last executing test programs: 4m5.878696115s ago: executing program 1 (id=204): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, 0x0}, 0x24000008) 4m5.720636678s ago: executing program 1 (id=205): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000840)=""/141) 4m5.370675226s ago: executing program 1 (id=210): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x2b8, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x2a4, 0x1, [@m_ife={0x94, 0xb, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x10000000, 0x1ff, 0x5}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x36, 0x6, "ea24464dfc6ef63cf6edbe10ee7a388593d9c1b2772ce0e9d802b5374a8d6638c9fdd62d73097ad302a4154dd4046c261a61"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0xc4, 0x14, 0x0, 0x0, {{0x9}, {0x4}, {0x96, 0x6, "576458eea52fd27eec92e713a172e757e1f62fe8475fa8817d9bd39d398251801f64d9b8e312b47b111ff094a2f452e1fd749b169123625c664a63e06baa8402c6b5fe34fbffaf329e5589fe1d00f704d8d13b0100000081ec7a1e9e21427be570631961812505684e260d3f73821a372961e6acf9f73f3ab3a6d19010c501877fc1473ff3fe388a502702c7e7d4eb99cd47"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xd8, 0x9, 0x0, 0x0, {{0x8}, {0x88, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x44, 0x4, [{0x8, 0x4, 0xf5, 0xfb3b}, {0xfffa, 0x1, 0x9, 0x9}, {0xe4, 0x1, 0x5, 0x92c4}, {0xc, 0xf, 0x3, 0x5}, {0xfff4, 0x0, 0x80, 0xffffffff}, {0xd, 0x2, 0x8, 0x1ff}, {0x9, 0xfa, 0x3b, 0x7}, {0x1, 0x0, 0x8, 0x6}]}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x4, 0x3, 0x87f3, 0x4}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x9, 0x6, 0x3, 0x7fb}}, @TCA_ACT_BPF_FD={0x8}]}, {0x29, 0x6, "a09e88b2fa7e2ad0dddad3cdaa9b726cf5b56034a46fe4468bd19b5780d1bd141230a65f0d"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x70, 0xd, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x3, 0x4, 0x4, 0x4, 0x8001}, 0x10}}]}, {0x16, 0x6, "d53a6627b5c2b2c1126462fd280ec461bb61"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 4m5.006707775s ago: executing program 1 (id=213): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x111416, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 4m4.866361787s ago: executing program 1 (id=215): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, 0x0}, 0x24000008) 4m4.418414733s ago: executing program 1 (id=218): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) 4m3.924953982s ago: executing program 32 (id=218): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) 6.638582556s ago: executing program 2 (id=1186): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="b405d71d1082000071101d00000000020000000000000000a421dcd16100e61d5cb3a8ba3a2ac3340a2168cfa3c4"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock=0xc}, 0x94) r7 = socket$igmp(0x2, 0x3, 0x2) r8 = syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r8, 0xbc914b49a8246e7, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @rand_addr=0x64010102, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x6, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @empty, @mcast1, [], "8029335287b7a081"}}}}}}}, 0x0) recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)={0x74, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_CON={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000003}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 6.637707526s ago: executing program 5 (id=1187): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$mptcp(0x0, r1) 6.377999597s ago: executing program 5 (id=1189): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, 0x0) 6.133696696s ago: executing program 5 (id=1191): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='stat\x00') lseek(r2, 0x9, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x14, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x2}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}}, 0x0) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000180)='./control\x00', 0x64000ba6) inotify_add_watch(r5, &(0x7f0000000180)='./control\x00', 0xa4000960) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r6, 0x4b46, &(0x7f00000000c0)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050200000000000000000000000005000100070000000900020073797a3100abcb000c000780080012690080050005000a000000050004000100"/80], 0x7d}, 0x1, 0x0, 0x0, 0x2000c050}, 0x40080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, 0x0, 0x0) sched_setattr(r3, &(0x7f00000001c0)={0x38, 0x3, 0xc, 0x101, 0x6, 0x7, 0x6b4, 0x510000000, 0x6, 0x4}, 0x0) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) 5.21745892s ago: executing program 2 (id=1193): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r5) r7 = socket(0x1e, 0x1, 0x0) connect$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r7, &(0x7f0000000080), 0x2000011a) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) futex(&(0x7f0000000140)=0x1, 0x4, 0x0, 0x0, 0x0, 0x2) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000002c0)={0x3, r1}) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r8, 0x58, &(0x7f0000000040)}, 0x10) 3.801575454s ago: executing program 2 (id=1195): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) recvmsg(r0, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x80) 3.378349118s ago: executing program 2 (id=1197): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000480), 0x8, 0x0) r2 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x226f, 0x13500, 0x0, 0xeffffffd}, &(0x7f0000000240), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x21, &(0x7f0000000440)=r1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {0xe}, 0x0, 0x2, 0x5}) timer_create(0x0, &(0x7f0000000280)={0x0, 0x1c, 0x4, @thr={&(0x7f0000000140)="a21aa17de44df74115c3dcfc4c06f14e76da67ebf1120337c10bc6d9ae7041adf7c343ce660356b1ac3eaf32f2535c9cad9dfc41e54b57fcf40f5b61d675a785dda6c909e13fa9227b1670f9918290b8ff96609a44797a8ff3bd97392fea29956f67d86459f53ad2310ccf0f21ef8e805bd25afd32dcf8ae3ec7de2b357f25dcce067b42ea2a63", &(0x7f0000000200)}}, &(0x7f00000002c0)) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1}, 0x1c) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003a00)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0xfffffb27, @local, 0x3aa}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="200000002900000032000000ffffffff001c5d61ba0000000000000ebe7ac6487c9bfcd4e7be93998ec1c4863b9cf50d6d3aa2c4102d20d07d8ee7bc6ed7dbe8169d21a3b022b0ffae61587f78ea8eb1a6d5fc"], 0x20}}], 0x2, 0x20001024) 3.24116942s ago: executing program 2 (id=1198): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 3.010750258s ago: executing program 0 (id=1200): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) readlink(&(0x7f0000002000)='./file0/file3\x00', &(0x7f00000021c0)=""/151, 0x97) mount$9p_unix(0x0, &(0x7f0000002040)='./file0/file3\x00', 0x0, 0x10440, 0x0) read$FUSE(r0, &(0x7f0000007640)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f00000022c0)={0x10, 0x0, r1}, 0x10) 2.86725443s ago: executing program 4 (id=1202): r0 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r0, 0x0, 0x0, 0x20000041, 0x0, 0x0) 2.710741172s ago: executing program 0 (id=1203): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000240)=@x86={0x0, 0x2, 0x84, 0x0, 0x1, 0x5, 0x3, 0x4, 0x80, 0x10, 0x3, 0xbe, 0x0, 0x7f, 0x4, 0xf0, 0xd5, 0x8, 0x6, '\x00', 0xc, 0x21}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000e40)={0x1, 0x0, @ioapic={0x1000, 0xffffffff, 0x40, 0x4, 0x0, [{0x1, 0x85, 0x8, '\x00', 0x6}, {0xb, 0x0, 0x0, '\x00', 0xa}, {0x6c, 0x8, 0x6, '\x00', 0xff}, {0xf2, 0x8, 0x10, '\x00', 0x9}, {0x9, 0x1, 0x3, '\x00', 0xb}, {0x2, 0xff, 0x9, '\x00', 0x1}, {0xf0, 0x3, 0xf7, '\x00', 0xf3}, {0x0, 0xa, 0x40, '\x00', 0x3}, {0x80, 0x74, 0x3, '\x00', 0xd}, {0xe7, 0xfe, 0xfe, '\x00', 0xf}, {0xbe, 0x1, 0x4, '\x00', 0x2}, {0x8, 0x5, 0xf, '\x00', 0x7f}, {0xa6, 0x0, 0xd, '\x00', 0x18}, {0x15, 0x8, 0x0, '\x00', 0x6}, {0x5, 0x4d, 0x9, '\x00', 0x1}, {0x9, 0xa, 0x9, '\x00', 0x2}, {0x5, 0x8, 0x81, '\x00', 0x7}, {0x7, 0x7, 0x90, '\x00', 0xfe}, {0xfd, 0x0, 0x5, '\x00', 0x7f}, {0xfd, 0x3, 0xe2, '\x00', 0x2}, {0x0, 0x2, 0x7, '\x00', 0x6}, {0x0, 0xfe, 0xfd, '\x00', 0x9}, {0xe, 0x11, 0x2, '\x00', 0xfd}, {0xd, 0x9, 0x8e, '\x00', 0x8}]}}) 2.710456162s ago: executing program 4 (id=1204): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x0, 0xa}, {0x1}, @const={0x0, {0x0, 0x8, 0x2, 0x81}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 2.510121128s ago: executing program 0 (id=1205): sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20040880) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000000000008000080"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x80000008, 0xfffffffd, 0x0, 0x80a932, 0x6}]}) 2.399182107s ago: executing program 3 (id=1206): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) r4 = syz_io_uring_setup(0xfeb, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x3, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x37, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#Y?0W\xb3W\xd2\xbfP\xee'}, 0x30) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) rmdir(&(0x7f0000000000)='./file0\x00') io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0xd87, 0x6}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xff}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.11079054s ago: executing program 0 (id=1207): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04080400c9"], 0x7) 1.963143342s ago: executing program 0 (id=1208): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000480), 0x8, 0x0) r2 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x226f, 0x13500, 0x0, 0xeffffffd}, &(0x7f0000000240), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x21, &(0x7f0000000440)=r1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {0xe}, 0x0, 0x2, 0x5}) timer_create(0x0, &(0x7f0000000280)={0x0, 0x1c, 0x4, @thr={&(0x7f0000000140)="a21aa17de44df74115c3dcfc4c06f14e76da67ebf1120337c10bc6d9ae7041adf7c343ce660356b1ac3eaf32f2535c9cad9dfc41e54b57fcf40f5b61d675a785dda6c909e13fa9227b1670f9918290b8ff96609a44797a8ff3bd97392fea29956f67d86459f53ad2310ccf0f21ef8e805bd25afd32dcf8ae3ec7de2b357f25dcce067b42ea2a63", &(0x7f0000000200)}}, &(0x7f00000002c0)) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1}, 0x1c) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003a00)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0xfffffb27, @local, 0x3aa}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="200000002900000032000000ffffffff001c5d61ba0000000000000ebe7ac6487c9bfcd4e7be93998ec1c4863b9cf50d6d3aa2c4102d20d07d8ee7bc6ed7dbe8169d21a3b022b0ffae61587f78ea8eb1a6d5fc"], 0x20}}], 0x2, 0x20001024) 1.791210236s ago: executing program 4 (id=1209): rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) gettid() recvmmsg(0xffffffffffffffff, &(0x7f0000001f80), 0x0, 0x42, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) io_pgetevents(0x0, 0x8, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000980)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, 'aW1', 0x0, 0x84, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote}}}}, 0x0) 1.730261321s ago: executing program 0 (id=1210): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x101140, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) sched_setscheduler(r1, 0x3, &(0x7f0000000100)=0x7ff) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = semget$private(0x0, 0x4, 0x64c) semctl$GETZCNT(r5, 0x2, 0xf, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="14010000220001002100000000000000020100800c0000000000000000000000140002"], 0x114}], 0x1}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'ip6tnl0\x00', 0x400}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000140)={'wg2\x00'}) 1.61479342s ago: executing program 5 (id=1211): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad0000f5"], 0x125) 1.61448325s ago: executing program 3 (id=1212): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, 0x0) 1.526498587s ago: executing program 4 (id=1213): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) lstat(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(0x0, r1, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) mkdirat(0xffffffffffffff9c, 0x0, 0x8) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x101) mkdir(&(0x7f0000000300)='./file0\x00', 0x40) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}], [{@fowner_lt}, {@permit_directio}, {@dont_measure}, {@dont_measure}]}) open(&(0x7f0000000440)='./file0\x00', 0x602140, 0x18) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x300, 0x0, 0x2, 0x9, 0x0, 0x7}, 0x20) 1.500872159s ago: executing program 5 (id=1214): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000034000)=""/102392, 0x18ff8) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1.112520971s ago: executing program 3 (id=1215): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x80) 346.628602ms ago: executing program 2 (id=1216): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000008c0)={r1}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000003c0)={r2, 0xb6, 0x3, 0x6, 0x4000, 0x401, 0x7, 0x3, {r2, @in={{0x2, 0x4e20, @broadcast}}, 0x5, 0x6, 0x5, 0x3, 0x1}}, &(0x7f0000000480)=0xb0) 338.726603ms ago: executing program 3 (id=1217): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b40)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xd, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) 211.214713ms ago: executing program 4 (id=1218): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000b80)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/80, 0x50}], 0x1}, 0x0) 210.862693ms ago: executing program 5 (id=1219): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x0, 0xa}, {0x1}, @const={0x0, {0x0, 0x8, 0x2, 0x81}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 179.032826ms ago: executing program 3 (id=1220): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000480), 0x8, 0x0) r2 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x226f, 0x13500, 0x0, 0xeffffffd}, &(0x7f0000000240), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x21, &(0x7f0000000440)=r1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {0xe}, 0x0, 0x2, 0x5}) timer_create(0x0, &(0x7f0000000280)={0x0, 0x1c, 0x4, @thr={&(0x7f0000000140)="a21aa17de44df74115c3dcfc4c06f14e76da67ebf1120337c10bc6d9ae7041adf7c343ce660356b1ac3eaf32f2535c9cad9dfc41e54b57fcf40f5b61d675a785dda6c909e13fa9227b1670f9918290b8ff96609a44797a8ff3bd97392fea29956f67d86459f53ad2310ccf0f21ef8e805bd25afd32dcf8ae3ec7de2b357f25dcce067b42ea2a63", &(0x7f0000000200)}}, &(0x7f00000002c0)) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1}, 0x1c) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003a00)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0xfffffb27, @local, 0x3aa}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="200000002900000032000000ffffffff001c5d61ba0000000000000ebe7ac6487c9bfcd4e7be93998ec1c4863b9cf50d6d3aa2c4102d20d07d8ee7bc6ed7dbe8169d21a3b022b0ffae61587f78ea8eb1a6d5fc"], 0x20}}], 0x2, 0x20001024) 75.378564ms ago: executing program 4 (id=1221): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xfffe, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@tclass={{0x10, 0x29, 0x43, 0x4}}], 0x10}, 0x841) 0s ago: executing program 3 (id=1222): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x9c}}, 0x0) kernel console output (not intermixed with test programs): ptor too short (expected 5924, got 36) [ 74.940411][ T4337] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 74.990340][ T4337] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 75.060741][ T4337] usb 1-1: config 250 has no interface number 0 [ 75.108206][ T4337] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 75.162219][ T4337] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 75.236392][ T4337] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 75.287200][ T4337] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 75.359157][ T4337] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 75.433943][ T4337] usb 1-1: config 250 interface 228 has no altsetting 0 [ 75.459024][ T4337] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 75.492130][ T4337] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 75.517477][ T4551] netlink: 32 bytes leftover after parsing attributes in process `syz.1.53'. [ 75.526881][ T4337] usb 1-1: Product: syz [ 75.531070][ T4337] usb 1-1: SerialNumber: syz [ 75.569739][ T4337] hub 1-1:250.228: bad descriptor, ignoring hub [ 75.594840][ T4337] hub: probe of 1-1:250.228 failed with error -5 [ 75.774859][ T4337] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 76.143077][ T32] usb 1-1: USB disconnect, device number 2 [ 76.195819][ T32] usblp0: removed [ 76.486508][ T22] cfg80211: failed to load regulatory.db [ 77.550149][ T4592] overlayfs: failed to resolve './file1': -2 [ 81.183000][ T4666] overlayfs: missing 'lowerdir' [ 81.317256][ T4273] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 81.327897][ T4273] Bluetooth: hci0: Injecting HCI hardware error event [ 81.512624][ T4279] Bluetooth: hci0: hardware error 0x00 [ 81.835376][ T4673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.78'. [ 81.862336][ T4673] device bridge_slave_1 left promiscuous mode [ 81.911847][ T4673] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.952826][ T4673] device bridge_slave_0 left promiscuous mode [ 81.959092][ T4673] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.012136][ T4677] tmpfs: Unknown parameter 'noswap' [ 83.042362][ T4322] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 83.206249][ T4701] tmpfs: Unknown parameter 'noswap' [ 83.233572][ T4322] usb 5-1: config 0 has an invalid interface number: 102 but max is 0 [ 83.241793][ T4322] usb 5-1: config 0 has no interface number 0 [ 83.287629][ T4322] usb 5-1: New USB device found, idVendor=2001, idProduct=1a00, bcdDevice=38.f5 [ 83.340282][ T4322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.381892][ T4322] usb 5-1: config 0 descriptor?? [ 83.602184][ T4322] asix 5-1:0.102 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 83.642140][ T4322] asix: probe of 5-1:0.102 failed with error -71 [ 83.656986][ T4713] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 83.711455][ T4322] usb 5-1: USB disconnect, device number 3 [ 83.762191][ T4279] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 83.798389][ T4546] Set syz1 is full, maxelem 65536 reached [ 84.337726][ T4729] netlink: 'syz.0.93': attribute type 10 has an invalid length. [ 84.454074][ T4729] bond0: (slave wlan1): Opening slave failed [ 86.985192][ T14] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.181992][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 87.187523][ T4322] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 87.197345][ T14] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 87.216292][ T14] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 87.239654][ T14] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 87.270247][ T14] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 87.297532][ T14] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.316227][ T14] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 87.325848][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.409087][ T4778] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 87.409087][ T4778] program syz.3.105 not setting count and/or reply_len properly [ 88.083027][ T4322] usb 1-1: Using ep0 maxpacket: 16 [ 88.109969][ T4322] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 88.163846][ T4322] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 88.180700][ T4322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.209574][ T14] usb 2-1: usb_control_msg returned -32 [ 88.215659][ T14] usbtmc 2-1:16.0: can't read capabilities [ 88.228498][ T4322] usb 1-1: config 0 descriptor?? [ 88.258041][ T4322] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6 [ 88.444852][ T4762] netlink: 'syz.0.101': attribute type 5 has an invalid length. [ 88.463647][ T4279] Bluetooth: hci1: unexpected subevent 0x01 length: 37 > 18 [ 88.518375][ T3622] bcm5974 1-1:0.0: could not read from device [ 88.554604][ T4322] usb 1-1: USB disconnect, device number 3 [ 88.585825][ T4762] bcm5974 1-1:0.0: could not read from device [ 88.611521][ T4792] usbtmc 2-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 88.811032][ T4255] usb 2-1: USB disconnect, device number 2 [ 89.954193][ T4808] lo speed is unknown, defaulting to 1000 [ 89.960641][ T4808] lo speed is unknown, defaulting to 1000 [ 89.973282][ T4808] lo speed is unknown, defaulting to 1000 [ 89.995830][ T4808] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 90.034558][ T4808] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 90.151872][ T4809] netlink: 40 bytes leftover after parsing attributes in process `syz.1.114'. [ 90.437662][ T4808] lo speed is unknown, defaulting to 1000 [ 90.444246][ T4808] lo speed is unknown, defaulting to 1000 [ 90.450529][ T4808] lo speed is unknown, defaulting to 1000 [ 90.457097][ T4808] lo speed is unknown, defaulting to 1000 [ 90.464440][ T4808] lo speed is unknown, defaulting to 1000 [ 90.482190][ T4279] Bluetooth: hci1: command 0x2016 tx timeout [ 90.805933][ T4810] netlink: 'syz.0.112': attribute type 10 has an invalid length. [ 90.996308][ T4810] batman_adv: batadv0: Adding interface: team0 [ 91.006734][ T4810] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.036321][ T4810] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 91.048464][ T4815] netlink: 'syz.0.112': attribute type 10 has an invalid length. [ 91.061193][ T4815] netlink: 2 bytes leftover after parsing attributes in process `syz.0.112'. [ 91.071365][ T4815] device team0 entered promiscuous mode [ 91.080849][ T4815] device team_slave_0 entered promiscuous mode [ 91.087688][ T4815] device team_slave_1 entered promiscuous mode [ 91.101556][ T4815] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.110854][ T4815] batman_adv: batadv0: Interface activated: team0 [ 91.118302][ T4815] batman_adv: batadv0: Interface deactivated: team0 [ 91.126567][ T4815] batman_adv: batadv0: Removing interface: team0 [ 91.257885][ T4815] bridge0: port 3(team0) entered blocking state [ 91.265702][ T4815] bridge0: port 3(team0) entered disabled state [ 91.280129][ T4815] bridge0: port 3(team0) entered blocking state [ 91.286814][ T4815] bridge0: port 3(team0) entered forwarding state [ 91.889072][ T4829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.122'. [ 92.229700][ T4841] syz.4.127 uses obsolete (PF_INET,SOCK_PACKET) [ 93.414732][ T4868] input: syz1 as /devices/virtual/input/input7 [ 93.519406][ T4871] tmpfs: Unknown parameter 'usrquota' [ 95.295032][ T7] kernel write not supported for file [eventfd] (pid: 7 comm: kworker/0:0) [ 95.731602][ T4910] binder: BINDER_SET_CONTEXT_MGR already set [ 95.751478][ T4910] binder: 4909:4910 ioctl 4018620d 200000000040 returned -16 [ 96.601247][ T4919] nfs: Deprecated parameter 'nointr' [ 97.057432][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 97.070545][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.079353][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.091491][ T4932] device bridge_slave_0 left promiscuous mode [ 97.131070][ T4932] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.189827][ T4932] device bridge_slave_1 left promiscuous mode [ 97.251704][ T4932] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.342211][ T4932] bond0: (slave bond_slave_0): Releasing backup interface [ 97.392693][ T4932] bond0: (slave bond_slave_1): Releasing backup interface [ 97.500979][ T4932] infiniband syz!: set down [ 98.347369][ T4932] team0: Port device team_slave_0 removed [ 98.456628][ T4932] team0: Port device team_slave_1 removed [ 98.487011][ T4932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.526451][ T4932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.626529][ T4932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.643503][ T4932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.818253][ T4934] team0: Mode changed to "loadbalance" [ 98.949765][ T4939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.156'. [ 101.353080][ T5008] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.176'. [ 101.386567][ T5009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.175'. [ 101.487164][ T5008] netlink: 24 bytes leftover after parsing attributes in process `syz.4.176'. [ 104.741417][ T5031] sched: RT throttling activated [ 104.810558][ T5034] netlink: 40 bytes leftover after parsing attributes in process `syz.1.182'. [ 104.969602][ T5034] lo speed is unknown, defaulting to 1000 [ 105.307463][ T5040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.179'. [ 105.316954][ T5040] netlink: 20 bytes leftover after parsing attributes in process `syz.3.179'. [ 105.608388][ T5044] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 105.621002][ T5044] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 107.286900][ T5060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.189'. [ 107.817604][ T5073] random: crng reseeded on system resumption [ 108.891539][ T5098] fuse: Unknown parameter '' [ 109.254875][ T5087] Zero length message leads to an empty skb [ 109.475577][ T26] audit: type=1326 audit(1756109378.701:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5111 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750978ebe9 code=0x7ffc0000 [ 109.631544][ T26] audit: type=1326 audit(1756109378.701:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5111 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f750978ebe9 code=0x7ffc0000 [ 109.809705][ T26] audit: type=1326 audit(1756109378.701:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5111 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750978ebe9 code=0x7ffc0000 [ 109.812781][ T5119] netlink: 16 bytes leftover after parsing attributes in process `syz.4.208'. [ 109.921775][ T26] audit: type=1326 audit(1756109378.701:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5111 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f750978ebe9 code=0x7ffc0000 [ 109.989546][ T26] audit: type=1326 audit(1756109378.701:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5111 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750978ebe9 code=0x7ffc0000 [ 110.186191][ T26] audit: type=1326 audit(1756109378.701:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5111 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f750978d550 code=0x7ffc0000 [ 110.272044][ T26] audit: type=1326 audit(1756109378.701:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5111 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7509790417 code=0x7ffc0000 [ 110.336741][ T26] audit: type=1326 audit(1756109378.701:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5111 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f750978ebe9 code=0x7ffc0000 [ 110.383105][ T128] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 110.411729][ T26] audit: type=1326 audit(1756109378.701:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5111 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7509790417 code=0x7ffc0000 [ 110.474250][ T4277] syz-executor (4277) used greatest stack depth: 20872 bytes left [ 110.582119][ T128] usb 3-1: Using ep0 maxpacket: 8 [ 110.589928][ T128] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 110.595513][ T26] audit: type=1326 audit(1756109378.701:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5111 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f750978d84a code=0x7ffc0000 [ 110.620068][ T128] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 110.620113][ T128] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 110.698789][ T128] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 110.722017][ T128] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.762790][ T128] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 110.796915][ T128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.952579][ T4352] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.096131][ T128] usb 3-1: usb_control_msg returned -32 [ 111.101847][ T128] usbtmc 3-1:16.0: can't read capabilities [ 111.147745][ T4352] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.336231][ T4352] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.454670][ T5145] usbtmc 3-1:16.0: usb_bulk_msg returned -71 [ 111.540501][ T4352] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.661050][ T128] usb 3-1: USB disconnect, device number 2 [ 111.971644][ T4352] tipc: Left network mode [ 112.030413][ T4273] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 112.040478][ T4273] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 112.090651][ T4273] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 112.108309][ T4273] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 112.118270][ T4273] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 112.126592][ T4273] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 112.403061][ T5161] device hsr0 entered promiscuous mode [ 112.471511][ T5160] device hsr0 left promiscuous mode [ 112.872643][ T5156] lo speed is unknown, defaulting to 1000 [ 113.693844][ T5199] Bluetooth: MGMT ver 1.22 [ 113.745009][ T4279] Bluetooth: unknown link type 151 [ 113.920477][ T5156] chnl_net:caif_netlink_parms(): no params data found [ 114.176855][ T4279] Bluetooth: hci4: command 0x0409 tx timeout [ 114.309516][ T5156] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.358547][ T5156] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.374885][ T5156] device bridge_slave_0 entered promiscuous mode [ 114.541179][ T5156] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.551038][ T5156] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.596965][ T5156] device bridge_slave_1 entered promiscuous mode [ 114.620812][ T5224] netlink: 'syz.0.241': attribute type 10 has an invalid length. [ 114.719323][ T5224] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 115.762164][ T4279] Bluetooth: hci3: command 0x0409 tx timeout [ 116.242171][ T4279] Bluetooth: hci4: command 0x041b tx timeout [ 116.383477][ T5225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.444597][ T5225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.510110][ T5225] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 116.529990][ T5225] bond0 (unregistering): Released all slaves [ 116.573767][ T4352] device hsr_slave_0 left promiscuous mode [ 116.605735][ T4352] device hsr_slave_1 left promiscuous mode [ 116.627985][ T4352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.677075][ T4352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.708656][ T4352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.736573][ T4352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.781749][ T4352] device bridge_slave_1 left promiscuous mode [ 116.810149][ T4352] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.892899][ T4352] device bridge_slave_0 left promiscuous mode [ 116.932345][ T4352] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.118863][ T4352] device veth1_macvtap left promiscuous mode [ 117.125945][ T4352] device veth0_macvtap left promiscuous mode [ 117.139596][ T4352] device veth1_vlan left promiscuous mode [ 117.146811][ T4352] device veth0_vlan left promiscuous mode [ 118.246930][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 118.246941][ T26] audit: type=1326 audit(1756109386.741:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5264 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70238ebe9 code=0x7ffc0000 [ 118.281650][ T26] audit: type=1326 audit(1756109386.741:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5264 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70238ebe9 code=0x7ffc0000 [ 118.332026][ T4279] Bluetooth: hci4: command 0x040f tx timeout [ 118.378949][ T26] audit: type=1326 audit(1756109386.871:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5264 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fb70238ebe9 code=0x7ffc0000 [ 118.490310][ T26] audit: type=1326 audit(1756109386.871:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5264 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70238ebe9 code=0x7ffc0000 [ 118.588251][ T26] audit: type=1326 audit(1756109386.871:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5264 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70238ebe9 code=0x7ffc0000 [ 118.682108][ T26] audit: type=1326 audit(1756109386.981:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5264 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb70238ebe9 code=0x7ffc0000 [ 118.756766][ T26] audit: type=1326 audit(1756109386.981:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5264 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70238ebe9 code=0x7ffc0000 [ 118.808966][ T26] audit: type=1326 audit(1756109386.981:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5264 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70238ebe9 code=0x7ffc0000 [ 118.871182][ T26] audit: type=1326 audit(1756109387.121:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5264 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb70238ebe9 code=0x7ffc0000 [ 118.902139][ T26] audit: type=1326 audit(1756109387.121:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5264 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70238ebe9 code=0x7ffc0000 [ 119.409378][ T4352] team0 (unregistering): Port device team_slave_1 removed [ 119.445355][ T4352] team0 (unregistering): Port device team_slave_0 removed [ 119.487087][ T4352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.525553][ T4352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.883479][ T4352] bond0 (unregistering): Released all slaves [ 120.009915][ T4314] lo speed is unknown, defaulting to 1000 [ 120.025931][ T5156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.072993][ T5156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.214339][ T5156] team0: Port device team_slave_0 added [ 120.234957][ T5156] team0: Port device team_slave_1 added [ 120.383339][ T5156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.390331][ T5156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.422549][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 120.539738][ T5156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.812271][ T5156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.930055][ T5156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.390252][ T5156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.662475][ T5156] device hsr_slave_0 entered promiscuous mode [ 121.686925][ T5156] device hsr_slave_1 entered promiscuous mode [ 121.709695][ T5156] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.766626][ T5156] Cannot create hsr debugfs directory [ 122.141533][ T5313] tipc: Started in network mode [ 122.247414][ T5313] tipc: Node identity 4, cluster identity 4711 [ 122.384815][ T5313] tipc: Node number set to 4 [ 122.542385][ T128] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 122.743907][ T128] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 122.765540][ T128] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.948038][ T128] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 123.169436][ T128] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 123.239478][ T128] usb 1-1: Manufacturer: syz [ 123.286766][ T128] usb 1-1: config 0 descriptor?? [ 123.428777][ T5156] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 123.595571][ T128] rc_core: IR keymap rc-hauppauge not found [ 123.601650][ T128] Registered IR keymap rc-empty [ 123.637856][ T128] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 123.729830][ T128] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 [ 123.794157][ T5156] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 123.854913][ T5156] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 123.886127][ T5156] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 123.902821][ T128] usb 1-1: USB disconnect, device number 4 [ 124.175220][ T5156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.207173][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.260418][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.323561][ T5156] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.339536][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 124.339549][ T26] audit: type=1326 audit(1756109393.561:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5344 comm="syz.3.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ead8ebe9 code=0x7ffc0000 [ 124.381636][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.407880][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.414847][ T5351] 9pnet_virtio: no channels available for device syz [ 124.442711][ T4768] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.450565][ T4768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.462216][ T26] audit: type=1326 audit(1756109393.561:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5344 comm="syz.3.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ead8ebe9 code=0x7ffc0000 [ 124.470746][ T5351] overlayfs: unrecognized mount option "hash" or missing value [ 124.586157][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 124.617399][ T26] audit: type=1326 audit(1756109393.591:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5344 comm="syz.3.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff9ead8ebe9 code=0x7ffc0000 [ 124.620294][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.792108][ T14] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 124.855131][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.888210][ T4768] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.895475][ T4768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.931973][ T26] audit: type=1326 audit(1756109393.591:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5344 comm="syz.3.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ead8ebe9 code=0x7ffc0000 [ 124.980165][ T26] audit: type=1326 audit(1756109393.591:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5344 comm="syz.3.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff9ead8ebe9 code=0x7ffc0000 [ 125.009388][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.044736][ T26] audit: type=1326 audit(1756109393.591:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5344 comm="syz.3.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ead8ebe9 code=0x7ffc0000 [ 125.078155][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.103593][ T14] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 125.131023][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.137278][ T14] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 125.163790][ T14] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 125.182238][ T26] audit: type=1326 audit(1756109393.591:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5344 comm="syz.3.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ead8ebe9 code=0x7ffc0000 [ 125.211981][ T14] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 125.258159][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.286540][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.431565][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.450815][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 125.503440][ T26] audit: type=1326 audit(1756109393.591:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5344 comm="syz.3.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff9ead8d550 code=0x7ffc0000 [ 125.581630][ T26] audit: type=1326 audit(1756109393.591:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5344 comm="syz.3.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ead8ebe9 code=0x7ffc0000 [ 125.630780][ T5156] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 125.659372][ T5156] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.679294][ T26] audit: type=1326 audit(1756109393.591:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5344 comm="syz.3.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ead8ebe9 code=0x7ffc0000 [ 125.716069][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 125.730422][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.758046][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.797456][ T14] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 126.036182][ T14] usb 5-1: string descriptor 0 read error: -22 [ 126.042651][ T14] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 126.051701][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.190273][ T14] usb 5-1: config 0 descriptor?? [ 126.196899][ T5352] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 126.239643][ T14] hub 5-1:0.0: bad descriptor, ignoring hub [ 126.307385][ T14] hub: probe of 5-1:0.0 failed with error -5 [ 126.324780][ T14] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9 [ 127.184055][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 127.193309][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.202836][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 127.275292][ C1] usb_acecad 5-1:0.0: can't resubmit intr, dummy_hcd.4-1/input0, status -1 [ 127.284173][ T7] usb 5-1: USB disconnect, device number 4 [ 127.768866][ T5384] fuse: Bad value for 'rootmode' [ 127.813378][ T5384] netlink: 52 bytes leftover after parsing attributes in process `syz.0.274'. [ 127.832136][ T4322] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 127.921327][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 127.941710][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.990344][ T5156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.032706][ T4322] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 128.056300][ T4322] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 128.088455][ T4322] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 128.252930][ T4322] usb 4-1: config 0 interface 0 has no altsetting 0 [ 128.287045][ T4322] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 128.296248][ T4322] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 128.307658][ T4322] usb 4-1: config 0 interface 0 has no altsetting 0 [ 128.562057][ T4322] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 128.571648][ T4322] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 128.583509][ T4322] usb 4-1: config 0 interface 0 has no altsetting 0 [ 128.654391][ T4322] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 128.672087][ T4322] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 128.684011][ T4322] usb 4-1: config 0 interface 0 has no altsetting 0 [ 128.708710][ T4322] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 128.718057][ T4322] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 128.729267][ T4322] usb 4-1: config 0 interface 0 has no altsetting 0 [ 128.737739][ T4322] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 128.759386][ T4322] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 128.770567][ T4322] usb 4-1: config 0 interface 0 has no altsetting 0 [ 128.788401][ T4322] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 128.841994][ T4322] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 128.872085][ T4322] usb 4-1: config 0 interface 0 has no altsetting 0 [ 128.890562][ T5401] sp0: Synchronizing with TNC [ 128.902039][ T4322] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 128.911228][ T4322] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 128.978745][ T4322] usb 4-1: config 0 interface 0 has no altsetting 0 [ 129.009502][ T4322] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 129.039756][ T4322] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 129.097104][ T4322] usb 4-1: Product: syz [ 129.101365][ T4322] usb 4-1: Manufacturer: syz [ 129.152091][ T4322] usb 4-1: SerialNumber: syz [ 129.184031][ T4322] usb 4-1: config 0 descriptor?? [ 129.264558][ T4322] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 129.457376][ T4322] usb 4-1: USB disconnect, device number 2 [ 129.606273][ T4322] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 130.817079][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 131.240824][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 131.341634][ T5156] device veth0_vlan entered promiscuous mode [ 131.398341][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 131.458476][ T5418] fuse: Unknown parameter 'user_id0000000000000000000000000000000000000000' [ 131.618240][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 131.642957][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 131.650938][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 132.271292][ T5156] device veth1_vlan entered promiscuous mode [ 132.448882][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 132.468004][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 132.511141][ T5156] device veth0_macvtap entered promiscuous mode [ 132.543626][ T5156] device veth1_macvtap entered promiscuous mode [ 132.656974][ T5156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.714994][ T5156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.748797][ T5156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.805035][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.811854][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.852021][ T5156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.882181][ T5156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.922046][ T5156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.944102][ T5156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.977889][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 133.037315][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 133.069870][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 133.108176][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 133.142715][ T5156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.195967][ T5156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.266725][ T5156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.315191][ T5156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.391937][ T5156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.442194][ T5156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.494112][ T5156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.579953][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 133.596310][ T5464] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 10802, id = 0 [ 133.632407][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 133.686708][ T5156] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.738539][ T5156] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.788496][ T5156] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.822107][ T5156] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.174357][ T4767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.207005][ T4767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.229033][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 134.309878][ T5476] binder: 5474:5476 ioctl c018620b 0 returned -14 [ 134.380948][ T4767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.440535][ T4767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.491763][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 135.495225][ T5498] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 135.957424][ T5512] netlink: 20 bytes leftover after parsing attributes in process `syz.2.300'. [ 139.544178][ T5523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.026339][ T5570] random: crng reseeded on system resumption [ 142.079546][ T5573] ax25_connect(): syz.5.310 uses autobind, please contact jreuter@yaina.de [ 142.635899][ T5578] fuse: Bad value for 'fd' [ 145.938363][ T5616] tipc: Started in network mode [ 145.955619][ T5616] tipc: Node identity 4, cluster identity 4711 [ 146.004941][ T5616] tipc: Node number set to 4 [ 146.347358][ T5631] lo speed is unknown, defaulting to 1000 [ 146.353485][ T5631] lo speed is unknown, defaulting to 1000 [ 146.361330][ T5631] lo speed is unknown, defaulting to 1000 [ 146.404828][ T5631] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 146.950338][ T5632] lo speed is unknown, defaulting to 1000 [ 146.990506][ T5631] lo speed is unknown, defaulting to 1000 [ 146.996903][ T5631] lo speed is unknown, defaulting to 1000 [ 147.003329][ T5631] lo speed is unknown, defaulting to 1000 [ 147.009774][ T5631] lo speed is unknown, defaulting to 1000 [ 147.016134][ T5631] lo speed is unknown, defaulting to 1000 [ 147.022509][ T5631] lo speed is unknown, defaulting to 1000 [ 148.127614][ T5652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.329'. [ 149.368223][ T5662] netlink: 'syz.3.333': attribute type 11 has an invalid length. [ 151.390872][ T5681] tmpfs: Unknown parameter 'quota' [ 151.402967][ T5681] input: syz0 as /devices/virtual/input/input10 [ 152.088382][ T4314] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 152.282003][ T4314] usb 5-1: Using ep0 maxpacket: 32 [ 152.291520][ T4314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.338321][ T4314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.364943][ T4314] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 152.375021][ T4314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.407249][ T4314] usb 5-1: config 0 descriptor?? [ 153.617680][ T4314] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 153.868159][ T4314] usb 5-1: USB disconnect, device number 5 [ 154.506515][ T5721] fido_id[5721]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 155.149865][ T5729] netlink: 'syz.5.347': attribute type 7 has an invalid length. [ 155.477826][ T5729] netlink: 8 bytes leftover after parsing attributes in process `syz.5.347'. [ 156.928767][ T5751] tmpfs: Unknown parameter 'usrquota' [ 157.117453][ T5756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.354'. [ 157.128568][ T5756] netlink: 'syz.3.354': attribute type 5 has an invalid length. [ 157.147267][ T5756] netlink: 20 bytes leftover after parsing attributes in process `syz.3.354'. [ 157.207645][ T5756] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 157.216787][ T5756] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 157.228834][ T5756] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 157.237951][ T5756] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 157.247719][ T5756] device geneve2 entered promiscuous mode [ 157.972707][ T5775] ubi31: attaching mtd0 [ 158.020814][ T5775] ubi31: scanning is finished [ 158.045667][ T5775] ubi31: empty MTD device detected [ 158.486526][ T5775] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 158.536307][ T5775] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 158.616581][ T5775] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 158.680034][ T5775] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 158.780661][ T5775] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 158.855394][ T5775] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 158.913233][ T5773] lo speed is unknown, defaulting to 1000 [ 158.974602][ T5775] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4162992341 [ 159.151949][ T5775] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 159.255769][ T5776] ubi31: background thread "ubi_bgt31d" started, PID 5776 [ 160.517523][ T5794] netlink: 8 bytes leftover after parsing attributes in process `syz.5.363'. [ 160.666534][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 160.666547][ T26] audit: type=1326 audit(1756109429.891:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5796 comm="syz.3.364" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9ead8ebe9 code=0x0 [ 162.044723][ T5816] netlink: 8 bytes leftover after parsing attributes in process `syz.5.370'. [ 164.915662][ T5866] fuse: Bad value for 'fd' [ 165.037090][ T26] audit: type=1804 audit(1756109434.261:82): pid=5868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.384" name="/newroot/77/bus/file0" dev="overlay" ino=428 res=1 errno=0 [ 165.232375][ T5875] netlink: 'syz.4.385': attribute type 10 has an invalid length. [ 165.240155][ T5875] netlink: 40 bytes leftover after parsing attributes in process `syz.4.385'. [ 165.306182][ T5875] device dummy0 entered promiscuous mode [ 165.336145][ T5875] bridge0: port 3(dummy0) entered blocking state [ 165.399050][ T5875] bridge0: port 3(dummy0) entered disabled state [ 165.442732][ T5875] bridge0: port 3(dummy0) entered blocking state [ 165.449215][ T5875] bridge0: port 3(dummy0) entered forwarding state [ 166.422314][ T4384] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 166.613259][ T4384] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 166.630978][ T4384] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 166.674600][ T4384] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 166.732577][ T4384] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 166.772218][ T4384] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 166.832128][ T4384] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 166.882338][ T4279] Bluetooth: Wrong link type (-71) [ 166.893118][ T4384] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 166.931353][ T4384] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 166.971991][ T4384] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 167.054635][ T4384] usb 3-1: string descriptor 0 read error: -22 [ 167.060910][ T4384] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 167.159408][ T4384] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.216633][ T4384] adutux 3-1:168.0: interrupt endpoints not found [ 167.514999][ T4384] usb 3-1: USB disconnect, device number 3 [ 168.707120][ T5958] ieee802154 phy0 wpan0: encryption failed: -22 [ 168.972128][ T22] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 169.203824][ T22] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 169.529021][ T22] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.548893][ T22] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 169.568927][ T22] usb 5-1: config 0 interface 0 has no altsetting 0 [ 170.705133][ T22] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 170.717092][ T22] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 170.740475][ T22] usb 5-1: config 0 interface 0 has no altsetting 0 [ 170.750037][ T22] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 170.759210][ T22] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 170.770687][ T22] usb 5-1: config 0 interface 0 has no altsetting 0 [ 170.779192][ T22] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 170.858493][ T22] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 170.870046][ T22] usb 5-1: config 0 interface 0 has no altsetting 0 [ 170.882298][ T22] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 170.892038][ T22] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 170.921937][ T22] usb 5-1: config 0 interface 0 has no altsetting 0 [ 170.943064][ T22] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 171.063717][ T22] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 171.136836][ T5995] loop2: detected capacity change from 0 to 7 [ 171.141941][ T22] usb 5-1: config 0 interface 0 has no altsetting 0 [ 171.182079][ T4258] Dev loop2: unable to read RDB block 7 [ 171.194891][ T4258] loop2: AHDI p1 p2 p3 [ 171.199130][ T4258] loop2: partition table partially beyond EOD, truncated [ 171.218783][ T22] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 171.235923][ T22] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 171.255525][ T4258] loop2: p1 start 1601398130 is beyond EOD, truncated [ 171.264209][ T4258] loop2: p2 start 1702059890 is beyond EOD, truncated [ 171.271023][ T22] usb 5-1: config 0 interface 0 has no altsetting 0 [ 171.298166][ T5995] Dev loop2: unable to read RDB block 7 [ 171.307312][ T22] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 171.326405][ T5995] loop2: AHDI p1 p2 p3 [ 171.339361][ T22] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 171.365584][ T22] usb 5-1: config 0 interface 0 has no altsetting 0 [ 171.379009][ T5995] loop2: partition table partially beyond EOD, truncated [ 171.382344][ T22] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 171.402427][ T22] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 171.412030][ T22] usb 5-1: Product: syz [ 171.416312][ T22] usb 5-1: Manufacturer: syz [ 171.421127][ T22] usb 5-1: SerialNumber: syz [ 171.426715][ T5995] loop2: p1 start 1601398130 is beyond EOD, truncated [ 171.436369][ T22] usb 5-1: config 0 descriptor?? [ 171.466685][ T22] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 171.474178][ T5995] loop2: p2 start 1702059890 is beyond EOD, truncated [ 171.781739][ C1] usb 5-1: yurex_control_callback - control failed: -71 [ 171.791503][ C0] usb 5-1: yurex_control_callback - control failed: -71 [ 171.798997][ T22] usb 5-1: USB disconnect, device number 6 [ 171.899504][ T22] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 172.331988][ T6022] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 172.339786][ T6022] IPv6: NLM_F_CREATE should be set when creating new route [ 172.347245][ T6022] IPv6: NLM_F_CREATE should be set when creating new route [ 173.366591][ T6054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.421'. [ 175.140524][ T6074] netlink: 16 bytes leftover after parsing attributes in process `syz.0.425'. [ 175.325136][ T6074] device bridge1 entered promiscuous mode [ 175.450183][ T6084] fuse: Unknown parameter 'group_id00000000000000000000' [ 175.484944][ T6084] lo speed is unknown, defaulting to 1000 [ 175.493904][ T6084] lo speed is unknown, defaulting to 1000 [ 175.500035][ T6084] lo speed is unknown, defaulting to 1000 [ 175.885845][ T6084] infiniband sz1: set active [ 175.890624][ T32] lo speed is unknown, defaulting to 1000 [ 175.909018][ T6084] infiniband sz1: added lo [ 175.972078][ T22] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 175.988167][ T6084] RDS/IB: sz1: added [ 175.992389][ T6084] smc: adding ib device sz1 with port count 1 [ 175.999269][ T6084] smc: ib device sz1 port 1 has pnetid [ 176.005469][ T32] lo speed is unknown, defaulting to 1000 [ 176.012241][ T6084] lo speed is unknown, defaulting to 1000 [ 176.168296][ T22] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 176.187622][ T22] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 176.214685][ T6084] lo speed is unknown, defaulting to 1000 [ 176.220666][ T22] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 176.230138][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.462084][ T32] usb 3-1: USB disconnect, device number 4 [ 176.508700][ T6084] lo speed is unknown, defaulting to 1000 [ 176.891985][ T128] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 177.637115][ T6084] lo speed is unknown, defaulting to 1000 [ 177.785947][ T128] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 177.796264][ T6084] lo speed is unknown, defaulting to 1000 [ 178.061418][ T6116] mmap: syz.5.434 (6116) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 178.631967][ T128] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.640364][ T128] usb 5-1: Product: syz [ 178.645096][ T128] usb 5-1: Manufacturer: syz [ 178.649719][ T128] usb 5-1: SerialNumber: syz [ 178.657989][ T128] usb 5-1: config 0 descriptor?? [ 178.880155][ T128] usb 5-1: USB disconnect, device number 7 [ 180.962102][ T4273] Bluetooth: hci2: command 0x0406 tx timeout [ 180.968254][ T4273] Bluetooth: hci1: command 0x0406 tx timeout [ 180.974388][ T4279] Bluetooth: hci3: command 0x0406 tx timeout [ 181.333104][ T6163] binder: 6161:6163 ioctl 4018620d 0 returned -22 [ 182.495806][ T6171] binder: 6161:6171 ioctl c018620c 0 returned -14 [ 182.887155][ T6188] netlink: 'syz.5.454': attribute type 1 has an invalid length. [ 183.049050][ T6188] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.119948][ T6191] bond1: (slave veth3): Enslaving as an active interface with a down link [ 184.223174][ T6199] device veth0_to_bond entered promiscuous mode [ 184.307202][ T6199] device veth0_to_bond left promiscuous mode [ 184.324298][ T26] audit: type=1326 audit(1756109453.551:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ead8ebe9 code=0x7ffc0000 [ 184.346501][ C0] vkms_vblank_simulate: vblank timer overrun [ 185.094718][ T6199] bond1: (slave vlan2): making interface the new active one [ 185.118162][ T6199] device veth0_to_bond entered promiscuous mode [ 185.134231][ T6199] device vlan2 entered promiscuous mode [ 185.144048][ T6199] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 185.159107][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 185.182224][ T26] audit: type=1326 audit(1756109453.581:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff9ead8ebe9 code=0x7ffc0000 [ 185.220633][ T26] audit: type=1326 audit(1756109453.581:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ead8ebe9 code=0x7ffc0000 [ 185.243342][ T26] audit: type=1326 audit(1756109453.581:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff9ead8ebe9 code=0x7ffc0000 [ 185.284140][ T26] audit: type=1326 audit(1756109453.581:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ead8ebe9 code=0x7ffc0000 [ 185.395009][ T26] audit: type=1326 audit(1756109453.581:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff9ead8ebe9 code=0x7ffc0000 [ 185.508047][ T26] audit: type=1326 audit(1756109453.581:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ead8ebe9 code=0x7ffc0000 [ 185.590539][ T26] audit: type=1326 audit(1756109453.581:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9ead8ebe9 code=0x7ffc0000 [ 185.659361][ T26] audit: type=1326 audit(1756109453.581:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ead8ebe9 code=0x7ffc0000 [ 185.730477][ T26] audit: type=1326 audit(1756109453.591:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff9ead8d550 code=0x7ffc0000 [ 186.882262][ T7] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 187.143798][ T7] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 188.028145][ T7] usb 5-1: config 0 has no interface number 0 [ 188.085618][ T7] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 188.142411][ T7] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 188.162286][ T7] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 188.204821][ T7] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 188.272689][ T7] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 188.320532][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.434341][ T7] usb 5-1: config 0 descriptor?? [ 188.464933][ T6251] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 188.480652][ T6251] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 188.513242][ T7] ldusb 5-1:0.55: Interrupt in endpoint not found [ 188.753867][ T32] usb 5-1: USB disconnect, device number 8 [ 190.115215][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 190.115229][ T26] audit: type=1326 audit(1756109459.341:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6313 comm="syz.3.483" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9ead8ebe9 code=0x0 [ 190.176445][ T6317] netlink: 60 bytes leftover after parsing attributes in process `syz.5.482'. [ 191.522081][ T4273] Bluetooth: hci4: command 0x0405 tx timeout [ 192.436653][ T6340] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 192.443689][ T6340] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 192.533928][ T6340] vhci_hcd vhci_hcd.0: Device attached [ 192.565990][ T6342] vhci_hcd: connection closed [ 192.569878][ T4344] vhci_hcd: stop threads [ 192.593896][ T4344] vhci_hcd: release socket [ 192.600243][ T4344] vhci_hcd: disconnect device [ 193.387458][ T6362] syz.5.497 sent an empty control message without MSG_MORE. [ 194.252161][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.258527][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.593183][ T6378] 9pnet_fd: Insufficient options for proto=fd [ 194.619918][ T4273] Bluetooth: hci1: ISO packet too small [ 194.705747][ T26] audit: type=1326 audit(1756109463.931:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6382 comm="syz.2.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100fb8ebe9 code=0x7ffc0000 [ 194.762103][ T26] audit: type=1326 audit(1756109463.961:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6382 comm="syz.2.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f100fb8ebe9 code=0x7ffc0000 [ 194.825489][ T26] audit: type=1326 audit(1756109463.961:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6382 comm="syz.2.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100fb8ebe9 code=0x7ffc0000 [ 195.226214][ T6391] netlink: 'syz.3.500': attribute type 10 has an invalid length. [ 195.278018][ T6393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.509'. [ 195.446378][ T6391] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 195.498701][ T6391] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 195.624760][ T6391] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 195.672544][ T6391] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 196.562052][ T4273] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 196.570892][ T4273] Bluetooth: hci1: Injecting HCI hardware error event [ 196.580039][ T4267] Bluetooth: hci1: hardware error 0x00 [ 196.877567][ T6419] netlink: 260 bytes leftover after parsing attributes in process `syz.2.519'. [ 197.165729][ T6422] tipc: Started in network mode [ 197.170660][ T6422] tipc: Node identity ac1414aa, cluster identity 4711 [ 197.239109][ T6422] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 197.278660][ T6422] tipc: Enabled bearer , priority 10 [ 197.372927][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 197.407184][ T6431] netlink: 'syz.3.523': attribute type 21 has an invalid length. [ 197.442578][ T6431] netlink: 'syz.3.523': attribute type 1 has an invalid length. [ 197.477490][ T6431] netlink: 144 bytes leftover after parsing attributes in process `syz.3.523'. [ 197.512051][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 197.634670][ T4344] device vlan2 left promiscuous mode [ 197.652079][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 197.792037][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 197.932022][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 197.973518][ T6441] 9pnet_fd: Insufficient options for proto=fd [ 198.072114][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 198.129950][ T6444] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 198.212014][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 198.362987][ T22] tipc: Node number set to 2886997162 [ 198.458946][ T6450] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 198.502038][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 198.560948][ T6450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 198.582368][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 198.652011][ T4267] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 198.720662][ T6446] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 198.730871][ T6446] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 198.751655][ T6446] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 198.751848][ T6450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 198.772091][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 198.781939][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 198.788480][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 198.820225][ T6446] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 198.837568][ T7] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 198.847436][ T6446] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 198.853725][ T6446] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 198.877337][ T6446] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 198.885234][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.904752][ T6446] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 198.912101][ T6446] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 198.936167][ T7] usb 3-1: config 0 descriptor?? [ 198.966980][ T7] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input11 [ 199.212557][ T3622] bcm5974 3-1:0.0: could not read from device [ 199.232331][ T7] usb 3-1: USB disconnect, device number 5 [ 199.242089][ T6447] bcm5974 3-1:0.0: could not read from device [ 199.278200][ T3622] bcm5974 3-1:0.0: could not read from device [ 200.482028][ T4267] Bluetooth: hci2: command 0x0c1a tx timeout [ 200.882139][ T4267] Bluetooth: hci4: command 0x0c1a tx timeout [ 200.888347][ T4273] Bluetooth: hci3: command 0x0c1a tx timeout [ 202.402118][ C1] net_ratelimit: 4 callbacks suppressed [ 202.402136][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 202.562091][ T4273] Bluetooth: hci2: command 0x0406 tx timeout [ 202.962020][ T4273] Bluetooth: hci3: command 0x0406 tx timeout [ 202.968107][ T4273] Bluetooth: hci4: command 0x0406 tx timeout [ 203.452025][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 204.483590][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 204.845738][ T6502] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 205.109315][ T6504] netlink: 'syz.5.543': attribute type 10 has an invalid length. [ 205.156188][ T6504] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 205.523871][ T6513] input: syz1 as /devices/virtual/input/input12 [ 205.532052][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 206.561994][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 207.601981][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 208.642002][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 209.682028][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 209.916233][ T26] audit: type=1326 audit(1756109479.141:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6534 comm="syz.5.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea6778ebe9 code=0x7ffc0000 [ 209.941927][ T6538] ======================================================= [ 209.941927][ T6538] WARNING: The mand mount option has been deprecated and [ 209.941927][ T6538] and is ignored by this kernel. Remove the mand [ 209.941927][ T6538] option from the mount to silence this warning. [ 209.941927][ T6538] ======================================================= [ 210.051959][ T26] audit: type=1326 audit(1756109479.231:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6534 comm="syz.5.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fea6778ebe9 code=0x7ffc0000 [ 210.162359][ T26] audit: type=1326 audit(1756109479.231:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6534 comm="syz.5.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea6778ebe9 code=0x7ffc0000 [ 210.276052][ T26] audit: type=1326 audit(1756109479.231:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6534 comm="syz.5.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea6778ebe9 code=0x7ffc0000 [ 211.411747][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 211.824957][ T14] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 212.062061][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 212.069440][ T14] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 212.083344][ T14] usb 1-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 212.093450][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.482022][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 213.045743][ T14] usb 1-1: config 0 descriptor?? [ 213.522001][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 213.592215][ T6579] binder: 6578:6579 ioctl c0306201 200000000080 returned -14 [ 213.762063][ T14] usbhid 1-1:0.0: can't add hid device: -71 [ 213.777579][ T14] usbhid: probe of 1-1:0.0 failed with error -71 [ 213.834958][ T14] usb 1-1: USB disconnect, device number 5 [ 214.562558][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 215.557578][ T6602] block device autoloading is deprecated and will be removed. [ 215.602041][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 216.065450][ T6620] netlink: 28 bytes leftover after parsing attributes in process `syz.5.579'. [ 216.609149][ T6629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.582'. [ 216.642083][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 216.643932][ T6629] netlink: 16 bytes leftover after parsing attributes in process `syz.0.582'. [ 216.715089][ T6629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.582'. [ 216.772134][ T6629] netlink: 16 bytes leftover after parsing attributes in process `syz.0.582'. [ 216.795779][ T6629] netlink: 5 bytes leftover after parsing attributes in process `syz.0.582'. [ 216.812234][ T6633] netlink: 'syz.0.582': attribute type 16 has an invalid length. [ 216.821439][ T6633] netlink: 'syz.0.582': attribute type 17 has an invalid length. [ 217.190778][ T6633] bridge0: port 3(team0) entered disabled state [ 217.198373][ T6633] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.205694][ T6633] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.681986][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 217.762055][ T4273] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 217.926798][ T6646] block device autoloading is deprecated and will be removed. [ 218.147460][ T6633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.218053][ T6633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.722080][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 219.117716][ T6633] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.130228][ T6633] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.142643][ T6633] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.153842][ T6633] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.772051][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 220.792429][ T6684] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.595'. [ 220.802028][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 220.821486][ T6684] netlink: 24 bytes leftover after parsing attributes in process `syz.0.595'. [ 221.842006][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 222.882016][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 223.931991][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 224.317828][ T6714] netlink: 24 bytes leftover after parsing attributes in process `syz.0.601'. [ 224.634429][ T6724] device syzkaller1 entered promiscuous mode [ 224.964071][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 226.011965][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 226.036473][ T6743] netlink: 40 bytes leftover after parsing attributes in process `syz.5.615'. [ 226.553954][ T6749] input: syz1 as /devices/virtual/input/input13 [ 227.042199][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 228.081995][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 229.122018][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 229.747388][ T6793] siw: device registration error -23 [ 229.779576][ T6793] netlink: 40 bytes leftover after parsing attributes in process `syz.0.629'. [ 230.267770][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 231.282088][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 231.670431][ T6814] input: syz1 as /devices/virtual/input/input14 [ 232.037234][ T6823] comedi comedi0: Minor 7 could not be opened [ 232.321978][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 233.361988][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 234.401987][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 235.442072][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 236.481991][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 237.146035][ T6876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.670'. [ 237.292637][ T6876] device hsr_slave_1 left promiscuous mode [ 237.500223][ T6879] ieee802154 phy0 wpan0: encryption failed: -22 [ 237.522004][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 238.562097][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 239.588404][ T6917] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 239.602082][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 240.642259][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 241.682089][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 242.032925][ T6936] tty tty1: ldisc open failed (-12), clearing slot 0 [ 242.329323][ T26] audit: type=1326 audit(1756109511.551:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6943 comm="syz.2.678" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f100fb8ebe9 code=0x0 [ 242.350974][ C0] vkms_vblank_simulate: vblank timer overrun [ 242.722045][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 243.381092][ T26] audit: type=1326 audit(1756109512.601:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6956 comm="syz.2.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100fb8ebe9 code=0x7ffc0000 [ 243.403784][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.423407][ T26] audit: type=1326 audit(1756109512.641:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6956 comm="syz.2.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100fb8ebe9 code=0x7ffc0000 [ 243.452364][ T26] audit: type=1326 audit(1756109512.661:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6956 comm="syz.2.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f100fb8ebe9 code=0x7ffc0000 [ 243.578700][ T26] audit: type=1326 audit(1756109512.661:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6956 comm="syz.2.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100fb8ebe9 code=0x7ffc0000 [ 243.762111][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 243.886889][ T6970] siw: device registration error -23 [ 244.456951][ T6970] lo speed is unknown, defaulting to 1000 [ 244.468026][ T6970] lo speed is unknown, defaulting to 1000 [ 244.730855][ T26] audit: type=1326 audit(1756109512.661:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6956 comm="syz.2.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100fb8ebe9 code=0x7ffc0000 [ 244.753010][ C0] vkms_vblank_simulate: vblank timer overrun [ 244.802048][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 244.840110][ T6971] tipc: Started in network mode [ 244.960705][ T26] audit: type=1326 audit(1756109512.671:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6956 comm="syz.2.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f100fb8ebe9 code=0x7ffc0000 [ 244.970499][ T6971] tipc: Node identity 4, cluster identity 4711 [ 244.983165][ C0] vkms_vblank_simulate: vblank timer overrun [ 245.234561][ T6971] tipc: Node number set to 4 [ 245.292500][ T26] audit: type=1326 audit(1756109512.671:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6956 comm="syz.2.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100fb8ebe9 code=0x7ffc0000 [ 245.672727][ T6983] 9pnet_fd: Insufficient options for proto=fd [ 245.735664][ T26] audit: type=1326 audit(1756109512.671:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6956 comm="syz.2.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100fb8ebe9 code=0x7ffc0000 [ 245.852054][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 245.874521][ T26] audit: type=1326 audit(1756109512.731:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6956 comm="syz.2.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f100fb8ebe9 code=0x7ffc0000 [ 245.940261][ T6985] ubi: mtd0 is already attached to ubi31 [ 246.731637][ T6984] lo speed is unknown, defaulting to 1000 [ 246.882066][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 246.930369][ T6984] lo speed is unknown, defaulting to 1000 [ 247.620177][ T7005] tmpfs: Unknown parameter 'usrquota' [ 247.765749][ T7006] input: syz1 as /devices/virtual/input/input15 [ 247.922067][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 248.962070][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 249.931121][ T7047] ubi: mtd0 is already attached to ubi31 [ 249.972515][ T7051] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 249.979056][ T7051] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 250.012083][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 250.027132][ T7051] vhci_hcd vhci_hcd.0: Device attached [ 250.332071][ T14] usb 38-1: SetAddress Request (2) to port 0 [ 250.338659][ T14] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 250.582043][ T7056] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 250.588708][ T7056] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 250.754871][ T7056] vhci_hcd vhci_hcd.0: Device attached [ 250.778160][ T7057] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(14) [ 250.784817][ T7057] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 250.802195][ T7057] vhci_hcd vhci_hcd.0: Device attached [ 250.845355][ T7056] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(13) [ 250.852049][ T7056] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 250.878401][ T7043] lo speed is unknown, defaulting to 1000 [ 250.925883][ T7043] lo speed is unknown, defaulting to 1000 [ 250.966123][ T7051] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(17) [ 250.972805][ T7051] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 251.015162][ T7059] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 251.034091][ T7056] vhci_hcd vhci_hcd.0: Device attached [ 251.042318][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 251.074893][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 251.074907][ T26] audit: type=1326 audit(1756109520.301:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70238ebe9 code=0x7ffc0000 [ 251.103253][ C0] vkms_vblank_simulate: vblank timer overrun [ 251.132110][ T7057] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(24) [ 251.137988][ T7056] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 251.138777][ T7057] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 251.327015][ T7079] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 251.335774][ T26] audit: type=1326 audit(1756109520.341:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70238ebe9 code=0x7ffc0000 [ 251.375576][ T7051] vhci_hcd vhci_hcd.0: Device attached [ 251.402781][ T7057] vhci_hcd vhci_hcd.0: Device attached [ 251.408375][ T26] audit: type=1326 audit(1756109520.341:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb70238ebe9 code=0x7ffc0000 [ 251.451513][ T7056] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(33) [ 251.458257][ T7056] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 251.512023][ T7056] vhci_hcd vhci_hcd.0: Device attached [ 251.540303][ T26] audit: type=1326 audit(1756109520.341:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70238ebe9 code=0x7ffc0000 [ 251.629096][ T7082] netlink: 16 bytes leftover after parsing attributes in process `syz.0.720'. [ 251.662053][ T26] audit: type=1326 audit(1756109520.341:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70238ebe9 code=0x7ffc0000 [ 251.684483][ C0] vkms_vblank_simulate: vblank timer overrun [ 251.787667][ T26] audit: type=1326 audit(1756109520.341:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb70238ebe9 code=0x7ffc0000 [ 251.826053][ T7075] vhci_hcd: connection closed [ 251.827803][ T51] vhci_hcd: stop threads [ 251.828839][ T7065] vhci_hcd: connection closed [ 251.832927][ T7069] vhci_hcd: connection closed [ 251.846747][ T7061] vhci_hcd: connection closed [ 251.846785][ T7058] vhci_hcd: connection closed [ 251.846959][ T51] vhci_hcd: release socket [ 251.867413][ T26] audit: type=1326 audit(1756109520.341:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70238ebe9 code=0x7ffc0000 [ 251.867708][ T26] audit: type=1326 audit(1756109520.341:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70238ebe9 code=0x7ffc0000 [ 251.867765][ T26] audit: type=1326 audit(1756109520.341:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb70238d550 code=0x7ffc0000 [ 251.867789][ T26] audit: type=1326 audit(1756109520.341:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fb702390417 code=0x7ffc0000 [ 251.871007][ T7053] vhci_hcd: connection reset by peer [ 251.885214][ T51] vhci_hcd: disconnect device [ 251.885466][ T51] vhci_hcd: stop threads [ 251.885481][ T51] vhci_hcd: release socket [ 251.886057][ T51] vhci_hcd: disconnect device [ 251.886194][ T51] vhci_hcd: stop threads [ 251.886202][ T51] vhci_hcd: release socket [ 251.886301][ T51] vhci_hcd: disconnect device [ 251.886426][ T51] vhci_hcd: stop threads [ 251.886434][ T51] vhci_hcd: release socket [ 251.886489][ T51] vhci_hcd: disconnect device [ 251.886581][ T51] vhci_hcd: stop threads [ 251.886588][ T51] vhci_hcd: release socket [ 251.886630][ T51] vhci_hcd: disconnect device [ 251.886709][ T51] vhci_hcd: stop threads [ 251.886716][ T51] vhci_hcd: release socket [ 251.886757][ T51] vhci_hcd: disconnect device [ 252.082149][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 252.454671][ T7080] vhci_hcd: connection closed [ 252.455007][ T51] vhci_hcd: stop threads [ 252.455023][ T51] vhci_hcd: release socket [ 252.455051][ T51] vhci_hcd: disconnect device [ 252.640517][ T7083] tty tty4: ldisc open failed (-12), clearing slot 3 [ 253.122102][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 253.366355][ T7121] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 253.379532][ T7121] infiniband sz1: set active [ 253.393387][ T7121] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 253.401431][ T7121] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 253.716985][ T4255] lo speed is unknown, defaulting to 1000 [ 254.162234][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 254.802053][ T32] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 255.062785][ T32] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 255.080667][ T32] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 255.111630][ T32] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 255.149182][ T32] usb 4-1: config 0 interface 0 has no altsetting 0 [ 255.193419][ T32] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 255.202567][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 255.268347][ T32] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 255.310486][ T32] usb 4-1: config 0 interface 0 has no altsetting 0 [ 255.341654][ T32] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 255.364718][ T32] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 255.377070][ T32] usb 4-1: config 0 interface 0 has no altsetting 0 [ 255.402538][ T32] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 255.419599][ T32] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 255.435055][ T32] usb 4-1: config 0 interface 0 has no altsetting 0 [ 255.445597][ T32] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 255.458994][ T32] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 255.481558][ T32] usb 4-1: config 0 interface 0 has no altsetting 0 [ 255.502798][ T32] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 255.526946][ T32] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 255.559794][ T32] usb 4-1: config 0 interface 0 has no altsetting 0 [ 255.584850][ T32] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 255.609445][ T32] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 255.653780][ T32] usb 4-1: config 0 interface 0 has no altsetting 0 [ 255.685221][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.691626][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.712724][ T32] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 255.725315][ T32] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 255.736552][ T32] usb 4-1: config 0 interface 0 has no altsetting 0 [ 255.750859][ T32] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 255.760504][ T32] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 255.762275][ T14] usb 38-1: device descriptor read/8, error -110 [ 255.769723][ T32] usb 4-1: Product: syz [ 255.779934][ T32] usb 4-1: Manufacturer: syz [ 255.798297][ T32] usb 4-1: SerialNumber: syz [ 255.814981][ T32] usb 4-1: config 0 descriptor?? [ 255.848640][ T32] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 256.043312][ T32] usb 4-1: USB disconnect, device number 3 [ 256.052481][ T32] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 256.252000][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 256.273579][ T14] usb usb38-port1: attempt power cycle [ 256.414114][ T4314] vhci_hcd: vhci_device speed not set [ 256.986426][ T7185] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 257.281970][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 257.782482][ T14] usb usb38-port1: unable to enumerate USB device [ 258.322007][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 259.139299][ T7197] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.756'. [ 259.164711][ T7197] netlink: 24 bytes leftover after parsing attributes in process `syz.0.756'. [ 259.258537][ T7200] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 259.282316][ T7200] tipc: Enabled bearer , priority 10 [ 259.361976][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 259.380028][ T7162] lo speed is unknown, defaulting to 1000 [ 259.389474][ T7162] lo speed is unknown, defaulting to 1000 [ 259.395567][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 259.662065][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 259.948341][ T7218] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 260.191997][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 260.402002][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 261.201979][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 261.442031][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 261.664633][ T7239] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 261.737010][ T7239] cramfs: wrong magic [ 262.241998][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 262.482023][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 263.281981][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 263.521953][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 264.331967][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 264.359762][ T7272] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 264.562017][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 264.828802][ T7289] IPv6: NLM_F_REPLACE set, but no existing node found! [ 265.371997][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 265.601979][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 266.402007][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 266.642010][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 267.127141][ T26] kauditd_printk_skb: 38 callbacks suppressed [ 267.127155][ T26] audit: type=1326 audit(1756109536.351:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7304 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb702385ba7 code=0x7ffc0000 [ 267.283861][ T26] audit: type=1326 audit(1756109536.351:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7304 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb70232ade9 code=0x7ffc0000 [ 267.451965][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 267.472302][ T26] audit: type=1326 audit(1756109536.371:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7304 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb702385ba7 code=0x7ffc0000 [ 267.619555][ T26] audit: type=1326 audit(1756109536.371:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7304 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb70232ade9 code=0x7ffc0000 [ 267.641870][ T26] audit: type=1326 audit(1756109536.371:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7304 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb702385ba7 code=0x7ffc0000 [ 267.691973][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 268.482027][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 268.775832][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 268.783030][ T4314] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 268.815763][ T26] audit: type=1326 audit(1756109536.371:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7304 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb70232ade9 code=0x7ffc0000 [ 269.048290][ T4314] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 269.074954][ T4314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 269.100938][ T4314] usb 4-1: Product: syz [ 269.116235][ T4314] usb 4-1: Manufacturer: syz [ 269.120926][ T4314] usb 4-1: SerialNumber: syz [ 269.176844][ T4314] usb 4-1: config 0 descriptor?? [ 269.199348][ T26] audit: type=1326 audit(1756109536.371:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7304 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb702385ba7 code=0x7ffc0000 [ 269.283399][ T4314] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 269.291547][ T4314] dvb-usb: bulk message failed: -22 (2/0) [ 269.370043][ T4314] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 269.389546][ T26] audit: type=1326 audit(1756109536.371:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7304 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb70232ade9 code=0x7ffc0000 [ 269.423159][ T4314] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 269.431595][ T4314] usb 4-1: media controller created [ 269.480696][ T4314] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 269.521979][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 269.648670][ T4314] cxusb: set interface failed [ 269.653447][ T4314] dvb-usb: bulk message failed: -22 (1/0) [ 269.656902][ T26] audit: type=1326 audit(1756109536.371:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7304 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb702385ba7 code=0x7ffc0000 [ 269.758010][ T26] audit: type=1326 audit(1756109536.371:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7304 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb70232ade9 code=0x7ffc0000 [ 269.780421][ T4314] DVB: Unable to find symbol mt352_attach() [ 269.797957][ T4314] dvb-usb: bulk message failed: -22 (5/0) [ 269.814581][ T4314] zl10353_read_register: readreg error (reg=127, ret==-121) [ 269.830150][ T4314] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 269.852168][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 270.091929][ T4314] rc_core: IR keymap rc-dvico-mce not found [ 270.097953][ T4314] Registered IR keymap rc-empty [ 270.561979][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 270.892219][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 271.590964][ T4314] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 271.601976][ T4314] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input16 [ 271.601971][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 271.622774][ T4314] dvb-usb: schedule remote query interval to 100 msecs. [ 271.629847][ T4314] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 271.642275][ T4314] usb 4-1: USB disconnect, device number 4 [ 271.686652][ T4314] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 271.911611][ T7354] ntfs3: loop4: try to read out of volume at offset 0x0 [ 271.922010][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 272.641987][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 272.961990][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 273.681954][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 274.002052][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 274.721987][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 275.041992][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 275.761980][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 276.081961][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 276.118826][ T7444] overlayfs: failed to decode file handle (len=6, type=196856, flags=0, err=-22) [ 276.802112][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 277.121990][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 277.842082][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 278.665112][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 278.881992][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 279.785102][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 279.894840][ T7495] binder: 7492:7495 ioctl c018620b 0 returned -14 [ 279.921987][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 280.802133][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 280.961988][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 281.102537][ T7511] siw: device registration error -23 [ 281.585903][ T7510] netlink: 40 bytes leftover after parsing attributes in process `syz.4.862'. [ 281.841988][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 282.011951][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 282.553815][ T4322] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 282.753241][ T4322] usb 3-1: Using ep0 maxpacket: 32 [ 282.767467][ T4322] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 282.807428][ T4322] usb 3-1: config 0 has no interface number 0 [ 282.891963][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 282.928809][ T4322] usb 3-1: New USB device found, idVendor=0763, idProduct=1041, bcdDevice=4a.5b [ 282.990450][ T4322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.038617][ T4322] usb 3-1: Product: syz [ 283.042990][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 283.131416][ T7544] binder: 7543:7544 ioctl c018620b 0 returned -14 [ 283.141541][ T4322] usb 3-1: Manufacturer: syz [ 283.170453][ T4322] usb 3-1: SerialNumber: syz [ 283.199376][ T4322] usb 3-1: config 0 descriptor?? [ 283.921996][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 284.081975][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 284.876377][ T7572] binder: 7571:7572 ioctl c018620b 0 returned -14 [ 284.971964][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 285.031550][ T7576] 9pnet_fd: Insufficient options for proto=fd [ 285.122028][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 285.947875][ T4322] snd-usb-audio: probe of 3-1:0.128 failed with error -2 [ 285.986205][ T4322] usb 3-1: USB disconnect, device number 6 [ 286.002057][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 286.161980][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 286.172002][ T14] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 286.362078][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 287.000628][ T14] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 287.051958][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 287.107443][ T14] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 287.162078][ T14] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 287.201969][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 287.221588][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 287.256729][ T14] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 287.282547][ T14] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 287.315250][ T14] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 287.324832][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.346524][ T14] usb 1-1: config 0 descriptor?? [ 287.560156][ T14] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 287.636796][ T7608] binder: 7607:7608 ioctl c018620b 0 returned -14 [ 287.765269][ T4322] usb 1-1: USB disconnect, device number 6 [ 287.799455][ T4322] usblp0: removed [ 288.091999][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 288.241991][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 289.121953][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 289.281989][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 290.161984][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 290.331980][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 290.935333][ T7646] binder: 7645:7646 ioctl c018620b 0 returned -14 [ 291.211953][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 291.362001][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 292.242042][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 292.355422][ T7669] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 292.402082][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 292.498960][ T7669] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 292.508817][ T7669] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 292.980782][ T7679] tipc: Started in network mode [ 292.989224][ T7679] tipc: Node identity 4, cluster identity 4711 [ 293.060460][ T7679] tipc: Node number set to 4 [ 293.282071][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 293.442130][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 294.332065][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 294.481947][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 295.362040][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 295.522067][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 296.412075][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 296.562057][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 297.442058][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 297.601971][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 298.482020][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 298.641979][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 299.521955][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 299.681964][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 300.562035][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 300.721108][ T26] kauditd_printk_skb: 65 callbacks suppressed [ 300.721123][ T26] audit: type=1326 audit(1756109569.941:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.0.948" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb70238ebe9 code=0x0 [ 300.722045][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 301.601969][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 301.657589][ T26] audit: type=1326 audit(1756109570.881:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7804 comm="syz.0.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70238ebe9 code=0x7ffc0000 [ 301.763226][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 301.786707][ T26] audit: type=1326 audit(1756109570.931:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7804 comm="syz.0.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70238ebe9 code=0x7ffc0000 [ 301.909329][ T26] audit: type=1326 audit(1756109570.931:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7804 comm="syz.0.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb70238ebe9 code=0x7ffc0000 [ 302.006398][ T26] audit: type=1326 audit(1756109570.931:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7804 comm="syz.0.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70238ebe9 code=0x7ffc0000 [ 302.156452][ T26] audit: type=1326 audit(1756109570.931:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7804 comm="syz.0.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70238ebe9 code=0x7ffc0000 [ 302.357202][ T26] audit: type=1326 audit(1756109570.941:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7804 comm="syz.0.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb70238ebe9 code=0x7ffc0000 [ 302.512350][ T26] audit: type=1326 audit(1756109571.511:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7804 comm="syz.0.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70238ebe9 code=0x7ffc0000 [ 302.534755][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.541313][ T26] audit: type=1326 audit(1756109571.511:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7804 comm="syz.0.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70238ebe9 code=0x7ffc0000 [ 302.564270][ T26] audit: type=1326 audit(1756109571.571:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7804 comm="syz.0.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb70238ebe9 code=0x7ffc0000 [ 302.642022][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 302.801994][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 302.993648][ T7823] comedi comedi0: Minor 3 could not be opened [ 303.681974][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 303.852101][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 304.519738][ T7857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.971'. [ 304.601108][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.971'. [ 304.721936][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 304.881989][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 305.625385][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.978'. [ 305.761946][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 305.922005][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 306.268009][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 306.280256][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 306.299827][ T7881] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 306.457582][ T7881] syz.3.978 (7881) used greatest stack depth: 20768 bytes left [ 306.812005][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 307.841959][ C1] net_ratelimit: 1 callbacks suppressed [ 307.841975][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 307.971940][ T128] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 308.002014][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 308.163733][ T128] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.174133][ T128] usb 4-1: config 0 has no interfaces? [ 308.179741][ T128] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 308.189700][ T128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.220594][ T128] usb 4-1: config 0 descriptor?? [ 308.454354][ T4322] usb 4-1: USB disconnect, device number 5 [ 308.881997][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 309.042008][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 309.921946][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 310.082195][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 310.961970][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 311.122019][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 312.004092][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 312.162123][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 313.042045][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 313.202016][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 313.792155][ T7989] binder: 7987:7989 ioctl c018620b 0 returned -14 [ 313.962277][ T8001] 9pnet_virtio: no channels available for device syz [ 314.092014][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 314.242024][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 315.121986][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 315.282048][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 315.405131][ T8023] binder_alloc: 8017: binder_alloc_buf, no vma [ 315.685089][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 315.685103][ T26] audit: type=1326 audit(1756109584.911:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ead8ebe9 code=0x7ffc0000 [ 315.713439][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.983447][ T26] audit: type=1326 audit(1756109584.941:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ead8ebe9 code=0x7ffc0000 [ 316.161958][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 316.305438][ T26] audit: type=1326 audit(1756109584.951:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff9ead8ebe9 code=0x7ffc0000 [ 316.328054][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 316.679141][ T26] audit: type=1326 audit(1756109584.951:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ead8ebe9 code=0x7ffc0000 [ 316.701466][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.713981][ T8038] binder: 8034:8038 ioctl c018620b 0 returned -14 [ 316.739796][ T26] audit: type=1326 audit(1756109584.951:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ead8ebe9 code=0x7ffc0000 [ 316.777089][ T26] audit: type=1326 audit(1756109584.951:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7ff9ead8ebe9 code=0x7ffc0000 [ 316.799358][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.033172][ T26] audit: type=1326 audit(1756109584.951:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ead8ebe9 code=0x7ffc0000 [ 317.099277][ T26] audit: type=1326 audit(1756109584.951:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ead8ebe9 code=0x7ffc0000 [ 317.127286][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.133675][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.169056][ T8044] netlink: 'syz.4.1029': attribute type 10 has an invalid length. [ 317.201971][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 317.228651][ T8044] bridge0: port 3(dummy0) entered disabled state [ 317.235271][ T8044] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.242800][ T8044] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.265864][ T26] audit: type=1326 audit(1756109584.971:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff9ead2ade9 code=0x7ffc0000 [ 317.340701][ T26] audit: type=1326 audit(1756109584.971:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff9ead2ade9 code=0x7ffc0000 [ 317.362006][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 317.362998][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.437610][ T8044] bridge0: port 3(dummy0) entered blocking state [ 317.444110][ T8044] bridge0: port 3(dummy0) entered forwarding state [ 317.450866][ T8044] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.458017][ T8044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.465474][ T8044] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.472645][ T8044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.740444][ T8044] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 317.768095][ T8046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1029'. [ 318.242009][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 318.402255][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 319.281983][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 319.442235][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 319.693198][ T8046] bridge0: port 3(dummy0) entered disabled state [ 319.704949][ T8046] device bridge_slave_1 left promiscuous mode [ 319.932217][ T8044] syz.4.1029 (8044) used greatest stack depth: 19744 bytes left [ 319.945060][ T8046] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.030551][ T8046] device bridge_slave_0 left promiscuous mode [ 320.049852][ T8046] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.058546][ T8078] binder: 8077:8078 ioctl c018620b 0 returned -14 [ 320.179196][ T8046] bond0: (slave bridge0): Releasing backup interface [ 320.314192][ T8083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1045'. [ 320.323346][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 320.482004][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 320.533356][ T8090] 9pnet_fd: Insufficient options for proto=fd [ 321.362145][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 321.522002][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 322.402009][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 322.505477][ T8119] netlink: 2048 bytes leftover after parsing attributes in process `syz.5.1055'. [ 322.561986][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 322.579544][ T8119] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1055'. [ 322.965644][ T8123] binder: 8122:8123 ioctl c018620b 0 returned -14 [ 323.403374][ T8133] 9pnet_fd: Insufficient options for proto=fd [ 323.442029][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 323.445377][ T8135] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 323.602025][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 323.741115][ T8143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1063'. [ 323.885456][ T8147] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 323.892007][ T8147] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 323.950486][ T8147] vhci_hcd vhci_hcd.0: Device attached [ 323.998312][ T8148] vhci_hcd: connection closed [ 323.998524][ T4767] vhci_hcd: stop threads [ 324.045211][ T4767] vhci_hcd: release socket [ 324.085255][ T4767] vhci_hcd: disconnect device [ 324.161992][ T4314] vhci_hcd: vhci_device speed not set [ 324.246186][ T8157] binder: 8156:8157 ioctl c018620b 0 returned -14 [ 324.343871][ T8164] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.1070'. [ 324.361999][ T8164] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1070'. [ 324.482027][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 324.642088][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 325.522039][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 325.682067][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 325.805846][ T8170] 9pnet_virtio: no channels available for device syz [ 326.147536][ T8172] 9pnet_fd: Insufficient options for proto=fd [ 326.561949][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 326.722130][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 327.601978][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 328.321036][ T8216] netlink: 2048 bytes leftover after parsing attributes in process `syz.5.1087'. [ 328.384470][ T8216] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1087'. [ 328.642061][ C1] net_ratelimit: 1 callbacks suppressed [ 328.642081][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 328.801961][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 329.062139][ T4314] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 329.268110][ T4314] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 329.304838][ T4314] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 329.344927][ T4314] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 329.380759][ T4314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.407807][ T4314] usb 5-1: config 0 descriptor?? [ 329.439234][ T4314] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 329.681988][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 329.841976][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 330.114420][ T8239] 9pnet_virtio: no channels available for device syz [ 330.862321][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 330.891943][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 331.092358][ T8247] netlink: 'syz.5.1099': attribute type 10 has an invalid length. [ 331.114637][ T8247] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.129516][ T8247] bond0: (slave team0): Enslaving as an active interface with an up link [ 331.381252][ T8252] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1098'. [ 331.922023][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 332.363629][ T8245] 9pnet_virtio: no channels available for device syz [ 332.363649][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 332.410834][ T4314] usb 5-1: USB disconnect, device number 9 [ 332.617766][ T8252] device bridge2 entered promiscuous mode [ 332.672761][ T8247] netlink: 'syz.5.1099': attribute type 10 has an invalid length. [ 332.719187][ T8247] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 332.760282][ T8254] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 332.961996][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 333.452051][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 334.001973][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 334.481997][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 335.041980][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 335.521971][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 335.884488][ T8300] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 336.081948][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 336.117733][ T8309] block device autoloading is deprecated and will be removed. [ 336.199377][ T8315] binder: 8314:8315 ioctl c018620b 0 returned -14 [ 336.561975][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 337.121970][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 337.684178][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 338.161967][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 338.204865][ T8350] 9pnet_virtio: no channels available for device syz [ 338.722049][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 339.150365][ T8356] binder: 8355:8356 ioctl c018620b 0 returned -14 [ 339.201943][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 339.762012][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 340.241933][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 340.649480][ T8392] binder: 8390:8392 ioctl c018620b 0 returned -14 [ 340.802072][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 341.024788][ T8399] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1149'. [ 341.281925][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 341.842021][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 342.038825][ T8400] ieee802154 phy0 wpan0: encryption failed: -22 [ 342.321954][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 342.652001][ T4322] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 342.710057][ T8417] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1155'. [ 342.841997][ T4322] usb 1-1: Using ep0 maxpacket: 32 [ 342.849578][ T4322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.877557][ T8424] binder: 8422:8424 ioctl c018620b 0 returned -14 [ 342.882057][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 342.891365][ T4322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.011095][ T4322] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 343.036681][ T4322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.052656][ T4322] usb 1-1: config 0 descriptor?? [ 343.362152][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 343.468318][ T4322] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 343.921983][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 344.299009][ T4322] usb 1-1: USB disconnect, device number 7 [ 344.426938][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 344.488527][ T4314] hid-generic 0000:0000:0000.0003: unknown main item tag 0x7 [ 344.510246][ T4314] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 344.534730][ T4314] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 344.554348][ T4314] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 344.589475][ T4314] hid-generic 0000:0000:0000.0003: unknown main item tag 0x2 [ 344.632067][ T4314] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 344.655290][ T4314] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 344.680850][ T4314] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 344.695359][ T4314] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 344.707499][ T4314] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 344.715233][ T4314] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 344.722914][ T4314] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 344.730485][ T4314] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 344.738128][ T4314] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 344.757930][ T4314] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 344.777983][ T4314] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 344.796634][ T4314] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 344.816054][ T4314] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 344.838214][ T4314] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 344.854429][ T4314] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 344.863540][ T4314] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 344.871705][ T4314] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 344.879991][ T4314] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 344.887750][ T4314] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 344.895527][ T4314] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 344.903358][ T4314] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 344.910952][ T4314] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 344.919660][ T4314] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 344.927319][ T4314] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 344.934907][ T4314] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 344.942585][ T4314] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 344.950089][ T4314] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 344.957680][ T4314] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 344.965205][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 344.972452][ T4314] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 344.990449][ T4314] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 345.362037][ T4322] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 345.442015][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 345.594021][ T4322] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 345.613140][ T4322] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 345.623706][ T4322] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 345.632750][ T4322] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 345.654225][ T4322] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 345.678632][ T4322] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 345.690544][ T8465] binder: 8464:8465 ioctl c018620b 0 returned -14 [ 345.702749][ T4322] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 345.723079][ T4322] usb 5-1: Product: syz [ 345.740516][ T4322] usb 5-1: Manufacturer: syz [ 345.761286][ T4322] cdc_wdm 5-1:1.0: skipping garbage [ 345.789295][ T4322] cdc_wdm 5-1:1.0: skipping garbage [ 345.819839][ T4322] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 345.840167][ T4322] cdc_wdm 5-1:1.0: Unknown control protocol [ 346.001761][ T4314] usb 5-1: USB disconnect, device number 10 [ 346.007924][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 346.481941][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 346.916527][ T8498] binder: 8497:8498 ioctl c018620b 0 returned -14 [ 347.041987][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 347.521965][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 348.081925][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 348.561938][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 349.122004][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 349.601949][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 349.659928][ T8530] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 349.666502][ T8530] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 349.710703][ T8530] vhci_hcd vhci_hcd.0: Device attached [ 349.931654][ T8534] netlink: 'syz.5.1191': attribute type 1 has an invalid length. [ 349.981937][ T4314] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 350.034695][ T8532] vhci_hcd: connection reset by peer [ 350.040945][ T4352] vhci_hcd: stop threads [ 350.054576][ T4352] vhci_hcd: release socket [ 350.088624][ T4352] vhci_hcd: disconnect device [ 350.161931][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 350.641946][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 351.201955][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 351.570448][ T8550] binder: 8549:8550 ioctl c018620b 0 returned -14 [ 351.691977][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 352.251930][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 352.722015][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 353.057751][ T8586] binder: 8585:8586 ioctl c018620b 0 returned -14 [ 353.282010][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 353.762309][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 354.321962][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 354.379624][ T8605] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1210'. [ 354.797216][ T8615] binder: 8614:8615 ioctl c018620b 0 returned -14 [ 354.803996][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 354.927387][ T8622] ------------[ cut here ]------------ [ 354.933529][ T8622] WARNING: CPU: 0 PID: 8622 at net/sched/sch_taprio.c:1020 taprio_get_start_time+0x139/0x160 [ 354.943866][ T8622] Modules linked in: [ 354.947795][ T8622] CPU: 0 PID: 8622 Comm: syz.3.1222 Not tainted 6.1.148-syzkaller #0 [ 354.956117][ T8622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 354.966285][ T8622] RIP: 0010:taprio_get_start_time+0x139/0x160 [ 354.972418][ T8622] Code: 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 2c ce 7d f9 4c 89 23 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f7 b0 2d f9 <0f> 0b b8 f2 ff ff ff eb e7 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c [ 354.992207][ T8622] RSP: 0018:ffffc9000c606d88 EFLAGS: 00010283 [ 354.998395][ T8622] RAX: ffffffff88530d69 RBX: ffffc9000c606e98 RCX: 0000000000080000 [ 355.006449][ T8622] RDX: ffffc9000e6ca000 RSI: 00000000000021cd RDI: 00000000000021ce [ 355.014488][ T8622] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffffbfff215bc81 [ 355.022519][ T8622] R10: fffffbfff215bc81 R11: 1ffffffff215bc80 R12: 00000052a0cba3a5 [ 355.030599][ T8622] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 355.038628][ T8622] FS: 00007ff9e8ff66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 355.047710][ T8622] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 355.054441][ T8622] CR2: 0000200000000300 CR3: 00000000531a5000 CR4: 00000000003506f0 [ 355.062504][ T8622] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 355.070522][ T8622] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 355.078558][ T8622] Call Trace: [ 355.081878][ T8622] [ 355.084828][ T8622] taprio_change+0x3daa/0x50f0 [ 355.089650][ T8622] ? taprio_destroy+0x4b0/0x4b0 [ 355.094553][ T8622] ? qdisc_create+0x7cb/0x1090 [ 355.099342][ T8622] ? ____sys_sendmsg+0x59b/0x970 [ 355.104332][ T8622] ? ___sys_sendmsg+0x21c/0x290 [ 355.109244][ T8622] ? __se_sys_sendmsg+0x19e/0x270 [ 355.114422][ T8622] ? do_syscall_64+0x4c/0xa0 [ 355.119031][ T8622] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 355.123986][ T4314] vhci_hcd: vhci_device speed not set [ 355.125258][ T8622] ? qdisc_alloc+0x95/0xa50 [ 355.135223][ T8622] ? fifo_init+0x3ab/0x650 [ 355.139673][ T8622] ? qdisc_peek_head+0x40/0x40 [ 355.144632][ T8622] ? qdisc_alloc+0x77a/0xa50 [ 355.149263][ T8622] ? mutex_is_locked+0xe/0x40 [ 355.154073][ T8622] ? taprio_peek+0x590/0x590 [ 355.158689][ T8622] qdisc_create+0x7cb/0x1090 [ 355.163439][ T8622] ? qdisc_notify+0x370/0x370 [ 355.168189][ T8622] tc_modify_qdisc+0xb2f/0x1cc0 [ 355.173160][ T8622] ? qdisc_offload_query_caps+0x140/0x140 [ 355.178975][ T8622] ? qdisc_offload_query_caps+0x140/0x140 [ 355.184757][ T8622] ? rtnetlink_rcv_msg+0x1d8/0xed0 [ 355.189930][ T8622] rtnetlink_rcv_msg+0x79b/0xed0 [ 355.195068][ T8622] ? rtnetlink_bind+0x80/0x80 [ 355.199771][ T8622] ? __local_bh_enable_ip+0x12a/0x1b0 [ 355.205205][ T8622] ? lockdep_hardirqs_on+0x94/0x140 [ 355.210531][ T8622] ? __local_bh_enable_ip+0x12a/0x1b0 [ 355.215977][ T8622] ? _local_bh_enable+0xa0/0xa0 [ 355.220978][ T8622] ? __dev_queue_xmit+0x26f/0x3760 [ 355.226158][ T8622] ? __dev_queue_xmit+0x26f/0x3760 [ 355.231300][ T8622] ? __dev_queue_xmit+0x15c9/0x3760 [ 355.236631][ T8622] ? __dev_queue_xmit+0x26f/0x3760 [ 355.241889][ T8622] ? netdev_core_pick_tx+0x340/0x340 [ 355.247397][ T8622] ? ref_tracker_free+0x630/0x7c0 [ 355.252578][ T8622] ? refcount_inc+0x70/0x70 [ 355.257303][ T8622] ? __copy_skb_header+0x417/0x5a0 [ 355.262921][ T8622] ? __skb_clone+0x480/0x790 [ 355.267562][ T8622] netlink_rcv_skb+0x1de/0x420 [ 355.272399][ T8622] ? rtnetlink_bind+0x80/0x80 [ 355.277117][ T8622] ? netlink_ack+0x1100/0x1100 [ 355.282141][ T8622] ? netlink_deliver_tap+0x2e/0x1b0 [ 355.287376][ T8622] netlink_unicast+0x74d/0x8d0 [ 355.292309][ T8622] netlink_sendmsg+0x89e/0xbc0 [ 355.297271][ T8622] ? netlink_getsockopt+0x540/0x540 [ 355.302518][ T8622] ? aa_sock_msg_perm+0x94/0x150 [ 355.307508][ T8622] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 355.312854][ T8622] ? security_socket_sendmsg+0x7c/0xa0 [ 355.318350][ T8622] ? netlink_getsockopt+0x540/0x540 [ 355.323694][ T8622] ____sys_sendmsg+0x59b/0x970 [ 355.328493][ T8622] ? __sys_sendmsg_sock+0x30/0x30 [ 355.333583][ T8622] ? __import_iovec+0x315/0x500 [ 355.338467][ T8622] ? import_iovec+0x6f/0xa0 [ 355.343039][ T8622] ___sys_sendmsg+0x21c/0x290 [ 355.347768][ T8622] ? __sys_sendmsg+0x270/0x270 [ 355.352623][ T8622] ? __fdget+0x17c/0x200 [ 355.356883][ T8622] __se_sys_sendmsg+0x19e/0x270 [ 355.361755][ T8622] ? __se_sys_futex+0x14a/0x440 [ 355.362050][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 355.366658][ T8622] ? __x64_sys_sendmsg+0x80/0x80 [ 355.378572][ T8622] ? lockdep_hardirqs_on+0x94/0x140 [ 355.383938][ T8622] do_syscall_64+0x4c/0xa0 [ 355.388393][ T8622] ? clear_bhb_loop+0x60/0xb0 [ 355.393128][ T8622] ? clear_bhb_loop+0x60/0xb0 [ 355.397836][ T8622] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 355.403792][ T8622] RIP: 0033:0x7ff9ead8ebe9 [ 355.408277][ T8622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.428186][ T8622] RSP: 002b:00007ff9e8ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.436646][ T8622] RAX: ffffffffffffffda RBX: 00007ff9eafb5fa0 RCX: 00007ff9ead8ebe9 [ 355.444666][ T8622] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 355.452779][ T8622] RBP: 00007ff9eae11e19 R08: 0000000000000000 R09: 0000000000000000 [ 355.460766][ T8622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.468797][ T8622] R13: 00007ff9eafb6038 R14: 00007ff9eafb5fa0 R15: 00007fffc378dca8 [ 355.477037][ T8622] [ 355.480087][ T8622] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 355.487472][ T8622] CPU: 0 PID: 8622 Comm: syz.3.1222 Not tainted 6.1.148-syzkaller #0 [ 355.495534][ T8622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 355.505628][ T8622] Call Trace: [ 355.508914][ T8622] [ 355.511934][ T8622] dump_stack_lvl+0x168/0x22e [ 355.516707][ T8622] ? memcpy+0x3c/0x60 [ 355.520784][ T8622] ? show_regs_print_info+0x12/0x12 [ 355.525990][ T8622] ? load_image+0x3b0/0x3b0 [ 355.530669][ T8622] panic+0x2c9/0x710 [ 355.534558][ T8622] ? bpf_jit_dump+0xd0/0xd0 [ 355.539097][ T8622] __warn+0x2f8/0x4f0 [ 355.543093][ T8622] ? taprio_get_start_time+0x139/0x160 [ 355.548677][ T8622] ? taprio_get_start_time+0x139/0x160 [ 355.554305][ T8622] report_bug+0x2ba/0x4f0 [ 355.558626][ T8622] ? taprio_get_start_time+0x139/0x160 [ 355.564164][ T8622] handle_bug+0x3a/0x70 [ 355.568332][ T8622] exc_invalid_op+0x16/0x40 [ 355.572848][ T8622] asm_exc_invalid_op+0x16/0x20 [ 355.577696][ T8622] RIP: 0010:taprio_get_start_time+0x139/0x160 [ 355.583840][ T8622] Code: 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 2c ce 7d f9 4c 89 23 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f7 b0 2d f9 <0f> 0b b8 f2 ff ff ff eb e7 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c [ 355.603441][ T8622] RSP: 0018:ffffc9000c606d88 EFLAGS: 00010283 [ 355.609497][ T8622] RAX: ffffffff88530d69 RBX: ffffc9000c606e98 RCX: 0000000000080000 [ 355.617465][ T8622] RDX: ffffc9000e6ca000 RSI: 00000000000021cd RDI: 00000000000021ce [ 355.625527][ T8622] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffffbfff215bc81 [ 355.633490][ T8622] R10: fffffbfff215bc81 R11: 1ffffffff215bc80 R12: 00000052a0cba3a5 [ 355.641536][ T8622] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 355.649585][ T8622] ? taprio_get_start_time+0x139/0x160 [ 355.655055][ T8622] ? taprio_get_start_time+0x139/0x160 [ 355.660599][ T8622] taprio_change+0x3daa/0x50f0 [ 355.665453][ T8622] ? taprio_destroy+0x4b0/0x4b0 [ 355.670288][ T8622] ? qdisc_create+0x7cb/0x1090 [ 355.675041][ T8622] ? ____sys_sendmsg+0x59b/0x970 [ 355.680065][ T8622] ? ___sys_sendmsg+0x21c/0x290 [ 355.684909][ T8622] ? __se_sys_sendmsg+0x19e/0x270 [ 355.689920][ T8622] ? do_syscall_64+0x4c/0xa0 [ 355.694501][ T8622] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 355.700652][ T8622] ? qdisc_alloc+0x95/0xa50 [ 355.705153][ T8622] ? fifo_init+0x3ab/0x650 [ 355.709568][ T8622] ? qdisc_peek_head+0x40/0x40 [ 355.714324][ T8622] ? qdisc_alloc+0x77a/0xa50 [ 355.718912][ T8622] ? mutex_is_locked+0xe/0x40 [ 355.723679][ T8622] ? taprio_peek+0x590/0x590 [ 355.728262][ T8622] qdisc_create+0x7cb/0x1090 [ 355.732862][ T8622] ? qdisc_notify+0x370/0x370 [ 355.737533][ T8622] tc_modify_qdisc+0xb2f/0x1cc0 [ 355.742432][ T8622] ? qdisc_offload_query_caps+0x140/0x140 [ 355.748242][ T8622] ? qdisc_offload_query_caps+0x140/0x140 [ 355.753950][ T8622] ? rtnetlink_rcv_msg+0x1d8/0xed0 [ 355.759056][ T8622] rtnetlink_rcv_msg+0x79b/0xed0 [ 355.764000][ T8622] ? rtnetlink_bind+0x80/0x80 [ 355.769016][ T8622] ? __local_bh_enable_ip+0x12a/0x1b0 [ 355.774381][ T8622] ? lockdep_hardirqs_on+0x94/0x140 [ 355.779577][ T8622] ? __local_bh_enable_ip+0x12a/0x1b0 [ 355.784941][ T8622] ? _local_bh_enable+0xa0/0xa0 [ 355.789813][ T8622] ? __dev_queue_xmit+0x26f/0x3760 [ 355.794915][ T8622] ? __dev_queue_xmit+0x26f/0x3760 [ 355.800052][ T8622] ? __dev_queue_xmit+0x15c9/0x3760 [ 355.805333][ T8622] ? __dev_queue_xmit+0x26f/0x3760 [ 355.810436][ T8622] ? netdev_core_pick_tx+0x340/0x340 [ 355.815722][ T8622] ? ref_tracker_free+0x630/0x7c0 [ 355.820743][ T8622] ? refcount_inc+0x70/0x70 [ 355.825244][ T8622] ? __copy_skb_header+0x417/0x5a0 [ 355.830345][ T8622] ? __skb_clone+0x480/0x790 [ 355.834939][ T8622] netlink_rcv_skb+0x1de/0x420 [ 355.839702][ T8622] ? rtnetlink_bind+0x80/0x80 [ 355.844370][ T8622] ? netlink_ack+0x1100/0x1100 [ 355.849127][ T8622] ? netlink_deliver_tap+0x2e/0x1b0 [ 355.854314][ T8622] netlink_unicast+0x74d/0x8d0 [ 355.859079][ T8622] netlink_sendmsg+0x89e/0xbc0 [ 355.863840][ T8622] ? netlink_getsockopt+0x540/0x540 [ 355.869032][ T8622] ? aa_sock_msg_perm+0x94/0x150 [ 355.873967][ T8622] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 355.879238][ T8622] ? security_socket_sendmsg+0x7c/0xa0 [ 355.884684][ T8622] ? netlink_getsockopt+0x540/0x540 [ 355.889869][ T8622] ____sys_sendmsg+0x59b/0x970 [ 355.894630][ T8622] ? __sys_sendmsg_sock+0x30/0x30 [ 355.899641][ T8622] ? __import_iovec+0x315/0x500 [ 355.904492][ T8622] ? import_iovec+0x6f/0xa0 [ 355.908995][ T8622] ___sys_sendmsg+0x21c/0x290 [ 355.913754][ T8622] ? __sys_sendmsg+0x270/0x270 [ 355.918659][ T8622] ? __fdget+0x17c/0x200 [ 355.922928][ T8622] __se_sys_sendmsg+0x19e/0x270 [ 355.927782][ T8622] ? __se_sys_futex+0x14a/0x440 [ 355.932640][ T8622] ? __x64_sys_sendmsg+0x80/0x80 [ 355.937763][ T8622] ? lockdep_hardirqs_on+0x94/0x140 [ 355.943232][ T8622] do_syscall_64+0x4c/0xa0 [ 355.947844][ T8622] ? clear_bhb_loop+0x60/0xb0 [ 355.952514][ T8622] ? clear_bhb_loop+0x60/0xb0 [ 355.957211][ T8622] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 355.963135][ T8622] RIP: 0033:0x7ff9ead8ebe9 [ 355.967594][ T8622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.987284][ T8622] RSP: 002b:00007ff9e8ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.995689][ T8622] RAX: ffffffffffffffda RBX: 00007ff9eafb5fa0 RCX: 00007ff9ead8ebe9 [ 356.003734][ T8622] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 356.011693][ T8622] RBP: 00007ff9eae11e19 R08: 0000000000000000 R09: 0000000000000000 [ 356.019699][ T8622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.027692][ T8622] R13: 00007ff9eafb6038 R14: 00007ff9eafb5fa0 R15: 00007fffc378dca8 [ 356.035684][ T8622] [ 356.039048][ T8622] Kernel Offset: disabled [ 356.043475][ T8622] Rebooting in 86400 seconds..