last executing test programs: 1.596474508s ago: executing program 2 (id=1902): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000016c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x3, 0x56, 0x401, 0x2}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xc, 0xb}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x0, 0x3, 0x7, 0x10, 0x4, 0x17, 0x18, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031614d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.292449136s ago: executing program 0 (id=1906): sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x18, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4000c014) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtaction={0x14, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x9, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x24, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0xee8c}, @TCA_CODEL_TARGET={0x8, 0x1, 0xff}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x8100, r5, 0x1, 0x3, 0x6, @remote}, 0x14) 1.222867068s ago: executing program 1 (id=1907): syz_open_procfs$namespace(0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c5}, 0x48880) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0xf3f, 0x70bd28, 0x25dddbbd, {0x0, 0x0, 0x0, r6, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041089}, 0x4880) sendmsg$kcm(r4, &(0x7f0000000240)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000200)="03", 0x1}, {&(0x7f00000005c0)}], 0x2}, 0x20004014) 1.1375599s ago: executing program 2 (id=1908): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x9, 0xb, 0x10000005, 0x8c45, 0x200}, 0x5b, 0xf}, [{0x5c, 0x71e, 0x3, 0xfffffffe, 0x6, 0x1}, {0x5, 0x40, 0x2, 0xd, 0x401}, {0x5, 0xc, 0x8, 0xfffffffb, 0x3, 0xfffffffb}, {0x8, 0xfffffffc, 0x16, 0x9, 0x2, 0x9}, {0x20000000, 0x80000000, 0x3, 0x1, 0x76}, {0x10001, 0x459e, 0x5, 0xb8a5, 0x5, 0x8}, {0x8, 0x2, 0x1ff, 0xfffffffa, 0x8, 0x3}, {0x1b, 0x8, 0x900000, 0xfffffff8, 0x5, 0x8}, {0x9, 0x1, 0x9, 0x10, 0x4}, {0x0, 0xcc, 0x3, 0xffff, 0x7, 0x7}, {0x8, 0x6, 0xdc5, 0x3, 0x3, 0xfffffffa}, {0xa8, 0x5, 0x10000, 0xffffffff, 0x6b0c, 0x8e2}, {0x6, 0x8, 0x200, 0x1, 0x0, 0xffffffff}, {0x2, 0x3, 0x9, 0x0, 0x1, 0x8}, {0x7, 0x30000000, 0x4, 0xb, 0x5, 0x7}, {0x7fff, 0x6, 0x3, 0x6, 0x64, 0x6}, {0xa, 0x9, 0x6, 0x8, 0xfb}, {0xb1, 0xa37, 0xfffffeff, 0x100, 0x200, 0x7fff}, {0x100, 0x3, 0x8, 0x9, 0x7, 0x8}, {0x4e91, 0x7, 0xffffffff, 0x40f, 0x11, 0x1b}, {0xffff, 0x2, 0xfffffff0, 0x101, 0x7ff, 0x6}, {0x1, 0xb, 0x3, 0x5, 0xfffffffc, 0x5}, {0x2, 0x2, 0x400, 0x1a76, 0xa, 0x800}, {0xa578, 0x5, 0x5, 0x9c, 0x675, 0x88b}, {0xfffff221, 0x101, 0x5, 0xfffffff9, 0x80000000, 0x81}, {0x5, 0x0, 0x7, 0x0, 0xb, 0x3}, {0x3, 0xc11, 0x400, 0x6, 0x53f, 0x9}, {0x3, 0x7, 0x6, 0x4, 0x4, 0x4}, {0x5, 0x401, 0x1, 0x6, 0x4, 0x1ff}, {0xffffffff, 0x40089cf3, 0x5, 0x3, 0x9, 0x800}, {0x0, 0x2, 0x4, 0x9, 0x2}, {0x29f, 0xca, 0x0, 0x1, 0x5, 0xfffffffa}, {0x10001, 0x10001, 0x10, 0x4, 0x10000, 0x6}, {0xae7, 0x800, 0x80000001, 0xf, 0x6, 0x6}, {0x4, 0x4, 0x8, 0x2, 0x9, 0x4c}, {0x4, 0x1, 0xfffffff7, 0xcc, 0x7ff, 0xeb9a}, {0x8001, 0x3, 0x2bd2, 0x1621, 0x3, 0x2}, {0x8, 0xfffffe00, 0x9, 0xd5e, 0x5, 0x2}, {0x6, 0x4, 0x6, 0x11f, 0xc, 0x1}, {0x5, 0x101, 0x721, 0x100, 0x908, 0x8}, {0x2597, 0xa, 0x9, 0x8, 0x80000001, 0x4}, {0x3, 0x7fffffff, 0x200, 0x8ad, 0xd34e}, {0x7fff, 0x800, 0x6, 0x2, 0x7, 0xb2f6}, {0x4, 0xc7, 0x6c, 0xfffffd20, 0x6, 0x1}, {0x401, 0x5, 0x3, 0xdf, 0x8, 0x5}, {0x5, 0x1, 0xe, 0x2, 0x6, 0xa2fe}, {0xfffff685, 0xfff, 0x4, 0xa6c, 0x9, 0x5}, {0x10, 0xc771, 0x1, 0x37, 0xe3f, 0x3ff}, {0x7, 0x0, 0xa, 0x1000, 0x6, 0x401}, {0x5, 0x3ff, 0x5, 0xff, 0x10000, 0x3}, {0x2, 0x9, 0xafa5, 0x0, 0x1, 0x4}, {0x4, 0x40, 0x8, 0xa, 0x2, 0xfffffff7}, {0xb, 0x1, 0x3, 0x100, 0xb, 0x7}, {0x100, 0x995, 0x374e, 0x9, 0x1000, 0xffffdb76}, {0x3, 0x4, 0xa6de, 0x9bf4, 0x3, 0x6}, {0x7ff, 0x0, 0x9, 0x0, 0xfffffffa, 0x1}, {0x7, 0x929, 0x7f, 0xe0000, 0x2, 0x81}, {0x1, 0x34, 0x0, 0x5, 0xe22, 0x6}, {0xfffffffc, 0xaadf, 0xbc7, 0x6, 0x8, 0x2}, {0x6ef, 0x3, 0x9, 0x7, 0x4, 0x8000}, {0x2, 0x1, 0x2, 0xc3c1, 0x7, 0x4bbd}, {0x3ff, 0x4, 0xfffffffe, 0x100, 0x7fffffff, 0x3}, {0x7, 0x2, 0xff, 0x9, 0xb5a1, 0x2}, {0x9, 0x9, 0xffff, 0x100, 0xf8000000, 0x8000}, {0x0, 0xfff, 0x7, 0x7, 0xffffffff, 0xfffffffe}, {0x5, 0x9, 0x80, 0x9, 0x6, 0x9250}, {0x3, 0x5, 0x81, 0x4, 0x1, 0x6}, {0x6, 0x7fffffff, 0x0, 0x1b, 0x39, 0x4}, {0x5, 0x3ff, 0x40, 0xbe, 0xffff, 0x5}, {0x24, 0x53956696, 0x81, 0x4, 0x3, 0x5}, {0x80000001, 0x7, 0x0, 0x5, 0x2, 0x8001}, {0x10000, 0x400, 0x4, 0x1, 0x618, 0x1}, {0xf1, 0x5, 0xfffffbff, 0x5, 0x400, 0xa6}, {0x4, 0x7ff, 0x5, 0x8, 0x800, 0x8}, {0x8, 0x1, 0x1000, 0x100, 0x4, 0x45f2}, {0xd8, 0x8, 0x5, 0xf8b, 0x6, 0xb5}, {0x6, 0x7, 0xe9, 0x80, 0x5, 0xa}, {0x2, 0x0, 0x4, 0x400, 0x1, 0x6}, {0xfa9, 0x3, 0x0, 0xffff, 0x0, 0x3}, {0x99, 0x9, 0x6, 0x3, 0x5, 0x10000}, {0x7fff, 0x4, 0x6, 0x2, 0x48, 0x5}, {0xffffb1c7, 0x7, 0x80000001, 0x1, 0x800, 0xb54f}, {0x2, 0x1, 0x1000, 0x101, 0x9, 0xf7}, {0xfffff000, 0x7, 0x7, 0x6ba, 0x6}, {0x6, 0x0, 0x5, 0x6a79, 0x545, 0x7}, {0xfffffffc, 0x2c04, 0x7, 0x8000000, 0x4, 0x8000}, {0xffff, 0x7fff, 0x3, 0x3, 0x4, 0x8}, {0x100, 0x400, 0x4800000, 0x835, 0x4, 0xe09}, {0x4, 0x7b, 0xff, 0xfff, 0x1, 0x9}, {0x18000000, 0x9, 0x833b, 0xfffff251, 0x5, 0xa}, {0xf, 0x1, 0x8, 0x2, 0x5}, {0x40, 0xfffffffc, 0x4, 0x7f, 0x7, 0x3}, {0x2e, 0x80000001, 0x7fff, 0x3, 0x3, 0x401}, {0x9, 0xacc, 0xd, 0x1, 0x95e, 0x5}, {0x9c2, 0x6, 0x4, 0xffffffff, 0x1000}, {0x7b8, 0x5, 0xb, 0xa, 0x8, 0x200}, {0xf, 0xb7a, 0xe, 0x6, 0xc1, 0x7}, {0x7, 0x5f6b0af1, 0x6, 0x54, 0x0, 0x1000}, {0x78f6, 0x46000000, 0x0, 0x6, 0x8, 0xee96}, {0xfffffffe, 0x7, 0x80000001, 0xff, 0x0, 0x5}, {0x40, 0xf29, 0x9, 0xb, 0xcb, 0x1}, {0x91cb, 0x3, 0x0, 0x7, 0x3}, {0x9, 0xd0f, 0x8, 0xfffffffb, 0x8, 0x2}, {0x401, 0x7fffffff, 0x800, 0xfffff001, 0xc}, {0x6, 0x9, 0xc000, 0x0, 0x8000, 0x7fff}, {0x69, 0xffff, 0x1, 0x6, 0x80, 0x8}, {0x8c7, 0x2, 0xd0, 0x0, 0x4, 0x3}, {0x3ff, 0x4, 0x7, 0xffff, 0x1, 0xff}, {0x4, 0x1ff, 0xd, 0x9, 0x9, 0x2}, {0x7, 0x1, 0xc2, 0x7, 0x4}, {0x22b, 0x7, 0x704e, 0x3, 0x9, 0x6}, {0x80000001, 0x2, 0xffffd611, 0x8, 0x7}, {0x8000, 0x80, 0x9, 0xffff, 0x0, 0x2}, {0x6783edc, 0xaf2, 0x7, 0x8, 0x1, 0xff000000}, {0x7, 0x1, 0x140000, 0x4, 0xd, 0x200}, {0xb, 0x2, 0x8, 0xa, 0x1}, {0x7, 0x69a5, 0x100, 0x236, 0x4, 0x10001}, {0x3, 0xffff0000, 0x144, 0x2, 0x81, 0x8}, {0xde8, 0x2, 0x6, 0x9b, 0x88db, 0x401}, {0x0, 0x6, 0x40, 0x0, 0x9, 0xc9}, {0x2bd1272, 0x59, 0x3921, 0x57, 0x6, 0x80000000}, {0x3, 0x7, 0xb861, 0x1, 0x6, 0x4}, {0x1, 0x3, 0x8, 0x9, 0x4, 0x8}, {0x0, 0x7, 0x80, 0xed2, 0x80000000, 0x8}, {0x2, 0xfffffc01, 0xfc3, 0x8d5, 0x8001, 0x3fffc000}, {0x8d, 0x6, 0x0, 0x5, 0x4, 0x1}, {0x6, 0x9, 0xeec6, 0x6, 0x7, 0x9}, {0x80000000, 0xd6187927, 0x1, 0x2a, 0xa, 0x7fffffff}], [{0x1, 0x1}, {0x4}, {0x2}, {0x2}, {0x0, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x1}, {0x3}, {0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x7}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x5, 0xd716e616b6744d43}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x3, 0xb4d2ea9c256b621e}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x3}, {0x3}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0xe270aa78089fc197}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x3}, {0x2}, {0x2}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 982.155244ms ago: executing program 0 (id=1910): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e41, 0x2000007a, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="3000000000000000290000000400"], 0x30}, 0x4008000) 877.383837ms ago: executing program 0 (id=1912): sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)='$', 0x1}], 0x1}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x40, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x4}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7fffffff}}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 872.569967ms ago: executing program 2 (id=1913): openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r5, 0x40105870, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x72bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 865.685047ms ago: executing program 3 (id=1914): sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)}], 0x1}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0xb, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x40000006, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000000209010100000000000000000a0000040000010073797a3000000000040002000c000480080001407fffe5"], 0x48}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 808.395319ms ago: executing program 1 (id=1915): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x635d, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r5, 0x3f, 0xb604}, 0x80, &(0x7f0000003340)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611", 0x1f}, {&(0x7f0000000f00)="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", 0x1d2}, {&(0x7f00000022c0)="03b08259909695eb5ca0294fba511a888314cac2cc4b8fcfa8a6395f98c9495276871c1415f144fc9b74b6be1832c68c5a06cd992e2fa712186cb328d237fb2b3daa49d29c7221005ae22dfd2fa279a3a0ebe73b3093e6f66d7ab7e24362e64a1bbd1f4e7a6e2f2cf522cf9b4437037aed5091737c0883648a89f0c8ad70436a97e52561c4ac61cc619e5cc62e9a9b0fec63d844d5d10acf23eb04c3f2e1150ff660840190bc0cb2eb", 0xa9}], 0x3}, 0x0) 715.804051ms ago: executing program 4 (id=1916): write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000001c0)={0x90, 0xfffffffffffffff5, 0x0, {0x1, 0x2, 0x100, 0x100000005, 0x4, 0x21a4, {0x0, 0x7, 0x3, 0x100, 0x7, 0x2, 0x4, 0xfffffff2, 0x3, 0xc000, 0x4, 0x0, 0x0, 0x5, 0x6}}}, 0x90) io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f00000001c0), 0x0) 647.750533ms ago: executing program 4 (id=1917): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x3, 0x27b, &(0x7f0000000640)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1) 583.290155ms ago: executing program 3 (id=1918): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000016c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x3, 0x56, 0x401, 0x2}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xc, 0xb}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x0, 0x3, 0x7, 0x10, 0x4, 0x17, 0x18, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031614d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 558.785475ms ago: executing program 0 (id=1919): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @private}, &(0x7f0000000300)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000008c0)={0x14, 0x5e, 0xe25, 0x1, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@private=0xa010100, @loopback}, 0x10) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x2, 0x28, 0x68, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@rr={0x7, 0xb, 0xb2, [@local, @loopback]}]}}, @echo={0x8, 0x0, 0x0, 0x6, 0x1}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 558.216315ms ago: executing program 2 (id=1920): sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x18, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4000c014) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtaction={0x14, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x9, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x24, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0xee8c}, @TCA_CODEL_TARGET={0x8, 0x1, 0xff}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x8100, r5, 0x1, 0x3, 0x6, @remote}, 0x14) 506.031607ms ago: executing program 4 (id=1921): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size', 0x800, 0x14) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x6000000d}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000a}) 505.501556ms ago: executing program 1 (id=1922): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e41, 0x2000007a, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="3000000000000000290000000400"], 0x30}, 0x4008000) 467.267148ms ago: executing program 1 (id=1923): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x2, 0x9}, {0xe, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x20000800) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 420.772159ms ago: executing program 0 (id=1924): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r1, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f00000002c0)="d8", 0x1}], 0x1}, 0x20000885) 364.20967ms ago: executing program 2 (id=1925): syz_open_procfs$namespace(0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c5}, 0x48880) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0xf3f, 0x70bd28, 0x25dddbbd, {0x0, 0x0, 0x0, r6, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041089}, 0x4880) sendmsg$kcm(r4, &(0x7f0000000240)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000200)="03", 0x1}, {&(0x7f00000005c0)}], 0x2}, 0x20004014) 316.428472ms ago: executing program 4 (id=1926): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x488, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x458, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_POLICE={0x444, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x1, 0x40, 0xdc2, 0x1000, {0x7, 0x1, 0xe, 0x6, 0x6, 0x1}, {0x0, 0x1, 0x94, 0x9, 0x401}, 0x9, 0x5, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x6, 0x5, 0x5, 0x0, 0x1, 0x7, 0x4, 0x4, 0x7, 0x3e97, 0x5, 0x18, 0xd, 0xfff, 0x0, 0x5, 0x8, 0x6, 0x0, 0xfce, 0x9, 0x8, 0x5, 0xfff, 0x6, 0xf, 0x6, 0x0, 0x8, 0x5edaf873, 0x1, 0xffff, 0xf1, 0x7, 0x7fffffff, 0x7ff, 0x8, 0x5, 0x4, 0x963e, 0x3, 0x56, 0xfff, 0x875, 0x29c, 0x1000, 0x400, 0x2, 0x1, 0x9, 0x9, 0xfffffffe, 0x7, 0x400, 0xffffff81, 0x0, 0x9, 0x2000, 0x1e2, 0x5, 0xfffffff8, 0x4, 0x0, 0x0, 0x2, 0x7f, 0x0, 0x621, 0x0, 0xff, 0x1ff, 0x3, 0x0, 0x2, 0x9, 0x8, 0x5, 0x3568, 0x4, 0x10001, 0x4, 0x6, 0x5, 0x7fff, 0x4, 0x5, 0x877, 0x6, 0x7, 0x5, 0x7, 0x1, 0x1ff, 0x200, 0x0, 0x9, 0x8, 0x0, 0x7b, 0x3ff, 0x4e, 0xf, 0x3, 0x400, 0x101, 0xfffffff4, 0x1, 0x3, 0x2332, 0x732d4911, 0x9, 0x7, 0xa48, 0x6, 0x7fff, 0x8, 0x6, 0x8, 0xfffffffd, 0x18b, 0x9, 0x7fffffff, 0x5, 0x51e, 0xfffffff8, 0x5, 0x1, 0x7fffffff, 0x6, 0x5, 0x2, 0x0, 0x7ff, 0xa, 0x80000001, 0xde, 0x7a, 0x5, 0x3, 0x1, 0x2, 0x7, 0x6, 0x2792, 0x7, 0x1, 0x8, 0x5, 0x5, 0xa, 0x5, 0x7, 0x400, 0x7, 0x3, 0x2, 0x5, 0x2, 0x252, 0x1, 0x4, 0x40000, 0x3, 0x6, 0x101, 0x1, 0x10, 0x3, 0x4, 0xc, 0xfffff801, 0x8, 0x0, 0x1, 0x6, 0x80000000, 0x1c, 0xd810, 0x1, 0x8001, 0x80, 0x5, 0x1, 0xfffffff8, 0x800, 0x4, 0x9, 0x9, 0x90000000, 0x5, 0x8, 0x6, 0x3ff, 0x53b2, 0x0, 0x9, 0x7, 0x7f, 0x6, 0x1, 0x4, 0xc7, 0x5, 0x6, 0x5, 0x5, 0x7fff, 0x12bc, 0x3, 0xffffffff, 0x1, 0xd, 0xa64, 0x5, 0xfffffff9, 0x2, 0x8, 0x8, 0x200, 0x8, 0xe512, 0xb5, 0x3, 0x0, 0x9f, 0x0, 0x7f, 0x6, 0x1, 0x3b1c, 0xc7, 0x2, 0xfffffffc, 0xa0, 0x100, 0x2, 0x6, 0x101, 0x3ff, 0x2, 0x8, 0x70, 0xd5, 0xffffffff, 0xf, 0xc, 0x1, 0x401, 0xffffffff, 0x1, 0x19d, 0x10001, 0x8fde, 0x8, 0x9]}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x884}, 0x40) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r6, 0x17}, 0x80, &(0x7f0000003500)=[{&(0x7f00000001c0)="27030200dc0f14000e00", 0xa}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0b1c49686ce569fbf520db4cad1ed8e1b28400a1b7ff9", 0xfffe}], 0x2}, 0x8000) 315.967632ms ago: executing program 1 (id=1927): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000002000010027bd7000ffdbdf250a00004000000007060000000c001400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0f0016005e"], 0x30}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200e6ff04200000a6ec36781e36999380000000", @ANYRES32=0x0, @ANYBLOB="bef6544a85ea455392a852a1d7d6cab9cc148507b0ef7589f20cf7bb76c18399a0c5762195fc8b4866d6a11b5f992926c9071890b2e8942ab677ab1c9edf4bc27f96d48012c9f006a8446b4e5a740843ad15e8c081848646d451a67b92f9b4f579cce98fc1df26e2128d7e4cbbd89189a2e972a13c608fdb59383018b6", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0, 0x0, 0x0, 0x0, 0x61}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'vcan0\x00'}}, 0x1e) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00'], 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0xd}, [@call={0x85, 0x0, 0x0, 0x1a}]}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf8000000}, 0x94) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, r7, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendto(r5, &(0x7f00000005c0)="a1bfc48ba931fb1ceb70ba6de68925f84d607ce82b9339dda7f5adf00381be33ea1558c858be9d3a5b2aff8f4f59bd095d7034b500b19e0d0524e7bf37b4cec2aad04aacfac1eeca892aa86fe2f21df0a4619b459cb53e0cadf8e3486c5506c18326e1a39911052c19fee16f57ff67c91e3576d08cbca1dbfbdf03bc42498ba5fe9316ab4a80fdaab89a6461775b8f4f23b0f528e97eadd7ca6308c637", 0xfeca, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) socket$unix(0x1, 0x5, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000240), 0x10) sendmsg$can_bcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) close(r6) 294.744682ms ago: executing program 3 (id=1928): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 280.099982ms ago: executing program 0 (id=1929): sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)}], 0x1}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0xb, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x40000006, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000000209010100000000000000000a0000040000010073797a3000000000040002000c000480080001407fffe5"], 0x48}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 239.847043ms ago: executing program 4 (id=1930): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x8c}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}}, 0x0) 184.529545ms ago: executing program 3 (id=1931): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x223, &(0x7f0000000480)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0) 83.621348ms ago: executing program 4 (id=1932): openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x11b) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x445a, &(0x7f0000004480)="$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") close(0x3) getdents(0xffffffffffffffff, 0x0, 0x0) 65.985758ms ago: executing program 3 (id=1933): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e41, 0x2000007a, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="3000000000000000290000000400"], 0x30}, 0x4008000) 30.321949ms ago: executing program 2 (id=1934): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @private}, &(0x7f0000000300)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000008c0)={0x14, 0x5e, 0xe25, 0x1, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@private=0xa010100, @loopback}, 0x10) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x2, 0x28, 0x68, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@rr={0x7, 0xb, 0xb2, [@local, @loopback]}]}}, @echo={0x8, 0x0, 0x0, 0x6, 0x1}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 29.651009ms ago: executing program 3 (id=1935): sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x18, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4000c014) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtaction={0x14, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0x9, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x24, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0xee8c}, @TCA_CODEL_TARGET={0x8, 0x1, 0xff}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x8100, r4, 0x1, 0x3, 0x6, @remote}, 0x14) 0s ago: executing program 1 (id=1936): syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000000100)='./file1\x00', 0x3804c52, &(0x7f0000000000)=ANY=[@ANYBLOB='nocompress,session=0x0000000000000013,nocompress,showassoc,check=strict,iocharset=cp437,cruft,unhide,norock,sbsector=0x00\x00\x00\x00\x00\n\x00\x00\x00000001,map=off,mode=0x0000000000000006,uid=', @ANYRESDEC, @ANYRESOCT=0x0], 0x3, 0x9bf, &(0x7f0000001640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x39b040, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) kernel console output (not intermixed with test programs): 75.781716][ T4350] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 75.910484][ T4357] futex_wake_op: syz.1.22 tries to shift op by 144; fix this program [ 78.681971][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 79.701328][ T4379] using random self ethernet address [ 79.707050][ T4379] using random host ethernet address [ 79.791989][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 79.802013][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 80.211975][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 80.282217][ T25] audit: type=1800 audit(1787923356.121:3): pid=4380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.26" name="idProduct" dev="configfs" ino=33472 res=0 errno=0 [ 80.701977][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 80.731976][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 80.831976][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 81.341975][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 81.693996][ T1107] cfg80211: failed to load regulatory.db [ 81.851976][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 85.469082][ T25] audit: type=1800 audit(1787923356.191:4): pid=4380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.26" name="max_speed" dev="configfs" ino=32598 res=0 errno=0 [ 85.694672][ T25] audit: type=1800 audit(1787923356.201:5): pid=4379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.26" name="idVendor" dev="configfs" ino=32583 res=0 errno=0 [ 85.703363][ T4394] loop1: detected capacity change from 0 to 512 [ 85.887186][ T4394] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 87.212048][ T4399] block device autoloading is deprecated and will be removed. [ 88.593263][ T4394] EXT4-fs (loop1): 1 orphan inode deleted [ 88.599271][ T4394] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 88.610342][ T4394] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.802138][ T4410] sched: RT throttling activated [ 90.641289][ T4419] loop1: detected capacity change from 0 to 512 [ 90.768526][ T4420] xt_cgroup: path and classid specified [ 91.759879][ T16] MTRR: CPU 0: Writing MSR 202 to 2002:0 failed [ 91.766228][ T19] MTRR: CPU 1: Writing MSR 202 to 2002:0 failed [ 92.819615][ T4268] udevd[4268]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 93.276128][ T4287] udevd[4287]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 93.610564][ T4287] udevd[4287]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 96.143690][ T4462] xt_cgroup: path and classid specified [ 96.307558][ T4467] loop1: detected capacity change from 0 to 32768 [ 96.609703][ T4467] XFS (loop1): Mounting V5 Filesystem [ 96.636556][ T4468] xt_cgroup: path and classid specified [ 96.670327][ T4481] xt_cgroup: path and classid specified [ 97.848276][ T4467] XFS (loop1): Ending clean mount [ 99.949050][ T4185] XFS (loop1): Unmounting Filesystem [ 100.157135][ T4510] xt_cgroup: path and classid specified [ 105.201278][ T4546] xt_cgroup: path and classid specified [ 106.157696][ T4552] xt_cgroup: path and classid specified [ 106.198986][ T4556] xt_cgroup: path and classid specified [ 106.273515][ T4558] xt_cgroup: path and classid specified [ 112.406867][ T4602] xt_cgroup: path and classid specified [ 112.564989][ T4604] xt_cgroup: path and classid specified [ 114.333906][ T4621] xt_cgroup: path and classid specified [ 115.979626][ T4638] xt_cgroup: path and classid specified [ 116.226311][ T4645] loop3: detected capacity change from 0 to 512 [ 116.428701][ T4645] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 116.843632][ T4645] EXT4-fs (loop3): 1 truncate cleaned up [ 116.952448][ T4645] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 119.150658][ T4685] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 119.966148][ T4695] xt_cgroup: path and classid specified [ 120.942215][ T1109] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 121.222083][ T1109] usb 2-1: Using ep0 maxpacket: 16 [ 121.342217][ T1109] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 121.366943][ T1109] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.406179][ T4709] xt_cgroup: path and classid specified [ 121.406772][ T1109] usb 2-1: config 0 has no interface number 0 [ 121.432472][ T1109] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 121.443394][ T1109] usb 2-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.662338][ T1109] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 121.671417][ T1109] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.706876][ T1109] usb 2-1: Product: syz [ 121.720985][ T1109] usb 2-1: Manufacturer: syz [ 121.736176][ T1109] usb 2-1: SerialNumber: syz [ 121.748683][ T4720] xt_cgroup: path and classid specified [ 121.774468][ T1109] usb 2-1: config 0 descriptor?? [ 121.803117][ T4692] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 121.833426][ T1109] asix: probe of 2-1:0.34 failed with error -22 [ 122.911051][ T4728] udc-core: couldn't find an available UDC or it's busy [ 122.924702][ T4728] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 122.951630][ T4729] loop3: detected capacity change from 0 to 512 [ 122.995236][ T4729] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 123.051159][ T4729] EXT4-fs (loop3): 1 truncate cleaned up [ 123.089115][ T4729] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 124.003316][ T1107] usb 2-1: USB disconnect, device number 2 [ 125.240537][ T4287] udevd[4287]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 127.154881][ T4782] netlink: 68 bytes leftover after parsing attributes in process `syz.1.146'. [ 127.177885][ T4782] xt_cgroup: path and classid specified [ 127.767964][ T4779] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 128.613156][ T4799] tmpfs: Unknown parameter 'quota' [ 130.207923][ T4808] xt_cgroup: path and classid specified [ 132.762584][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.768902][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.848803][ T4868] netlink: 68 bytes leftover after parsing attributes in process `syz.0.169'. [ 133.984991][ T4868] xt_cgroup: path and classid specified [ 134.155406][ T4878] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 134.340622][ T4884] xt_cgroup: path and classid specified [ 135.986344][ T4905] netlink: 68 bytes leftover after parsing attributes in process `syz.1.178'. [ 136.083018][ T4905] xt_cgroup: path and classid specified [ 136.225684][ T4915] xt_cgroup: path and classid specified [ 136.246560][ T4907] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 137.299744][ T4935] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 137.970666][ T4940] netlink: 68 bytes leftover after parsing attributes in process `syz.2.187'. [ 138.017414][ T4942] xt_cgroup: path and classid specified [ 138.081429][ T4940] xt_cgroup: path and classid specified [ 139.789203][ T4968] xt_cgroup: path and classid specified [ 141.029289][ T4986] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 141.043370][ T4989] xt_cgroup: path and classid specified [ 141.621343][ T5007] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 144.102361][ T5041] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 145.040719][ T5053] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 148.658650][ T5108] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 149.322752][ T5116] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 150.831914][ T5136] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 150.866605][ T5142] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 150.880642][ T5147] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 150.952049][ T5153] tmpfs: Unknown parameter 'quota' [ 151.867983][ T5158] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 151.944947][ T5168] xt_cgroup: path and classid specified [ 152.010268][ T5165] xt_cgroup: path and classid specified [ 153.778603][ T5181] xt_cgroup: path and classid specified [ 153.923358][ T5186] tmpfs: Unknown parameter 'quota' [ 154.146635][ T5199] tmpfs: Unknown parameter 'quota' [ 155.133618][ T5206] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 156.178209][ T5219] xt_cgroup: path and classid specified [ 159.946386][ T5243] tmpfs: Unknown parameter 'quota' [ 162.083665][ T5269] netlink: 68 bytes leftover after parsing attributes in process `syz.3.274'. [ 162.467473][ T5269] xt_cgroup: path and classid specified [ 163.747467][ T5301] xt_cgroup: path and classid specified [ 166.834796][ T5328] netlink: 68 bytes leftover after parsing attributes in process `syz.4.288'. [ 167.000521][ T5328] xt_cgroup: path and classid specified [ 168.281306][ T5337] tmpfs: Unknown parameter 'quota' [ 168.338357][ T5341] netlink: 68 bytes leftover after parsing attributes in process `syz.0.291'. [ 168.601511][ T5341] xt_cgroup: path and classid specified [ 168.892872][ T5357] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 169.539632][ T5366] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 170.274395][ T5372] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 170.529519][ T5393] netlink: 68 bytes leftover after parsing attributes in process `syz.1.308'. [ 170.602484][ T5395] tmpfs: Unknown parameter 'quota' [ 170.949224][ T5393] xt_cgroup: path and classid specified [ 172.757355][ T5428] netlink: 68 bytes leftover after parsing attributes in process `syz.2.315'. [ 172.859043][ T5428] xt_cgroup: path and classid specified [ 174.718477][ T5461] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 174.739847][ T5459] tmpfs: Unknown parameter 'quota' [ 176.939290][ T5488] tmpfs: Unknown parameter 'quota' [ 177.569970][ T5492] netlink: 60 bytes leftover after parsing attributes in process `syz.1.333'. [ 177.637755][ T5492] xt_cgroup: path and classid specified [ 177.723861][ T5498] netlink: 68 bytes leftover after parsing attributes in process `syz.1.336'. [ 179.084587][ T5498] xt_cgroup: path and classid specified [ 181.671633][ T5530] netlink: 68 bytes leftover after parsing attributes in process `syz.1.344'. [ 181.900543][ T5530] xt_cgroup: path and classid specified [ 181.964746][ T5537] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 182.388883][ T5542] tmpfs: Unknown parameter 'quota' [ 183.103080][ T5545] netlink: 68 bytes leftover after parsing attributes in process `syz.0.347'. [ 183.247335][ T5545] xt_cgroup: path and classid specified [ 185.854942][ T5591] futex_wake_op: syz.1.357 tries to shift op by 144; fix this program [ 185.994152][ T5592] tmpfs: Unknown parameter 'quota' [ 186.432077][ T1109] Bluetooth: hci1: command 0x0406 tx timeout [ 186.438236][ T1109] Bluetooth: hci0: command 0x0406 tx timeout [ 186.447576][ T1109] Bluetooth: hci4: command 0x0406 tx timeout [ 186.556967][ T4364] Bluetooth: hci3: command 0x0406 tx timeout [ 186.562668][ T1109] Bluetooth: hci2: command 0x0406 tx timeout [ 186.700147][ T5598] netlink: 68 bytes leftover after parsing attributes in process `syz.3.363'. [ 186.721258][ T5601] futex_wake_op: syz.2.361 tries to shift op by 144; fix this program [ 187.502743][ T5598] xt_cgroup: path and classid specified [ 189.350884][ T5621] xt_cgroup: path and classid specified [ 189.930362][ T5646] tmpfs: Unknown parameter 'quota' [ 191.443833][ T5665] netlink: 68 bytes leftover after parsing attributes in process `syz.0.381'. [ 191.592935][ T5665] xt_cgroup: path and classid specified [ 191.698871][ T5667] xt_cgroup: path and classid specified [ 191.838467][ T5673] xt_cgroup: path and classid specified [ 192.015207][ T5679] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 192.217471][ T5689] tmpfs: Unknown parameter 'quota' [ 193.823781][ T5700] xt_cgroup: path and classid specified [ 194.334664][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.341118][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.831355][ T5730] xt_cgroup: path and classid specified [ 195.916121][ T5743] tmpfs: Unknown parameter 'quota' [ 196.031789][ T5737] xt_cgroup: path and classid specified [ 196.315769][ T5745] xt_cgroup: path and classid specified [ 196.992832][ T5761] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 199.046309][ T5780] futex_wake_op: syz.1.414 tries to shift op by 144; fix this program [ 199.083105][ T5763] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 199.388095][ T5779] xt_cgroup: path and classid specified [ 199.669481][ T5791] futex_wake_op: syz.1.417 tries to shift op by 144; fix this program [ 200.846023][ T5800] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 200.868543][ T5795] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 200.994579][ T5806] xt_cgroup: path and classid specified [ 201.397336][ T5817] futex_wake_op: syz.3.423 tries to shift op by 144; fix this program [ 203.372193][ T5824] tmpfs: Unknown parameter 'quota' [ 203.520858][ T5837] xt_cgroup: path and classid specified [ 203.863952][ T5829] tmpfs: Unknown parameter 'quota' [ 204.944925][ T5863] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 205.023383][ T5864] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 206.120616][ T5868] tmpfs: Unknown parameter 'quota' [ 207.322850][ T5878] xt_cgroup: path and classid specified [ 207.522326][ T5886] futex_wake_op: syz.0.441 tries to shift op by 144; fix this program [ 209.036905][ T5892] tmpfs: Unknown parameter 'quota' [ 209.236209][ T5899] tmpfs: Unknown parameter 'quota' [ 209.411547][ T5902] futex_wake_op: syz.0.445 tries to shift op by 144; fix this program [ 210.112025][ T5905] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 211.167959][ T5924] tmpfs: Unknown parameter 'quota' [ 211.172905][ T5910] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 212.744927][ T5938] futex_wake_op: syz.3.452 tries to shift op by 144; fix this program [ 212.770591][ T5940] futex_wake_op: syz.4.454 tries to shift op by 144; fix this program [ 213.197355][ T5935] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 213.400466][ T5952] xt_cgroup: path and classid specified [ 214.159254][ T5960] tmpfs: Unknown parameter 'quota' [ 214.684488][ T5967] xt_cgroup: path and classid specified [ 215.309248][ T5966] tmpfs: Unknown parameter 'quota' [ 215.665697][ T5970] xt_cgroup: path and classid specified [ 216.461339][ T5993] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 216.610052][ T6004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.474'. [ 216.633666][ T6004] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.642793][ T6004] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.651515][ T6004] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.660465][ T6004] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.426406][ T6013] tmpfs: Unknown parameter 'quota' [ 217.579690][ T6011] xt_cgroup: path and classid specified [ 217.722191][ T6004] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.731792][ T6004] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.740974][ T6004] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.749882][ T6004] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.955778][ T6031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.483'. [ 217.970389][ T6031] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.979380][ T6031] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.988142][ T6031] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.996889][ T6031] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.008576][ T6031] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.017588][ T6031] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.026542][ T6031] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.036122][ T6031] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.103656][ T6038] futex_wake_op: syz.4.484 tries to shift op by 144; fix this program [ 218.409488][ T6004] Zero length message leads to an empty skb [ 218.772822][ T6052] tmpfs: Unknown parameter 'quota' [ 218.967145][ T6054] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 220.803989][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.496'. [ 220.941050][ T6074] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.949985][ T6074] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.958847][ T6074] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.967760][ T6074] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.484315][ T6074] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.493738][ T6074] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.502732][ T6074] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.511609][ T6074] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.090727][ T6093] xt_cgroup: path and classid specified [ 222.290452][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.496'. [ 222.353465][ T6074] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.362378][ T6074] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.371083][ T6074] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.379959][ T6074] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.399550][ T6102] tmpfs: Unknown parameter 'quota' [ 222.896469][ T6074] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.906035][ T6074] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.915218][ T6074] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.924163][ T6074] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.730979][ T6120] futex_wake_op: syz.4.509 tries to shift op by 144; fix this program [ 225.019823][ T6124] xt_cgroup: path and classid specified [ 225.103424][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.512'. [ 225.189753][ T6128] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.199062][ T6128] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.208058][ T6128] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.216805][ T6128] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.372036][ T6128] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.381031][ T6128] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.390253][ T6128] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.399192][ T6128] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.218962][ T6148] tmpfs: Unknown parameter 'quota' [ 227.027202][ T6156] xt_cgroup: path and classid specified [ 227.061777][ T6155] xt_cgroup: path and classid specified [ 227.935767][ T6162] xt_cgroup: path and classid specified [ 230.649080][ T6204] tmpfs: Unknown parameter 'quota' [ 232.170566][ T6222] xt_cgroup: path and classid specified [ 234.664151][ T6238] xt_cgroup: path and classid specified [ 236.134705][ T6251] futex_wake_op: syz.2.545 tries to shift op by 144; fix this program [ 237.704417][ T6271] xt_cgroup: path and classid specified [ 237.782791][ T6264] xt_cgroup: path and classid specified [ 237.798954][ T6274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.554'. [ 238.008834][ T6274] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.017685][ T6274] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.026588][ T6274] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.035367][ T6274] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.137737][ T6274] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.146746][ T6274] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.155792][ T6274] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.164961][ T6274] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.879387][ T6285] futex_wake_op: syz.2.556 tries to shift op by 144; fix this program [ 239.266627][ T6295] futex_wake_op: syz.0.558 tries to shift op by 144; fix this program [ 239.731145][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.559'. [ 239.766015][ T6304] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.774888][ T6304] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.783717][ T6304] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.792701][ T6304] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.819684][ T6307] futex_wake_op: syz.0.560 tries to shift op by 144; fix this program [ 240.120682][ T6304] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.130004][ T6304] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.138948][ T6304] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.147870][ T6304] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.334186][ T6312] xt_cgroup: path and classid specified [ 242.447975][ T6339] futex_wake_op: syz.4.567 tries to shift op by 144; fix this program [ 243.048101][ T6331] tmpfs: Unknown parameter 'quota' [ 243.428754][ T6348] xt_cgroup: path and classid specified [ 243.452837][ T6350] xt_cgroup: path and classid specified [ 244.051108][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.578'. [ 244.076104][ T6366] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.084933][ T6366] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.093692][ T6366] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.102440][ T6366] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.504640][ T6366] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.513670][ T6366] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.522613][ T6366] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.531475][ T6366] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.586155][ T6370] xt_cgroup: path and classid specified [ 244.706731][ T6376] xt_cgroup: path and classid specified [ 246.190978][ T6392] futex_wake_op: syz.4.585 tries to shift op by 144; fix this program [ 247.409297][ T6408] xt_cgroup: path and classid specified [ 247.839840][ T6425] futex_wake_op: syz.1.594 tries to shift op by 144; fix this program [ 249.763943][ T6439] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 251.056471][ T6461] xt_cgroup: path and classid specified [ 253.255279][ T6485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.614'. [ 253.281655][ T6485] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.290503][ T6485] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.299278][ T6485] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.308074][ T6485] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.923433][ T6485] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.932430][ T6485] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.941330][ T6485] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.950284][ T6485] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.627138][ T6496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.616'. [ 254.640183][ T6496] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.649126][ T6496] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.657962][ T6496] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.666743][ T6496] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.686091][ T6496] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.695729][ T6496] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.704813][ T6496] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.713737][ T6496] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.955647][ T6499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.617'. [ 255.172766][ T6499] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.181614][ T6499] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.190526][ T6499] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.199319][ T6499] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.294872][ T6499] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.304677][ T6499] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.314136][ T6499] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.323395][ T6499] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.634476][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.640827][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.740551][ T6507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.619'. [ 255.758806][ T6507] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.767817][ T6507] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.776567][ T6507] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.785365][ T6507] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.799419][ T6507] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.808425][ T6507] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.818062][ T6507] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.827624][ T6507] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.047629][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.622'. [ 256.060479][ T6514] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.069307][ T6514] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.078203][ T6514] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.087000][ T6514] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.110071][ T6514] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.119058][ T6514] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.128707][ T6514] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.138093][ T6514] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.906713][ T6522] xt_cgroup: path and classid specified [ 258.089760][ T6540] futex_wake_op: syz.1.626 tries to shift op by 144; fix this program [ 258.942196][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.629'. [ 258.985921][ T6545] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.995560][ T6545] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.004467][ T6545] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.013308][ T6545] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.059246][ T6555] futex_wake_op: syz.4.628 tries to shift op by 144; fix this program [ 259.136876][ T6545] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.146084][ T6545] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.155128][ T6545] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.164031][ T6545] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.242770][ T6553] xt_cgroup: path and classid specified [ 259.333155][ T6547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.630'. [ 259.361359][ T6547] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.370426][ T6547] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.379310][ T6547] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.388089][ T6547] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.523821][ T6547] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.532832][ T6547] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.541711][ T6547] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.550648][ T6547] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.720006][ T6562] xt_cgroup: path and classid specified [ 260.044811][ T6568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.637'. [ 260.554583][ T6568] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.563557][ T6568] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.572410][ T6568] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.581099][ T6568] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.745445][ T6568] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.754675][ T6568] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.763814][ T6568] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.772740][ T6568] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.787652][ T6582] xt_cgroup: path and classid specified [ 262.079014][ T6597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.641'. [ 262.111539][ T6597] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.120474][ T6597] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.129359][ T6597] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.138155][ T6597] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.223222][ T6597] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.232403][ T6597] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.241287][ T6597] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.250680][ T6597] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.539030][ T6605] futex_wake_op: syz.3.643 tries to shift op by 144; fix this program [ 268.520099][ T6678] futex_wake_op: syz.4.661 tries to shift op by 144; fix this program [ 270.405471][ T6696] xt_cgroup: path and classid specified [ 270.520684][ T6703] xt_cgroup: path and classid specified [ 272.585846][ T6727] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 274.648493][ T6761] binder: 6756:6761 ioctl c0306201 0 returned -14 [ 275.669849][ T6763] netlink: 24 bytes leftover after parsing attributes in process `syz.2.685'. [ 275.690734][ T6763] netlink: 24 bytes leftover after parsing attributes in process `syz.2.685'. [ 275.806079][ T6769] futex_wake_op: syz.4.687 tries to shift op by 144; fix this program [ 276.057807][ T6772] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 277.126775][ T6786] futex_wake_op: syz.4.691 tries to shift op by 144; fix this program [ 278.460251][ T6801] tmpfs: Unknown parameter 'quota' [ 280.380565][ T6811] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 285.488929][ T6872] futex_wake_op: syz.0.711 tries to shift op by 144; fix this program [ 286.472046][ T6890] binder: 6878:6890 ioctl c0306201 0 returned -14 [ 290.196228][ T6918] binder: 6913:6918 ioctl c0306201 0 returned -14 [ 293.046660][ T6938] binder: 6935:6938 ioctl c0306201 0 returned -14 [ 295.059453][ T6964] binder: 6959:6964 ioctl c0306201 0 returned -14 [ 296.709082][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.737'. [ 297.402832][ T6968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.737'. [ 297.482617][ T6968] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.491559][ T6968] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.500960][ T6968] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.509871][ T6968] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.097967][ T7036] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 304.091419][ T7047] binder: 7044:7047 ioctl c0306201 0 returned -14 [ 306.205549][ T7067] binder: 7061:7067 ioctl c0306201 0 returned -14 [ 309.457631][ T7089] binder: 7086:7089 ioctl c0306201 0 returned -14 [ 310.055225][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.768'. [ 310.089078][ T7091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.768'. [ 310.118526][ T7091] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.127576][ T7091] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.136388][ T7091] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.145161][ T7091] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.510250][ T7113] binder: 7106:7113 ioctl c0306201 0 returned -14 [ 317.083220][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.091448][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.657349][ T7168] binder: 7161:7168 ioctl c0306201 0 returned -14 [ 319.924936][ T7179] futex_wake_op: syz.3.791 tries to shift op by 144; fix this program [ 321.704802][ T7199] binder: 7191:7199 ioctl c0306201 0 returned -14 [ 322.777140][ T7215] binder: 7208:7215 ioctl c0306201 0 returned -14 [ 323.784243][ T7224] futex_wake_op: syz.2.801 tries to shift op by 144; fix this program [ 328.371568][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.810'. [ 328.592170][ T7263] syz.2.812 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 328.603519][ T7263] futex_wake_op: syz.2.812 tries to shift op by 144; fix this program [ 328.676178][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.810'. [ 328.698608][ T7257] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.707511][ T7257] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.716356][ T7257] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.725768][ T7257] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.043240][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.810'. [ 329.052254][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.810'. [ 329.217214][ T7273] binder: 7267:7273 ioctl c0306201 0 returned -14 [ 332.234469][ T7292] futex_wake_op: syz.3.821 tries to shift op by 144; fix this program [ 334.881801][ T7310] futex_wake_op: syz.2.823 tries to shift op by 144; fix this program [ 338.785154][ T7328] futex_wake_op: syz.0.828 tries to shift op by 144; fix this program [ 343.849170][ T7365] futex_wake_op: syz.0.840 tries to shift op by 144; fix this program [ 344.443209][ T7372] binder: 7367:7372 ioctl c0306201 0 returned -14 [ 350.617650][ T7424] futex_wake_op: syz.3.853 tries to shift op by 144; fix this program [ 354.232459][ T7451] binder: 7445:7451 ioctl c0306201 0 returned -14 [ 355.867209][ T7470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.864'. [ 357.813047][ T7470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.864'. [ 358.054506][ T7489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.868'. [ 358.063379][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.868'. [ 358.078221][ T7489] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.087331][ T7489] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.096134][ T7489] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.104923][ T7489] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.026377][ T7501] futex_wake_op: syz.0.872 tries to shift op by 144; fix this program [ 360.217706][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.874'. [ 360.232203][ T7507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.874'. [ 360.382293][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.874'. [ 360.391645][ T7507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.874'. [ 360.542807][ T7518] binder: 7511:7518 ioctl c0306201 0 returned -14 [ 361.699975][ T7526] futex_wake_op: syz.0.879 tries to shift op by 144; fix this program [ 362.465241][ T7528] futex_wake_op: syz.1.878 tries to shift op by 144; fix this program [ 363.923041][ T7541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.883'. [ 363.934569][ T7541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.883'. [ 367.151666][ T7571] futex_wake_op: syz.4.890 tries to shift op by 144; fix this program [ 370.707297][ T7590] futex_wake_op: syz.2.895 tries to shift op by 144; fix this program [ 371.771296][ T7606] binder: 7596:7606 ioctl c0306201 0 returned -14 [ 372.998576][ T7617] futex_wake_op: syz.3.901 tries to shift op by 144; fix this program [ 373.042741][ T7619] futex_wake_op: syz.0.902 tries to shift op by 144; fix this program [ 374.965186][ T7635] netlink: 36 bytes leftover after parsing attributes in process `syz.1.906'. [ 376.067719][ T7638] futex_wake_op: syz.0.907 tries to shift op by 144; fix this program [ 378.514647][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.522220][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.628020][ T7660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.915'. [ 378.667572][ T7660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.915'. [ 381.474088][ T7683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.920'. [ 383.893853][ T7706] futex_wake_op: syz.2.927 tries to shift op by 144; fix this program [ 383.999324][ T7708] netlink: 36 bytes leftover after parsing attributes in process `syz.1.926'. [ 385.223131][ T7719] futex_wake_op: syz.2.930 tries to shift op by 144; fix this program [ 385.324914][ T7720] netlink: 36 bytes leftover after parsing attributes in process `syz.1.928'. [ 387.046507][ T7738] overlayfs: unrecognized mount option "verity=on" or missing value [ 387.394401][ T25] audit: type=1800 audit(1787923663.241:6): pid=7750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.939" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 387.534739][ T7766] FAULT_INJECTION: forcing a failure. [ 387.534739][ T7766] name failslab, interval 1, probability 0, space 0, times 1 [ 387.547969][ T7766] CPU: 1 PID: 7766 Comm: syz.1.947 Not tainted syzkaller #0 [ 387.555275][ T7766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 387.565376][ T7766] Call Trace: [ 387.568732][ T7766] [ 387.571772][ T7766] dump_stack_lvl+0x188/0x250 [ 387.576588][ T7766] ? show_regs_print_info+0x20/0x20 [ 387.581824][ T7766] ? load_image+0x410/0x410 [ 387.586362][ T7766] ? __might_sleep+0xf0/0xf0 [ 387.591041][ T7766] ? __lock_acquire+0x7b50/0x7b50 [ 387.596107][ T7766] should_fail+0x383/0x4b0 [ 387.600641][ T7766] should_failslab+0x5/0x20 [ 387.605203][ T7766] slab_pre_alloc_hook+0x51/0xc0 [ 387.610207][ T7766] ? ioctx_alloc+0x105/0x770 [ 387.614892][ T7766] kmem_cache_alloc+0x3d/0x280 [ 387.619676][ T7766] ioctx_alloc+0x105/0x770 [ 387.624107][ T7766] __se_sys_io_setup+0x7b/0x190 [ 387.628969][ T7766] do_syscall_64+0x4c/0xa0 [ 387.633422][ T7766] ? clear_bhb_loop+0x30/0x80 [ 387.638172][ T7766] ? clear_bhb_loop+0x30/0x80 [ 387.642863][ T7766] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 387.648786][ T7766] RIP: 0033:0x7f955cad4159 [ 387.653266][ T7766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.672946][ T7766] RSP: 002b:00007f955ad2c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 387.681458][ T7766] RAX: ffffffffffffffda RBX: 00007f955cd5bfa0 RCX: 00007f955cad4159 [ 387.689443][ T7766] RDX: 0000000000000000 RSI: 0000200000001440 RDI: 000000000000007f [ 387.697421][ T7766] RBP: 00007f955cb6b024 R08: 0000000000000000 R09: 0000000000000000 [ 387.705407][ T7766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.713395][ T7766] R13: 00007f955cd5c038 R14: 00007f955cd5bfa0 R15: 00007ffecb795d08 [ 387.721395][ T7766] [ 388.222271][ T4386] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 388.273297][ T7709] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 388.482131][ T4386] usb 2-1: Using ep0 maxpacket: 16 [ 388.542957][ T7709] usb 4-1: Using ep0 maxpacket: 16 [ 388.615613][ T4386] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 388.625807][ T4386] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 388.635297][ T1109] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 388.682991][ T7709] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 388.691249][ T7709] usb 4-1: config 0 has no interface number 0 [ 388.702821][ T7709] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 388.714308][ T25] audit: type=1800 audit(1787923664.561:7): pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.957" name="(" dev="sda1" ino=2049 res=0 errno=0 [ 388.716840][ T7709] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 388.822194][ T4386] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 388.831273][ T4386] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.839964][ T4386] usb 2-1: Product: syz [ 388.844210][ T4386] usb 2-1: Manufacturer: syz [ 388.848816][ T4386] usb 2-1: SerialNumber: syz [ 388.929457][ T1109] usb 3-1: Using ep0 maxpacket: 16 [ 388.935001][ T7709] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 388.946482][ T7709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.960498][ T7709] usb 4-1: Product: syz [ 388.964940][ T7709] usb 4-1: Manufacturer: syz [ 388.969553][ T7709] usb 4-1: SerialNumber: syz [ 389.002902][ T7709] usb 4-1: config 0 descriptor?? [ 389.033529][ T7780] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 389.061501][ T7780] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 389.079452][ T1109] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 389.088045][ T1109] usb 3-1: config 0 has no interface number 0 [ 389.099582][ T1109] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 389.109966][ T1109] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 389.166680][ T7800] kvm [7799]: vcpu1, guest rIP: 0x9114 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xba09, nop [ 389.190408][ T7800] kvm [7799]: vcpu1, guest rIP: 0x9114 disabled perfctr wrmsr: 0x186 data 0xd804 [ 389.214236][ T7800] kvm [7799]: vcpu1, guest rIP: 0x9114 ignored wrmsr: 0x11e data 0x502a [ 389.219088][ T4386] usb 2-1: 0:2 : does not exist [ 389.277462][ T7780] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 389.297861][ T4386] usb 2-1: USB disconnect, device number 3 [ 389.304878][ T7780] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 389.311514][ T7807] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.962' sets config #0 [ 389.312458][ T1109] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 389.359843][ T1109] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.388967][ T1109] usb 3-1: Product: syz [ 389.397676][ T1109] usb 3-1: Manufacturer: syz [ 389.402435][ T1109] usb 3-1: SerialNumber: syz [ 389.419287][ T7811] ======================================================= [ 389.419287][ T7811] WARNING: The mand mount option has been deprecated and [ 389.419287][ T7811] and is ignored by this kernel. Remove the mand [ 389.419287][ T7811] option from the mount to silence this warning. [ 389.419287][ T7811] ======================================================= [ 389.437200][ T1109] usb 3-1: config 0 descriptor?? [ 389.472342][ T7791] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 389.479418][ T7791] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 389.572185][ T7709] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 389.587399][ T7709] asix: probe of 4-1:0.34 failed with error -32 [ 389.660258][ T4267] usb 4-1: USB disconnect, device number 2 [ 389.732148][ T7791] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 389.739942][ T7791] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 389.943621][ T7842] FAULT_INJECTION: forcing a failure. [ 389.943621][ T7842] name failslab, interval 1, probability 0, space 0, times 0 [ 389.958389][ T7842] CPU: 0 PID: 7842 Comm: syz.0.976 Not tainted syzkaller #0 [ 389.965700][ T7842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 389.975760][ T7842] Call Trace: [ 389.979034][ T7842] [ 389.981952][ T7842] dump_stack_lvl+0x188/0x250 [ 389.986631][ T7842] ? show_regs_print_info+0x20/0x20 [ 389.991820][ T7842] ? load_image+0x410/0x410 [ 389.996315][ T7842] ? __might_sleep+0xf0/0xf0 [ 390.000889][ T7842] ? __lock_acquire+0x7b50/0x7b50 [ 390.005899][ T7842] ? lock_chain_count+0x20/0x20 [ 390.010740][ T7842] should_fail+0x383/0x4b0 [ 390.015151][ T7842] should_failslab+0x5/0x20 [ 390.019649][ T7842] slab_pre_alloc_hook+0x51/0xc0 [ 390.024574][ T7842] ? __d_alloc+0x27/0x6d0 [ 390.028950][ T7842] kmem_cache_alloc+0x3d/0x280 [ 390.033709][ T7842] __d_alloc+0x27/0x6d0 [ 390.037851][ T7842] ? d_alloc_pseudo+0xe/0x70 [ 390.042434][ T7842] d_alloc_pseudo+0x19/0x70 [ 390.046925][ T7842] alloc_file_pseudo+0xe0/0x200 [ 390.051863][ T7842] ? alloc_empty_file_noaccount+0x80/0x80 [ 390.057570][ T7842] ? _raw_spin_unlock+0x24/0x40 [ 390.062414][ T7842] ? alloc_fd+0x59e/0x650 [ 390.066801][ T7842] __anon_inode_getfd+0x26b/0x3d0 [ 390.071815][ T7842] ? anon_inode_getfd+0x40/0x40 [ 390.076660][ T7842] ? ktime_mono_to_any+0xcb/0x100 [ 390.081759][ T7842] __se_sys_timerfd_create+0x1f4/0x250 [ 390.087230][ T7842] do_syscall_64+0x4c/0xa0 [ 390.091660][ T7842] ? clear_bhb_loop+0x30/0x80 [ 390.096333][ T7842] ? clear_bhb_loop+0x30/0x80 [ 390.100999][ T7842] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 390.106881][ T7842] RIP: 0033:0x7f98089ce159 [ 390.111294][ T7842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.130892][ T7842] RSP: 002b:00007f9806c26028 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 390.139296][ T7842] RAX: ffffffffffffffda RBX: 00007f9808c55fa0 RCX: 00007f98089ce159 [ 390.147255][ T7842] RDX: 0000000000000000 RSI: 0000000000080800 RDI: 0000000000000007 [ 390.155312][ T7842] RBP: 00007f9808a65024 R08: 0000000000000000 R09: 0000000000000000 [ 390.163269][ T7842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.171315][ T7842] R13: 00007f9808c56038 R14: 00007f9808c55fa0 R15: 00007ffda546e3f8 [ 390.179292][ T7842] [ 390.202289][ T1109] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 390.532201][ T4267] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 390.607240][ T7709] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 390.910839][ T7875] process 'syz.3.988' launched './file0' with NULL argv: empty string added [ 390.922585][ T4267] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 390.933800][ T4267] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 390.947219][ T4267] usb 5-1: New USB device found, idVendor=05ac, idProduct=8242, bcdDevice= 0.00 [ 390.956347][ T4267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.977921][ T4267] usb 5-1: config 0 descriptor?? [ 391.002297][ T7709] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.013496][ T7709] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 391.025759][ T7709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.037292][ T7709] usb 1-1: config 0 descriptor?? [ 391.242175][ T4174] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 391.432242][ T7709] usbhid 1-1:0.0: can't add hid device: -71 [ 391.438283][ T7709] usbhid: probe of 1-1:0.0 failed with error -71 [ 391.456605][ T4267] appleir 0003:05AC:8242.0001: ignoring exceeding usage max [ 391.470741][ T7709] usb 1-1: USB disconnect, device number 2 [ 391.493812][ T4267] input: HID 05ac:8242 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8242.0001/input/input5 [ 391.612213][ T4174] usb 4-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 391.615479][ T4267] appleir 0003:05AC:8242.0001: input,hiddev0,hidraw0: USB HID v1.00 Device [HID 05ac:8242] on usb-dummy_hcd.4-1/input0 [ 391.632105][ T4174] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 391.677779][ T4267] usb 5-1: USB disconnect, device number 2 [ 391.681719][ T4174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.722697][ T7879] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 391.748930][ T4174] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 391.800222][ T7884] fido_id[7884]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 391.882180][ T7709] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 392.247250][ T1109] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 392.258729][ T1109] asix: probe of 3-1:0.34 failed with error -71 [ 392.277732][ T1109] usb 3-1: USB disconnect, device number 2 [ 392.289153][ T7709] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.308455][ T7709] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 392.321076][ T7709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.348809][ T7709] usb 1-1: config 0 descriptor?? [ 393.046889][ T4174] usb 4-1: USB disconnect, device number 3 [ 393.062183][ T1109] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 393.132139][ T4267] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 393.322242][ T7709] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 393.331323][ T7709] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 393.512318][ T1109] usb 3-1: unable to get BOS descriptor or descriptor too short [ 393.532267][ T4267] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.543297][ T4267] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 393.556990][ T4267] usb 5-1: config 0 interface 0 has no altsetting 0 [ 393.563747][ T4267] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 393.573288][ T4267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.583335][ T4267] usb 5-1: config 0 descriptor?? [ 393.782322][ T1109] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 393.791531][ T1109] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.799717][ T1109] usb 3-1: Product: syz [ 393.804059][ T1109] usb 3-1: Manufacturer: syz [ 393.808799][ T1109] usb 3-1: SerialNumber: syz [ 393.942254][ T4267] usbhid 5-1:0.0: can't add hid device: -71 [ 393.948320][ T4267] usbhid: probe of 5-1:0.0 failed with error -71 [ 393.972757][ T4267] usb 5-1: USB disconnect, device number 3 [ 394.133933][ T1109] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 394.149048][ T1109] usb 3-1: USB disconnect, device number 3 [ 394.274630][ T25] audit: type=1326 audit(1787923670.121:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7959 comm="syz.1.1017" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f955cad4159 code=0x0 [ 394.314787][ T4267] usb 1-1: USB disconnect, device number 3 [ 394.322099][ C1] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 394.509024][ T7973] syz.0.1022 uses obsolete (PF_INET,SOCK_PACKET) [ 394.840995][ T7989] binder: 7988:7989 ioctl c00c6211 200000000080 returned -22 [ 395.002174][ T4229] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 395.255085][ T4229] usb 5-1: Using ep0 maxpacket: 8 [ 395.303460][ T4232] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 395.312083][ T4267] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 395.372236][ T4229] usb 5-1: config 0 has no interfaces? [ 395.378965][ T4229] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 395.398735][ T4229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.419720][ T4229] usb 5-1: config 0 descriptor?? [ 395.553089][ T4267] usb 1-1: Using ep0 maxpacket: 16 [ 395.562982][ T4232] usb 4-1: Using ep0 maxpacket: 16 [ 395.615798][ T8015] 9pnet: Insufficient options for proto=fd [ 395.666092][ T4229] usb 5-1: USB disconnect, device number 4 [ 395.672407][ T4267] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 395.680591][ T4267] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.696469][ T4232] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 395.701152][ T4267] usb 1-1: config 1 has no interface number 0 [ 395.716087][ T4232] usb 4-1: config 0 has no interface number 0 [ 395.717678][ T4267] usb 1-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 395.734408][ T4232] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 395.735880][ T4267] usb 1-1: config 1 interface 105 has no altsetting 0 [ 395.757854][ T4232] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 395.912210][ T4267] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 395.921681][ T4267] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 395.929913][ T4267] usb 1-1: Product: syz [ 395.934198][ T4267] usb 1-1: Manufacturer: syz [ 395.938802][ T4267] usb 1-1: SerialNumber: syz [ 395.975397][ T4232] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 395.984768][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.993348][ T4232] usb 4-1: Product: syz [ 395.997540][ T4232] usb 4-1: Manufacturer: syz [ 396.003432][ T4232] usb 4-1: SerialNumber: syz [ 396.011516][ T4232] usb 4-1: config 0 descriptor?? [ 396.022170][ T7709] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 396.032387][ T8000] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 396.039448][ T8000] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 396.203763][ T4267] aqc111: probe of 1-1:1.105 failed with error -22 [ 396.261438][ T8035] syzkaller0: refused to change device tx_queue_len [ 396.271541][ T8000] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 396.292111][ T8000] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 396.385469][ T7709] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.425058][ T7709] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.454042][ T7709] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 396.475400][ T7709] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 396.486214][ T7709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.501443][ T4267] usb 1-1: USB disconnect, device number 4 [ 396.512488][ T4232] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 396.522748][ T7709] usb 3-1: config 0 descriptor?? [ 396.762095][ T4233] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 397.003810][ T7709] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 397.011169][ T7709] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 397.021474][ T7709] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 397.029802][ T7709] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 397.037552][ T7709] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 397.045087][ T7709] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 397.055006][ T7709] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 397.062456][ T7709] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 397.069769][ T7709] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 397.077382][ T7709] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 397.084809][ T7709] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 397.092471][ T7709] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 397.099809][ T7709] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 397.107142][ T7709] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 397.114728][ T7709] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 397.122130][ T7709] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 397.129845][ T7709] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 397.137454][ T4233] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 397.148288][ T7709] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 397.155661][ T4233] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 397.168712][ T7709] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 397.176106][ T7709] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 397.183479][ T4233] usb 5-1: New USB device found, idVendor=056a, idProduct=0100, bcdDevice= 0.00 [ 397.192598][ T7709] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 397.199907][ T7709] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 397.207233][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.217229][ T7709] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 397.226020][ T4233] usb 5-1: config 0 descriptor?? [ 397.231599][ T7709] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 397.238975][ T7709] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 397.246471][ T7709] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 397.253973][ T7709] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 397.261284][ T7709] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 397.270577][ T7709] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 397.278009][ T7709] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 397.285468][ T7709] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 397.292867][ T7709] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 397.300173][ T7709] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 397.307577][ T7709] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 397.315879][ T7709] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 397.323293][ T7709] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 397.330604][ T7709] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 397.338466][ T7709] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 397.349273][ T7709] gt683r_led 0003:1770:FF00.0002: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.2-1/input0 [ 397.372357][ T7709] usb 3-1: USB disconnect, device number 4 [ 397.408045][ T4267] gt683r_led 0003:1770:FF00.0002: failed to send set report request: -19 [ 397.431530][ T8048] fido_id[8048]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 397.602234][ T4232] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 397.615276][ T4232] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 397.625918][ T4232] asix: probe of 4-1:0.34 failed with error -71 [ 397.637780][ T4232] usb 4-1: USB disconnect, device number 4 [ 397.705806][ T4233] wacom 0003:056A:0100.0003: ignoring exceeding usage max [ 397.719162][ T4233] wacom 0003:056A:0100.0003: hidraw0: USB HID v1.00 Device [HID 056a:0100] on usb-dummy_hcd.4-1/input0 [ 397.921235][ T4232] usb 5-1: USB disconnect, device number 5 [ 398.105967][ T13] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 398.472456][ T13] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 398.488945][ T13] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 398.609025][ T8082] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 398.675222][ T13] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 398.691018][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.714119][ T13] usb 1-1: Product: syz [ 398.718347][ T13] usb 1-1: Manufacturer: syz [ 398.734079][ T13] usb 1-1: SerialNumber: syz [ 399.025668][ T13] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 399.112433][ T7709] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 399.234979][ T13] usb 1-1: USB disconnect, device number 5 [ 399.248756][ T13] usblp0: removed [ 399.460945][ T8113] APIC base relocation is unsupported by KVM [ 399.463433][ T8113] Disabled LAPIC found during irq injection [ 399.532235][ T7709] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.732187][ T7709] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 399.745789][ T7709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.755176][ T7709] usb 5-1: Product: syz [ 399.759434][ T7709] usb 5-1: Manufacturer: syz [ 399.768438][ T7709] usb 5-1: SerialNumber: syz [ 399.800337][ T8116] device-mapper: table: 248:0: too large device [ 399.807301][ T8116] device-mapper: ioctl: error adding target to table [ 399.829934][ T7709] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 399.836583][ T7709] cdc_wdm 5-1:1.0: Unknown control protocol [ 400.062458][ T8122] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1078'. [ 400.228287][ T4364] usb 5-1: USB disconnect, device number 6 [ 400.445546][ T13] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 400.702142][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 400.828608][ T8148] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 400.854513][ T13] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 400.874523][ T13] usb 4-1: config 1 has no interface number 0 [ 400.880658][ T13] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 400.908146][ T13] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 400.941555][ T13] usb 4-1: config 1 interface 105 has no altsetting 0 [ 401.150276][ T8178] device syzkaller1 entered promiscuous mode [ 401.156833][ T13] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 401.169821][ T13] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 401.178432][ T13] usb 4-1: Product: syz [ 401.182741][ T13] usb 4-1: Manufacturer: syz [ 401.187410][ T13] usb 4-1: SerialNumber: syz [ 401.212336][ T8126] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 401.219675][ T8126] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 401.243254][ T4364] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 401.682891][ T8126] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 401.691829][ T8126] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 401.732262][ T4364] usb 3-1: unable to get BOS descriptor or descriptor too short [ 401.822328][ T4364] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.962118][ T4232] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 402.112434][ T4364] usb 3-1: string descriptor 0 read error: -22 [ 402.121719][ T4364] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 402.143427][ T4364] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.162229][ T13] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 402.242301][ T4232] usb 2-1: Using ep0 maxpacket: 16 [ 402.382365][ T4232] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 402.404166][ T4232] usb 2-1: config 1 has no interface number 0 [ 402.410310][ T4232] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 402.430622][ T4232] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 402.442164][ T13] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 402.468457][ T4232] usb 2-1: config 1 interface 105 has no altsetting 0 [ 402.479427][ T13] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 1e:db:ec:d7:dc:ce [ 402.497619][ T13] usb 4-1: USB disconnect, device number 5 [ 402.504784][ T13] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 402.572689][ T13] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 402.592118][ T13] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 402.612670][ T13] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 402.689663][ T4232] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 402.712044][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 402.722353][ T4232] usb 2-1: Product: syz [ 402.726545][ T4232] usb 2-1: Manufacturer: syz [ 402.737428][ T4232] usb 2-1: SerialNumber: syz [ 402.782408][ T8184] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 402.794988][ T8184] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 402.892289][ T4364] usb 3-1: 1:1: cannot get freq at ep 0x1 [ 402.969064][ T4364] usb 3-1: USB disconnect, device number 5 [ 403.012393][ T7798] udevd[7798]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 403.208716][ T8214] syz.3.1115 (8214) used obsolete PPPIOCDETACH ioctl [ 403.223636][ T8184] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 403.230871][ T8184] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 403.326891][ T4233] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 403.492069][ T7709] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 403.572154][ T4233] usb 5-1: Using ep0 maxpacket: 32 [ 403.587438][ T25] audit: type=1800 audit(1787923679.431:9): pid=8235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1124" name="(" dev="sda1" ino=2049 res=0 errno=0 [ 403.692259][ T4233] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 403.705886][ T4233] usb 5-1: config 0 has no interface number 0 [ 403.812337][ T4267] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 403.872410][ T4233] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 403.881760][ T7709] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 403.902023][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.912324][ T7709] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 403.928352][ T4233] usb 5-1: Product: syz [ 403.932279][ T4232] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 403.932884][ T4233] usb 5-1: Manufacturer: syz [ 403.957526][ T7709] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 403.976050][ T4233] usb 5-1: SerialNumber: syz [ 403.980911][ T7709] usb 1-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 403.991423][ T7709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.000567][ T4233] usb 5-1: config 0 descriptor?? [ 404.009321][ T4232] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, de:bb:59:41:96:23 [ 404.016058][ T7709] usb 1-1: config 0 descriptor?? [ 404.043156][ T4233] smsc95xx v2.0.0 [ 404.047116][ T8216] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 404.182364][ T4267] usb 4-1: config 0 interface 0 altsetting 222 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 404.195149][ T4267] usb 4-1: config 0 interface 0 has no altsetting 0 [ 404.207549][ T4267] usb 4-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 404.217427][ T8258] binder: 8257:8258 ioctl c0306201 2000000004c0 returned -14 [ 404.221455][ T4267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.277452][ T4267] usb 4-1: config 0 descriptor?? [ 404.312368][ T8233] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 404.335031][ T4232] usb 2-1: USB disconnect, device number 4 [ 404.358541][ T4232] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 404.432575][ T4232] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 404.456587][ T4232] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 404.471693][ T4232] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 404.502329][ T4233] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 404.514856][ T7709] apple 0003:05AC:029C.0004: unknown main item tag 0x0 [ 404.534357][ T4233] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 404.544569][ T7709] apple 0003:05AC:029C.0004: hidraw0: USB HID v0.05 Device [HID 05ac:029c] on usb-dummy_hcd.0-1/input0 [ 404.729492][ T7709] usb 1-1: USB disconnect, device number 6 [ 404.778673][ T4267] cypress 0003:04B4:ED81.0005: unknown main item tag 0x6 [ 404.791450][ T4267] cypress 0003:04B4:ED81.0005: unknown main item tag 0x2 [ 404.805297][ T4267] cypress 0003:04B4:ED81.0005: unknown main item tag 0x2 [ 404.822222][ T4267] cypress 0003:04B4:ED81.0005: unknown main item tag 0x0 [ 404.836837][ T4267] cypress 0003:04B4:ED81.0005: unknown main item tag 0x0 [ 404.852075][ T4267] cypress 0003:04B4:ED81.0005: unknown main item tag 0x0 [ 404.863662][ T4267] cypress 0003:04B4:ED81.0005: unknown main item tag 0x0 [ 404.872080][ T4267] cypress 0003:04B4:ED81.0005: unknown main item tag 0x0 [ 404.881189][ T4267] cypress 0003:04B4:ED81.0005: unknown main item tag 0x0 [ 404.901484][ T4267] cypress 0003:04B4:ED81.0005: unknown main item tag 0x0 [ 404.920291][ T4267] cypress 0003:04B4:ED81.0005: unknown main item tag 0x0 [ 404.939978][ T8285] fuse: Bad value for 'fd' [ 404.949814][ T4267] cypress 0003:04B4:ED81.0005: hidraw0: USB HID v0.08 Device [HID 04b4:ed81] on usb-dummy_hcd.3-1/input0 [ 405.022315][ T4267] usb 4-1: USB disconnect, device number 6 [ 405.129075][ T8290] fido_id[8290]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 405.186811][ T8298] device veth1 entered promiscuous mode [ 405.207296][ T8298] netlink: 'syz.1.1139': attribute type 1 has an invalid length. [ 405.215227][ T8298] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1139'. [ 405.242250][ T4233] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -71 [ 405.268011][ T4233] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 405.295466][ T4233] usb 5-1: USB disconnect, device number 7 [ 405.317046][ T8303] FAULT_INJECTION: forcing a failure. [ 405.317046][ T8303] name failslab, interval 1, probability 0, space 0, times 0 [ 405.331251][ T8303] CPU: 0 PID: 8303 Comm: syz.0.1142 Not tainted syzkaller #0 [ 405.338657][ T8303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 405.348721][ T8303] Call Trace: [ 405.352016][ T8303] [ 405.354965][ T8303] dump_stack_lvl+0x188/0x250 [ 405.359665][ T8303] ? show_regs_print_info+0x20/0x20 [ 405.364888][ T8303] ? load_image+0x410/0x410 [ 405.369410][ T8303] ? __might_sleep+0xf0/0xf0 [ 405.374017][ T8303] ? __lock_acquire+0x7b50/0x7b50 [ 405.379081][ T8303] should_fail+0x383/0x4b0 [ 405.383525][ T8303] should_failslab+0x5/0x20 [ 405.388040][ T8303] slab_pre_alloc_hook+0x51/0xc0 [ 405.392998][ T8303] ? vm_area_dup+0x1e/0xb0 [ 405.397512][ T8303] kmem_cache_alloc+0x3d/0x280 [ 405.402297][ T8303] vm_area_dup+0x1e/0xb0 [ 405.406563][ T8303] __split_vma+0xb1/0x410 [ 405.411003][ T8303] do_madvise+0x1d3a/0x2aa0 [ 405.415561][ T8303] ? get_nr_vmemmap_pages_cb+0x40/0x40 [ 405.421060][ T8303] ? verify_lock_unused+0x140/0x140 [ 405.426275][ T8303] ? verify_lock_unused+0x140/0x140 [ 405.431484][ T8303] ? do_futex+0xdc2/0x12b0 [ 405.435984][ T8303] ? vfs_write+0xaa6/0xd70 [ 405.440416][ T8303] ? __context_tracking_exit+0x4c/0x80 [ 405.445881][ T8303] ? __lock_acquire+0x7b50/0x7b50 [ 405.450908][ T8303] ? lock_chain_count+0x20/0x20 [ 405.455747][ T8303] __x64_sys_madvise+0xa2/0xb0 [ 405.460495][ T8303] do_syscall_64+0x4c/0xa0 [ 405.464895][ T8303] ? clear_bhb_loop+0x30/0x80 [ 405.469559][ T8303] ? clear_bhb_loop+0x30/0x80 [ 405.474218][ T8303] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 405.480094][ T8303] RIP: 0033:0x7f98089ce159 [ 405.484496][ T8303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.504089][ T8303] RSP: 002b:00007f9806c26028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 405.512494][ T8303] RAX: ffffffffffffffda RBX: 00007f9808c55fa0 RCX: 00007f98089ce159 [ 405.520451][ T8303] RDX: 0000000000000010 RSI: 0000000000004000 RDI: 000020000007f000 [ 405.528410][ T8303] RBP: 00007f9808a65024 R08: 0000000000000000 R09: 0000000000000000 [ 405.536370][ T8303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.544327][ T8303] R13: 00007f9808c56038 R14: 00007f9808c55fa0 R15: 00007ffda546e3f8 [ 405.552296][ T8303] [ 405.687763][ T8313] pit: kvm: requested 88838 ns i8254 timer period limited to 200000 ns [ 405.707463][ T8313] pit: kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 405.719617][ T25] audit: type=1800 audit(1787923681.561:10): pid=8322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1148" name="(" dev="sda1" ino=2049 res=0 errno=0 [ 405.843867][ T25] audit: type=1800 audit(1787923681.691:11): pid=8326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1150" name="(" dev="sda1" ino=2049 res=0 errno=0 [ 406.242282][ T4233] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 406.282154][ T4267] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 406.456233][ T7709] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 406.497282][ T4233] usb 1-1: Using ep0 maxpacket: 16 [ 406.624965][ T4233] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 406.642236][ T4267] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.653524][ T4233] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.663800][ T4267] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 406.673024][ T4233] usb 1-1: config 0 has no interface number 0 [ 406.679212][ T4267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.724134][ T4267] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 406.730080][ T4267] cdc_wdm 3-1:1.0: Unknown control protocol [ 406.822127][ T7709] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 406.830236][ T7709] usb 5-1: config 0 has no interface number 0 [ 406.836574][ T4233] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 406.847609][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.855752][ T7709] usb 5-1: config 0 interface 41 has no altsetting 0 [ 406.863025][ T4233] usb 1-1: Product: syz [ 406.867214][ T4233] usb 1-1: Manufacturer: syz [ 406.871828][ T4233] usb 1-1: SerialNumber: syz [ 406.879058][ T4233] usb 1-1: config 0 descriptor?? [ 406.924182][ T4233] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 406.925861][ T13] usb 3-1: USB disconnect, device number 6 [ 406.931151][ T4233] usb 1-1: No valid video chain found. [ 407.032241][ T7709] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 407.041318][ T7709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.050091][ T7709] usb 5-1: Product: syz [ 407.054366][ T7709] usb 5-1: Manufacturer: syz [ 407.058970][ T7709] usb 5-1: SerialNumber: syz [ 407.091405][ T7709] usb 5-1: config 0 descriptor?? [ 407.130745][ T4232] usb 1-1: USB disconnect, device number 7 [ 407.442488][ T8374] capability: warning: `syz.1.1170' uses deprecated v2 capabilities in a way that may be insecure [ 407.903325][ T4267] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 408.246495][ T8390] kvm [8389]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010004 data 0x2 [ 408.282283][ T4267] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 408.299907][ T4267] usb 2-1: config 0 has no interface number 0 [ 408.319472][ T4267] usb 2-1: config 0 interface 41 has no altsetting 0 [ 408.457278][ T7709] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 408.482214][ T4267] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 408.493613][ T7709] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 408.506141][ T4267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.516214][ T4267] usb 2-1: Product: syz [ 408.535058][ T7709] CoreChips: probe of 5-1:0.41 failed with error -71 [ 408.543710][ T4267] usb 2-1: Manufacturer: syz [ 408.564040][ T4267] usb 2-1: SerialNumber: syz [ 408.570088][ T7709] usb 5-1: USB disconnect, device number 8 [ 408.596076][ T4267] usb 2-1: config 0 descriptor?? [ 409.222224][ T4232] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 409.397372][ T8443] tipc: Enabling of bearer rejected, failed to enable media [ 409.543352][ T4267] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 409.695197][ T4232] usb 4-1: unable to get BOS descriptor or descriptor too short [ 409.736089][ T8465] kvm: pic: non byte write [ 409.782281][ T4232] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 409.792950][ T4232] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 409.862092][ T13] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 409.992280][ T4232] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 410.001804][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.009867][ T4232] usb 4-1: Product: syz [ 410.014195][ T4232] usb 4-1: Manufacturer: syz [ 410.018797][ T4232] usb 4-1: SerialNumber: syz [ 410.066127][ T4232] usb 4-1: selecting invalid altsetting 1 [ 410.075076][ T4232] usb 4-1: unit 6 not found! [ 410.122217][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 410.263926][ T13] usb 3-1: too many endpoints for config 0 interface 0 altsetting 9: 254, using maximum allowed: 30 [ 410.278678][ T13] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 410.292470][ T13] usb 3-1: config 0 interface 0 has no altsetting 0 [ 410.299098][ T13] usb 3-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 410.308427][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.318628][ T13] usb 3-1: config 0 descriptor?? [ 410.629400][ T8473] device batadv_slave_1 entered promiscuous mode [ 410.636921][ T8472] device batadv_slave_1 left promiscuous mode [ 410.732315][ T4232] usb 4-1: cannot get ctl value: req = 0x84, wValue = 0x100, wIndex = 0x200, type = 3 [ 410.765128][ T4232] usb 4-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 410.801000][ T4232] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 410.810226][ T4232] usb 4-1: USB disconnect, device number 7 [ 410.822256][ T13] kye 0003:0458:5015.0006: ignoring exceeding usage max [ 410.838402][ T13] kye 0003:0458:5015.0006: hidraw0: USB HID vff.fd Device [HID 0458:5015] on usb-dummy_hcd.2-1/input0 [ 410.851246][ T13] kye 0003:0458:5015.0006: tablet-enabling feature report not found [ 410.861312][ T13] kye 0003:0458:5015.0006: tablet enabling failed [ 410.992335][ T4267] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 411.023644][ T4267] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 411.035659][ T7821] udevd[7821]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 411.043465][ T4232] usb 3-1: USB disconnect, device number 7 [ 411.058815][ T4267] CoreChips: probe of 2-1:0.41 failed with error -71 [ 411.083538][ T4267] usb 2-1: USB disconnect, device number 5 [ 411.442055][ T13] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 411.812368][ T13] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 411.820502][ T13] usb 1-1: config 0 has no interface number 0 [ 411.848376][ T13] usb 1-1: config 0 interface 41 has no altsetting 0 [ 412.035620][ T13] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 412.048971][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.070417][ T13] usb 1-1: Product: syz [ 412.077884][ T13] usb 1-1: Manufacturer: syz [ 412.095011][ T13] usb 1-1: SerialNumber: syz [ 412.138260][ T13] usb 1-1: config 0 descriptor?? [ 412.519816][ T8528] binder: 8527:8528 ioctl c00c620f 200000000500 returned -22 [ 412.892031][ T4267] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 413.072168][ T13] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 413.307520][ T4267] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 413.322950][ T4267] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.339289][ T4267] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.349405][ T4267] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 413.369407][ T4267] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 413.378846][ T4267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.394304][ T4267] usb 2-1: config 0 descriptor?? [ 413.440076][ T8566] tipc: Enabling of bearer rejected, failed to enable media [ 413.795723][ T8585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1246'. [ 413.889207][ T4267] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd [ 413.918910][ T4267] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 413.949829][ T8587] device syzkaller0 entered promiscuous mode [ 413.960019][ T4267] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 413.980818][ T8587] tipc: Started in network mode [ 413.989503][ T8587] tipc: Node identity b6824123659b, cluster identity 4711 [ 414.019329][ T8587] tipc: Enabled bearer , priority 0 [ 414.059152][ T8587] tipc: Resetting bearer [ 414.123014][ T8586] tipc: Resetting bearer [ 414.148660][ T8586] tipc: Disabling bearer [ 414.199871][ T4233] usb 2-1: USB disconnect, device number 6 [ 414.277157][ T8599] device syzkaller0 entered promiscuous mode [ 414.372181][ T13] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 414.382877][ T13] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 414.392996][ T13] CoreChips: probe of 1-1:0.41 failed with error -71 [ 414.404128][ T13] usb 1-1: USB disconnect, device number 8 [ 414.426702][ T4267] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 414.435777][ T4229] Bluetooth: hci5: command 0x1003 tx timeout [ 414.438168][ T8603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1253'. [ 414.442079][ T8526] Bluetooth: hci5: sending frame failed (-49) [ 414.615060][ T8610] TC_ACT_REPEAT abuse ? [ 414.682046][ T4267] usb 5-1: Using ep0 maxpacket: 16 [ 414.730308][ T8612] device syzkaller0 entered promiscuous mode [ 414.806380][ T8622] netlink: 'syz.1.1260': attribute type 1 has an invalid length. [ 414.820435][ T8622] netlink: 'syz.1.1260': attribute type 2 has an invalid length. [ 414.829787][ T4267] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.848786][ T4267] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.861304][ T4267] usb 5-1: config 0 interface 0 has no altsetting 0 [ 414.871416][ T4267] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 414.882926][ T4267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.897294][ T4267] usb 5-1: config 0 descriptor?? [ 415.263680][ T8632] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.271577][ T8632] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.395102][ T4267] hid (null): unknown global tag 0xe [ 415.410858][ T4267] hid (null): unknown global tag 0xe [ 415.417981][ T4267] hid (null): report_id 0 is invalid [ 415.425144][ T4267] hid (null): unknown global tag 0xd [ 415.430521][ T4267] hid (null): bogus close delimiter [ 415.566123][ T8632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.591808][ T8632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.647738][ T4267] usb 5-1: USB disconnect, device number 9 [ 415.859047][ T8632] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.868900][ T8632] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.877853][ T8632] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.886992][ T8632] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.976757][ T8632] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.985917][ T8632] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.994835][ T8632] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.003741][ T8632] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.022300][ T8641] device syzkaller0 entered promiscuous mode [ 416.344803][ T8663] device syzkaller0 entered promiscuous mode [ 416.512541][ T4267] Bluetooth: hci5: command 0x1001 tx timeout [ 416.525764][ T8526] Bluetooth: hci5: sending frame failed (-49) [ 417.402774][ T8706] Cannot find set identified by id 0 to match [ 417.513923][ T8717] netlink: 'syz.0.1291': attribute type 1 has an invalid length. [ 417.522421][ T8717] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1291'. [ 417.539609][ T8719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1293'. [ 417.656032][ T13] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 417.665490][ T8728] batman_adv: batadv0: Adding interface: dummy0 [ 417.671847][ T8728] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.698169][ T8728] batman_adv: batadv0: Interface activated: dummy0 [ 417.719653][ T8728] batadv0: mtu less than device minimum [ 417.726664][ T8728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 417.738569][ T8728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 417.749950][ T8728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 417.762213][ T8728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 417.766003][ T8729] Set syz0 is full, maxelem 0 reached [ 417.774451][ T8728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 417.790552][ T8728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 417.802911][ T8728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 417.882063][ T7] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 417.909316][ T8731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1298'. [ 418.124350][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 418.182324][ T13] usb 5-1: New USB device found, idVendor=0499, idProduct=5009, bcdDevice= 0.40 [ 418.200038][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.208523][ T13] usb 5-1: Product: syz [ 418.213139][ T13] usb 5-1: Manufacturer: syz [ 418.217757][ T13] usb 5-1: SerialNumber: syz [ 418.292381][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 418.377471][ T7] usb 4-1: config 6 has an invalid interface number: 134 but max is 0 [ 418.387126][ T7] usb 4-1: config 6 has no interface number 0 [ 418.398435][ T7] usb 4-1: config 6 interface 134 has no altsetting 0 [ 418.513406][ T8755] Cannot find set identified by id 0 to match [ 418.554465][ T13] usb 5-1: invalid MIDI in EP 0 [ 418.562671][ T7] usb 4-1: New USB device found, idVendor=050d, idProduct=825b, bcdDevice=57.ca [ 418.571740][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.582684][ T7] usb 4-1: Product: syz [ 418.587631][ T7] usb 4-1: Manufacturer: syz [ 418.589572][ T8762] device bridge_slave_1 left promiscuous mode [ 418.603653][ T8762] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.607749][ T7] usb 4-1: SerialNumber: syz [ 418.617391][ T4229] Bluetooth: hci5: command 0x1009 tx timeout [ 418.651415][ T13] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 418.654894][ T8762] device bridge_slave_0 left promiscuous mode [ 418.662720][ T13] usb 5-1: USB disconnect, device number 10 [ 418.673174][ T8762] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.880646][ T8768] netlink: 'syz.0.1312': attribute type 1 has an invalid length. [ 418.889350][ T8768] netlink: 'syz.0.1312': attribute type 2 has an invalid length. [ 418.933340][ T8049] udevd[8049]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 418.993845][ T7] usb 4-1: Found UVC 0.00 device syz (050d:825b) [ 419.004799][ T7] usb 4-1: No valid video chain found. [ 419.019373][ T7] usb 4-1: USB disconnect, device number 8 [ 419.279885][ T8795] netlink: 'syz.0.1323': attribute type 1 has an invalid length. [ 419.288809][ T8795] netlink: 'syz.0.1323': attribute type 2 has an invalid length. [ 419.368713][ T8800] netlink: 'syz.4.1324': attribute type 4 has an invalid length. [ 419.731597][ T8833] netlink: 'syz.4.1335': attribute type 1 has an invalid length. [ 419.740057][ T8833] netlink: 'syz.4.1335': attribute type 2 has an invalid length. [ 419.894389][ T8839] netlink: 'syz.4.1337': attribute type 3 has an invalid length. [ 419.919055][ T8839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1337'. [ 419.921408][ T1109] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 420.202039][ T1109] usb 1-1: Using ep0 maxpacket: 32 [ 420.342209][ T1109] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 420.353312][ T1109] usb 1-1: config 0 has no interface number 0 [ 420.359442][ T1109] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 420.562407][ T1109] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 420.571513][ T1109] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.594099][ T1109] usb 1-1: Product: syz [ 420.603845][ T1109] usb 1-1: Manufacturer: syz [ 420.608607][ T1109] usb 1-1: SerialNumber: syz [ 420.631987][ T1109] usb 1-1: config 0 descriptor?? [ 420.662606][ T8824] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 420.759032][ T8877] device veth0 entered promiscuous mode [ 420.769873][ T8882] netlink: 'syz.4.1351': attribute type 1 has an invalid length. [ 420.804542][ T8877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1349'. [ 420.855182][ T8880] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1349'. [ 420.898045][ T8824] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 421.268359][ T8897] device syzkaller0 entered promiscuous mode [ 421.517727][ T8905] device syzkaller0 entered promiscuous mode [ 421.602411][ T1109] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 421.617485][ T1109] asix: probe of 1-1:0.188 failed with error -71 [ 421.643536][ T1109] usb 1-1: USB disconnect, device number 9 [ 422.073913][ T8931] device syzkaller0 entered promiscuous mode [ 422.093971][ T8931] tipc: Started in network mode [ 422.098875][ T8931] tipc: Node identity fedeb5782a3, cluster identity 4711 [ 422.141477][ T8931] tipc: Enabled bearer , priority 0 [ 422.156868][ T8936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1371'. [ 422.177979][ T8931] tipc: Resetting bearer [ 422.205411][ T8930] tipc: Resetting bearer [ 422.218340][ T8930] tipc: Disabling bearer [ 422.247349][ T8942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1374'. [ 422.376552][ T8949] netlink: 'syz.0.1376': attribute type 1 has an invalid length. [ 422.407909][ T8949] device bond1 entered promiscuous mode [ 422.413920][ T8949] 8021q: adding VLAN 0 to HW filter on device bond1 [ 422.422381][ T8944] device syzkaller0 entered promiscuous mode [ 422.466421][ T8949] 8021q: adding VLAN 0 to HW filter on device bond1 [ 422.478479][ T8949] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 422.494852][ T8949] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 422.507163][ T8949] bond1: (slave ip6gre1): making interface the new active one [ 422.515170][ T8949] device ip6gre1 entered promiscuous mode [ 422.523119][ T8949] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 422.567519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 422.577830][ T8965] net_ratelimit: 12 callbacks suppressed [ 422.577924][ T8965] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 422.911193][ T8981] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.045692][ T8988] netlink: 'syz.4.1390': attribute type 1 has an invalid length. [ 423.066988][ T8988] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1390'. [ 423.088156][ T8994] netlink: 'syz.3.1393': attribute type 1 has an invalid length. [ 423.104104][ T8994] netlink: 'syz.3.1393': attribute type 2 has an invalid length. [ 423.130739][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 423.447539][ T9013] device syzkaller0 entered promiscuous mode [ 423.459480][ T9013] tipc: Enabled bearer , priority 0 [ 423.489137][ T9013] tipc: Resetting bearer [ 423.509349][ T9012] tipc: Resetting bearer [ 423.527512][ T9012] tipc: Disabling bearer [ 423.541767][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1400'. [ 423.554984][ T9015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1400'. [ 423.643275][ T9021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1403'. [ 423.675241][ T9027] netlink: 'syz.3.1405': attribute type 1 has an invalid length. [ 423.683336][ T9027] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1405'. [ 424.053106][ T9055] device syzkaller0 entered promiscuous mode [ 424.072714][ T9064] device syzkaller0 entered promiscuous mode [ 424.188860][ T9064] tipc: Enabled bearer , priority 0 [ 424.204969][ T9071] tipc: Resetting bearer [ 424.223727][ T9063] tipc: Resetting bearer [ 424.259906][ T9063] tipc: Disabling bearer [ 424.324769][ T9082] netlink: 'syz.2.1428': attribute type 12 has an invalid length. [ 424.667910][ T9113] device syzkaller0 entered promiscuous mode [ 425.023116][ T9138] netlink: 'syz.3.1452': attribute type 1 has an invalid length. [ 425.043114][ T9138] device bond1 entered promiscuous mode [ 425.049183][ T9138] 8021q: adding VLAN 0 to HW filter on device bond1 [ 425.056708][ T9149] IPv6: Can't replace route, no match found [ 425.077299][ T9138] 8021q: adding VLAN 0 to HW filter on device bond1 [ 425.087155][ T9138] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 425.098217][ T9138] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 425.117342][ T9138] bond1: (slave ip6gre1): making interface the new active one [ 425.125453][ T9138] device ip6gre1 entered promiscuous mode [ 425.132625][ T9138] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 425.152818][ T1109] Bluetooth: hci5: command 0x1003 tx timeout [ 425.165907][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 425.174226][ T8526] Bluetooth: hci5: sending frame failed (-49) [ 425.182751][ T9153] netlink: 'syz.4.1454': attribute type 49 has an invalid length. [ 425.271147][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805fa35400: rx timeout, send abort [ 425.301831][ T9153] device ip6gretap0 entered promiscuous mode [ 425.316618][ T9152] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.323911][ T9152] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.343550][ T9154] device bridge_slave_1 left promiscuous mode [ 425.351156][ T9154] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.368271][ T9154] device bridge_slave_0 left promiscuous mode [ 425.380347][ T9154] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.599766][ T9186] netlink: 'syz.3.1469': attribute type 1 has an invalid length. [ 425.638077][ T9186] device bond2 entered promiscuous mode [ 425.644663][ T9186] 8021q: adding VLAN 0 to HW filter on device bond2 [ 425.771218][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805fa37000: rx timeout, send abort [ 425.775586][ T9197] device syzkaller0 entered promiscuous mode [ 425.780825][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805fa35400: abort rx timeout. Force session deactivation [ 425.798282][ T9153] syz.4.1454 (9153) used greatest stack depth: 19152 bytes left [ 425.979586][ T9216] device syzkaller0 entered promiscuous mode [ 426.068162][ T9227] netlink: 'syz.4.1482': attribute type 1 has an invalid length. [ 426.097828][ T9227] device bond2 entered promiscuous mode [ 426.103905][ T9227] 8021q: adding VLAN 0 to HW filter on device bond2 [ 426.126694][ T9227] 8021q: adding VLAN 0 to HW filter on device bond2 [ 426.134306][ T9227] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 426.144831][ T9227] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 426.157508][ T9227] bond2: (slave ip6gre1): making interface the new active one [ 426.165363][ T9227] device ip6gre1 entered promiscuous mode [ 426.173111][ T9227] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 426.189540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 426.279656][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805fa37000: abort rx timeout. Force session deactivation [ 426.427624][ T9249] device syzkaller0 entered promiscuous mode [ 426.497882][ T9256] device syzkaller0 entered promiscuous mode [ 426.624808][ T9253] infiniband syz0: set active [ 426.629934][ T9253] infiniband syz0: added team0 [ 426.707341][ T9253] RDS/IB: syz0: added [ 426.716669][ T9253] smc: adding ib device syz0 with port count 1 [ 426.729948][ T9253] smc: ib device syz0 port 1 has pnetid [ 426.928506][ T9282] device syzkaller0 entered promiscuous mode [ 427.242092][ T4267] Bluetooth: hci5: command 0x1001 tx timeout [ 427.249991][ T8526] Bluetooth: hci5: sending frame failed (-49) [ 427.404666][ T9305] __nla_validate_parse: 2 callbacks suppressed [ 427.404714][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1514'. [ 427.514428][ T9311] device syzkaller0 entered promiscuous mode [ 427.552894][ T9314] netlink: 'syz.4.1519': attribute type 1 has an invalid length. [ 427.565579][ T9314] netlink: 'syz.4.1519': attribute type 2 has an invalid length. [ 427.695303][ T9327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1525'. [ 427.761667][ T9331] device wlan0 entered promiscuous mode [ 427.777693][ T9331] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 427.822968][ T9338] rdma_rxe: rxe_register_device failed with error -23 [ 427.840848][ T9338] rdma_rxe: failed to add team0 [ 427.858675][ T9337] device syzkaller0 entered promiscuous mode [ 427.912837][ T9337] tipc: Enabled bearer , priority 0 [ 427.971130][ T9336] tipc: Resetting bearer [ 428.023955][ T9355] netlink: 'syz.3.1535': attribute type 1 has an invalid length. [ 428.031704][ T9336] tipc: Disabling bearer [ 428.040571][ T9355] netlink: 'syz.3.1535': attribute type 2 has an invalid length. [ 428.195960][ T9367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1540'. [ 428.511767][ T9381] device syzkaller0 entered promiscuous mode [ 428.522523][ T9390] TC_ACT_REPEAT abuse ? [ 428.544210][ T9392] device syzkaller0 entered promiscuous mode [ 428.679010][ T9392] tipc: Enabled bearer , priority 0 [ 428.711248][ T9388] tipc: Resetting bearer [ 428.747420][ T9388] tipc: Disabling bearer [ 428.763282][ T9406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1551'. [ 428.775476][ T9403] device syzkaller0 entered promiscuous mode [ 428.784032][ T9406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1551'. [ 428.799691][ T9403] tipc: Enabled bearer , priority 0 [ 428.833312][ T9402] tipc: Resetting bearer [ 428.878507][ T9402] tipc: Disabling bearer [ 428.895966][ T9416] netlink: 'syz.4.1555': attribute type 1 has an invalid length. [ 428.900083][ T9413] device syzkaller0 entered promiscuous mode [ 428.912197][ T9416] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1555'. [ 428.946930][ T9413] tipc: Started in network mode [ 428.954221][ T9413] tipc: Node identity 6e6f8c746a15, cluster identity 4711 [ 428.972657][ T9413] tipc: Enabled bearer , priority 0 [ 429.016848][ T9413] tipc: Resetting bearer [ 429.088207][ T9412] tipc: Resetting bearer [ 429.125185][ T9412] tipc: Disabling bearer [ 429.261658][ T9427] device syzkaller0 entered promiscuous mode [ 429.328632][ T4267] Bluetooth: hci5: command 0x1009 tx timeout [ 429.503804][ T9443] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1560'. [ 429.531544][ T9443] device batadv0 entered promiscuous mode [ 429.544374][ T9447] netlink: 'syz.1.1566': attribute type 1 has an invalid length. [ 429.572599][ T9447] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1566'. [ 429.699412][ T9457] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1567'. [ 429.847290][ T9464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1571'. [ 429.974670][ T9466] device syzkaller0 entered promiscuous mode [ 430.231476][ T9481] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 430.235220][ T9482] netlink: 'syz.3.1579': attribute type 1 has an invalid length. [ 430.396841][ T9492] device syzkaller0 entered promiscuous mode [ 430.601066][ T9498] device syzkaller0 entered promiscuous mode [ 431.196178][ T9516] device syzkaller0 entered promiscuous mode [ 433.569132][ T9500] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 433.649638][ T9522] netlink: 'syz.0.1591': attribute type 1 has an invalid length. [ 433.684118][ T9522] netlink: 'syz.0.1591': attribute type 2 has an invalid length. [ 433.702799][ T9525] netlink: 'syz.3.1592': attribute type 1 has an invalid length. [ 433.710660][ T9525] __nla_validate_parse: 1 callbacks suppressed [ 433.710673][ T9525] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1592'. [ 433.735912][ T9536] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 433.910434][ T9545] device syzkaller0 entered promiscuous mode [ 433.940128][ T9545] tipc: Started in network mode [ 433.969683][ T9545] tipc: Node identity 6e3b2ff3952f, cluster identity 4711 [ 433.993974][ T9545] tipc: Enabled bearer , priority 0 [ 434.014622][ T9551] device syzkaller0 entered promiscuous mode [ 434.037374][ T9544] tipc: Resetting bearer [ 434.069083][ T9544] tipc: Disabling bearer [ 434.084679][ T9551] tipc: Enabled bearer , priority 0 [ 434.097758][ T9557] device syzkaller0 entered promiscuous mode [ 434.107503][ T9550] tipc: Resetting bearer [ 434.218747][ T9550] tipc: Disabling bearer [ 434.225857][ T9565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1603'. [ 434.237415][ T9557] tipc: Started in network mode [ 434.244623][ T9557] tipc: Node identity d29985a25e15, cluster identity 4711 [ 434.256504][ T9557] tipc: Enabled bearer , priority 0 [ 434.301903][ T9557] tipc: Resetting bearer [ 434.317346][ T9556] tipc: Resetting bearer [ 434.333147][ T9556] tipc: Disabling bearer [ 434.385164][ T9573] netlink: 'syz.0.1606': attribute type 1 has an invalid length. [ 434.394234][ T9573] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1606'. [ 434.426976][ T9577] netlink: 'syz.4.1608': attribute type 1 has an invalid length. [ 434.441434][ T9577] netlink: 'syz.4.1608': attribute type 2 has an invalid length. [ 434.633288][ T9594] device syzkaller0 entered promiscuous mode [ 434.646908][ T9598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1616'. [ 434.658219][ T9594] tipc: Enabled bearer , priority 0 [ 434.680473][ T9593] tipc: Resetting bearer [ 434.709528][ T9593] tipc: Disabling bearer [ 434.938210][ T9612] device syzkaller0 entered promiscuous mode [ 434.957651][ T9612] tipc: Enabled bearer , priority 0 [ 434.967862][ T9614] (unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring [ 434.993833][ T9612] tipc: Resetting bearer [ 435.028638][ T9611] tipc: Resetting bearer [ 435.068427][ T9611] tipc: Disabling bearer [ 435.093195][ T9620] team0 (unregistering): Port device team_slave_0 removed [ 435.104427][ T9620] team0 (unregistering): Port device team_slave_1 removed [ 435.403942][ T9641] device syzkaller0 entered promiscuous mode [ 435.469663][ T9641] 0: reclassify loop, rule prio 0, protocol 800 [ 435.786135][ T9665] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 435.827156][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1645'. [ 436.388770][ T9697] +: renamed from syzkaller0 [ 436.701590][ T9699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1656'. [ 439.036557][ T9680] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 439.710123][ T9795] nftables ruleset with unbound set [ 439.736871][ T9799] device syzkaller0 entered promiscuous mode [ 439.964958][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.971344][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.989706][ T9810] device syzkaller0 entered promiscuous mode [ 442.127407][ T9761] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 442.239026][ T9824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1684'. [ 442.290343][ T9829] x_tables: unsorted underflow at hook 2 [ 442.920963][ T9865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1699'. [ 443.018580][ T9865] 8021q: adding VLAN 0 to HW filter on device bond3 [ 443.093032][ T9871] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1700'. [ 443.159387][ T9865] 8021q: adding VLAN 0 to HW filter on device bond4 [ 443.171025][ T9865] bond3: (slave bond4): Enslaving as an active interface with an up link [ 443.214986][ T9875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1699'. [ 443.309680][ T9875] bond3 (unregistering): (slave bond4): Releasing backup interface [ 443.346587][ T9875] bond3 (unregistering): Released all slaves [ 443.588764][ T9890] device syzkaller0 entered promiscuous mode [ 443.609999][ T9889] device syzkaller0 entered promiscuous mode [ 443.644225][ T9890] tipc: Enabled bearer , priority 0 [ 443.661494][ T9888] tipc: Resetting bearer [ 443.698327][ T9888] tipc: Disabling bearer [ 443.723639][ T9889] tipc: Enabled bearer , priority 0 [ 443.731777][ T9887] tipc: Resetting bearer [ 443.764688][ T9887] tipc: Disabling bearer [ 443.819158][ T9898] device syzkaller0 entered promiscuous mode [ 443.858223][ T9901] netlink: 'syz.3.1708': attribute type 1 has an invalid length. [ 443.884463][ T9901] netlink: 'syz.3.1708': attribute type 2 has an invalid length. [ 444.022606][ T9910] device syzkaller0 entered promiscuous mode [ 444.044611][ T9910] tipc: Enabled bearer , priority 0 [ 444.052994][ T9907] tipc: Resetting bearer [ 444.071599][ T9907] tipc: Disabling bearer [ 444.087309][ T9912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1710'. [ 444.545908][ T9928] netlink: 'syz.4.1717': attribute type 1 has an invalid length. [ 444.590622][ T9928] device bond3 entered promiscuous mode [ 444.632310][ T9928] 8021q: adding VLAN 0 to HW filter on device bond3 [ 444.986891][ T9936] tipc: Enabled bearer , priority 0 [ 445.028960][ T9936] tipc: Resetting bearer [ 445.060388][ T9935] tipc: Disabling bearer [ 445.075372][ T9942] netlink: 'syz.0.1722': attribute type 1 has an invalid length. [ 445.090238][ T9942] netlink: 'syz.0.1722': attribute type 2 has an invalid length. [ 445.100178][ T9941] device batadv_slave_0 entered promiscuous mode [ 445.110806][ T9941] device batadv_slave_0 left promiscuous mode [ 445.487764][ T9964] device syzkaller1 entered promiscuous mode [ 445.760901][ T9977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1734'. [ 445.899297][ T9977] 8021q: adding VLAN 0 to HW filter on device bond5 [ 445.966814][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1735'. [ 446.045547][ T9982] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 446.054970][ T9985] netlink: 'syz.4.1736': attribute type 1 has an invalid length. [ 446.082119][ T9985] netlink: 'syz.4.1736': attribute type 2 has an invalid length. [ 446.190177][ T9982] xt_CT: No such helper "netbios-ns" [ 446.338300][ T9992] device syzkaller0 entered promiscuous mode [ 446.583258][T10003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1742'. [ 446.762401][T10001] crypto_alloc_aead failed rc=-4 [ 446.889315][T10029] netlink: 'syz.0.1747': attribute type 1 has an invalid length. [ 446.915539][T10029] netlink: 'syz.0.1747': attribute type 2 has an invalid length. [ 447.085049][T10036] device syzkaller0 entered promiscuous mode [ 448.118004][T10081] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1764'. [ 448.142139][T10081] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1764'. [ 448.156514][T10081] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1764'. [ 448.170998][T10081] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1764'. [ 448.278785][T10089] device syzkaller0 entered promiscuous mode [ 448.301740][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.319512][T10094] netlink: 'syz.4.1770': attribute type 1 has an invalid length. [ 448.660234][T10118] device syzkaller0 entered promiscuous mode [ 448.757627][T10120] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 448.768046][T10120] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1777'. [ 448.958668][T10130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1780'. [ 448.982529][T10130] device batadv0 entered promiscuous mode [ 449.182288][T10132] validate_nla: 1 callbacks suppressed [ 449.182387][T10132] netlink: 'syz.3.1781': attribute type 49 has an invalid length. [ 449.241878][T10138] device syzkaller0 entered promiscuous mode [ 449.260651][T10138] tipc: Enabled bearer , priority 0 [ 449.289233][T10138] tipc: Resetting bearer [ 449.298789][T10137] tipc: Resetting bearer [ 449.311387][T10137] tipc: Disabling bearer [ 449.326203][T10140] device syzkaller0 entered promiscuous mode [ 449.334152][ T4267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.478853][T10144] bond3 (unregistering): Released all slaves [ 449.828295][T10168] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 449.858632][T10170] netlink: 'syz.2.1793': attribute type 1 has an invalid length. [ 449.879339][T10170] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1793'. [ 449.959880][T10175] netlink: 'syz.3.1792': attribute type 49 has an invalid length. [ 450.129004][T10196] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 450.143881][T10196] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 450.151371][T10196] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 450.164948][T10196] device bridge_slave_0 left promiscuous mode [ 450.171206][T10196] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.204105][T10196] device bridge_slave_1 left promiscuous mode [ 450.210384][T10196] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.281836][T10196] bond0: (slave bond_slave_0): Releasing backup interface [ 450.329679][T10196] bond0: (slave bond_slave_1): Releasing backup interface [ 450.478949][T10196] team0: Port device team_slave_0 removed [ 450.565536][T10196] team0: Port device team_slave_1 removed [ 450.571863][T10196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.602082][T10196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.626139][T10196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.645957][T10196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.816443][ T25] audit: type=1800 audit(1787923726.661:12): pid=10217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1808" name="(" dev="sda1" ino=2049 res=0 errno=0 [ 450.985394][T10214] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1806'. [ 451.219251][T10230] device syzkaller0 entered promiscuous mode [ 451.231508][T10236] device syzkaller0 entered promiscuous mode [ 451.359626][T10254] (unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring [ 451.515295][ T25] audit: type=1800 audit(1787923727.361:13): pid=10273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1820" name="(" dev="sda1" ino=2049 res=0 errno=0 [ 451.690867][T10276] device syzkaller0 entered promiscuous mode [ 451.929386][T10295] netlink: 'syz.4.1828': attribute type 1 has an invalid length. [ 451.942477][T10283] syz.0.1824 (10283) used greatest stack depth: 18640 bytes left [ 451.956876][T10297] device syzkaller0 entered promiscuous mode [ 451.966058][T10295] netlink: 'syz.4.1828': attribute type 2 has an invalid length. [ 452.071297][ T25] audit: type=1800 audit(1787923727.911:14): pid=10307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1832" name="(" dev="sda1" ino=2049 res=0 errno=0 [ 452.513562][T10346] netlink: 'syz.3.1841': attribute type 3 has an invalid length. [ 452.556672][ T25] audit: type=1800 audit(1787923728.401:15): pid=10351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1845" name="(" dev="sda1" ino=2049 res=0 errno=0 [ 452.625899][T10358] netlink: 'syz.2.1846': attribute type 1 has an invalid length. [ 452.643716][T10358] netlink: 'syz.2.1846': attribute type 2 has an invalid length. [ 452.847409][T10375] tc action pedit offset must be on 32 bit boundaries [ 452.858202][T10380] netlink: 'syz.1.1854': attribute type 1 has an invalid length. [ 452.881519][T10380] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1854'. [ 452.993221][ T25] audit: type=1800 audit(1787923728.841:16): pid=10387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1856" name="(" dev="sda1" ino=2049 res=0 errno=0 [ 453.086565][T10393] device syzkaller0 entered promiscuous mode [ 453.099254][T10397] device syzkaller0 entered promiscuous mode [ 453.140609][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.358841][T10408] netlink: 'syz.1.1863': attribute type 1 has an invalid length. [ 453.824657][ T25] audit: type=1800 audit(1787923729.671:17): pid=10430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1869" name="(" dev="sda1" ino=2049 res=0 errno=0 [ 454.049481][T10443] device syzkaller0 entered promiscuous mode [ 454.085925][T10448] device syzkaller0 entered promiscuous mode [ 454.135024][T10449] device syzkaller0 entered promiscuous mode [ 454.305844][T10455] validate_nla: 1 callbacks suppressed [ 454.305858][T10455] netlink: 'syz.1.1876': attribute type 1 has an invalid length. [ 454.319492][T10455] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1876'. [ 454.715970][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1885'. [ 454.827906][T10493] device syzkaller0 entered promiscuous mode [ 454.841269][T10491] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 454.887811][T10496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1887'. [ 454.913368][T10496] batman_adv: batadv0: Interface deactivated: dummy0 [ 454.920126][T10496] batman_adv: batadv0: Removing interface: dummy0 [ 454.928828][T10496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.941173][T10496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.950812][T10496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.964000][T10496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.015801][T10497] device syzkaller0 entered promiscuous mode [ 455.221285][T10503] netlink: 'syz.0.1892': attribute type 1 has an invalid length. [ 455.228137][T10501] device syzkaller0 entered promiscuous mode [ 455.254160][T10503] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1892'. [ 455.495002][T10524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1897'. [ 455.505047][T10525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1898'. [ 455.626572][T10525] 8021q: adding VLAN 0 to HW filter on device bond3 [ 455.665365][T10535] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1900'. [ 455.722360][T10537] device syzkaller0 entered promiscuous mode [ 455.750214][T10546] netlink: 'syz.4.1900': attribute type 1 has an invalid length. [ 455.778851][T10546] 8021q: adding VLAN 0 to HW filter on device bond6 [ 455.812958][T10535] rdma_rxe: ignoring netdev event = 10 for team0 [ 455.831018][T10535] infiniband syz0: set down [ 455.837975][T10535] rdma_rxe: ignoring netdev event = 20 for team0 [ 455.847041][T10535] rdma_rxe: ignoring netdev event = 9 for team0 [ 455.854673][T10535] rdma_rxe: ignoring netdev event = 8 for team0 [ 455.861563][T10535] rdma_rxe: ignoring netdev event = 14 for team0 [ 455.868983][T10535] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.878042][T10535] infiniband syz0: set active [ 455.884242][T10535] rdma_rxe: ignoring netdev event = 9 for team0 [ 455.891716][T10535] rdma_rxe: ignoring netdev event = 8 for team0 [ 455.898736][T10535] rdma_rxe: ignoring netdev event = 27 for team0 [ 455.906094][T10535] rdma_rxe: ignoring netdev event = 26 for team0 [ 455.912898][T10535] rdma_rxe: ignoring netdev event = 21 for team0 [ 455.919822][T10535] rdma_rxe: ignoring netdev event = 27 for team0 [ 455.927050][T10535] bond6: (slave team0): making interface the new active one [ 455.935351][T10535] rdma_rxe: ignoring netdev event = 9 for team0 [ 455.946222][T10535] rdma_rxe: ignoring netdev event = 8 for team0 [ 455.960215][T10535] rdma_rxe: ignoring netdev event = 9 for team0 [ 455.971716][T10535] rdma_rxe: ignoring netdev event = 8 for team0 [ 455.978769][T10535] bond6: (slave team0): Enslaving as an active interface with an up link [ 456.012573][ T4389] rdma_rxe: ignoring netdev event = 25 for team0 [ 456.051695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 456.266600][T10579] device syzkaller0 entered promiscuous mode [ 456.389780][T10583] device syzkaller0 entered promiscuous mode [ 456.667795][T10607] device syzkaller0 entered promiscuous mode [ 457.200472][T10659] [ 457.204774][T10659] ============================= [ 457.209646][T10659] WARNING: suspicious RCU usage [ 457.235302][T10659] syzkaller #0 Not tainted [ 457.240110][T10659] ----------------------------- [ 457.249218][T10659] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage! [ 457.260846][T10659] [ 457.260846][T10659] other info that might help us debug this: [ 457.260846][T10659] [ 457.285670][T10659] [ 457.285670][T10659] rcu_scheduler_active = 2, debug_locks = 1 [ 457.296262][T10659] 1 lock held by syz.2.1934/10659: [ 457.301559][T10659] #0: ffffffff8d44cd08 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x139/0x1230 [ 457.314662][T10659] [ 457.314662][T10659] stack backtrace: [ 457.320657][T10659] CPU: 0 PID: 10659 Comm: syz.2.1934 Not tainted syzkaller #0 [ 457.328132][T10659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 457.338205][T10659] Call Trace: [ 457.341496][T10659] [ 457.344435][T10659] dump_stack_lvl+0x188/0x250 [ 457.349130][T10659] ? load_image+0x410/0x410 [ 457.353648][T10659] ? show_regs_print_info+0x20/0x20 [ 457.358878][T10659] ? lockdep_rcu_suspicious+0x110/0x180 [ 457.364437][T10659] ? local_bh_enable+0x20/0x20 [ 457.369482][T10659] rhltable_lookup+0x787/0x7a0 [ 457.374290][T10659] ? lock_chain_count+0x20/0x20 [ 457.379255][T10659] ? mr_mfc_find_parent+0x190/0x190 [ 457.384477][T10659] ? local_bh_enable+0x20/0x20 [ 457.389271][T10659] ? preempt_schedule_common+0xa5/0xd0 [ 457.394914][T10659] ? schedule_preempt_disabled+0x20/0x20 [ 457.400569][T10659] ? lock_chain_count+0x20/0x20 [ 457.405449][T10659] mr_mfc_find_any_parent+0xb7/0x1d0 [ 457.410755][T10659] ? local_bh_enable+0x20/0x20 [ 457.415541][T10659] ip_mr_forward+0x247/0xf60 [ 457.420161][T10659] ipmr_mfc_add+0x2273/0x2bd0 [ 457.424873][T10659] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 457.429829][T10659] ? __lock_acquire+0x7b50/0x7b50 [ 457.434892][T10659] ip_mroute_setsockopt+0xecd/0x1230 [ 457.440235][T10659] ? ipmr_rule_default+0x70/0x70 [ 457.445211][T10659] ? __might_sleep+0xf0/0xf0 [ 457.449860][T10659] ip_setsockopt+0x568/0x31e0 [ 457.454657][T10659] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 457.460080][T10659] ? aa_sk_perm+0x7dc/0x910 [ 457.464795][T10659] ? aa_af_perm+0x340/0x340 [ 457.469310][T10659] ? __fget_files+0x402/0x470 [ 457.474014][T10659] ? aa_sock_opt_perm+0x74/0x100 [ 457.478968][T10659] ? sock_common_setsockopt+0x32/0xb0 [ 457.484435][T10659] ? raw_setsockopt+0xc2/0x170 [ 457.489239][T10659] ? sock_common_recvmsg+0x1c0/0x1c0 [ 457.494539][T10659] __sys_setsockopt+0x2bf/0x3d0 [ 457.499407][T10659] __x64_sys_setsockopt+0xb1/0xc0 [ 457.504442][T10659] do_syscall_64+0x4c/0xa0 [ 457.508874][T10659] ? clear_bhb_loop+0x30/0x80 [ 457.513565][T10659] ? clear_bhb_loop+0x30/0x80 [ 457.518257][T10659] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 457.524183][T10659] RIP: 0033:0x7f14f70d1159 [ 457.528614][T10659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.548254][T10659] RSP: 002b:00007f14f5329028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 457.556692][T10659] RAX: ffffffffffffffda RBX: 00007f14f7358fa0 RCX: 00007f14f70d1159 [ 457.564672][T10659] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 000000000000000c [ 457.572637][T10659] RBP: 00007f14f7168024 R08: 000000000000003c R09: 0000000000000000 [ 457.580774][T10659] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 457.588753][T10659] R13: 00007f14f7359038 R14: 00007f14f7358fa0 R15: 00007ffc17fd2298 [ 457.596740][T10659] [ 457.605425][T10659] [ 457.607779][T10659] ============================= [ 457.612879][T10659] WARNING: suspicious RCU usage [ 457.617732][T10659] syzkaller #0 Not tainted [ 457.622440][T10659] ----------------------------- [ 457.627319][T10659] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage! [ 457.636358][T10659] [ 457.636358][T10659] other info that might help us debug this: [ 457.636358][T10659] [ 457.646887][T10659] [ 457.646887][T10659] rcu_scheduler_active = 2, debug_locks = 1 [ 457.655006][T10659] 1 lock held by syz.2.1934/10659: [ 457.660105][T10659] #0: ffffffff8d44cd08 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x139/0x1230 [ 457.669951][T10659] [ 457.669951][T10659] stack backtrace: [ 457.675912][T10659] CPU: 0 PID: 10659 Comm: syz.2.1934 Not tainted syzkaller #0 [ 457.683381][T10659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 457.693445][T10659] Call Trace: [ 457.696718][T10659] [ 457.699641][T10659] dump_stack_lvl+0x188/0x250 [ 457.704319][T10659] ? load_image+0x410/0x410 [ 457.708835][T10659] ? show_regs_print_info+0x20/0x20 [ 457.714040][T10659] ? lockdep_rcu_suspicious+0x110/0x180 [ 457.719634][T10659] ? local_bh_enable+0x20/0x20 [ 457.724416][T10659] rhltable_lookup+0x512/0x7a0 [ 457.729194][T10659] ? local_bh_enable+0x20/0x20 [ 457.734019][T10659] ? mr_mfc_find_parent+0x190/0x190 [ 457.739235][T10659] ? local_bh_enable+0x20/0x20 [ 457.743990][T10659] ? preempt_schedule_common+0xa5/0xd0 [ 457.749460][T10659] ? schedule_preempt_disabled+0x20/0x20 [ 457.755097][T10659] ? lock_chain_count+0x20/0x20 [ 457.759954][T10659] mr_mfc_find_any_parent+0xb7/0x1d0 [ 457.765252][T10659] ? local_bh_enable+0x20/0x20 [ 457.770038][T10659] ip_mr_forward+0x247/0xf60 [ 457.774658][T10659] ipmr_mfc_add+0x2273/0x2bd0 [ 457.779332][T10659] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 457.784266][T10659] ? __lock_acquire+0x7b50/0x7b50 [ 457.789306][T10659] ip_mroute_setsockopt+0xecd/0x1230 [ 457.794589][T10659] ? ipmr_rule_default+0x70/0x70 [ 457.799555][T10659] ? __might_sleep+0xf0/0xf0 [ 457.804141][T10659] ip_setsockopt+0x568/0x31e0 [ 457.808924][T10659] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 457.814279][T10659] ? aa_sk_perm+0x7dc/0x910 [ 457.818771][T10659] ? aa_af_perm+0x340/0x340 [ 457.823262][T10659] ? __fget_files+0x402/0x470 [ 457.827945][T10659] ? aa_sock_opt_perm+0x74/0x100 [ 457.832874][T10659] ? sock_common_setsockopt+0x32/0xb0 [ 457.838247][T10659] ? raw_setsockopt+0xc2/0x170 [ 457.843000][T10659] ? sock_common_recvmsg+0x1c0/0x1c0 [ 457.848289][T10659] __sys_setsockopt+0x2bf/0x3d0 [ 457.853127][T10659] __x64_sys_setsockopt+0xb1/0xc0 [ 457.858149][T10659] do_syscall_64+0x4c/0xa0 [ 457.862557][T10659] ? clear_bhb_loop+0x30/0x80 [ 457.867231][T10659] ? clear_bhb_loop+0x30/0x80 [ 457.871897][T10659] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 457.877818][T10659] RIP: 0033:0x7f14f70d1159 [ 457.882229][T10659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.901845][T10659] RSP: 002b:00007f14f5329028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 457.910253][T10659] RAX: ffffffffffffffda RBX: 00007f14f7358fa0 RCX: 00007f14f70d1159 [ 457.918217][T10659] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 000000000000000c [ 457.926177][T10659] RBP: 00007f14f7168024 R08: 000000000000003c R09: 0000000000000000 [ 457.934141][T10659] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 457.942103][T10659] R13: 00007f14f7359038 R14: 00007f14f7358fa0 R15: 00007ffc17fd2298 [ 457.950104][T10659] [ 457.961843][T10659] [ 457.964278][T10659] ============================= [ 457.969121][T10659] WARNING: suspicious RCU usage [ 457.974010][T10659] syzkaller #0 Not tainted [ 457.978508][T10659] ----------------------------- [ 457.983429][T10659] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage! [ 457.992065][T10659] [ 457.992065][T10659] other info that might help us debug this: [ 457.992065][T10659] [ 458.002390][T10659] [ 458.002390][T10659] rcu_scheduler_active = 2, debug_locks = 1 [ 458.010463][T10659] 1 lock held by syz.2.1934/10659: [ 458.015629][T10659] #0: ffffffff8d44cd08 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x139/0x1230 [ 458.025447][T10659] [ 458.025447][T10659] stack backtrace: [ 458.031328][T10659] CPU: 0 PID: 10659 Comm: syz.2.1934 Not tainted syzkaller #0 [ 458.038793][T10659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 458.048837][T10659] Call Trace: [ 458.052110][T10659] [ 458.055046][T10659] dump_stack_lvl+0x188/0x250 [ 458.059775][T10659] ? load_image+0x410/0x410 [ 458.064379][T10659] ? show_regs_print_info+0x20/0x20 [ 458.069600][T10659] ? lockdep_rcu_suspicious+0x110/0x180 [ 458.075148][T10659] ? local_bh_enable+0x20/0x20 [ 458.079919][T10659] rhltable_lookup+0x5fc/0x7a0 [ 458.084686][T10659] ? local_bh_enable+0x20/0x20 [ 458.089486][T10659] ? mr_mfc_find_parent+0x190/0x190 [ 458.094677][T10659] ? local_bh_enable+0x20/0x20 [ 458.099435][T10659] ? preempt_schedule_common+0xa5/0xd0 [ 458.104897][T10659] ? schedule_preempt_disabled+0x20/0x20 [ 458.110558][T10659] ? lock_chain_count+0x20/0x20 [ 458.115408][T10659] mr_mfc_find_any_parent+0xb7/0x1d0 [ 458.120689][T10659] ? local_bh_enable+0x20/0x20 [ 458.125443][T10659] ip_mr_forward+0x247/0xf60 [ 458.130031][T10659] ipmr_mfc_add+0x2273/0x2bd0 [ 458.134738][T10659] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 458.139672][T10659] ? __lock_acquire+0x7b50/0x7b50 [ 458.144710][T10659] ip_mroute_setsockopt+0xecd/0x1230 [ 458.150006][T10659] ? ipmr_rule_default+0x70/0x70 [ 458.154951][T10659] ? __might_sleep+0xf0/0xf0 [ 458.159539][T10659] ip_setsockopt+0x568/0x31e0 [ 458.164222][T10659] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 458.169604][T10659] ? aa_sk_perm+0x7dc/0x910 [ 458.174120][T10659] ? aa_af_perm+0x340/0x340 [ 458.178618][T10659] ? __fget_files+0x402/0x470 [ 458.183295][T10659] ? aa_sock_opt_perm+0x74/0x100 [ 458.188241][T10659] ? sock_common_setsockopt+0x32/0xb0 [ 458.193602][T10659] ? raw_setsockopt+0xc2/0x170 [ 458.198445][T10659] ? sock_common_recvmsg+0x1c0/0x1c0 [ 458.203729][T10659] __sys_setsockopt+0x2bf/0x3d0 [ 458.208596][T10659] __x64_sys_setsockopt+0xb1/0xc0 [ 458.213633][T10659] do_syscall_64+0x4c/0xa0 [ 458.218050][T10659] ? clear_bhb_loop+0x30/0x80 [ 458.222720][T10659] ? clear_bhb_loop+0x30/0x80 [ 458.227401][T10659] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 458.233393][T10659] RIP: 0033:0x7f14f70d1159 [ 458.237803][T10659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.257400][T10659] RSP: 002b:00007f14f5329028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 458.265805][T10659] RAX: ffffffffffffffda RBX: 00007f14f7358fa0 RCX: 00007f14f70d1159 [ 458.273785][T10659] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 000000000000000c [ 458.281756][T10659] RBP: 00007f14f7168024 R08: 000000000000003c R09: 0000000000000000 [ 458.289752][T10659] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 458.297733][T10659] R13: 00007f14f7359038 R14: 00007f14f7358fa0 R15: 00007ffc17fd2298 [ 458.305739][T10659]