last executing test programs: 13m14.101006104s ago: executing program 5 (id=177): socket$packet(0x11, 0x2, 0x300) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8080, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) creat(0x0, 0xc7) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_IO_FLUSHER(0x3a) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000037000701feffffffffffffff017c00000c00038008"], 0x20}, 0x1, 0x0, 0x0, 0x2404c0d1}, 0xc000) 13m12.268469425s ago: executing program 5 (id=185): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_generic(r0, 0x0, 0xc000) 13m10.927718377s ago: executing program 5 (id=188): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x202441, 0x0) syz_emit_vhci(0x0, 0xd) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x2c, 0x9, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e659b2064656661756c7420757365723a303030303430393300"/35], 0x2a, 0x0) socket$netlink(0x10, 0x3, 0xf) mmap(&(0x7f000050f000/0x1000)=nil, 0x1000, 0x200000a, 0x40010, r1, 0x2f10d000) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1b) 13m9.698955229s ago: executing program 5 (id=191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 13m8.12459951s ago: executing program 5 (id=197): socket$packet(0x11, 0x2, 0x300) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8080, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) creat(0x0, 0xc7) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_IO_FLUSHER(0x3a) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000037000701feffffffffffffff017c00000c00038008"], 0x20}, 0x1, 0x0, 0x0, 0x2404c0d1}, 0xc000) 13m5.992041836s ago: executing program 5 (id=204): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x4, r4, 0x0, 0x0}) ioctl$MEDIA_REQUEST_IOC_REINIT(r4, 0x7c81, 0x0) 12m49.22713243s ago: executing program 32 (id=204): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x4, r4, 0x0, 0x0}) ioctl$MEDIA_REQUEST_IOC_REINIT(r4, 0x7c81, 0x0) 3m41.589509194s ago: executing program 2 (id=2603): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c0}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000240)=@xdp={0x2c, 0x0, r7, 0x3f}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000020000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x84) 3m38.359636935s ago: executing program 2 (id=2615): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xff6f}}}}}}}, 0x0) pread64(r0, &(0x7f0000002100)=""/171, 0xab, 0x9a) r1 = syz_io_uring_setup(0xaad, &(0x7f0000000300)={0x0, 0x4, 0x40, 0x22, 0x236}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x22, &(0x7f0000000380)={&(0x7f0000001000)}, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x240081d1) r2 = socket$nl_audit(0x10, 0x3, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, 0x0) socket$l2tp6(0xa, 0x2, 0x73) gettid() sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f8, 0x124, 0x70bd2c, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0xc850) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3m38.245310072s ago: executing program 2 (id=2616): syz_emit_ethernet(0x76, &(0x7f0000000280)={@local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "771324", 0x40, 0x3c, 0x0, @private1, @local, {[@dstopts={0x3b, 0x5, '\x00', [@jumbo={0xc2, 0x4, 0x7fffffff}, @hao={0xc9, 0x10, @private1}, @enc_lim={0x4, 0x1, 0x4b}, @generic={0x81}, @calipso={0x7, 0x10, {0x3, 0x2, 0x40, 0x5a, [0x0]}}]}, @dstopts={0x5e}]}}}}}, 0x0) close(0xffffffffffffffff) 3m38.10032385s ago: executing program 2 (id=2617): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)='1\x00', 0x2) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x800, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000700)=0x2) write(r0, &(0x7f0000000800)='a\n\x00', 0x2) write(r0, &(0x7f0000000900)='b\n\x00', 0x2) read(r1, &(0x7f0000000b00), 0x64) 3m38.023182225s ago: executing program 2 (id=2618): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000340)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe0}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de250000000000000000", 0x40}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d8774493884", 0xee}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="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", 0x160}, {&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa", 0x96}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd92e0ea2322f163473dad24cffe6d23ffa95b04a2653e8a7c9ab042ea1b0bf4bde850bc9f6147f1a48e86eec8223fd33fc83374393fbd08a3281a268aff6688fb41eecbdd328ef0fcbe09cd9e34c6b9d641ba6fb677e", 0x99}], 0x3}}], 0x2, 0x2090) 3m36.232089182s ago: executing program 2 (id=2624): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x4ae60) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "771324", 0x0, 0x3c, 0x0, @private1, @local}}}}, 0x0) 3m34.970127433s ago: executing program 33 (id=2624): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x4ae60) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "771324", 0x0, 0x3c, 0x0, @private1, @local}}}}, 0x0) 16.501326016s ago: executing program 4 (id=3235): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r1}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000380)={@loopback, r1}, 0xfffffffffffffed3) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000004c0)={@ipv4={'\x00', '\xff\xff', @loopback}, r1}, 0x14) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f0000000180)=0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x8000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet6_buf(r3, 0x29, 0x32, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f70700000000090000000000000000002a000000180100005d4c5bad84275aafe6ce1f1dd3646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffdf) 14.157904049s ago: executing program 1 (id=3241): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0xf, &(0x7f00000010c0)=@raw=[@generic={0xb7, 0x2}, @generic={0x7b, 0xa, 0x2, 0xfff8}, @generic={0x7b, 0xa, 0x2, 0xffc8}, @generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x73, 0xa, 0x2, 0xffc0}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x63, 0xa, 0x2, 0xffcc}, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x95}], &(0x7f00000011c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000001200)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r0, 0x0, 0xe, 0x0, &(0x7f0000002280)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 13.035987988s ago: executing program 1 (id=3244): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2710, 0x0, &(0x7f0000000040)) setsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) 11.817617388s ago: executing program 1 (id=3249): socket(0x1e, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0) 10.894875673s ago: executing program 1 (id=3252): syz_emit_ethernet(0x4e, &(0x7f0000000300)={@broadcast, @remote, @val={@val={0x88a8, 0x4, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x6, 0x38, 0x64, 0x0, 0x4, 0x6, 0x0, @multicast1, @loopback, {[@cipso={0x86, 0x9, 0x2, [{0x7, 0x3, "91"}]}]}}, {{0x4e20, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x80, 0x95e, 0x0, 0x2, {[@window={0x3, 0x3, 0x4}]}}}}}}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997", 0x3e}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff", 0x48}], 0x2}}], 0x1, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}]}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}}, 0xff, 0x3}, 0x90) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4], 0x6f4}}, 0x0) 10.800118104s ago: executing program 7 (id=3253): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) poll(&(0x7f0000000040), 0x0, 0x7f) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000180)=ANY=[@ANYRES32]) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30bc, 0x0, 0x2, 0x15d}, &(0x7f00000002c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x2a, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x1, 0x257}, &(0x7f0000000680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x1, 0x2000, 0x10000004, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe0a4, 0x80000, 0x6, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x8000, 0x0, 0x8080362, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x7b, 0x0, 0x0}}, 0x0) 10.69057008s ago: executing program 4 (id=3256): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0xf, &(0x7f00000010c0)=@raw=[@generic={0xb7, 0x2}, @generic={0x7b, 0xa, 0x2, 0xfff8}, @generic={0x7b, 0xa, 0x2, 0xffc8}, @generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x73, 0xa, 0x2, 0xffc0}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x63, 0xa, 0x2, 0xffcc}, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x95}], &(0x7f00000011c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000001200)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r0, 0x0, 0xe, 0x0, &(0x7f0000002280)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.232516362s ago: executing program 3 (id=3257): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000930000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b77, &(0x7f0000000040)={0x0, 0x8000c89f, 0xc880, 0x7, 0x20002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40000) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x725b, &(0x7f0000000000)={0x32, 0x6, 0x2}) 6.684229543s ago: executing program 1 (id=3259): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@o_path={0x0, 0xffffffffffffffff, 0x4000, r1}, 0x14) sendmmsg$sock(r3, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb", 0x10}], 0x3}}], 0x1, 0x0) 6.683577419s ago: executing program 4 (id=3260): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 6.327314616s ago: executing program 3 (id=3261): add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000100), 0x5) 5.76864777s ago: executing program 3 (id=3264): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0xa8242) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a8c0083"], 0x0}, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) write$tun(r1, &(0x7f0000000740)=ANY=[@ANYRESOCT], 0xa2) readv(r1, &(0x7f0000001a80), 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r2, 0x0) read(r2, &(0x7f00000000c0)=""/163, 0xd0140f23) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@delneigh={0x1c, 0x1a, 0x401, 0x70bd2d, 0xffffffff, {0x1c, 0x0, 0x0, 0x0, 0x80, 0x2, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x1080}, 0x4000890) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffffff, &(0x7f0000000a40)='./file0\x00', 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500, 0x18010}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5}, @IFLA_BOND_XMIT_HASH_POLICY={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000100)) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x258a, 0x6a88, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x80, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x45, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r6, &(0x7f0000002240)={0x2020}, 0x2020) writev(r6, &(0x7f0000001080)=[{&(0x7f0000002080)='T01\n', 0x4}, {&(0x7f0000001440)="c567", 0x2}], 0x2) syz_usb_control_io(r5, &(0x7f0000000140)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="0021da0000002831f78f6435efe5bbbb7e00000200cb4fdca0560fb30d54f365c5"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.598071647s ago: executing program 0 (id=3265): socket(0x1e, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0) 4.594565333s ago: executing program 6 (id=3266): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket(0x2, 0x2, 0x1) bind$unix(r3, &(0x7f0000000000)=@abs, 0x6e) connect$unix(r3, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto]}, {0x0, [0x61, 0x3e]}}, 0x0, 0x28, 0x0, 0x0, 0x4}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x1c, 0x0, 0x10, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x48000) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r1, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r0}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4.163458089s ago: executing program 0 (id=3267): ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0x9, 0x1000}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) 3.284481842s ago: executing program 6 (id=3268): bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(0xffffffffffffffff, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r0, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) 3.163830101s ago: executing program 4 (id=3269): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 3.089498765s ago: executing program 6 (id=3270): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a442, 0x0) r0 = epoll_create1(0x80000) r1 = fanotify_init(0x40, 0x40000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec772000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000005c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r3, 0x3, r2, 0x5}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000003c0)={0xa0000002, 0x2000000}) 3.061137404s ago: executing program 0 (id=3271): syz_emit_ethernet(0x4e, &(0x7f0000000300)={@broadcast, @remote, @val={@val={0x88a8, 0x4, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x6, 0x38, 0x64, 0x0, 0x4, 0x6, 0x0, @multicast1, @loopback, {[@cipso={0x86, 0x9, 0x2, [{0x7, 0x3, "91"}]}]}}, {{0x4e20, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x80, 0x95e, 0x0, 0x2, {[@window={0x3, 0x3, 0x4}]}}}}}}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997", 0x3e}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff", 0x48}], 0x2}}], 0x1, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}]}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}}, 0xff, 0x3}, 0x90) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4], 0x6f4}}, 0x0) 2.547348622s ago: executing program 7 (id=3272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x12c}}, 0x0) 2.517403451s ago: executing program 4 (id=3273): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, 0x0, 0x0, 0x20000040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) 2.335293601s ago: executing program 7 (id=3274): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000600)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_bpf={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0xe}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001780), 0x0, 0x0, 0x0, 0x1}, 0x0) 2.275441756s ago: executing program 4 (id=3275): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pread64(r1, 0x0, 0xea, 0x2) 2.019690177s ago: executing program 7 (id=3276): socket$kcm(0xa, 0x3, 0x3a) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r1, 0x1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b70400000000000085000000330000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x65, 0x0, 0x8, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 2.019137282s ago: executing program 0 (id=3277): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x12c}}, 0x0) 1.899942559s ago: executing program 6 (id=3278): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2710, 0x0, &(0x7f0000000040)) setsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) 1.800123415s ago: executing program 3 (id=3279): socket(0x1e, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)}], 0x1}}], 0x1, 0x0) 1.756346436s ago: executing program 0 (id=3280): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket(0x2, 0x2, 0x1) bind$unix(r3, &(0x7f0000000000)=@abs, 0x6e) connect$unix(r3, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto]}, {0x0, [0x61, 0x3e]}}, 0x0, 0x28, 0x0, 0x0, 0x4}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x1c, 0x0, 0x10, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x48000) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r1, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r0}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.47747509s ago: executing program 7 (id=3281): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0ea, 0xc574450d1af3b5bd}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24044854}, 0x4040) 675.029258ms ago: executing program 6 (id=3282): bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(0xffffffffffffffff, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r0, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) 462.949205ms ago: executing program 3 (id=3283): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0xf, &(0x7f00000010c0)=@raw=[@generic={0xb7, 0x2}, @generic={0x7b, 0xa, 0x2, 0xfff8}, @generic={0x7b, 0xa, 0x2, 0xffc8}, @generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x73, 0xa, 0x2, 0xffc0}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x63, 0xa, 0x2, 0xffcc}, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f00000011c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000001200)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r0, 0x0, 0xe, 0x0, &(0x7f0000002280)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 158.861998ms ago: executing program 0 (id=3284): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) preadv(r0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000001300)=""/4100, 0x1004}], 0x2, 0x8c0, 0x2bd6) 149.876172ms ago: executing program 6 (id=3285): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 111.864927ms ago: executing program 1 (id=3286): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002080)=@newtaction={0x268c, 0x30, 0x1, 0x0, 0x2, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x3ff, 0x4, 0xe5ce, 0x8cf}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}, {0x244c, 0x1, [@m_nat={0xa4, 0x1a, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x200, 0x1, 0xc3, 0x7a4}, @local, @loopback, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x0, 0x0, 0xaa, 0x5}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10001, 0x5, 0x8, 0x2d, 0xc}, @broadcast, @dev={0xac, 0x14, 0x14, 0x29}, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0xb34, 0xe, 0x0, 0x0, {{0x7}, {0xae4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xa85, 0x6, {0x93, 'nat\x00', 0x2b, 0x1, "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"}}, @TCA_IPT_TARG={0x4e, 0x6, {0x0, 'filter\x00', 0x6, 0x76b2, "09be888352e1636a6f02d65ff730c94cb88e52c5c37e0cf00fa6f57dbfd25d4cb29eafa4"}}, @TCA_IPT_HOOK={0x8}]}, {0x2a, 0x6, "54efc6bede17512378a571f7be540951ec9929be6a33e95c9a6b2eece042d6d557d3b835f81c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_sample={0xe64, 0x1f, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x10000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x6, 0x10000000, 0x9, 0x80000001}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4a}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x9, 0x3, 0x8, 0x6}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x1, 0x5, 0x9, 0x9}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}]}, {0xdd8, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x104, 0x20, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5, 0x3, 0x8}, 0x72}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xfffffff9, 0x1, 0x0, 0x3}, 0x27}}]}, {0x9d, 0x6, "40e6c68e7d112a02a3d120cba60409a40e24b035ca0d572e5b2606739a59121eab62f5f81a079d957c3f9bbba270c1cba5e2b1d9ccb8009a91c57909168295be023959764a2da392c5376ed636c11499f091db45bfaed5132047d7f818bfb7c6d2479e86023b317037c3bc9b1e19b61ad6bcef9b7595d974e68e6a03d8c8ad3355ef0a3febd72acc1c4bc91659b59cf5f43379dcf4d21b6e63"}, {0xc}, {0xc, 0x8, {0x3, 0x2632767e6fcd1fa4}}}}, @m_ctinfo={0x104, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0xd7, 0x6, "85145f3341ee7c816801a1ba58fb564ac84eb6a369ea4768af78c0c3555cc658d4caaa1365752191bf99dbe3d7b93894888c672d180f90b855f546adedf949d51d5a3ea04a1ee2d44bd2bf156a5935fa05b313b1e3b15d7e9f1ec5b660db769b836a7a3134f815d271426f240804a87f718fa9ecc8298486ee5cc85e3989415e16d791f304ad085c66cfcf84c3f92eec72f070a8d0a9469619dc5e94d17bb1867389f00b886aea4c114f903bb369712a9106df102e573d07c9ab8d967819fc5bdb5ad4643b5e9b15a47527a737caa3cc39ce98"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mirred={0x804, 0x18, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xffffffff, 0x5, 0xc3b9, 0x101}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80, 0x4, 0xffffffffffffffff, 0xfffffffa, 0x1}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x0, 0x20000000, 0x9c9, 0x5}, 0x3}}]}, {0x775, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x164, 0x1, [@m_connmark={0xc0, 0x8, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x40, 0x0, 0x4, 0xfff}, 0x7ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8000, 0x3, 0x10000000, 0x3, 0x8}, 0xe7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x1000, 0x6, 0x2, 0xf86}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xb0a7, 0x20000000, 0x4, 0x2}, 0x941c}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x2, 0xffffffffffffffff, 0x8001, 0x7}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_sample={0xa0, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x94c3, 0x4, 0x4, 0x8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}]}, {0x49, 0x6, "e2fdde4de934f1ebe259883ded80a7adb789f83eb880596203503e0f3933ad3c1650e42b53eed97ec49290e32c8f16b47d77da843def1935facbdba0916e0fc78e53900869"}, {0xc}, {0xc, 0x8, {0x2}}}}]}, {0x78, 0x1, [@m_gact={0x3c, 0x19, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xebc, 0xffffffffffffffff}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_police={0x38, 0x5, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x200}], []]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x268c}, 0x1, 0x0, 0x0, 0x24008041}, 0x10000800) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 3.121954ms ago: executing program 3 (id=3287): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x24}}, 0x0) 0s ago: executing program 7 (id=3288): write(0xffffffffffffffff, &(0x7f0000000080), 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x4000810) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140), 0x0, 0x4003c, &(0x7f0000000440), 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000500), 0x8, 0x64, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x1, 0x6, 0x0, 0x100, 0x2, 0x500000}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180104}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="adea08c7beef905d069c564c90c2000000", 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x80000}, 0x10, r1}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000040)={@empty, @broadcast}, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r6, &(0x7f0000000200), 0x12) bind$x25(r5, &(0x7f0000000080), 0x12) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) kernel console output (not intermixed with test programs): 38748][T12853] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 595.280052][T12855] syzkaller0: entered promiscuous mode [ 595.307178][T12855] syzkaller0: entered allmulticast mode [ 595.601336][T12873] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 597.777368][T12914] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1977'. [ 597.930068][T12916] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1978'. [ 598.771472][ T5352] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 598.945229][ T5352] usb 5-1: Using ep0 maxpacket: 32 [ 598.975781][ T5352] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.986961][ T5352] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 599.010962][ T5352] usb 5-1: config 0 interface 0 has no altsetting 0 [ 599.018165][ T5352] usb 5-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 599.027355][ T5352] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.038927][ T5352] usb 5-1: config 0 descriptor?? [ 599.484157][ T5352] hid (null): unknown global tag 0xc [ 599.498671][ T5352] itetech 0003:258A:6A88.0015: unknown main item tag 0x3 [ 599.506470][ T5352] itetech 0003:258A:6A88.0015: unknown main item tag 0x0 [ 599.513729][ T5352] itetech 0003:258A:6A88.0015: unknown global tag 0xc [ 599.520810][ T5352] itetech 0003:258A:6A88.0015: item 0 1 1 12 parsing failed [ 599.542305][ T5352] itetech 0003:258A:6A88.0015: probe with driver itetech failed with error -22 [ 599.595545][T12884] syz_tun: left allmulticast mode [ 599.600641][T12884] syz_tun: left promiscuous mode [ 599.607090][T12884] bridge0: port 3(syz_tun) entered disabled state [ 599.639632][T12884] bridge_slave_0: left allmulticast mode [ 599.645847][T12884] bridge_slave_0: left promiscuous mode [ 599.653116][T12884] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.669482][T12884] bridge_slave_1: left allmulticast mode [ 599.675348][T12884] bridge_slave_1: left promiscuous mode [ 599.683371][T12884] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.699470][T12884] bond0: (slave bond_slave_0): Releasing backup interface [ 599.724350][T12884] bond0: (slave bond_slave_1): Releasing backup interface [ 599.750443][T12884] team0: Port device team_slave_0 removed [ 599.773656][T12884] team0: Port device team_slave_1 removed [ 599.794455][T12884] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 599.830947][T12885] team0: Mode changed to "loadbalance" [ 599.840373][T12887] veth1_to_bond: entered allmulticast mode [ 599.859928][T12892] veth1_to_bond: left allmulticast mode [ 600.002095][ T5744] usb 5-1: USB disconnect, device number 12 [ 600.460448][T12933] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 600.696369][T12931] syzkaller0: entered promiscuous mode [ 600.731410][T12931] syzkaller0: entered allmulticast mode [ 601.318972][ T186] libceph: connect (1)[c::]:6789 error -101 [ 601.327056][ T186] libceph: mon0 (1)[c::]:6789 connect error [ 601.335926][T12953] ceph: No mds server is up or the cluster is laggy [ 601.346481][ T186] libceph: connect (1)[c::]:6789 error -101 [ 601.362754][ T186] libceph: mon0 (1)[c::]:6789 connect error [ 601.806745][T12962] syzkaller0: entered promiscuous mode [ 601.827914][T12962] syzkaller0: entered allmulticast mode [ 601.847668][T12966] syzkaller0: entered promiscuous mode [ 601.865201][T12966] syzkaller0: entered allmulticast mode [ 601.897024][T12970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1995'. [ 601.911789][T12970] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1995'. [ 603.904089][T12970] geneve2: entered promiscuous mode [ 603.909464][T12970] geneve2: entered allmulticast mode [ 604.104213][T12997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2000'. [ 604.613256][T13010] ceph: No mds server is up or the cluster is laggy [ 604.620675][ T5352] libceph: connect (1)[c::]:6789 error -101 [ 604.639287][T13011] syzkaller0: entered promiscuous mode [ 604.680270][ T5352] libceph: mon0 (1)[c::]:6789 connect error [ 604.698649][T13011] syzkaller0: entered allmulticast mode [ 604.797202][T13025] workqueue: name exceeds WQ_NAME_LEN. Truncating to: B€ÃŠU¼5‹ä§bZ0Î%ûÿMpÑZ'RH [ 604.984407][ T5352] libceph: connect (1)[c::]:6789 error -101 [ 605.012544][ T5352] libceph: mon0 (1)[c::]:6789 connect error [ 605.225964][T13036] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 606.309270][T13046] syzkaller0: entered promiscuous mode [ 606.331313][T13046] syzkaller0: entered allmulticast mode [ 606.388206][T13050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2018'. [ 607.184188][T13054] syzkaller0: entered promiscuous mode [ 607.201036][T13054] syzkaller0: entered allmulticast mode [ 607.351580][T13075] netlink: get zone limit has 4 unknown bytes [ 608.605358][T13094] netlink: 'syz.1.2024': attribute type 39 has an invalid length. [ 609.268981][T13108] netlink: 'syz.2.2027': attribute type 1 has an invalid length. [ 609.293238][T13108] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2027'. [ 610.586134][T13113] ceph: No mds server is up or the cluster is laggy [ 610.593403][ T5744] libceph: connect (1)[c::]:6789 error -101 [ 610.599856][ T5744] libceph: mon0 (1)[c::]:6789 connect error [ 611.169851][T13127] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 612.112988][T13131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2034'. [ 612.905629][T13129] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 612.957332][T13129] batadv0: entered promiscuous mode [ 612.973485][T13129] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 613.274549][T13155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2041'. [ 613.319996][T13155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2041'. [ 613.589074][T13167] netlink: zone id is out of range [ 613.605467][T13167] netlink: get zone limit has 4 unknown bytes [ 614.686577][T13183] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 614.895009][T13186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2047'. [ 616.217648][T13202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2052'. [ 617.003785][T13217] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2057'. [ 617.057855][T13217] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2057'. [ 617.888614][T13239] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 618.862533][T13254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2067'. [ 619.161787][T13262] trusted_key: syz.2.2068 sent an empty control message without MSG_MORE. [ 619.255236][T13258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 620.028535][T13283] netlink: zone id is out of range [ 620.041221][T13283] netlink: get zone limit has 4 unknown bytes [ 621.516579][T13298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2075'. [ 621.548365][T13298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2075'. [ 622.096578][T13301] netlink: 'syz.1.2078': attribute type 4 has an invalid length. [ 622.901545][T13314] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 623.766652][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.776705][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.795198][ T1310] aoe: packet could not be sent on lowpan0. consider increasing tx_queue_len [ 624.436226][T13335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2089'. [ 624.500630][T13335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2089'. [ 626.045698][T13370] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 627.621640][ T5744] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 627.802939][ T5744] usb 5-1: Using ep0 maxpacket: 32 [ 627.817035][ T5744] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.862730][ T5744] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 627.906099][ T5744] usb 5-1: config 0 interface 0 has no altsetting 0 [ 627.943369][ T5744] usb 5-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 627.983321][ T5744] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.020985][ T5744] usb 5-1: config 0 descriptor?? [ 628.274497][T13392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2106'. [ 628.312759][T13392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2106'. [ 628.506774][ T5744] hid (null): unknown global tag 0xc [ 628.847547][ T5744] itetech 0003:258A:6A88.0016: unknown main item tag 0x3 [ 628.869343][ T5744] itetech 0003:258A:6A88.0016: unknown main item tag 0x0 [ 628.886196][ T5744] itetech 0003:258A:6A88.0016: unknown global tag 0xc [ 628.895003][ T5744] itetech 0003:258A:6A88.0016: item 0 1 1 12 parsing failed [ 628.960166][ T5744] itetech 0003:258A:6A88.0016: probe with driver itetech failed with error -22 [ 629.016868][T13402] syzkaller0: entered promiscuous mode [ 629.036255][T13402] syzkaller0: entered allmulticast mode [ 629.097339][ T5744] usb 5-1: USB disconnect, device number 13 [ 629.774329][T13414] syzkaller0: entered promiscuous mode [ 629.792599][T13414] syzkaller0: entered allmulticast mode [ 630.880429][T13434] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2121'. [ 631.382237][T13440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2124'. [ 631.866352][T13440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2124'. [ 633.227871][T13459] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 634.220011][T13467] netlink: 'syz.1.2135': attribute type 1 has an invalid length. [ 635.195632][T13480] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2137'. [ 636.303204][T13506] virt_wifi0 speed is unknown, defaulting to 1000 [ 636.321881][T13506] virt_wifi0 speed is unknown, defaulting to 1000 [ 636.502615][T13515] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 637.314023][T13506] virt_wifi0 speed is unknown, defaulting to 1000 [ 637.406767][T13506] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 637.442526][T13506] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 637.514675][T13506] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 637.703787][T13506] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 637.849516][T13531] netlink: 'syz.1.2154': attribute type 1 has an invalid length. [ 637.891713][T13506] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 637.920353][T13531] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2154'. [ 638.208896][T13535] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2155'. [ 638.279417][T13506] virt_wifi0 speed is unknown, defaulting to 1000 [ 638.371315][T13506] virt_wifi0 speed is unknown, defaulting to 1000 [ 638.413173][T13506] virt_wifi0 speed is unknown, defaulting to 1000 [ 638.490645][T13506] virt_wifi0 speed is unknown, defaulting to 1000 [ 638.557269][T13506] virt_wifi0 speed is unknown, defaulting to 1000 [ 638.592949][T13506] virt_wifi0 speed is unknown, defaulting to 1000 [ 639.018852][ T31] audit: type=1326 audit(1785189389.310:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13548 comm="syz.4.2161" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f077099de99 code=0x7ffc0000 [ 639.026296][T13552] netlink: 'syz.3.2163': attribute type 4 has an invalid length. [ 640.120745][ T31] audit: type=1326 audit(1785189389.340:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13548 comm="syz.4.2161" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f077099de99 code=0x7ffc0000 [ 640.234017][ T31] audit: type=1326 audit(1785189389.360:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13548 comm="syz.4.2161" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f077099de99 code=0x7ffc0000 [ 640.390240][ T31] audit: type=1326 audit(1785189389.360:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13548 comm="syz.4.2161" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f077099de99 code=0x7ffc0000 [ 640.521239][ T31] audit: type=1326 audit(1785189389.360:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13548 comm="syz.4.2161" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f077099de99 code=0x7ffc0000 [ 640.654824][ T31] audit: type=1326 audit(1785189389.360:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13548 comm="syz.4.2161" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f077099de99 code=0x7ffc0000 [ 640.790409][ T31] audit: type=1326 audit(1785189389.360:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13548 comm="syz.4.2161" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f077099de99 code=0x7ffc0000 [ 640.920333][ T31] audit: type=1326 audit(1785189389.360:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13548 comm="syz.4.2161" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f077099de99 code=0x7ffc0000 [ 641.017312][ T31] audit: type=1326 audit(1785189389.360:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13548 comm="syz.4.2161" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f077099de99 code=0x7ffc0000 [ 641.235338][ T31] audit: type=1326 audit(1785189389.360:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13548 comm="syz.4.2161" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f077099de99 code=0x7ffc0000 [ 642.118563][T13582] virt_wifi0 speed is unknown, defaulting to 1000 [ 642.528246][T13592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2174'. [ 643.499015][T13606] netlink: 'syz.6.2179': attribute type 4 has an invalid length. [ 646.215951][T13665] netlink: 'syz.2.2197': attribute type 4 has an invalid length. [ 646.725002][T13673] sg_write: data in/out 926365459/120 bytes for SCSI command 0x0-- guessing data in; [ 646.725002][T13673] program syz.2.2201 not setting count and/or reply_len properly [ 648.081430][T11243] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 648.251301][T11243] usb 3-1: Using ep0 maxpacket: 32 [ 648.274683][T11243] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.318609][T11243] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 648.370055][T11243] usb 3-1: config 0 interface 0 has no altsetting 0 [ 648.398065][T11243] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 648.454885][T11243] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.506862][T11243] usb 3-1: config 0 descriptor?? [ 648.981601][T11243] hid (null): unknown global tag 0xc [ 649.025065][T11243] itetech 0003:258A:6A88.0017: unknown main item tag 0x3 [ 649.060752][T11243] itetech 0003:258A:6A88.0017: unknown main item tag 0x0 [ 649.106342][T11243] itetech 0003:258A:6A88.0017: unknown global tag 0xc [ 649.134492][T13696] ceph: No mds server is up or the cluster is laggy [ 649.150214][ T5744] libceph: connect (1)[c::]:6789 error -101 [ 649.170409][T11243] itetech 0003:258A:6A88.0017: item 0 1 1 12 parsing failed [ 649.178216][ T5744] libceph: mon0 (1)[c::]:6789 connect error [ 649.186749][T11243] itetech 0003:258A:6A88.0017: probe with driver itetech failed with error -22 [ 649.219507][T11243] usb 3-1: USB disconnect, device number 13 [ 649.874961][T13721] netlink: 'syz.0.2213': attribute type 4 has an invalid length. [ 650.587019][T13736] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2215'. [ 651.467328][T13736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2215'. [ 651.839332][T13740] syzkaller0: entered promiscuous mode [ 651.879184][T13740] syzkaller0: entered allmulticast mode [ 652.049958][T11243] libceph: connect (1)[c::]:6789 error -101 [ 652.058432][T11243] libceph: mon0 (1)[c::]:6789 connect error [ 652.065952][T13751] ceph: No mds server is up or the cluster is laggy [ 653.290692][T13768] sg_write: data in/out 926365459/120 bytes for SCSI command 0x0-- guessing data in; [ 653.290692][T13768] program syz.1.2226 not setting count and/or reply_len properly [ 653.791369][T11243] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 653.961325][T11243] usb 2-1: Using ep0 maxpacket: 32 [ 653.994283][T11243] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 654.030942][T11243] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 654.076091][T11243] usb 2-1: config 0 interface 0 has no altsetting 0 [ 654.104107][T11243] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 654.140891][T11243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.187980][T11243] usb 2-1: config 0 descriptor?? [ 654.332245][T13777] netlink: 'syz.0.2229': attribute type 4 has an invalid length. [ 654.645813][T11243] hid (null): unknown global tag 0xc [ 654.688959][T11243] itetech 0003:258A:6A88.0018: unknown main item tag 0x3 [ 654.721475][T11243] itetech 0003:258A:6A88.0018: unknown main item tag 0x0 [ 654.750494][T11243] itetech 0003:258A:6A88.0018: unknown global tag 0xc [ 654.769240][T11243] itetech 0003:258A:6A88.0018: item 0 1 1 12 parsing failed [ 654.793692][T11243] itetech 0003:258A:6A88.0018: probe with driver itetech failed with error -22 [ 655.259404][T13789] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2231'. [ 655.282749][T13789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2231'. [ 656.287945][T13768] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 656.336636][T13783] tipc: Enabling of bearer rejected, failed to enable media [ 656.384641][ T5352] usb 2-1: USB disconnect, device number 14 [ 656.621340][ T5863] libceph: connect (1)[c::]:6789 error -101 [ 656.644438][ T5863] libceph: mon0 (1)[c::]:6789 connect error [ 656.692210][T13797] ceph: No mds server is up or the cluster is laggy [ 656.841098][T13812] netlink: 'syz.0.2233': attribute type 1 has an invalid length. [ 656.900667][T13812] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2233'. [ 657.027465][T13816] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2237'. [ 657.829851][T13844] sg_write: data in/out 926365459/120 bytes for SCSI command 0x0-- guessing data in; [ 657.829851][T13844] program syz.0.2247 not setting count and/or reply_len properly [ 658.361618][ T5779] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 658.552633][ T5779] usb 1-1: Using ep0 maxpacket: 32 [ 658.587843][ T5779] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.644935][ T5779] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 658.719797][ T5779] usb 1-1: config 0 interface 0 has no altsetting 0 [ 658.757768][ T5779] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 658.807226][ T5779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.861609][ T5779] usb 1-1: config 0 descriptor?? [ 659.178910][T13863] netlink: 'syz.2.2249': attribute type 4 has an invalid length. [ 659.350282][ T5779] hid (null): unknown global tag 0xc [ 659.413538][ T5779] itetech 0003:258A:6A88.0019: unknown main item tag 0x3 [ 659.446791][ T5779] itetech 0003:258A:6A88.0019: unknown main item tag 0x0 [ 659.489296][ T5779] itetech 0003:258A:6A88.0019: unknown global tag 0xc [ 659.509584][ T5779] itetech 0003:258A:6A88.0019: item 0 1 1 12 parsing failed [ 659.543548][ T5779] itetech 0003:258A:6A88.0019: probe with driver itetech failed with error -22 [ 659.624179][ T5779] usb 1-1: USB disconnect, device number 10 [ 660.548453][T13892] netlink: 'syz.6.2257': attribute type 1 has an invalid length. [ 660.593749][T13892] netlink: 228 bytes leftover after parsing attributes in process `syz.6.2257'. [ 661.382800][T13908] netlink: 'syz.3.2265': attribute type 5 has an invalid length. [ 662.586515][T13931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2271'. [ 665.429424][ T5779] IPVS: starting estimator thread 0... [ 665.541227][T13959] IPVS: using max 23 ests per chain, 55200 per kthread [ 666.354634][T13969] netlink: 'syz.2.2285': attribute type 4 has an invalid length. [ 666.385560][T13972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2287'. [ 666.839120][T13976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2286'. [ 669.051711][T14013] syzkaller0: entered promiscuous mode [ 669.077739][T14013] syzkaller0: entered allmulticast mode [ 669.517432][T14027] netlink: 'syz.0.2303': attribute type 5 has an invalid length. [ 669.568351][T14037] netlink: 'syz.4.2278': attribute type 1 has an invalid length. [ 669.620698][T14037] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2278'. [ 670.114151][T14054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2306'. [ 670.148557][ T5813] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 670.341283][ T5813] usb 3-1: Using ep0 maxpacket: 8 [ 670.358864][ T5813] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 670.391985][ T5813] usb 3-1: config 0 has no interface number 0 [ 670.415328][ T5813] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 670.468123][ T5813] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 670.521277][ T5813] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 670.570377][ T5813] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 670.634885][ T5813] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 670.664680][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.708095][ T5813] usb 3-1: config 0 descriptor?? [ 670.763801][ T5813] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 671.128836][T11243] usb 3-1: USB disconnect, device number 14 [ 671.153267][T11243] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 671.483156][T14096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2320'. [ 671.537508][T14083] syzkaller0: entered promiscuous mode [ 671.557784][T14083] syzkaller0: entered allmulticast mode [ 672.011985][T14106] netlink: 'syz.4.2323': attribute type 1 has an invalid length. [ 672.031480][T14106] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2323'. [ 672.466633][T14133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2328'. [ 673.691491][ T5779] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 673.880405][ T5779] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 673.894165][ T5779] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 673.903944][ T5779] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.922977][ T5779] usb 2-1: config 0 descriptor?? [ 674.345138][ T5779] ath6kl: Unsupported hardware version: 0x0 [ 674.408077][ T5779] ath6kl: Failed to init ath6kl core: -22 [ 674.418820][ T5779] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 674.557820][ T5779] usb 2-1: USB disconnect, device number 15 [ 675.409626][T14175] loop2: detected capacity change from 0 to 7 [ 675.485475][T14175] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 675.517956][T14175] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 675.540650][T14175] Dev loop2: unable to read RDB block 7 [ 675.566129][T14175] loop2: unable to read partition table [ 675.581622][T14175] loop2: partition table beyond EOD, truncated [ 675.593664][T14175] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 675.628124][T14178] Format for deleting device is "id" (uint). [ 676.609658][T14189] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2347'. [ 676.755175][T14196] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 676.847899][T14196] bond5 (unregistering): Released all slaves [ 677.360693][T14224] syzkaller0: entered promiscuous mode [ 677.392778][T14224] syzkaller0: entered allmulticast mode [ 678.451786][T14265] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 678.779007][T14277] virt_wifi0 speed is unknown, defaulting to 1000 [ 678.990495][T14280] syzkaller0: entered promiscuous mode [ 678.996855][T14280] syzkaller0: entered allmulticast mode [ 679.443433][T14290] syzkaller0: entered promiscuous mode [ 679.491442][T14290] syzkaller0: entered allmulticast mode [ 679.997139][T14309] netlink: 'syz.2.2379': attribute type 4 has an invalid length. [ 681.957274][ T5744] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 682.135963][ T5744] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 682.171708][ T5744] usb 5-1: config 0 has no interfaces? [ 682.190308][ T5744] usb 5-1: config 0 has no interfaces? [ 682.211084][ T5744] usb 5-1: config 0 has no interfaces? [ 682.228996][ T5744] usb 5-1: config 0 has no interfaces? [ 682.240745][ T5744] usb 5-1: config 0 has no interfaces? [ 682.254837][ T5744] usb 5-1: config 0 has no interfaces? [ 682.270405][ T5744] usb 5-1: config 0 has no interfaces? [ 682.282902][ T5744] usb 5-1: config 0 has no interfaces? [ 682.300503][ T5744] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 682.335574][ T5744] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.473642][ T5744] usb 5-1: config 0 descriptor?? [ 682.529339][T14345] syzkaller0: entered promiscuous mode [ 682.609491][T14345] syzkaller0: entered allmulticast mode [ 683.446467][ T5813] usb 5-1: USB disconnect, device number 14 [ 683.527041][T14357] netlink: 'syz.1.2393': attribute type 1 has an invalid length. [ 683.560516][T14357] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2393'. [ 685.205674][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.212512][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.219389][ T1310] aoe: packet could not be sent on lowpan0. consider increasing tx_queue_len [ 689.290449][T14434] netlink: 'syz.0.2409': attribute type 4 has an invalid length. [ 689.398915][T14432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2407'. [ 690.014640][T14466] netlink: 'syz.2.2415': attribute type 1 has an invalid length. [ 690.071704][T14466] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2415'. [ 691.686782][T14500] netlink: 'syz.3.2427': attribute type 4 has an invalid length. [ 692.312100][ T5352] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 692.491703][ T5352] usb 3-1: Using ep0 maxpacket: 16 [ 692.610562][T14522] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 693.022712][ T5352] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 693.047863][ T5352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.071270][ T5352] usb 3-1: Product: syz [ 693.087773][ T5352] usb 3-1: Manufacturer: syz [ 693.103783][ T5352] usb 3-1: SerialNumber: syz [ 693.407349][ T5352] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 693.459833][ T5352] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 693.509191][ T5352] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 693.561391][ T5352] usb 3-1: media controller created [ 693.661948][ T5352] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 693.691989][T14528] syzkaller0: entered promiscuous mode [ 693.721042][T14528] syzkaller0: entered allmulticast mode [ 693.800051][ T5352] zl10353_read_register: readreg error (reg=127, ret==-71) [ 694.024313][ T5352] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 694.109120][ T5352] usb 3-1: USB disconnect, device number 15 [ 694.553792][ T5779] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 694.733239][ T5779] usb 7-1: Using ep0 maxpacket: 8 [ 694.757346][ T5779] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 694.906741][ T5779] usb 7-1: config 0 has no interface number 0 [ 695.282875][ T5779] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 695.319274][ T5779] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 695.341463][ T5779] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 695.372558][ T5779] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 695.407919][ T5779] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 695.465808][ T5779] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.560694][ T5779] usb 7-1: config 0 descriptor?? [ 695.690128][ T5779] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 695.867902][ T5779] usb 7-1: USB disconnect, device number 9 [ 695.898377][ T5779] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 696.295834][T14584] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 697.169782][T14588] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2457'. [ 699.062922][ T5352] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 699.231306][ T5352] usb 4-1: Using ep0 maxpacket: 8 [ 699.240439][ T5352] usb 4-1: unable to get BOS descriptor or descriptor too short [ 699.265024][ T5352] usb 4-1: config 4 interface 0 has no altsetting 0 [ 699.296807][ T5352] usb 4-1: string descriptor 0 read error: -22 [ 699.308411][ T5352] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 699.350947][ T5352] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 699.407717][ T5352] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 699.550554][ T5352] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 699.659515][ T5352] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 699.727760][ T5352] usb 4-1: media controller created [ 700.249113][ T5352] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 700.308193][T14602] usb 4-1: dvb_usb_au6610: wlen=0, aborting [ 700.514381][T14623] siw: device registration error -23 [ 700.727138][T14631] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 701.365406][ T5352] zl10353_read_register: readreg error (reg=127, ret==0) [ 701.378822][T14602] usb 4-1: dvb_usb_au6610: wlen=4100, aborting [ 701.568107][T14629] syzkaller0: entered promiscuous mode [ 701.579453][ T5352] usb 4-1: USB disconnect, device number 13 [ 701.604157][T14629] syzkaller0: entered allmulticast mode [ 704.013063][T14669] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 706.897199][T14700] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 708.358566][T14707] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 709.188563][T14711] syzkaller0: entered promiscuous mode [ 709.228706][T14711] syzkaller0: entered allmulticast mode [ 711.452333][T14744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 714.879329][T14760] syzkaller0: entered promiscuous mode [ 714.885351][T14760] syzkaller0: entered allmulticast mode [ 715.167431][T14778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2516'. [ 721.440017][T14811] syzkaller0: entered promiscuous mode [ 721.456621][T14811] syzkaller0: entered allmulticast mode [ 721.810939][T14831] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2534'. [ 722.235444][ T5352] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 722.411724][ T5352] usb 7-1: Using ep0 maxpacket: 16 [ 722.419736][ T5352] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 722.434656][ T5352] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 722.445884][ T5352] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.458335][ T5352] usb 7-1: Product: syz [ 722.462588][ T5352] usb 7-1: Manufacturer: syz [ 722.476999][ T5352] usb 7-1: SerialNumber: syz [ 722.494164][T11243] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 722.502431][ T5352] usb 7-1: config 0 descriptor?? [ 722.513537][ T5352] hub 7-1:0.0: bad descriptor, ignoring hub [ 722.519781][ T5352] hub 7-1:0.0: probe with driver hub failed with error -5 [ 722.530351][ T5352] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 722.664876][T11243] usb 3-1: Using ep0 maxpacket: 8 [ 722.687829][T11243] usb 3-1: unable to get BOS descriptor or descriptor too short [ 722.710920][T11243] usb 3-1: config 4 interface 0 has no altsetting 0 [ 722.735604][T11243] usb 3-1: string descriptor 0 read error: -22 [ 722.744036][T11243] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 722.752745][ T5352] usb 7-1: USB disconnect, device number 10 [ 722.753948][T11243] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 722.920650][T11243] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 722.952749][T11243] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 722.967925][T11243] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 722.976284][T11243] usb 3-1: media controller created [ 722.999495][T11243] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 724.048607][T14832] syzkaller0: entered promiscuous mode [ 724.065760][T14832] syzkaller0: entered allmulticast mode [ 724.161880][T11243] zl10353_read_register: readreg error (reg=127, ret==0) [ 724.169086][T14838] usb 3-1: dvb_usb_au6610: wlen=0, aborting [ 724.193199][T14838] usb 3-1: dvb_usb_au6610: wlen=4100, aborting [ 724.365349][T11243] usb 3-1: USB disconnect, device number 16 [ 725.258561][T14851] virt_wifi0 speed is unknown, defaulting to 1000 [ 725.577133][T14867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2545'. [ 727.873184][T14874] netlink: 'syz.1.2547': attribute type 1 has an invalid length. [ 727.933134][T14874] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2547'. [ 728.337999][T14890] syzkaller0: entered promiscuous mode [ 728.363272][T14890] syzkaller0: entered allmulticast mode [ 730.950647][T14938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2563'. [ 732.056708][T14929] virt_wifi0 speed is unknown, defaulting to 1000 [ 734.130964][T14993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2578'. [ 734.729133][T14997] syzkaller0: entered promiscuous mode [ 734.751984][T14997] syzkaller0: entered allmulticast mode [ 738.147556][T15008] syzkaller0: entered promiscuous mode [ 738.153856][T15008] syzkaller0: entered allmulticast mode [ 738.337321][T15030] virt_wifi0 speed is unknown, defaulting to 1000 [ 739.200791][T15056] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 741.023777][T15060] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2593'. [ 741.686436][T15076] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 741.708448][ T30] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 741.901839][ T30] usb 1-1: Using ep0 maxpacket: 8 [ 742.057086][ T30] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 742.150237][ T30] usb 1-1: config 0 has no interface number 0 [ 742.172301][ T30] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 742.229476][ T30] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 742.269405][ T30] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 742.289393][ T30] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 742.339418][ T30] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 742.360689][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.384542][ T30] usb 1-1: config 0 descriptor?? [ 742.407235][ T30] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 742.523658][T15082] syzkaller0: entered promiscuous mode [ 742.529387][T15082] syzkaller0: entered allmulticast mode [ 742.628797][ T30] usb 1-1: USB disconnect, device number 11 [ 742.692075][ T30] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 742.735905][T15092] syzkaller0: entered promiscuous mode [ 742.759703][T15092] syzkaller0: entered allmulticast mode [ 744.098215][T15115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2614'. [ 744.882386][T15101] syzkaller0: entered promiscuous mode [ 744.888046][T15101] syzkaller0: entered allmulticast mode [ 746.646305][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.654536][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.661579][ T1310] aoe: packet could not be sent on lowpan0. consider increasing tx_queue_len [ 747.174659][T15131] syzkaller0: entered promiscuous mode [ 747.193533][T15131] syzkaller0: entered allmulticast mode [ 748.467152][T15150] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2628'. [ 749.570636][T13621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 749.600333][T13621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 749.610388][T13621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 749.643724][T13621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 749.658711][T13621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 751.070842][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.696138][T15198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2635'. [ 751.761720][ T5640] Bluetooth: hci0: command tx timeout [ 751.788385][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.225159][T15210] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 753.072567][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.958654][ T5640] Bluetooth: hci0: command tx timeout [ 754.819540][T15223] syzkaller0: entered promiscuous mode [ 754.839539][T15223] syzkaller0: entered allmulticast mode [ 755.017825][T15233] syzkaller0: entered promiscuous mode [ 755.026779][T15233] syzkaller0: entered allmulticast mode [ 756.765304][ T5640] Bluetooth: hci0: command tx timeout [ 756.807226][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.972028][ T5352] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 757.166427][ T5352] usb 4-1: Using ep0 maxpacket: 16 [ 757.184351][ T5352] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 757.208801][ T5352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.226699][ T5352] usb 4-1: Product: syz [ 757.244444][ T5352] usb 4-1: Manufacturer: syz [ 757.253940][ T5352] usb 4-1: SerialNumber: syz [ 757.502483][ T5352] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 757.537243][ T5352] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 757.562948][ T5352] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 757.583606][ T5352] usb 4-1: media controller created [ 757.622311][ T5352] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 757.683019][ T5352] zl10353_read_register: readreg error (reg=127, ret==-71) [ 757.775768][ T5352] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 757.808140][ T5352] usb 4-1: USB disconnect, device number 14 [ 758.222173][T15252] loop2: detected capacity change from 0 to 7 [ 758.234465][T15252] Dev loop2: unable to read RDB block 7 [ 758.240135][T15252] loop2: AHDI p2 p3 [ 758.254743][T15252] loop2: partition table partially beyond EOD, truncated [ 758.284556][T15252] loop2: p2 start 1702059890 is beyond EOD, truncated [ 758.806056][ T5640] Bluetooth: hci0: command tx timeout [ 760.101897][T15268] NILFS (nullb0): couldn't find nilfs on the device [ 760.822117][T15271] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 764.453733][ T5352] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 764.612805][ T5352] usb 1-1: Using ep0 maxpacket: 32 [ 764.627405][ T5352] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 764.644368][ T5352] usb 1-1: config 0 has no interface number 0 [ 764.678065][ T5352] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 764.687597][ T5352] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.705631][ T5352] usb 1-1: Product: syz [ 764.718349][ T5352] usb 1-1: Manufacturer: syz [ 764.723414][ T5352] usb 1-1: SerialNumber: syz [ 764.742372][ T5352] usb 1-1: config 0 descriptor?? [ 765.018133][T15169] virt_wifi0 speed is unknown, defaulting to 1000 [ 765.412945][ T5744] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 765.452756][T15294] loop2: detected capacity change from 0 to 7 [ 765.461576][T15294] Dev loop2: unable to read RDB block 7 [ 765.467232][T15294] loop2: AHDI p2 p3 [ 765.473427][T15294] loop2: partition table partially beyond EOD, truncated [ 765.480804][T15294] loop2: p2 start 1702059890 is beyond EOD, truncated [ 765.592669][ T5744] usb 4-1: Using ep0 maxpacket: 16 [ 765.640377][ T5744] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 765.682816][ T5352] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 765.692138][ T5744] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.694431][ T5352] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 765.713290][ T5352] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 765.752233][ T5352] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 765.758188][ T5744] usb 4-1: Product: syz [ 765.781919][ T5744] usb 4-1: Manufacturer: syz [ 765.787227][ T49] bridge_slave_1: left allmulticast mode [ 765.807245][ T5352] usb 1-1: USB disconnect, device number 12 [ 765.818717][ T5744] usb 4-1: SerialNumber: syz [ 765.825113][ T49] bridge_slave_1: left promiscuous mode [ 765.844229][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.907003][ T49] bridge_slave_0: left allmulticast mode [ 765.926761][ T49] bridge_slave_0: left promiscuous mode [ 766.064953][T15310] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 766.901684][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.917422][ T5744] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 766.952632][ T5744] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 766.978709][ T5744] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 767.013661][ T49] bridge0: left allmulticast mode [ 767.021950][ T5744] usb 4-1: media controller created [ 767.048359][T15312] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2669'. [ 767.157041][ T5744] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 767.300376][ T5744] zl10353_read_register: readreg error (reg=127, ret==-71) [ 767.401825][ T5744] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 767.415561][ T5744] usb 4-1: USB disconnect, device number 15 [ 767.902362][ T5744] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 768.019946][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 768.041860][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 768.052185][ T49] bond0 (unregistering): Released all slaves [ 768.066321][ T49] bond1 (unregistering): Released all slaves [ 768.073041][ T5744] usb 2-1: Using ep0 maxpacket: 8 [ 768.085754][ T5744] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 768.100592][ T5744] usb 2-1: config 0 has no interface number 0 [ 768.111345][ T49] bond2 (unregistering): Released all slaves [ 768.117563][ T5744] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 768.145896][ T5744] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 768.159920][ T49] bond3 (unregistering): Released all slaves [ 768.172027][ T5744] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 768.194001][ T49] bond4 (unregistering): Released all slaves [ 768.200145][ T5744] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 768.229093][ T5744] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 768.238765][ T5744] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.292739][ T5744] usb 2-1: config 0 descriptor?? [ 768.345460][ T5744] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 768.375764][T15298] syzkaller0: entered promiscuous mode [ 768.381440][T15298] syzkaller0: entered allmulticast mode [ 768.542898][ T5352] usb 2-1: USB disconnect, device number 16 [ 768.573319][ T5352] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 770.649033][T15355] loop2: detected capacity change from 0 to 7 [ 770.682543][T15355] Dev loop2: unable to read RDB block 7 [ 770.701493][T15355] loop2: AHDI p2 p3 [ 770.720497][T15355] loop2: partition table partially beyond EOD, truncated [ 770.813425][T15355] loop2: p2 start 1702059890 is beyond EOD, truncated [ 771.044058][ T4986] Dev loop2: unable to read RDB block 7 [ 771.070205][ T4986] loop2: AHDI p2 p3 [ 771.092550][ T4986] loop2: partition table partially beyond EOD, truncated [ 771.125120][ T4986] loop2: p2 start 1702059890 is beyond EOD, truncated [ 771.314513][T15371] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 771.756489][ T49] hsr_slave_0: left promiscuous mode [ 772.008085][ T49] hsr_slave_1: left promiscuous mode [ 772.145620][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 772.201278][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 772.301006][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 772.337269][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 772.356433][T15373] file system registered [ 772.443192][ T49] veth1_macvtap: left promiscuous mode [ 772.458329][T15378] unloading [ 772.471232][ T49] veth0_macvtap: left promiscuous mode [ 772.490589][ T49] veth1_vlan: left promiscuous mode [ 772.505855][ T49] veth0_vlan: left promiscuous mode [ 773.151964][T15402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2690'. [ 773.464878][ T49] team0 (unregistering): Port device team_slave_1 removed [ 773.496248][ T49] team0 (unregistering): Port device team_slave_0 removed [ 773.696451][ T5281] 8021q: adding VLAN 0 to HW filter on device eth5 [ 773.974619][T15375] virt_wifi0 speed is unknown, defaulting to 1000 [ 774.347590][T15430] syzkaller0: entered promiscuous mode [ 774.354184][T15430] syzkaller0: entered allmulticast mode [ 774.371234][ T5813] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 774.561889][ T5813] usb 7-1: Using ep0 maxpacket: 8 [ 774.580786][ T5813] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 774.603158][ T5813] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 774.625536][ T5813] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.647853][ T5813] usb 7-1: config 0 descriptor?? [ 774.904185][ T5813] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 775.140263][ T5813] usb 7-1: USB disconnect, device number 11 [ 775.146342][ C1] iowarrior 7-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 775.336846][T15456] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 775.465546][T15431] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2696'. [ 777.696432][T15169] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.704203][T15169] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.717632][T15169] bridge_slave_0: entered allmulticast mode [ 777.741326][T15169] bridge_slave_0: entered promiscuous mode [ 777.755469][ T49] IPVS: stop unused estimator thread 0... [ 777.776120][ T5281] 8021q: adding VLAN 0 to HW filter on device eth6 [ 778.019891][T15169] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.037855][T15169] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.282413][T15169] bridge_slave_1: entered allmulticast mode [ 778.477560][T15169] bridge_slave_1: entered promiscuous mode [ 778.996976][T15169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 779.019070][T15169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 779.127573][T15492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2707'. [ 779.157535][T15499] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 780.184438][T15169] team0: Port device team_slave_0 added [ 780.223840][T15169] team0: Port device team_slave_1 added [ 780.390716][T15169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 780.414420][T15169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 780.472751][T15169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 780.503081][T15169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 780.519542][T15169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 780.591345][T15169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 780.807539][T15169] hsr_slave_0: entered promiscuous mode [ 780.834730][T15169] hsr_slave_1: entered promiscuous mode [ 781.694786][T15522] syzkaller0: entered promiscuous mode [ 781.706729][T15522] syzkaller0: entered allmulticast mode [ 782.230359][T15541] sg_write: data in/out 926365459/120 bytes for SCSI command 0x0-- guessing data in; [ 782.230359][T15541] program syz.6.2724 not setting count and/or reply_len properly [ 782.466044][T15546] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 783.621231][ T5352] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 783.817629][T15560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2726'. [ 783.828468][ T5352] usb 7-1: Using ep0 maxpacket: 32 [ 783.847807][ T5352] usb 7-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.923169][ T5352] usb 7-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 783.964044][ T5352] usb 7-1: config 0 interface 0 has no altsetting 0 [ 783.984846][ T5352] usb 7-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 784.005454][ T5352] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.018758][ T5352] usb 7-1: config 0 descriptor?? [ 784.464333][ T5352] hid (null): unknown global tag 0xc [ 784.486146][ T5352] itetech 0003:258A:6A88.001A: unknown main item tag 0x3 [ 784.493752][ T5352] itetech 0003:258A:6A88.001A: unknown main item tag 0x0 [ 784.500888][ T5352] itetech 0003:258A:6A88.001A: unknown global tag 0xc [ 784.507897][ T5352] itetech 0003:258A:6A88.001A: item 0 1 1 12 parsing failed [ 784.531048][ T5352] itetech 0003:258A:6A88.001A: probe with driver itetech failed with error -22 [ 785.714344][T15550] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 785.722368][ T5281] 8021q: adding VLAN 0 to HW filter on device eth7 [ 785.792588][ T24] usb 7-1: USB disconnect, device number 12 [ 786.370199][T15580] virt_wifi0 speed is unknown, defaulting to 1000 [ 786.559262][T15596] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 786.730011][T15598] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 786.854079][ T5744] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 787.164058][ T5744] usb 1-1: Using ep0 maxpacket: 8 [ 787.458059][ T5744] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 787.622946][ T5744] usb 1-1: config 0 has no interface number 0 [ 787.723468][ T5744] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 787.779427][ T5744] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 787.835859][T15602] netlink: 'syz.3.2740': attribute type 1 has an invalid length. [ 787.846440][ T5744] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 787.878459][T15602] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2740'. [ 787.907346][ T5744] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 787.919092][T15606] sg_write: data in/out 926365459/120 bytes for SCSI command 0x0-- guessing data in; [ 787.919092][T15606] program syz.6.2741 not setting count and/or reply_len properly [ 787.980777][ T5744] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 788.030916][ T5744] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.107026][ T5744] usb 1-1: config 0 descriptor?? [ 788.156867][ T5744] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 788.367415][ T5773] usb 1-1: USB disconnect, device number 13 [ 788.401622][ T24] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 788.435999][ T5773] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 788.592526][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 788.617123][ T24] usb 7-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.689485][T15615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2743'. [ 788.699054][ T24] usb 7-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 788.728245][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 788.755768][ T24] usb 7-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 788.772160][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.800808][ T24] usb 7-1: config 0 descriptor?? [ 789.077825][ T5281] 8021q: adding VLAN 0 to HW filter on device eth8 [ 789.132210][T15169] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 789.204829][T15169] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 789.239168][T15169] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 789.253163][T15633] loop2: detected capacity change from 0 to 7 [ 789.263949][ T24] hid (null): unknown global tag 0xc [ 789.276322][T15169] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 789.298099][ T24] itetech 0003:258A:6A88.001B: unknown main item tag 0x3 [ 789.298453][T15633] Dev loop2: unable to read RDB block 7 [ 789.306866][T15169] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 789.333024][ T24] itetech 0003:258A:6A88.001B: unknown main item tag 0x0 [ 789.356354][T15633] loop2: unable to read partition table [ 789.357180][ T24] itetech 0003:258A:6A88.001B: unknown global tag 0xc [ 789.385080][T15169] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 789.392896][T15633] loop2: partition table beyond EOD, truncated [ 789.399916][ T24] itetech 0003:258A:6A88.001B: item 0 1 1 12 parsing failed [ 789.418080][T15169] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 789.423899][T15633] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 789.438170][ T24] itetech 0003:258A:6A88.001B: probe with driver itetech failed with error -22 [ 789.513613][ T24] usb 7-1: USB disconnect, device number 13 [ 789.662909][T15169] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 790.083659][T15169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.204853][T15169] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.333424][ T3366] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.340858][ T3366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.599664][T15664] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 790.792190][T15671] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 791.404142][T15670] netlink: 'syz.6.2754': attribute type 1 has an invalid length. [ 791.467456][T15670] netlink: 200 bytes leftover after parsing attributes in process `syz.6.2754'. [ 791.530743][ T3366] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.538093][ T3366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 792.030627][T15688] file system registered [ 792.107108][T15691] loop2: detected capacity change from 0 to 7 [ 792.171857][T15692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2758'. [ 792.257225][T15691] Dev loop2: unable to read RDB block 7 [ 792.291524][T15691] loop2: unable to read partition table [ 792.320330][T15691] loop2: partition table beyond EOD, truncated [ 792.348935][T15691] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 793.212108][T15720] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 793.223350][T15721] netlink: zone id is out of range [ 793.255120][T15721] netlink: get zone limit has 4 unknown bytes [ 795.666852][T15751] loop2: detected capacity change from 0 to 7 [ 795.708923][T15751] Dev loop2: unable to read RDB block 7 [ 795.725421][T15751] loop2: unable to read partition table [ 795.773571][T15751] loop2: partition table beyond EOD, truncated [ 795.802525][T15751] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 795.901166][T12531] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 796.039049][T15169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 796.081782][T12531] usb 2-1: Using ep0 maxpacket: 32 [ 796.112826][T12531] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 796.173390][T12531] usb 2-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 796.228944][T12531] usb 2-1: config 0 has no interface number 0 [ 796.270928][T12531] usb 2-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 796.329182][T12531] usb 2-1: config 0 interface 196 has no altsetting 0 [ 796.378855][T12531] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 796.403893][T12531] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.428225][T15762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2779'. [ 796.445860][T12531] usb 2-1: Product: syz [ 796.464114][T12531] usb 2-1: Manufacturer: syz [ 796.489937][T12531] usb 2-1: SerialNumber: syz [ 796.579675][T12531] usb 2-1: config 0 descriptor?? [ 797.383640][T12531] ipheth 2-1:0.196: Unable to find endpoints [ 797.497770][T12531] usb 2-1: USB disconnect, device number 17 [ 797.742742][T15792] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2783'. [ 799.379393][T15799] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 800.093648][T15169] veth0_vlan: entered promiscuous mode [ 800.147624][T15169] veth1_vlan: entered promiscuous mode [ 800.445625][T15811] bond8: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 800.524966][T15811] bond8 (unregistering): Released all slaves [ 800.626411][T15169] veth0_macvtap: entered promiscuous mode [ 800.664360][T15169] veth1_macvtap: entered promiscuous mode [ 800.703306][T15169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 800.778192][T15169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 800.815418][T15821] virt_wifi0 speed is unknown, defaulting to 1000 [ 800.932735][ T3366] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.974222][ T3366] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.014403][ T3366] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.068320][ T3366] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.183318][T15838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2797'. [ 802.341600][T15837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2795'. [ 802.710103][T15847] netlink: 'syz.3.2785': attribute type 4 has an invalid length. [ 804.060190][T15851] syzkaller0: entered promiscuous mode [ 804.075382][T15851] syzkaller0: entered allmulticast mode [ 804.122324][T15862] loop2: detected capacity change from 0 to 7 [ 804.169321][T15862] Dev loop2: unable to read RDB block 7 [ 804.187411][T15862] loop2: unable to read partition table [ 804.211409][T15862] loop2: partition table beyond EOD, truncated [ 804.232369][T15862] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 804.414328][T12531] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 804.621831][T12531] usb 2-1: Using ep0 maxpacket: 8 [ 804.655416][T12531] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 804.678666][T12531] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 804.701540][T12531] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.728414][T12531] usb 2-1: config 0 descriptor?? [ 804.966295][T12531] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 805.077616][T15874] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 805.487462][T12531] usb 2-1: USB disconnect, device number 18 [ 805.487541][ C1] iowarrior 2-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 807.426383][ T9332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.463120][ T9332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.812688][ T5744] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 808.092419][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.122147][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.157062][ T1310] aoe: packet could not be sent on lowpan0. consider increasing tx_queue_len [ 808.299337][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.326423][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.456070][ T5744] usb 5-1: Using ep0 maxpacket: 8 [ 808.500923][ T5744] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 808.540945][ T5744] usb 5-1: config 0 has no interface number 0 [ 808.576004][ T5744] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 808.634715][ T5744] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 808.697663][ T5744] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 808.697721][ T5744] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 808.697791][ T5744] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 808.697833][ T5744] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.708982][ T5744] usb 5-1: config 0 descriptor?? [ 809.280943][T15907] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 810.534032][ T5744] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 810.602479][T12531] usb 5-1: USB disconnect, device number 15 [ 810.630109][T12531] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 810.721143][ T30] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 810.871291][ T5773] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 810.883338][ T30] usb 2-1: Using ep0 maxpacket: 32 [ 810.903995][ T30] usb 2-1: unable to get BOS descriptor or descriptor too short [ 810.913571][ T30] usb 2-1: config 7 has an invalid interface number: 187 but max is 0 [ 810.913616][ T30] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 810.913651][ T30] usb 2-1: config 7 has no interface number 0 [ 810.913705][ T30] usb 2-1: config 7 interface 187 altsetting 6 endpoint 0x7 has invalid wMaxPacketSize 0 [ 810.913746][ T30] usb 2-1: config 7 interface 187 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 810.913795][ T30] usb 2-1: config 7 interface 187 has no altsetting 0 [ 810.920955][ T30] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 810.921001][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.921038][ T30] usb 2-1: Product: syz [ 810.921326][ T30] usb 2-1: Manufacturer: syz [ 810.921356][ T30] usb 2-1: SerialNumber: syz [ 811.038687][T13621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 811.046352][T13621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 811.048688][T13621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 811.052937][T13621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 811.053894][T13621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 811.068514][ T5773] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 811.068575][ T5773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.068626][ T5773] usb 4-1: Product: syz [ 811.068654][ T5773] usb 4-1: Manufacturer: syz [ 811.068682][ T5773] usb 4-1: SerialNumber: syz [ 811.081039][ T5773] usb 4-1: config 0 descriptor?? [ 811.120696][ T5773] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 811.208164][ T30] usb 2-1: Unknown endpoint type found, address 0x07 [ 811.208203][ T30] usb 2-1: Not enough endpoints found in device, aborting! [ 811.381581][ T5779] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 811.457138][ T30] usb 2-1: USB disconnect, device number 19 [ 811.556458][ T5779] usb 5-1: Using ep0 maxpacket: 8 [ 811.584470][ T5779] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 811.584524][ T5779] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 811.584578][ T5779] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.588217][ T5779] usb 5-1: config 0 descriptor?? [ 811.625460][ T5773] gspca_sunplus: reg_r err -110 [ 811.829982][ T5779] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 812.050786][ T5779] usb 5-1: USB disconnect, device number 16 [ 812.050896][ C0] iowarrior 5-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 813.122441][ T5640] Bluetooth: hci5: command tx timeout [ 813.312871][T11243] usb 4-1: USB disconnect, device number 16 [ 813.595718][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.894384][T15949] virt_wifi0 speed is unknown, defaulting to 1000 [ 815.201183][ T5640] Bluetooth: hci5: command tx timeout [ 815.421577][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.886462][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.111612][T15917] virt_wifi0 speed is unknown, defaulting to 1000 [ 816.198537][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.521394][ T5779] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 818.342261][ T5640] Bluetooth: hci5: command tx timeout [ 818.991171][ T5779] usb 1-1: Using ep0 maxpacket: 8 [ 819.007923][ T5779] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 819.051401][ T5779] usb 1-1: config 0 has no interface number 0 [ 819.065832][ T5779] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 819.094170][ T5779] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 819.145531][ T5779] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 819.201373][ T5779] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 819.290542][ T5779] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 819.328011][ T5779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.384798][ T5779] usb 1-1: config 0 descriptor?? [ 819.422347][ T5779] usb 1-1: can't set config #0, error -71 [ 819.472869][ T5779] usb 1-1: USB disconnect, device number 14 [ 820.401239][ T5640] Bluetooth: hci5: command tx timeout [ 820.431110][T16039] usbip-vudc usbip-vudc.0: gadget not bound [ 820.677099][T16053] netlink: 'syz.6.2840': attribute type 1 has an invalid length. [ 820.691249][ T5779] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 820.833266][ T5779] usb 2-1: device descriptor read/64, error -71 [ 821.098050][ T12] bridge_slave_1: left allmulticast mode [ 821.102193][ T5779] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 821.140406][ T12] bridge_slave_1: left promiscuous mode [ 821.175157][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.293907][ T12] bridge_slave_0: left allmulticast mode [ 821.305182][ T5779] usb 2-1: device descriptor read/64, error -71 [ 821.346805][ T12] bridge_slave_0: left promiscuous mode [ 821.376770][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.453064][ T5779] usb usb2-port1: attempt power cycle [ 821.823416][ T5779] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 821.874924][ T5779] usb 2-1: device descriptor read/8, error -71 [ 822.063999][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 822.080728][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 822.097657][ T12] bond0 (unregistering): Released all slaves [ 822.142063][ T5779] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 822.196759][ T5779] usb 2-1: device descriptor read/8, error -71 [ 822.358584][ T5779] usb usb2-port1: unable to enumerate USB device [ 825.755749][T16101] virt_wifi0 speed is unknown, defaulting to 1000 [ 828.779462][T15917] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.816416][T15917] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.847030][T15917] bridge_slave_0: entered allmulticast mode [ 828.877812][T15917] bridge_slave_0: entered promiscuous mode [ 828.993168][T15917] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.016470][T15917] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.044697][T15917] bridge_slave_1: entered allmulticast mode [ 829.070851][T15917] bridge_slave_1: entered promiscuous mode [ 829.293945][T16129] syzkaller0: entered promiscuous mode [ 829.313810][T16129] syzkaller0: entered allmulticast mode [ 829.384644][ T12] hsr_slave_0: left promiscuous mode [ 829.410211][ T12] hsr_slave_1: left promiscuous mode [ 829.425544][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 829.451583][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 829.481014][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 829.498252][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 829.520028][ T12] veth1_macvtap: left promiscuous mode [ 829.529373][ T12] veth0_macvtap: left promiscuous mode [ 829.535626][ T12] veth1_vlan: left promiscuous mode [ 829.544170][ T12] veth0_vlan: left promiscuous mode [ 830.283323][ T12] team0 (unregistering): Port device team_slave_1 removed [ 830.358231][ T12] team0 (unregistering): Port device team_slave_0 removed [ 832.446821][T15917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 832.498141][T16174] netlink: 'syz.3.2858': attribute type 1 has an invalid length. [ 832.518737][T15917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.535854][T16174] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2858'. [ 832.834011][T15917] team0: Port device team_slave_0 added [ 832.871490][T12531] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 832.873694][T15917] team0: Port device team_slave_1 added [ 833.021563][T12531] usb 1-1: device descriptor read/64, error -71 [ 833.045197][T16191] syzkaller0: entered promiscuous mode [ 833.068873][T16191] syzkaller0: entered allmulticast mode [ 833.103652][T15917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 833.134011][T15917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.209283][T15917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 833.256704][T16191] tipc: Started in network mode [ 833.262277][T16191] tipc: Node identity 4e3e78cb4625, cluster identity 4711 [ 833.276236][T16191] tipc: Enabled bearer , priority 0 [ 833.306347][T15917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 833.321149][T12531] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 833.330393][T15917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.399410][T15917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 833.501164][T12531] usb 1-1: device descriptor read/64, error -71 [ 833.599655][T16188] tipc: Resetting bearer [ 833.680210][T12531] usb usb1-port1: attempt power cycle [ 833.709517][T16188] tipc: Disabling bearer [ 834.042124][T12531] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 834.044589][T15917] hsr_slave_0: entered promiscuous mode [ 834.076060][T15917] hsr_slave_1: entered promiscuous mode [ 836.049099][T12531] usb 1-1: device descriptor read/8, error -71 [ 836.684002][T16221] syzkaller0: entered promiscuous mode [ 836.708619][T16221] syzkaller0: entered allmulticast mode [ 839.821029][T16254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2875'. [ 841.759676][ T5281] 8021q: adding VLAN 0 to HW filter on device eth9 [ 842.240415][T16278] virt_wifi0 speed is unknown, defaulting to 1000 [ 842.685865][T16291] NILFS (nullb0): couldn't find nilfs on the device [ 842.713513][ T5779] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 845.216892][ T5779] usb 5-1: device descriptor read/64, error -71 [ 845.484807][ T5779] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 846.821667][T16332] syzkaller0: entered promiscuous mode [ 846.836353][T16332] syzkaller0: entered allmulticast mode [ 846.861374][ T5281] 8021q: adding VLAN 0 to HW filter on device eth10 [ 847.140599][T16340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2890'. [ 850.610324][T16378] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 852.496809][T16382] sg_write: data in/out 926365459/120 bytes for SCSI command 0x0-- guessing data in; [ 852.496809][T16382] program syz.4.2898 not setting count and/or reply_len properly [ 852.922551][T16396] virt_wifi0 speed is unknown, defaulting to 1000 [ 852.961573][ T5779] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 853.161382][ T5779] usb 5-1: Using ep0 maxpacket: 32 [ 853.182819][ T5779] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.209521][ T5779] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 853.234659][ T5779] usb 5-1: config 0 interface 0 has no altsetting 0 [ 853.247621][ T5779] usb 5-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 853.267116][ T5779] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.294302][ T5779] usb 5-1: config 0 descriptor?? [ 853.719406][ T5779] hid (null): unknown global tag 0xc [ 853.756962][ T5779] itetech 0003:258A:6A88.001C: unknown main item tag 0x3 [ 853.793320][ T5779] itetech 0003:258A:6A88.001C: unknown main item tag 0x0 [ 853.834288][ T5779] itetech 0003:258A:6A88.001C: unknown global tag 0xc [ 853.856169][ T5779] itetech 0003:258A:6A88.001C: item 0 1 1 12 parsing failed [ 853.877407][ T5779] itetech 0003:258A:6A88.001C: probe with driver itetech failed with error -22 [ 853.898299][T15917] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 853.948622][ T5779] usb 5-1: USB disconnect, device number 19 [ 853.967946][T15917] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 854.044027][T15917] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 854.083768][T15917] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 854.127443][T15917] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 854.134588][T16431] loop2: detected capacity change from 0 to 7 [ 854.148989][T15917] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 854.157973][T16431] Dev loop2: unable to read RDB block 7 [ 854.167084][T16431] loop2: AHDI p2 p3 [ 854.177996][T16431] loop2: partition table partially beyond EOD, truncated [ 854.191862][T16431] loop2: p2 start 1702059890 is beyond EOD, truncated [ 854.309901][T16425] syzkaller0: entered promiscuous mode [ 854.336454][T16425] syzkaller0: entered allmulticast mode [ 854.365697][T15917] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 854.409707][T15917] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 854.711151][ T5352] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 854.863402][ T5352] usb 4-1: Using ep0 maxpacket: 8 [ 854.880843][ T5352] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 854.922870][ T5352] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 854.962896][ T5352] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.994087][ T5352] usb 4-1: config 0 descriptor?? [ 855.232164][ T5352] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 857.999365][T11243] usb 4-1: USB disconnect, device number 17 [ 858.622703][T16490] loop2: detected capacity change from 0 to 7 [ 858.635401][T16490] Dev loop2: unable to read RDB block 7 [ 858.649953][T16490] loop2: AHDI p2 p3 [ 858.654334][T16490] loop2: partition table partially beyond EOD, truncated [ 858.662451][T16490] loop2: p2 start 1702059890 is beyond EOD, truncated [ 858.676273][T16491] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2922'. [ 858.852615][T16493] sg_write: data in/out 926365459/120 bytes for SCSI command 0x0-- guessing data in; [ 858.852615][T16493] program syz.6.2924 not setting count and/or reply_len properly [ 859.241189][ T24] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 859.293232][T15917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 859.342746][T16501] loop3: detected capacity change from 0 to 16 [ 859.370856][T16501] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 859.417263][T15917] 8021q: adding VLAN 0 to HW filter on device team0 [ 859.422430][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 859.432548][T16501] cramfs: unsupported filesystem features [ 859.467324][ T24] usb 7-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 859.516406][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.519821][ T24] usb 7-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 859.523677][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 859.565082][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 859.572505][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 859.935756][T16510] hugetlbfs: syz.3.2926 (16510): Using mlock ulimits for SHM_HUGETLB is obsolete [ 860.617735][T16504] syzkaller0: entered promiscuous mode [ 860.624318][T16504] syzkaller0: entered allmulticast mode [ 860.930818][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 860.938032][ T24] usb 7-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 860.947917][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.981674][ T24] usb 7-1: config 0 descriptor?? [ 861.193460][T16526] netlink: zone id is out of range [ 861.211764][T12531] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 861.239342][T16526] netlink: get zone limit has 4 unknown bytes [ 861.429552][T16526] tmpfs: Unknown parameter 'grpquota_block_hardlim' [ 861.454101][T12531] usb 4-1: Using ep0 maxpacket: 8 [ 861.520624][T12531] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 861.577676][T12531] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 861.594995][ T24] hid (null): unknown global tag 0xc [ 861.656260][T12531] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.802835][ T24] itetech 0003:258A:6A88.001D: unknown main item tag 0x3 [ 861.852337][ T24] itetech 0003:258A:6A88.001D: unknown main item tag 0x0 [ 861.946796][ T24] itetech 0003:258A:6A88.001D: unknown global tag 0xc [ 861.989253][T12531] usb 4-1: config 0 descriptor?? [ 862.006626][ T24] itetech 0003:258A:6A88.001D: item 0 1 1 12 parsing failed [ 862.040204][ T24] itetech 0003:258A:6A88.001D: probe with driver itetech failed with error -22 [ 862.053937][ T24] usb 7-1: USB disconnect, device number 14 [ 862.242092][T12531] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 862.970132][T16532] overlayfs: missing 'lowerdir' [ 865.569058][T16546] netlink: 'syz.0.2939': attribute type 1 has an invalid length. [ 865.577069][T16546] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2939'. [ 867.000384][T16519] syzkaller0: entered promiscuous mode [ 867.006165][T16519] syzkaller0: entered allmulticast mode [ 867.122047][ T5773] usb 4-1: USB disconnect, device number 18 [ 868.409795][ T5773] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 868.591968][ T5773] usb 5-1: Using ep0 maxpacket: 8 [ 868.601207][ T5773] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 868.601251][ T5773] usb 5-1: config 0 has no interface number 0 [ 868.601307][ T5773] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 868.601353][ T5773] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 868.601406][ T5773] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 868.601460][ T5773] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 868.601526][ T5773] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 868.601572][ T5773] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.623310][ T5773] usb 5-1: config 0 descriptor?? [ 868.632127][ T5773] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 868.850483][T16585] netlink: zone id is out of range [ 868.859252][T16585] netlink: get zone limit has 4 unknown bytes [ 868.906739][T16585] tmpfs: Unknown parameter 'grpquota_block_hardlim' [ 869.304165][T12531] usb 5-1: USB disconnect, device number 20 [ 869.528622][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.540559][T12531] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 869.550185][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.639090][ T1310] aoe: packet could not be sent on lowpan0. consider increasing tx_queue_len [ 869.720064][T13621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 869.769995][T13621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 869.779430][T13621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 869.790231][T13621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 869.814179][T13621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 871.931794][ T5640] Bluetooth: hci0: command tx timeout [ 872.691688][T16620] syzkaller0: entered promiscuous mode [ 872.711974][T16620] syzkaller0: entered allmulticast mode [ 872.952681][T16513] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 873.122193][T16513] usb 2-1: Using ep0 maxpacket: 8 [ 873.143975][T16513] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 873.165130][T16513] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 873.193902][T16513] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.247376][T16513] usb 2-1: config 0 descriptor?? [ 873.468934][T16513] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 873.619564][T16586] virt_wifi0 speed is unknown, defaulting to 1000 [ 873.690936][T16513] usb 2-1: USB disconnect, device number 24 [ 873.851910][ T24] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 874.001509][ T5640] Bluetooth: hci0: command tx timeout [ 874.031586][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 874.048492][ T24] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 874.067238][ T24] usb 1-1: config 0 has no interface number 0 [ 874.085280][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 874.129977][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 874.152999][T16670] netlink: zone id is out of range [ 874.165259][T16670] netlink: get zone limit has 4 unknown bytes [ 874.212023][ T24] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 874.225033][T16670] tmpfs: Unknown parameter 'grpquota_block_hardlim' [ 874.320180][ T24] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 874.481656][ T24] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 874.633126][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.059068][ T24] usb 1-1: config 0 descriptor?? [ 875.138729][ T24] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 875.304269][ T24] usb 1-1: USB disconnect, device number 19 [ 875.315245][ T24] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 875.562391][T16687] netlink: 'syz.1.2972': attribute type 4 has an invalid length. [ 875.939604][T16689] syzkaller0: entered promiscuous mode [ 875.973049][T16689] syzkaller0: entered allmulticast mode [ 876.084696][ T5640] Bluetooth: hci0: command tx timeout [ 876.675641][T16716] unloading [ 876.895006][ T1165] bridge_slave_1: left allmulticast mode [ 876.926893][ T1165] bridge_slave_1: left promiscuous mode [ 876.954808][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.020471][ T1165] bridge_slave_0: left allmulticast mode [ 877.054573][ T1165] bridge_slave_0: left promiscuous mode [ 877.082458][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.136047][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 878.161687][ T5640] Bluetooth: hci0: command tx timeout [ 878.172059][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 878.200169][ T1165] bond0 (unregistering): Released all slaves [ 878.519219][T16776] syzkaller0: entered promiscuous mode [ 878.531883][T16776] syzkaller0: entered allmulticast mode [ 879.498926][T16783] loop6: detected capacity change from 0 to 4096 [ 879.506600][T16783] ntfs3: Unknown parameter '@' [ 880.203679][ T1165] hsr_slave_0: left promiscuous mode [ 880.247102][ T1165] hsr_slave_1: left promiscuous mode [ 880.275830][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 880.387785][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 880.403201][T16806] sg_write: data in/out 926365459/120 bytes for SCSI command 0x0-- guessing data in; [ 880.403201][T16806] program syz.1.3002 not setting count and/or reply_len properly [ 881.033007][ T5352] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 881.071911][ T186] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 881.187910][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 881.201978][ T5352] usb 2-1: Using ep0 maxpacket: 32 [ 881.221153][ T186] usb 1-1: device descriptor read/64, error -71 [ 881.222881][ T5352] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.253855][ T5352] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 881.254323][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 881.282891][ T5352] usb 2-1: config 0 interface 0 has no altsetting 0 [ 881.304641][ T5352] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 881.344766][ T5352] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.385872][ T5352] usb 2-1: config 0 descriptor?? [ 881.486022][ T186] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 881.651579][ T186] usb 1-1: device descriptor read/64, error -71 [ 881.763807][ T5281] 8021q: adding VLAN 0 to HW filter on device eth9 [ 881.785147][ T186] usb usb1-port1: attempt power cycle [ 881.827625][ T5352] hid (null): unknown global tag 0xc [ 881.848895][ T5352] itetech 0003:258A:6A88.001E: unknown main item tag 0x3 [ 881.861696][ T5352] itetech 0003:258A:6A88.001E: unknown main item tag 0x0 [ 881.879585][ T5352] itetech 0003:258A:6A88.001E: unknown global tag 0xc [ 881.887391][ T5352] itetech 0003:258A:6A88.001E: item 0 1 1 12 parsing failed [ 881.896195][ T5352] itetech 0003:258A:6A88.001E: probe with driver itetech failed with error -22 [ 881.965089][T16586] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.982922][T16586] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.005392][T16586] bridge_slave_0: entered allmulticast mode [ 882.027506][T16586] bridge_slave_0: entered promiscuous mode [ 882.047870][T16513] usb 2-1: USB disconnect, device number 25 [ 882.133386][ T186] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 882.157264][T16586] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.184553][T16854] file system registered [ 882.187531][T16586] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.202642][ T186] usb 1-1: device descriptor read/8, error -71 [ 882.226199][T16586] bridge_slave_1: entered allmulticast mode [ 882.245023][T16586] bridge_slave_1: entered promiscuous mode [ 882.467223][ T186] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 882.490908][T16845] syzkaller0: entered promiscuous mode [ 882.497890][T16845] syzkaller0: entered allmulticast mode [ 882.504811][ T186] usb 1-1: device descriptor read/8, error -71 [ 882.523156][T16586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 882.538005][T16852] syzkaller0: entered promiscuous mode [ 882.556835][T16852] syzkaller0: entered allmulticast mode [ 882.662186][ T186] usb usb1-port1: unable to enumerate USB device [ 884.034814][T16880] loop2: detected capacity change from 0 to 7 [ 884.070953][T16880] Dev loop2: unable to read RDB block 7 [ 884.092071][T16880] loop2: AHDI p2 p3 [ 884.106775][T16880] loop2: partition table partially beyond EOD, truncated [ 884.139866][T16880] loop2: p2 start 1702059890 is beyond EOD, truncated [ 887.434221][T16586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 887.593841][T16918] sg_write: data in/out 926365459/120 bytes for SCSI command 0x0-- guessing data in; [ 887.593841][T16918] program syz.3.3024 not setting count and/or reply_len properly [ 887.676808][T16586] team0: Port device team_slave_0 added [ 887.709786][T16586] team0: Port device team_slave_1 added [ 887.863784][T16586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 887.870915][T16586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.897410][T16586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 887.910986][T16586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 888.014103][T16586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 888.147951][ T5773] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 888.877246][T16586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 889.361225][ T5773] usb 4-1: Using ep0 maxpacket: 32 [ 889.452551][ T5773] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.501906][ T5773] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 889.544150][ T5773] usb 4-1: config 0 interface 0 has no altsetting 0 [ 889.570055][ T5773] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 889.608905][ T5773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.663839][ T5773] usb 4-1: config 0 descriptor?? [ 889.976082][T16586] hsr_slave_0: entered promiscuous mode [ 889.996842][T16937] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 890.302225][T16586] hsr_slave_1: entered promiscuous mode [ 890.313252][ T5773] hid (null): unknown global tag 0xc [ 890.366847][ T5773] itetech 0003:258A:6A88.001F: unknown main item tag 0x3 [ 890.402020][ T5773] itetech 0003:258A:6A88.001F: unknown main item tag 0x0 [ 890.475551][ T5773] itetech 0003:258A:6A88.001F: unknown global tag 0xc [ 890.499961][ T5773] itetech 0003:258A:6A88.001F: item 0 1 1 12 parsing failed [ 890.538153][ T5773] itetech 0003:258A:6A88.001F: probe with driver itetech failed with error -22 [ 890.610359][ T5773] usb 4-1: USB disconnect, device number 19 [ 891.339949][T16955] syzkaller0: entered promiscuous mode [ 891.364306][T16955] syzkaller0: entered allmulticast mode [ 891.458830][T16958] syzkaller0: entered promiscuous mode [ 891.472952][T16958] syzkaller0: entered allmulticast mode [ 891.601227][ T5773] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 891.766755][ T5773] usb 4-1: Using ep0 maxpacket: 8 [ 891.787036][ T5773] usb 4-1: unable to get BOS descriptor or descriptor too short [ 891.825057][ T5773] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 891.838494][ T5773] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 891.851786][ T5773] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 891.862503][ T5773] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 891.884446][ T5773] usb 4-1: Manufacturer: syz [ 891.890381][ T5773] usb 4-1: SerialNumber: syz [ 892.148212][ T5773] usb 4-1: USB disconnect, device number 20 [ 893.997800][ T31] kauditd_printk_skb: 12 callbacks suppressed [ 893.997834][ T31] audit: type=1107 audit(1785189643.470:35): pid=16995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 895.725175][T17015] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 896.963862][T16980] syzkaller0: entered promiscuous mode [ 896.977111][T16980] syzkaller0: entered allmulticast mode [ 896.997013][ T5281] 8021q: adding VLAN 0 to HW filter on device eth10 [ 897.363395][ T5744] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 897.376500][T16513] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 897.531886][T16513] usb 1-1: Using ep0 maxpacket: 8 [ 897.537057][ T5744] usb 7-1: Using ep0 maxpacket: 32 [ 897.545654][T16513] usb 1-1: unable to get BOS descriptor or descriptor too short [ 897.555741][T16513] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 897.568357][T16513] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 897.578472][ T5744] usb 7-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 897.590916][ T5744] usb 7-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 897.604483][ T5744] usb 7-1: config 0 interface 0 has no altsetting 0 [ 897.612209][ T5744] usb 7-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 897.621891][T16513] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 897.631253][T16513] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 897.639426][T16513] usb 1-1: Manufacturer: syz [ 897.644278][ T5744] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.652514][T16513] usb 1-1: SerialNumber: syz [ 897.667037][ T5744] usb 7-1: config 0 descriptor?? [ 897.878254][T16513] usb 1-1: USB disconnect, device number 24 [ 898.099783][ T5744] hid (null): unknown global tag 0xc [ 898.116583][ T5744] itetech 0003:258A:6A88.0020: unknown main item tag 0x3 [ 898.128999][ T5744] itetech 0003:258A:6A88.0020: unknown main item tag 0x0 [ 898.136290][ T5744] itetech 0003:258A:6A88.0020: unknown global tag 0xc [ 898.143841][ T5744] itetech 0003:258A:6A88.0020: item 0 1 1 12 parsing failed [ 898.152360][ T5744] itetech 0003:258A:6A88.0020: probe with driver itetech failed with error -22 [ 900.155738][T16513] usb 7-1: USB disconnect, device number 15 [ 900.890235][T17063] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 901.459830][T17060] syzkaller0: entered promiscuous mode [ 901.493673][T17060] syzkaller0: entered allmulticast mode [ 902.551939][ T5352] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 902.964104][ T5352] usb 4-1: Using ep0 maxpacket: 8 [ 903.059121][ T5352] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 903.100062][ T5352] usb 4-1: config 0 has no interface number 0 [ 903.137465][ T5352] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 903.187365][ T5352] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 903.250021][ T5352] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 903.262071][T17078] syzkaller0: entered promiscuous mode [ 903.274348][T17078] syzkaller0: entered allmulticast mode [ 903.313065][ T5352] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 903.369629][ T5352] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 903.387767][ T5352] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.415425][ T5352] usb 4-1: config 0 descriptor?? [ 903.475813][ T5352] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 903.571160][T12531] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 903.684427][ T5352] usb 4-1: USB disconnect, device number 21 [ 903.708400][ T5352] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 903.754640][T12531] usb 5-1: Using ep0 maxpacket: 32 [ 903.772271][T12531] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.796333][T12531] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 903.820301][T12531] usb 5-1: config 0 interface 0 has no altsetting 0 [ 903.827107][T12531] usb 5-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 903.847020][T12531] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.874243][T12531] usb 5-1: config 0 descriptor?? [ 904.295103][T12531] hid (null): unknown global tag 0xc [ 904.311336][T12531] itetech 0003:258A:6A88.0021: unknown main item tag 0x3 [ 904.322775][T12531] itetech 0003:258A:6A88.0021: unknown main item tag 0x0 [ 904.329979][T12531] itetech 0003:258A:6A88.0021: unknown global tag 0xc [ 904.344437][T12531] itetech 0003:258A:6A88.0021: item 0 1 1 12 parsing failed [ 904.353568][T12531] itetech 0003:258A:6A88.0021: probe with driver itetech failed with error -22 [ 905.718418][T16513] usb 5-1: USB disconnect, device number 21 [ 906.095520][T17130] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 907.855796][T17151] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 908.848427][T16586] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 908.980432][T16586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 909.030915][T16586] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 909.369804][T16586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 909.522733][T16586] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 909.805610][T16586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 909.923979][T16586] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 909.989589][T16586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 910.013072][T17179] syzkaller0: entered promiscuous mode [ 910.028157][T17179] syzkaller0: entered allmulticast mode [ 910.732212][T16586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 910.761761][T16513] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 910.890153][T16586] 8021q: adding VLAN 0 to HW filter on device team0 [ 910.949072][T16812] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.956336][T16812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 910.961753][T16513] usb 5-1: Using ep0 maxpacket: 32 [ 911.020289][T16513] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 911.094106][T16513] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 911.123686][ T9365] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.130915][ T9365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 911.165149][T16513] usb 5-1: config 0 interface 0 has no altsetting 0 [ 911.210716][T16513] usb 5-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 911.248275][T16513] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.332385][T17224] syzkaller0: entered promiscuous mode [ 911.343142][T17224] syzkaller0: entered allmulticast mode [ 911.367381][T17228] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 911.780346][T16513] usb 5-1: config 0 descriptor?? [ 912.212161][T16513] hid (null): unknown global tag 0xc [ 912.278743][T16513] itetech 0003:258A:6A88.0022: unknown main item tag 0x3 [ 912.316065][T16513] itetech 0003:258A:6A88.0022: unknown main item tag 0x0 [ 912.373426][T16513] itetech 0003:258A:6A88.0022: unknown global tag 0xc [ 912.395943][T16513] itetech 0003:258A:6A88.0022: item 0 1 1 12 parsing failed [ 912.438637][T16513] itetech 0003:258A:6A88.0022: probe with driver itetech failed with error -22 [ 912.525359][T16513] usb 5-1: USB disconnect, device number 22 [ 913.340546][ T5640] Bluetooth: hci6: unknown advertising packet type: 0x66 [ 913.340601][ T5640] Bluetooth: hci6: Malformed LE Event: 0x02 [ 913.908632][T17260] loop6: detected capacity change from 0 to 4096 [ 913.967904][T17260] EXT4-fs (loop6): unsupported inode size: 257 [ 913.985214][T17260] EXT4-fs (loop6): blocksize: 4096 [ 915.505364][T17303] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 916.345059][T17316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3118'. [ 916.381553][T16586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 916.928712][T17282] loop6: detected capacity change from 0 to 32768 [ 917.336923][T17282] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 917.621256][T17282] XFS (loop6): Ending clean mount [ 917.990138][ T6700] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 918.073652][ T5352] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 918.181967][T16586] veth0_vlan: entered promiscuous mode [ 918.246645][T16586] veth1_vlan: entered promiscuous mode [ 918.290692][ T5352] usb 1-1: Using ep0 maxpacket: 32 [ 918.319758][ T5352] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 918.399946][ T5352] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 918.413650][T16586] veth0_macvtap: entered promiscuous mode [ 918.465278][T16586] veth1_macvtap: entered promiscuous mode [ 918.476262][ T5352] usb 1-1: config 0 interface 0 has no altsetting 0 [ 918.521583][ T5352] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 918.584933][ T5352] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.624709][T16586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 918.675221][ T5352] usb 1-1: config 0 descriptor?? [ 918.724986][T16586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 918.798651][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.866413][ T9340] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.938561][ T9340] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.028071][ T9340] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.111861][T17365] syzkaller0: entered promiscuous mode [ 919.134214][ T5352] hid (null): unknown global tag 0xc [ 919.154120][T17365] syzkaller0: entered allmulticast mode [ 919.185349][ T5352] itetech 0003:258A:6A88.0023: unknown main item tag 0x3 [ 919.218974][ T5352] itetech 0003:258A:6A88.0023: unknown main item tag 0x0 [ 919.245755][ T5352] itetech 0003:258A:6A88.0023: unknown global tag 0xc [ 919.286324][ T5352] itetech 0003:258A:6A88.0023: item 0 1 1 12 parsing failed [ 919.320411][ T5352] itetech 0003:258A:6A88.0023: probe with driver itetech failed with error -22 [ 919.404218][ T5352] usb 1-1: USB disconnect, device number 25 [ 919.912627][ T9340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.976061][ T9340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 920.151164][ T5352] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 920.199700][ T9365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 920.232347][ T9365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 920.361080][ T5352] usb 4-1: Using ep0 maxpacket: 8 [ 920.396708][ T5352] usb 4-1: unable to get BOS descriptor or descriptor too short [ 920.430466][ T5352] usb 4-1: config 4 interface 0 has no altsetting 0 [ 920.462128][ T5352] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 920.512821][ T5352] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 920.589152][ T5352] usb 4-1: Manufacturer: syz [ 920.653150][ T5352] usb 4-1: SerialNumber: syz [ 920.979760][ T5352] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 921.042568][ T5352] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 921.124057][ T5352] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 921.156185][ T5352] usb 4-1: media controller created [ 921.250985][ T5352] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 921.399663][ T5352] zl10353_read_register: readreg error (reg=127, ret==0) [ 921.786267][ T5352] usb 4-1: USB disconnect, device number 22 [ 921.934167][T17417] loop2: detected capacity change from 0 to 7 [ 921.999227][T17417] Dev loop2: unable to read RDB block 7 [ 922.029653][T17417] loop2: unable to read partition table [ 922.061728][T17417] loop2: partition table beyond EOD, truncated [ 922.089033][T17417] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 922.701180][T11243] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 922.911859][T11243] usb 1-1: Using ep0 maxpacket: 32 [ 922.944704][T11243] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 922.994904][T11243] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 923.060463][T11243] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 923.128246][T11243] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.189424][T11243] usb 1-1: Product: syz [ 923.219144][T11243] usb 1-1: Manufacturer: syz [ 923.235341][T11243] usb 1-1: SerialNumber: syz [ 923.260657][T11243] usb 1-1: config 0 descriptor?? [ 923.291613][ T5773] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 923.461583][ T5773] usb 5-1: Using ep0 maxpacket: 32 [ 923.494807][ T5773] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 923.551899][ T5773] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 923.587378][ T5773] usb 5-1: config 0 interface 0 has no altsetting 0 [ 923.612425][ T5773] usb 5-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 923.626874][ T5773] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.640367][ T5773] usb 5-1: config 0 descriptor?? [ 923.987682][T17452] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 924.777439][T17457] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3148'. [ 924.813043][ T5773] hid (null): unknown global tag 0xc [ 924.846458][ T5773] itetech 0003:258A:6A88.0024: unknown main item tag 0x3 [ 924.868824][ T5773] itetech 0003:258A:6A88.0024: unknown main item tag 0x0 [ 924.886766][ T5773] itetech 0003:258A:6A88.0024: unknown global tag 0xc [ 924.906997][ T5773] itetech 0003:258A:6A88.0024: item 0 1 1 12 parsing failed [ 924.943910][ T5773] itetech 0003:258A:6A88.0024: probe with driver itetech failed with error -22 [ 925.060936][T12531] usb 5-1: USB disconnect, device number 23 [ 925.631443][T12531] usb 1-1: USB disconnect, device number 26 [ 925.786971][T17477] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 926.588682][T17488] loop2: detected capacity change from 0 to 7 [ 926.627853][T17488] Dev loop2: unable to read RDB block 7 [ 926.675881][T17488] loop2: unable to read partition table [ 926.706364][T17488] loop2: partition table beyond EOD, truncated [ 926.746543][T17488] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 927.481394][ T24] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 927.653343][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 927.696316][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 927.720417][ T24] usb 1-1: config 4 interface 0 has no altsetting 0 [ 927.757372][ T24] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 927.799834][ T24] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 927.832643][ T24] usb 1-1: Manufacturer: syz [ 927.843515][T17517] syzkaller0: entered promiscuous mode [ 927.854694][ T24] usb 1-1: SerialNumber: syz [ 927.861110][T17517] syzkaller0: entered allmulticast mode [ 928.118507][ T24] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 928.150955][ T24] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 928.177409][ T24] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 928.194610][ T24] usb 1-1: media controller created [ 928.247750][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 928.357791][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 928.611066][ T24] usb 1-1: USB disconnect, device number 27 [ 930.223973][T17545] netlink: 'syz.0.3173': attribute type 4 has an invalid length. [ 930.574375][T17554] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3174'. [ 930.964949][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.974841][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 930.993381][ T1310] aoe: packet could not be sent on lowpan0. consider increasing tx_queue_len [ 931.108499][T17554] batman_adv: batadv0: Adding interface: macsec1 [ 931.129697][T17554] batman_adv: batadv0: The MTU of interface macsec1 is too small (1418) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 931.200118][T17554] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 932.131537][ T5744] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 932.301248][ T5744] usb 4-1: Using ep0 maxpacket: 8 [ 932.325864][ T5744] usb 4-1: unable to get BOS descriptor or descriptor too short [ 932.356066][ T5744] usb 4-1: config 4 interface 0 has no altsetting 0 [ 932.374225][ T5744] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 932.387854][ T5744] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 932.397746][ T5744] usb 4-1: Manufacturer: syz [ 932.412974][ T5744] usb 4-1: SerialNumber: syz [ 932.714817][ T5744] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 932.778963][ T5744] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 932.808102][ T5744] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 932.830165][ T5744] usb 4-1: media controller created [ 932.938055][ T5744] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 933.073420][ T5744] zl10353_read_register: readreg error (reg=127, ret==0) [ 933.097975][T17599] sg_write: data in/out 926365459/120 bytes for SCSI command 0x0-- guessing data in; [ 933.097975][T17599] program syz.0.3188 not setting count and/or reply_len properly [ 934.337834][T17606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.427355][T17608] loop2: detected capacity change from 0 to 7 [ 934.434405][ T5744] usb 4-1: USB disconnect, device number 23 [ 934.465892][T17608] Dev loop2: unable to read RDB block 7 [ 934.526632][T17608] loop2: unable to read partition table [ 934.545451][T17606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.585934][T17608] loop2: partition table beyond EOD, truncated [ 934.634579][T17608] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 934.901222][ T5744] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 935.081215][ T5744] usb 4-1: Using ep0 maxpacket: 32 [ 935.233073][ T5744] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 935.251356][ T5744] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 935.344128][T17618] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 935.568219][ T5744] usb 4-1: config 0 has no interface number 0 [ 935.585386][ T5744] usb 4-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 935.627646][ T5744] usb 4-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 935.734567][ T5744] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 935.764623][ T5744] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.806665][ T5744] usb 4-1: Product: syz [ 935.822900][ T5744] usb 4-1: Manufacturer: syz [ 935.849152][ T5744] usb 4-1: SerialNumber: syz [ 935.903984][ T5744] usb 4-1: config 0 descriptor?? [ 935.946172][ T5744] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 935.985005][ T5744] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 937.593257][ T24] usb 4-1: USB disconnect, device number 24 [ 937.731472][T11243] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 938.052263][T17660] sg_write: data in/out 926365459/120 bytes for SCSI command 0x0-- guessing data in; [ 938.052263][T17660] program syz.0.3206 not setting count and/or reply_len properly [ 938.347793][T17662] loop4: detected capacity change from 0 to 2048 [ 939.041166][T11243] usb 7-1: Using ep0 maxpacket: 8 [ 939.935072][T17662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 940.063035][T11243] usb 7-1: unable to get BOS descriptor or descriptor too short [ 941.113649][T17660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.388116][T17660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.461770][ T5626] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 941.478777][T11243] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 941.514578][T11243] usb 7-1: can't read configurations, error -71 [ 941.562432][T17671] netlink: 'syz.3.3208': attribute type 4 has an invalid length. [ 944.397445][T17726] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3224'. [ 944.561326][T12531] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 944.748779][T17730] netlink: 'syz.0.3226': attribute type 4 has an invalid length. [ 944.764140][T12531] usb 5-1: Using ep0 maxpacket: 8 [ 944.785440][T12531] usb 5-1: unable to get BOS descriptor or descriptor too short [ 944.815296][T12531] usb 5-1: config 4 interface 0 has no altsetting 0 [ 944.849609][T12531] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 944.877096][T17732] loop2: detected capacity change from 0 to 7 [ 944.897557][T12531] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 944.922581][T17732] Dev loop2: unable to read RDB block 7 [ 944.939095][T12531] usb 5-1: Manufacturer: syz [ 944.975377][T17732] loop2: unable to read partition table [ 944.995444][T12531] usb 5-1: SerialNumber: syz [ 944.996902][T17732] loop2: partition table beyond EOD, truncated [ 945.047055][T17732] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 945.474389][T17737] loop0: detected capacity change from 0 to 1024 [ 946.258349][T12531] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 946.272442][T12531] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 946.283067][T12531] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 946.290258][T12531] usb 5-1: media controller created [ 946.310643][T12531] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 946.348568][T12531] zl10353_read_register: readreg error (reg=127, ret==0) [ 946.468774][T12531] usb 5-1: USB disconnect, device number 24 [ 948.191745][T17757] loop1: detected capacity change from 0 to 4096 [ 948.199040][T17757] ntfs3: Unknown parameter '@' [ 948.301235][T17746] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.3232'. [ 949.140455][T17770] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3239'. [ 949.567218][T17778] netlink: zone id is out of range [ 949.581929][T17778] netlink: get zone limit has 4 unknown bytes [ 950.120316][T17782] loop2: detected capacity change from 0 to 7 [ 950.203496][T17782] Dev loop2: unable to read RDB block 7 [ 950.232097][T17782] loop2: unable to read partition table [ 950.272825][T17782] loop2: partition table beyond EOD, truncated [ 950.307485][T17782] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 952.796630][T17813] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3252'. [ 953.349064][T17819] loop6: detected capacity change from 0 to 2048 [ 955.120222][T17819] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 956.728164][ T6700] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 957.181171][ T5352] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 957.379189][ T5352] usb 5-1: Using ep0 maxpacket: 8 [ 957.417716][ T5352] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 957.450948][ T5352] usb 5-1: config 0 has no interface number 0 [ 957.477904][ T5352] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 957.513876][ T5352] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 957.599230][ T5352] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 957.654144][ T5352] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 957.859468][ T5352] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 957.869255][ T5352] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.884207][ T5352] usb 5-1: config 0 descriptor?? [ 957.904280][T17845] sg_write: data in/out 926365459/120 bytes for SCSI command 0x0-- guessing data in; [ 957.904280][T17845] program syz.3.3264 not setting count and/or reply_len properly [ 958.692097][ T5352] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 958.792319][ T5352] usb 5-1: USB disconnect, device number 25 [ 958.850390][ T5352] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 959.221121][T12531] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 959.411247][T12531] usb 4-1: Using ep0 maxpacket: 32 [ 959.932915][T12531] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 959.983802][T12531] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 960.034965][T12531] usb 4-1: config 0 interface 0 has no altsetting 0 [ 960.057244][T12531] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 960.095299][T12531] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.147993][T12531] usb 4-1: config 0 descriptor?? [ 960.445805][T17866] syzkaller0: entered promiscuous mode [ 960.467169][T17866] syzkaller0: entered allmulticast mode [ 960.603705][T12531] hid (null): unknown global tag 0xc [ 960.657012][T12531] itetech 0003:258A:6A88.0025: unknown main item tag 0x3 [ 960.684167][T12531] itetech 0003:258A:6A88.0025: unknown main item tag 0x0 [ 960.698337][T12531] itetech 0003:258A:6A88.0025: unknown global tag 0xc [ 960.728548][T12531] itetech 0003:258A:6A88.0025: item 0 1 1 12 parsing failed [ 960.754230][T12531] itetech 0003:258A:6A88.0025: probe with driver itetech failed with error -22 [ 960.764767][T17872] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.3271'. [ 960.824073][T12531] usb 4-1: USB disconnect, device number 25 [ 961.381133][T12531] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 961.581123][T12531] usb 5-1: Using ep0 maxpacket: 16 [ 961.625004][T12531] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 961.667183][T12531] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.701249][T12531] usb 5-1: Product: syz [ 961.861287][T12531] usb 5-1: Manufacturer: syz [ 961.873157][T12531] usb 5-1: SerialNumber: syz [ 962.959753][T12531] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 963.052702][T12531] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 963.085895][T17898] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.108767][T12531] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 963.146652][T12531] usb 5-1: media controller created [ 963.218639][T12531] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 963.244170][T17909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 963.270147][T17909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 963.299614][T12531] zl10353_read_register: readreg error (reg=127, ret==-71) [ 963.318001][T17909] ------------[ cut here ]------------ [ 963.324238][T17909] usb 5-1: BOGUS control dir, pipe 80001a80 doesn't match bRequestType c0 [ 963.333287][T17909] WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x15ff/0x19b0, CPU#1: syz.0.3284/17909 [ 963.343906][T17909] Modules linked in: [ 963.348256][T17909] CPU: 1 UID: 0 PID: 17909 Comm: syz.0.3284 Tainted: G L syzkaller #0 PREEMPT(full) [ 963.359459][T17909] Tainted: [L]=SOFTLOCKUP [ 963.364233][T17909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 963.374727][T17909] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 963.380441][T17909] Code: 48 89 54 24 40 e8 53 b9 8a fa 4c 89 e7 e8 bb e7 db fe 48 89 c6 48 8d 3d 61 98 b0 09 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 24 b9 8a fa 89 ee bf ff 00 00 00 [ 963.400216][T17909] RSP: 0018:ffffc900068e76f0 EFLAGS: 00010283 [ 963.408553][T17909] RAX: ffffffff8ca5e240 RBX: ffff88807a504100 RCX: 0000000080001a80 [ 963.416640][T17909] RDX: ffff88805515e580 RSI: ffffffff8ca5e240 RDI: ffffffff91301e40 [ 963.424942][T17909] RBP: ffff888053d80058 R08: 00000000000000c0 R09: 0000000000000000 [ 963.433070][T17909] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888053d800b0 [ 963.441133][T17909] R13: ffff8880339b92c0 R14: ffff8880339b92c6 R15: ffff8880339b92c7 [ 963.451484][T17909] FS: 00007f06ca50c6c0(0000) GS:ffff888123ede000(0000) knlGS:0000000000000000 [ 963.460484][T17909] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 963.467187][T17909] CR2: 000000110c424875 CR3: 000000007a495000 CR4: 0000000000350ef0 [ 963.475486][T17909] Call Trace: [ 963.478785][T17909] [ 963.481858][T17909] ? __init_swait_queue_head+0xca/0x150 [ 963.487457][T17909] usb_start_wait_urb+0x10e/0x580 [ 963.492582][T17909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 963.498296][T17909] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 963.503996][T17909] ? trace_kmalloc+0xeb/0x110 [ 963.508753][T17909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 963.514499][T17909] ? __asan_memset+0x23/0x50 [ 963.519226][T17909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 963.525064][T17909] usb_control_msg+0x328/0x4b0 [ 963.529911][T17909] ? __pfx_usb_control_msg+0x10/0x10 [ 963.535320][T17909] ? rcu_is_watching+0x12/0xc0 [ 963.540192][T17909] gl861_ctrl_msg+0x1a5/0x4a0 [ 963.545046][T17909] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 963.550287][T17909] ? __lock_acquire+0x49f/0x1a40 [ 963.555397][T17909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 963.561228][T17909] ? __lock_acquire+0x49f/0x1a40 [ 963.566309][T17909] gl861_i2c_master_xfer+0x545/0x690 [ 963.571691][T17909] __i2c_transfer+0x5d9/0x1740 [ 963.577044][T17909] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 963.582972][T17909] ? __pfx___i2c_transfer+0x10/0x10 [ 963.588231][T17909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 963.594007][T17909] ? rt_mutex_slowtrylock+0x93/0x100 [ 963.599372][T17909] i2c_transfer+0x15f/0x380 [ 963.604139][T17909] i2c_transfer_buffer_flags+0x10c/0x190 [ 963.609926][T17909] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 963.616256][T17909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 963.622046][T17909] ? i2cdev_read+0xe4/0x2b0 [ 963.626653][T17909] i2cdev_read+0x111/0x2b0 [ 963.631223][T17909] ? __pfx_i2cdev_read+0x10/0x10 [ 963.636221][T17909] vfs_readv+0x5d8/0x8d0 [ 963.640500][T17909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 963.646363][T17909] ? __pfx_vfs_readv+0x10/0x10 [ 963.651218][T17909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 963.656910][T17909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 963.662774][T17909] ? __fget_files+0x21f/0x3d0 [ 963.667527][T17909] ? do_preadv+0x1ac/0x270 [ 963.672047][T17909] do_preadv+0x1ac/0x270 [ 963.676420][T17909] ? __pfx_do_preadv+0x10/0x10 [ 963.681505][T17909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 963.687189][T17909] do_syscall_64+0x115/0x870 [ 963.692461][T17909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.698412][T17909] RIP: 0033:0x7f06c959de99 [ 963.703126][T17909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 963.722932][T17909] RSP: 002b:00007f06ca50c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 963.731556][T17909] RAX: ffffffffffffffda RBX: 00007f06c9825fa0 RCX: 00007f06c959de99 [ 963.739586][T17909] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 0000000000000004 [ 963.747854][T17909] RBP: 00007f06c9633eaf R08: 0000000000002bd6 R09: 0000000000000000 [ 963.755926][T17909] R10: 00000000000008c0 R11: 0000000000000246 R12: 0000000000000000 [ 963.764327][T17909] R13: 00007f06c9826038 R14: 00007f06c9825fa0 R15: 00007ffc5b173d28 [ 963.772403][T17909] [ 963.775485][T17909] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 963.782789][T17909] CPU: 1 UID: 0 PID: 17909 Comm: syz.0.3284 Tainted: G L syzkaller #0 PREEMPT(full) [ 963.793762][T17909] Tainted: [L]=SOFTLOCKUP [ 963.798089][T17909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 963.808240][T17909] Call Trace: [ 963.811527][T17909] [ 963.814491][T17909] dump_stack_lvl+0x100/0x190 [ 963.819202][T17909] vpanic+0x552/0x970 [ 963.823200][T17909] ? __pfx_vpanic+0x10/0x10 [ 963.827912][T17909] panic+0xd1/0xe0 [ 963.831648][T17909] ? __pfx_panic+0x10/0x10 [ 963.836106][T17909] check_panic_on_warn.cold+0x19/0x34 [ 963.841504][T17909] ? usb_submit_urb+0x15ff/0x19b0 [ 963.846548][T17909] __warn.cold+0x191/0x318 [ 963.850989][T17909] __report_bug+0x30f/0x440 [ 963.855527][T17909] ? usb_submit_urb+0x15ff/0x19b0 [ 963.860845][T17909] ? __pfx___report_bug+0x10/0x10 [ 963.865897][T17909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 963.871560][T17909] ? lockdep_hardirqs_on+0x78/0x100 [ 963.876797][T17909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 963.882456][T17909] ? kasan_save_stack+0x3f/0x50 [ 963.887345][T17909] ? kasan_save_stack+0x30/0x50 [ 963.892238][T17909] report_bug_entry+0xe1/0x290 [ 963.897114][T17909] ? usb_submit_urb+0x160d/0x19b0 [ 963.902162][T17909] handle_bug+0x1cd/0x2a0 [ 963.906526][T17909] exc_invalid_op+0x17/0x50 [ 963.911062][T17909] asm_exc_invalid_op+0x1a/0x20 [ 963.915933][T17909] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 963.921584][T17909] Code: 48 89 54 24 40 e8 53 b9 8a fa 4c 89 e7 e8 bb e7 db fe 48 89 c6 48 8d 3d 61 98 b0 09 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 24 b9 8a fa 89 ee bf ff 00 00 00 [ 963.941306][T17909] RSP: 0018:ffffc900068e76f0 EFLAGS: 00010283 [ 963.947393][T17909] RAX: ffffffff8ca5e240 RBX: ffff88807a504100 RCX: 0000000080001a80 [ 963.955460][T17909] RDX: ffff88805515e580 RSI: ffffffff8ca5e240 RDI: ffffffff91301e40 [ 963.963447][T17909] RBP: ffff888053d80058 R08: 00000000000000c0 R09: 0000000000000000 [ 963.971430][T17909] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888053d800b0 [ 963.979410][T17909] R13: ffff8880339b92c0 R14: ffff8880339b92c6 R15: ffff8880339b92c7 [ 963.987423][T17909] ? __init_swait_queue_head+0xca/0x150 [ 963.993095][T17909] usb_start_wait_urb+0x10e/0x580 [ 963.998145][T17909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.003800][T17909] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 964.009369][T17909] ? trace_kmalloc+0xeb/0x110 [ 964.014074][T17909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.019727][T17909] ? __asan_memset+0x23/0x50 [ 964.024347][T17909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.030009][T17909] usb_control_msg+0x328/0x4b0 [ 964.034796][T17909] ? __pfx_usb_control_msg+0x10/0x10 [ 964.040377][T17909] ? rcu_is_watching+0x12/0xc0 [ 964.045361][T17909] gl861_ctrl_msg+0x1a5/0x4a0 [ 964.050111][T17909] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 964.055331][T17909] ? __lock_acquire+0x49f/0x1a40 [ 964.060294][T17909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.066050][T17909] ? __lock_acquire+0x49f/0x1a40 [ 964.071025][T17909] gl861_i2c_master_xfer+0x545/0x690 [ 964.076349][T17909] __i2c_transfer+0x5d9/0x1740 [ 964.081161][T17909] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 964.086992][T17909] ? __pfx___i2c_transfer+0x10/0x10 [ 964.092301][T17909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.097975][T17909] ? rt_mutex_slowtrylock+0x93/0x100 [ 964.103738][T17909] i2c_transfer+0x15f/0x380 [ 964.108293][T17909] i2c_transfer_buffer_flags+0x10c/0x190 [ 964.113967][T17909] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 964.120339][T17909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.126012][T17909] ? i2cdev_read+0xe4/0x2b0 [ 964.130574][T17909] i2cdev_read+0x111/0x2b0 [ 964.135070][T17909] ? __pfx_i2cdev_read+0x10/0x10 [ 964.140061][T17909] vfs_readv+0x5d8/0x8d0 [ 964.144605][T17909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.150295][T17909] ? __pfx_vfs_readv+0x10/0x10 [ 964.155088][T17909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.160756][T17909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.166436][T17909] ? __fget_files+0x21f/0x3d0 [ 964.171155][T17909] ? do_preadv+0x1ac/0x270 [ 964.175588][T17909] do_preadv+0x1ac/0x270 [ 964.179851][T17909] ? __pfx_do_preadv+0x10/0x10 [ 964.184636][T17909] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.190339][T17909] do_syscall_64+0x115/0x870 [ 964.194956][T17909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.200865][T17909] RIP: 0033:0x7f06c959de99 [ 964.205466][T17909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 964.225259][T17909] RSP: 002b:00007f06ca50c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 964.233715][T17909] RAX: ffffffffffffffda RBX: 00007f06c9825fa0 RCX: 00007f06c959de99 [ 964.241730][T17909] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 0000000000000004 [ 964.249732][T17909] RBP: 00007f06c9633eaf R08: 0000000000002bd6 R09: 0000000000000000 [ 964.257974][T17909] R10: 00000000000008c0 R11: 0000000000000246 R12: 0000000000000000 [ 964.265977][T17909] R13: 00007f06c9826038 R14: 00007f06c9825fa0 R15: 00007ffc5b173d28 [ 964.273984][T17909] [ 964.277142][T17909] Kernel Offset: disabled [ 964.281462][T17909] Rebooting in 86400 seconds..