB disconnect, device number 18 [ 1104.736496][T24457] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7109'. [ 1105.849264][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1105.849865][ C1] vkms_vblank_simulate: vblank timer overrun [ 1106.091941][ T5947] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1106.314087][ T5947] usb 9-1: Using ep0 maxpacket: 8 [ 1106.317049][ T5947] usb 9-1: too many configurations: 128, using maximum allowed: 8 [ 1106.345507][ T5947] usb 9-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1106.345537][ T5947] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1106.345558][ T5947] usb 9-1: Product: syz [ 1106.345571][ T5947] usb 9-1: Manufacturer: syz [ 1106.446014][ T5947] usb 9-1: config 0 descriptor?? [ 1106.461071][ T5947] gspca_main: 2770:9120 too many config [ 1106.891197][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1108.006204][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1108.868945][ T5852] usb 9-1: USB disconnect, device number 3 [ 1109.182732][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1109.266904][ T37] audit: type=1326 audit(1760077231.574:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24549 comm="syz.6.7154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7940baeec9 code=0x7ffc0000 [ 1109.266955][ T37] audit: type=1326 audit(1760077231.574:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24549 comm="syz.6.7154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7940baeec9 code=0x7ffc0000 [ 1109.318000][ T37] audit: type=1326 audit(1760077231.574:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24549 comm="syz.6.7154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f7940baeec9 code=0x7ffc0000 [ 1109.318796][ T37] audit: type=1326 audit(1760077231.624:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24549 comm="syz.6.7154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7940baef03 code=0x7ffc0000 [ 1109.319259][ T37] audit: type=1326 audit(1760077231.624:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24549 comm="syz.6.7154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7940baef03 code=0x7ffc0000 [ 1109.319707][ T37] audit: type=1326 audit(1760077231.624:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24549 comm="syz.6.7154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7940baeec9 code=0x7ffc0000 [ 1109.319879][ T37] audit: type=1326 audit(1760077231.624:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24549 comm="syz.6.7154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7940baeec9 code=0x7ffc0000 [ 1109.431022][ T37] audit: type=1326 audit(1760077231.734:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24549 comm="syz.6.7154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f7940baeec9 code=0x7ffc0000 [ 1109.431070][ T37] audit: type=1326 audit(1760077231.734:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24549 comm="syz.6.7154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7940baeec9 code=0x7ffc0000 [ 1109.431109][ T37] audit: type=1326 audit(1760077231.734:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24549 comm="syz.6.7154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7940baeec9 code=0x7ffc0000 [ 1109.711851][T24573] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7163'. [ 1109.711978][T24573] netlink: 2 bytes leftover after parsing attributes in process `syz.8.7163'. [ 1109.921299][T24583] tipc: Bearer : already 2 bearers with priority 10 [ 1109.921319][T24583] tipc: Bearer : trying with adjusted priority [ 1109.921421][T24583] tipc: Enabling of bearer rejected, failed to enable media [ 1110.038458][T24588] hsr0: entered promiscuous mode [ 1110.048990][T24588] macsec1: entered allmulticast mode [ 1110.049012][T24588] hsr0: entered allmulticast mode [ 1110.049025][T24588] hsr_slave_0: entered allmulticast mode [ 1110.049044][T24588] hsr_slave_1: entered allmulticast mode [ 1110.251163][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1110.961011][ T5947] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1111.128360][ T5947] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1111.128414][ T5947] usb 9-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 1111.128437][ T5947] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.152184][ T5947] usb 9-1: config 0 descriptor?? [ 1111.164336][T24651] netlink: 1272 bytes leftover after parsing attributes in process `syz.3.7200'. [ 1111.291090][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1112.359701][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1112.453250][ T5947] usb 9-1: USB disconnect, device number 4 [ 1112.981140][T24701] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7224'. [ 1113.312075][T24717] tipc: Started in network mode [ 1113.312093][T24717] tipc: Node identity , cluster identity 4711 [ 1113.312109][T24717] tipc: Failed to obtain node identity [ 1113.312137][T24717] tipc: Enabling of bearer rejected, failed to enable media [ 1113.371425][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1113.785853][T24753] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7250'. [ 1113.786450][T24753] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7250'. [ 1114.282116][ C0] vkms_vblank_simulate: vblank timer overrun [ 1114.580408][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1114.717126][ C0] vkms_vblank_simulate: vblank timer overrun [ 1115.291579][ C0] vkms_vblank_simulate: vblank timer overrun [ 1115.400446][T24791] tipc: Started in network mode [ 1115.400483][T24791] tipc: Node identity e0000002, cluster identity 4711 [ 1115.400543][T24791] tipc: Enabling of bearer rejected, failed to enable media [ 1115.611139][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1115.849528][T24805] netlink: 'syz.8.7271': attribute type 10 has an invalid length. [ 1115.893910][T24805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1115.937243][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.937312][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.988798][T24805] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1116.250212][ C0] vkms_vblank_simulate: vblank timer overrun [ 1116.701330][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1116.771066][ T1223] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1116.925111][ T1223] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 1116.925171][ T1223] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1116.931632][ T1223] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1116.931659][ T1223] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1116.931678][ T1223] usb 9-1: Product: syz [ 1116.931690][ T1223] usb 9-1: Manufacturer: syz [ 1116.931703][ T1223] usb 9-1: SerialNumber: syz [ 1116.983071][ T1223] usb 9-1: config 0 descriptor?? [ 1116.986160][ T1223] hub 9-1:0.0: bad descriptor, ignoring hub [ 1116.986219][ T1223] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1117.014922][ T1223] usb 9-1: selecting invalid altsetting 0 [ 1117.466870][ T1223] usb 9-1: USB disconnect, device number 5 [ 1117.771312][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1118.374155][ C0] vkms_vblank_simulate: vblank timer overrun [ 1118.811276][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1119.930470][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1120.971356][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1121.634201][T24987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7357'. [ 1122.011190][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1122.448346][T11856] kernel write not supported for file /input/event2 (pid: 11856 comm: kworker/1:0) [ 1123.051282][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1123.191685][T25072] use of bytesused == 0 is deprecated and will be removed in the future, [ 1123.191699][T25072] use the actual size instead. [ 1124.041626][T25115] netlink: 14 bytes leftover after parsing attributes in process `syz.8.7418'. [ 1124.091238][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1124.529073][T25115] hsr0 (unregistering): left allmulticast mode [ 1125.131251][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1126.171240][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1126.730996][ T5852] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1127.329979][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1127.360627][ T5852] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1127.360656][ T5852] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1127.360680][ T5852] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1127.402866][ T5852] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1127.402897][ T5852] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.402916][ T5852] usb 9-1: Product: syz [ 1127.402930][ T5852] usb 9-1: Manufacturer: syz [ 1127.402944][ T5852] usb 9-1: SerialNumber: syz [ 1127.700732][ T5852] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1127.919731][ T1223] usb 9-1: USB disconnect, device number 6 [ 1127.926851][ T1223] usblp0: removed [ 1128.330978][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1128.770420][T25345] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7529'. [ 1129.372499][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1130.411087][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1131.451033][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1132.490973][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1132.551725][T25444] overlayfs: failed to clone lowerpath [ 1132.990130][T25464] netlink: 'syz.3.7584': attribute type 21 has an invalid length. [ 1134.353121][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1135.373119][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1136.411317][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1137.451240][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1137.509799][T25567] binfmt_misc: register: failed to install interpreter file ./file1 [ 1138.597623][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1140.292130][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1141.371561][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1142.411132][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1143.451155][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1143.475913][T25703] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1143.475913][T25703] The task syz.8.7687 (25703) triggered the difference, watch for misbehavior. [ 1144.491165][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1145.077400][T25791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7733'. [ 1145.164219][T25794] kvm: user requested TSC rate below hardware speed [ 1145.531148][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1146.001050][ T5947] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1146.151008][ T5947] usb 9-1: Using ep0 maxpacket: 32 [ 1146.156323][ T5947] usb 9-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1146.156350][ T5947] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.156369][ T5947] usb 9-1: Product: syz [ 1146.156382][ T5947] usb 9-1: Manufacturer: syz [ 1146.156396][ T5947] usb 9-1: SerialNumber: syz [ 1146.198659][ T5947] usb 9-1: config 0 descriptor?? [ 1146.210142][ T5947] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1146.571217][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1146.690114][T25871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7772'. [ 1146.690139][T25871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7772'. [ 1147.021568][ T5947] gspca_stk1135: reg_w 0x5 err -71 [ 1147.022629][ T5947] gspca_stk1135: serial bus timeout: status=0x00 [ 1147.022641][ T5947] gspca_stk1135: Sensor write failed [ 1147.022668][ T5947] gspca_stk1135: serial bus timeout: status=0x00 [ 1147.022676][ T5947] gspca_stk1135: Sensor write failed [ 1147.022705][ T5947] gspca_stk1135: serial bus timeout: status=0x00 [ 1147.022714][ T5947] gspca_stk1135: Sensor read failed [ 1147.022740][ T5947] gspca_stk1135: serial bus timeout: status=0x00 [ 1147.022749][ T5947] gspca_stk1135: Sensor read failed [ 1147.022754][ T5947] gspca_stk1135: Detected sensor type unknown (0x0) [ 1147.022784][ T5947] gspca_stk1135: serial bus timeout: status=0x00 [ 1147.022793][ T5947] gspca_stk1135: Sensor read failed [ 1147.022819][ T5947] gspca_stk1135: serial bus timeout: status=0x00 [ 1147.022828][ T5947] gspca_stk1135: Sensor read failed [ 1147.022852][ T5947] gspca_stk1135: serial bus timeout: status=0x00 [ 1147.022861][ T5947] gspca_stk1135: Sensor write failed [ 1147.022887][ T5947] gspca_stk1135: serial bus timeout: status=0x00 [ 1147.022897][ T5947] gspca_stk1135: Sensor write failed [ 1147.022982][ T5947] stk1135 9-1:0.0: probe with driver stk1135 failed with error -71 [ 1147.150745][ T5947] usb 9-1: USB disconnect, device number 7 [ 1147.624776][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1147.974126][T25922] netlink: 56 bytes leftover after parsing attributes in process `syz.8.7795'. [ 1148.652974][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1149.691064][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1149.855183][T25986] vxcan0: tx address claim with dlc 0 [ 1150.731996][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1151.771047][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1151.811522][T26032] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7845'. [ 1152.045365][T26039] netlink: 'syz.3.7848': attribute type 9 has an invalid length. [ 1152.563862][T26076] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1152.601009][ T5879] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1152.750989][ T5879] usb 9-1: Using ep0 maxpacket: 16 [ 1152.753417][ T5879] usb 9-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1152.753442][ T5879] usb 9-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1152.753465][ T5879] usb 9-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1152.753492][ T5879] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1152.755057][T26088] netlink: 'syz.3.7872': attribute type 3 has an invalid length. [ 1152.756413][ T5879] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1152.756437][ T5879] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.756455][ T5879] usb 9-1: Product: syz [ 1152.756468][ T5879] usb 9-1: Manufacturer: syz [ 1152.756480][ T5879] usb 9-1: SerialNumber: syz [ 1152.811008][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1153.097929][ T5879] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1153.297073][ T5947] usb 9-1: USB disconnect, device number 8 [ 1153.366316][ T5947] usblp0: removed [ 1154.036976][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1155.051326][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1156.114051][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1157.131155][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1158.171368][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1158.981154][T22392] Bluetooth: hci4: command 0x0406 tx timeout [ 1159.003792][ T5947] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1159.169079][ T5947] usb 7-1: Using ep0 maxpacket: 8 [ 1159.211198][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1159.230435][ T5947] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1159.230498][ T5947] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1159.230520][ T5947] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1159.230544][ T5947] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1159.230567][ T5947] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1159.230610][ T5947] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1159.230632][ T5947] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.808048][ T5947] usb 7-1: GET_CAPABILITIES returned 0 [ 1159.808096][ T5947] usbtmc 7-1:16.0: can't read capabilities [ 1160.002446][T26325] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7981'. [ 1160.056417][ T5859] usb 7-1: USB disconnect, device number 19 [ 1160.251151][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1161.291161][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1161.560184][ T37] audit: type=1326 audit(1760077283.864:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26391 comm="syz.3.8013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f32790e5d67 code=0x7ffc0000 [ 1161.560455][ T37] audit: type=1326 audit(1760077283.864:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26391 comm="syz.3.8013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f327908af79 code=0x7ffc0000 [ 1161.560756][ T37] audit: type=1326 audit(1760077283.864:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26391 comm="syz.3.8013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f32790e5d67 code=0x7ffc0000 [ 1161.563887][ T37] audit: type=1326 audit(1760077283.874:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26391 comm="syz.3.8013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f327908af79 code=0x7ffc0000 [ 1161.564473][ T37] audit: type=1326 audit(1760077283.874:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26391 comm="syz.3.8013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32790eeec9 code=0x7ffc0000 [ 1161.564515][ T37] audit: type=1326 audit(1760077283.874:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26391 comm="syz.3.8013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f32790e5d67 code=0x7ffc0000 [ 1161.564552][ T37] audit: type=1326 audit(1760077283.874:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26391 comm="syz.3.8013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f327908af79 code=0x7ffc0000 [ 1161.564596][ T37] audit: type=1326 audit(1760077283.874:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26391 comm="syz.3.8013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32790eeec9 code=0x7ffc0000 [ 1161.572820][ T37] audit: type=1326 audit(1760077283.884:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26391 comm="syz.3.8013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f32790e5d67 code=0x7ffc0000 [ 1161.572868][ T37] audit: type=1326 audit(1760077283.884:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26391 comm="syz.3.8013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f327908af79 code=0x7ffc0000 [ 1162.944645][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1163.700339][T26429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8029'. [ 1163.700366][T26429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8029'. [ 1164.011479][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1164.174603][T26438] can0: slcan on ptm0. [ 1164.392891][ C0] ------------[ cut here ]------------ [ 1164.392904][ C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 1164.393644][ C0] WARNING: CPU: 0 PID: 16 at net/mac80211/rate.c:406 __rate_control_send_low+0x5e2/0x820 [ 1164.393686][ C0] Modules linked in: [ 1164.393705][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1164.393725][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1164.393733][ C0] RIP: 0010:__rate_control_send_low+0x5e2/0x820 [ 1164.393752][ C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 2e fb 8b 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 ff 59 46 f7 90 <0f> 0b 90 90 e9 70 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 1164.393764][ C0] RSP: 0018:ffffc900001571f0 EFLAGS: 00010246 [ 1164.393776][ C0] RAX: b8a95f5064c25700 RBX: 000000000000000c RCX: ffff88801baa5a00 [ 1164.393786][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 1164.393795][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000100 [ 1164.393803][ C0] R10: dffffc0000000000 R11: ffffed101710487b R12: ffff888033421028 [ 1164.393813][ C0] R13: 0000000000000000 R14: ffff888027eb1060 R15: ffff888027eb3c38 [ 1164.393822][ C0] FS: 0000000000000000(0000) GS:ffff888126bcb000(0000) knlGS:0000000000000000 [ 1164.393834][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1164.393844][ C0] CR2: 00005555710ea5c8 CR3: 0000000029a9c000 CR4: 00000000003526f0 [ 1164.393857][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1164.393866][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1164.393875][ C0] Call Trace: [ 1164.393881][ C0] [ 1164.393902][ C0] rate_control_send_low+0x1a7/0x7b0 [ 1164.393927][ C0] rate_control_get_rate+0x20b/0x5f0 [ 1164.393954][ C0] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 1164.393979][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 1164.394013][ C0] ieee80211_beacon_get_ap+0x1785/0x1e10 [ 1164.394048][ C0] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 1164.394084][ C0] ? __ieee80211_beacon_get+0x36/0x1850 [ 1164.394112][ C0] ? __ieee80211_beacon_get+0x36/0x1850 [ 1164.394137][ C0] __ieee80211_beacon_get+0x1190/0x1850 [ 1164.394162][ C0] ? __ieee80211_beacon_get+0x36/0x1850 [ 1164.394200][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 1164.394231][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1164.394268][ C0] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 1164.394287][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1164.394315][ C0] __iterate_interfaces+0x2ab/0x590 [ 1164.394336][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1164.394353][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1164.394376][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1164.394394][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1164.394420][ C0] mac80211_hwsim_beacon+0xbb/0x180 [ 1164.394447][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1164.394467][ C0] __hrtimer_run_queues+0x54f/0xd40 [ 1164.394512][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1164.394532][ C0] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 1164.394563][ C0] hrtimer_run_softirq+0x1a3/0x2e0 [ 1164.394585][ C0] handle_softirqs+0x22f/0x710 [ 1164.394626][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1164.394656][ C0] run_ktimerd+0xcf/0x190 [ 1164.394674][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 1164.394689][ C0] ? schedule+0x91/0x360 [ 1164.394717][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1164.394733][ C0] smpboot_thread_fn+0x53f/0xa60 [ 1164.394751][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1164.394775][ C0] kthread+0x711/0x8a0 [ 1164.394799][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1164.394816][ C0] ? __pfx_kthread+0x10/0x10 [ 1164.394833][ C0] ? rt_spin_unlock+0x150/0x200 [ 1164.394858][ C0] ? rt_spin_unlock+0x161/0x200 [ 1164.394876][ C0] ? __pfx_kthread+0x10/0x10 [ 1164.394898][ C0] ret_from_fork+0x4b9/0x870 [ 1164.394919][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1164.394945][ C0] ? __switch_to_asm+0x39/0x70 [ 1164.394966][ C0] ? __switch_to_asm+0x33/0x70 [ 1164.394985][ C0] ? __pfx_kthread+0x10/0x10 [ 1164.395009][ C0] ret_from_fork_asm+0x1a/0x30 [ 1164.395049][ C0] [ 1164.395068][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1164.395081][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1164.395097][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1164.395105][ C0] Call Trace: [ 1164.395111][ C0] [ 1164.395117][ C0] dump_stack_lvl+0x99/0x250 [ 1164.395134][ C0] ? __asan_memcpy+0x40/0x70 [ 1164.395151][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1164.395168][ C0] ? __pfx__printk+0x10/0x10 [ 1164.395198][ C0] vpanic+0x237/0x6d0 [ 1164.395213][ C0] ? __pfx_vpanic+0x10/0x10 [ 1164.395239][ C0] panic+0xb9/0xc0 [ 1164.395255][ C0] ? __pfx_panic+0x10/0x10 [ 1164.395286][ C0] __warn+0x31b/0x4b0 [ 1164.395300][ C0] ? __rate_control_send_low+0x5e2/0x820 [ 1164.395324][ C0] ? __rate_control_send_low+0x5e2/0x820 [ 1164.395344][ C0] report_bug+0x2be/0x4f0 [ 1164.395362][ C0] ? __rate_control_send_low+0x5e2/0x820 [ 1164.395382][ C0] ? __rate_control_send_low+0x5e2/0x820 [ 1164.395401][ C0] ? __rate_control_send_low+0x5e4/0x820 [ 1164.395422][ C0] handle_bug+0x84/0x160 [ 1164.395445][ C0] exc_invalid_op+0x1a/0x50 [ 1164.395466][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1164.395484][ C0] RIP: 0010:__rate_control_send_low+0x5e2/0x820 [ 1164.395507][ C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 2e fb 8b 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 ff 59 46 f7 90 <0f> 0b 90 90 e9 70 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 1164.395524][ C0] RSP: 0018:ffffc900001571f0 EFLAGS: 00010246 [ 1164.395539][ C0] RAX: b8a95f5064c25700 RBX: 000000000000000c RCX: ffff88801baa5a00 [ 1164.395551][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 1164.395562][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000100 [ 1164.395573][ C0] R10: dffffc0000000000 R11: ffffed101710487b R12: ffff888033421028 [ 1164.395585][ C0] R13: 0000000000000000 R14: ffff888027eb1060 R15: ffff888027eb3c38 [ 1164.395641][ C0] rate_control_send_low+0x1a7/0x7b0 [ 1164.395667][ C0] rate_control_get_rate+0x20b/0x5f0 [ 1164.395696][ C0] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 1164.395721][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 1164.395767][ C0] ieee80211_beacon_get_ap+0x1785/0x1e10 [ 1164.395804][ C0] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 1164.395840][ C0] ? __ieee80211_beacon_get+0x36/0x1850 [ 1164.395875][ C0] ? __ieee80211_beacon_get+0x36/0x1850 [ 1164.395900][ C0] __ieee80211_beacon_get+0x1190/0x1850 [ 1164.395922][ C0] ? __ieee80211_beacon_get+0x36/0x1850 [ 1164.395951][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 1164.395974][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1164.396005][ C0] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 1164.396022][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1164.396047][ C0] __iterate_interfaces+0x2ab/0x590 [ 1164.396065][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1164.396081][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1164.396102][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1164.396118][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1164.396143][ C0] mac80211_hwsim_beacon+0xbb/0x180 [ 1164.396167][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1164.396187][ C0] __hrtimer_run_queues+0x54f/0xd40 [ 1164.396232][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1164.396254][ C0] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 1164.396285][ C0] hrtimer_run_softirq+0x1a3/0x2e0 [ 1164.396305][ C0] handle_softirqs+0x22f/0x710 [ 1164.396331][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1164.396356][ C0] run_ktimerd+0xcf/0x190 [ 1164.396374][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 1164.396390][ C0] ? schedule+0x91/0x360 [ 1164.396412][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1164.396429][ C0] smpboot_thread_fn+0x53f/0xa60 [ 1164.396449][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1164.396475][ C0] kthread+0x711/0x8a0 [ 1164.396502][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1164.396523][ C0] ? __pfx_kthread+0x10/0x10 [ 1164.396542][ C0] ? rt_spin_unlock+0x150/0x200 [ 1164.396569][ C0] ? rt_spin_unlock+0x161/0x200 [ 1164.396588][ C0] ? __pfx_kthread+0x10/0x10 [ 1164.396620][ C0] ret_from_fork+0x4b9/0x870 [ 1164.396642][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1164.396669][ C0] ? __switch_to_asm+0x39/0x70 [ 1164.396691][ C0] ? __switch_to_asm+0x33/0x70 [ 1164.396711][ C0] ? __pfx_kthread+0x10/0x10 [ 1164.396737][ C0] ret_from_fork_asm+0x1a/0x30 [ 1164.396779][ C0] [ 1164.398279][ C0] Kernel Offset: disabled