last executing test programs: 18m5.269794537s ago: executing program 2 (id=47): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) r8 = syz_open_procfs(r3, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@loopback, 0x4e22, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa3}, {@in6=@local, 0x0, 0x33}, @in6=@local, {0x100000000, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3}, {}, 0x0, 0x3501, 0x2, 0x1}}, 0x14b}}, 0x0) write$UHID_INPUT(r7, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040081}, 0x0) mknod(0x0, 0x1000, 0x1) r10 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) shutdown(r9, 0x0) r11 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000001040)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x1, 0x3, 0x2, {0xa, 0x4e24, 0xffffff51, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, 0x32) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000000c0)={0x6, "ca77f2089159a3bf476a7d1d2417cb2c31db31fe005d49c005987a6f8620d9b3de2f96f4bd48d37568ff1e6c9dc521b351e1ca13c830ebdc50af9bf58ca4f11fec8aad5194c0ad1ecaff060ab2f75ff688b87d473c8c97f7151843e91777e0f2e0c8d275a5e0a10943182a240034b6722aaaf4831faf84f907e8e2caabf748298f2748ca044681b0d1e2a856512afddcb4e040bb0a589656e9349be52c18d8ebe37cc62385feec76532b069901887652f31b1d535369afb5a6b5b2cd91d91a15e1ae2463903563514147763e9ee7a048939f496fa1f10fdfb15fe59efcda704204534b56ce0c80b4e7eda976fa35bad67a6826915895b75a2422e84c9a8b6a6c181ea8755216e58ebc7f896f2312c56592454636a6958be786cce206d873384713eb2cc341906330941e1290a11289936152b916aac5fb1df33007935e640d01a5e5f686555ef638dc18757c696c4a1b4a28385b86e7b59611f822fe4112be40a72849b02cb4d5594b2272e7ad6556e2523bf594fb1682b08c92fc95240851c59b517302aa9db09db70ea0ed79ec4b84aeef957cf34f0eb3e32ce040eead24292fcb3b8e2c65e66577b0f8c0c05025849c05c867ec62debe288297de27bd36d071583d68ffe6e3c8a794e0432a4efebbfcf5aba09395deac0f850e10a8c30682531ac068bba863ef3f4e01191012cc5c0bec44df959b39d05771308ebbbc1ec8"}) 18m2.102119816s ago: executing program 2 (id=50): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x121682, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) kexec_load(0x58fb, 0x0, 0x0, 0x160000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004c406b322e293fa3e38bed1ec9a4444938394000001000000800000000000000ecfbf3950032a1c568f99db1fba0154fb2ec460b75a0b13295a3d79d074d301a973782b2fa4ccd4dadefdcb6c5e67dee535ee15a9", @ANYRES32=0x0, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/19], 0x50) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xfe94) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) 17m57.765139709s ago: executing program 2 (id=57): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r3, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001480)=0x7) syz_io_uring_setup(0x49c, &(0x7f0000000000)={0x0, 0x8327, 0x10, 0x0, 0x2d8}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x8, 0x1}) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x5405, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4b, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x10000001, @private2={0xfc, 0x2, '\x00', 0xfd}, 0x9}, 0x1c) 17m55.704331738s ago: executing program 2 (id=59): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000180)=[{0x3, 0x1, 0x1b, 0x2}, {0x3, 0xf, 0x9, 0x7}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x400076, 0x484100) fsopen(&(0x7f00000000c0)='msdos\x00', 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000040)={0x1, {"40a568bf607c2094e9c6a0c0f550f7f8", "241e6a0b37e28869f574458eb6417d55", "a34d3bcc4817356e5c266b26fe399bde"}, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000240)={0x3, {"771c2e09a6afc168243d3e8ca34e208f", "45d5c22cb6cd3148b85d5dbf5f9e3413", "a9929074e915d4b883a44cd492a341be"}, 0x1, 0x4}) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000002400)={0x4, 0x0, [{0x40000001, 0xe63, 0x3, 0x2, 0x20002df3, 0x106, 0x5}, {0xa, 0x4, 0x3, 0x8002, 0x27, 0x7, 0x3}, {0xb, 0x5, 0x1, 0xfffffff7, 0xfffffff9, 0xff, 0x9}, {0x80000007, 0xc28, 0x3, 0xfffffffc, 0x5, 0xae, 0xffff}]}) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f00000001c0)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) 17m46.363106822s ago: executing program 2 (id=73): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17m44.277604918s ago: executing program 2 (id=75): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000180)=[{0x3, 0x1, 0x1b, 0x2}, {0x3, 0xf, 0x9, 0x7}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x400076, 0x484100) fsopen(&(0x7f00000000c0)='msdos\x00', 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000040)={0x1, {"40a568bf607c2094e9c6a0c0f550f7f8", "241e6a0b37e28869f574458eb6417d55", "a34d3bcc4817356e5c266b26fe399bde"}, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000240)={0x3, {"771c2e09a6afc168243d3e8ca34e208f", "45d5c22cb6cd3148b85d5dbf5f9e3413", "a9929074e915d4b883a44cd492a341be"}, 0x1, 0x4}) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000002400)={0x4, 0x0, [{0x40000001, 0xe63, 0x3, 0x2, 0x20002df3, 0x106, 0x5}, {0xa, 0x4, 0x3, 0x8002, 0x27, 0x7, 0x3}, {0xb, 0x5, 0x1, 0xfffffff7, 0xfffffff9, 0xff, 0x9}, {0x80000007, 0xc28, 0x3, 0xfffffffc, 0x5, 0xae, 0xffff}]}) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) 17m28.61370371s ago: executing program 32 (id=75): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000180)=[{0x3, 0x1, 0x1b, 0x2}, {0x3, 0xf, 0x9, 0x7}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x400076, 0x484100) fsopen(&(0x7f00000000c0)='msdos\x00', 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000040)={0x1, {"40a568bf607c2094e9c6a0c0f550f7f8", "241e6a0b37e28869f574458eb6417d55", "a34d3bcc4817356e5c266b26fe399bde"}, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000240)={0x3, {"771c2e09a6afc168243d3e8ca34e208f", "45d5c22cb6cd3148b85d5dbf5f9e3413", "a9929074e915d4b883a44cd492a341be"}, 0x1, 0x4}) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000002400)={0x4, 0x0, [{0x40000001, 0xe63, 0x3, 0x2, 0x20002df3, 0x106, 0x5}, {0xa, 0x4, 0x3, 0x8002, 0x27, 0x7, 0x3}, {0xb, 0x5, 0x1, 0xfffffff7, 0xfffffff9, 0xff, 0x9}, {0x80000007, 0xc28, 0x3, 0xfffffffc, 0x5, 0xae, 0xffff}]}) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) 18.457119505s ago: executing program 1 (id=3215): unshare(0x22020400) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, 0x0, 0x0) 18.439799903s ago: executing program 0 (id=3216): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48010) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001700)='\f', 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x22000000) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x40, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6b8ffff}]}]}, 0x40}}, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) 18.402514651s ago: executing program 5 (id=3217): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="80007f0a0a00020091"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000235, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000001c0)=0x6c63, 0x4) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r6, &(0x7f0000000500)=""/4096, 0x1000) splice(r4, 0x0, r7, 0x0, 0x400000008000f28, 0x0) splice(r6, 0x0, r5, 0x0, 0x114, 0xe) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) recvfrom$inet(r3, 0x0, 0x0, 0x2043, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 16.071929917s ago: executing program 4 (id=3219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x1) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@empty, @broadcast}, &(0x7f0000000080)=0xc) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xc044000}, 0x4000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) socket$igmp6(0xa, 0x3, 0x2) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="1dbe65faed397e3d8ad724393368dc05270c3479c43895a1a3d8a56563ab3b88ac2d1bc82c93ead406b5324f33316f4410e0ca0bfd66bdbbb86f31fe34faf411d41f44f6c83e38d83a0a55e7c94cc0fc0e5a8a8467fbf08798362318e48893ce0621d730bb98ec12f8860d0c7f3e46ce0125feee1f5af9bc4e93afca5cca9b6f775b9ebb6451e8f3d07ffacc6e2b0f09c5744967feac85b1dd5e0dfd23e237af11074a6eaba9a28b4046a75f0a9a96bc4203152a414228c3f2db2b77c5f408585999bdeb8df10fac947590f15235f5cf8a0d3208d8040cec936c378dd90017db40e3d256f211d74cd555466bef2f8c16d071abe9420b0d149462cf6620651f4700000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0xc0) sendmsg$rds(r5, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000080), 0x12) bind$x25(r7, &(0x7f0000000180), 0x12) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) 15.428923269s ago: executing program 1 (id=3220): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000280), 0x4) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xc}, 0x80, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000240)='\x00'/10, 0xa}, {&(0x7f00000002c0)="832debe16dcb86", 0x7}], 0x3}, 0x8080) 15.328232563s ago: executing program 0 (id=3221): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 15.27771397s ago: executing program 5 (id=3222): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='yeah', 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 13.029763522s ago: executing program 4 (id=3223): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 12.317236725s ago: executing program 1 (id=3224): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x2, 0x0, 0x7f, 0x40, 0x800, 0x0, 0x5a1, 0x85f}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x3, 0xb}, {0xffe0, 0x6}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x26040000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 12.097232289s ago: executing program 5 (id=3225): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0xcc, r1, 0xf03, 0x0, 0x200, {}, [@NLBL_MGMT_A_DOMAIN={0xb8, 0x1, '\x00\x00\x00\x81jq\x00\xa6M\xe6\xa19\x8f\xa5f\xbfr\xe0\xaf\f4\x8d0r\xaf\x03\xe8u\x1f(\x99.\x97J\xfa\xd8\xa8`\x05c\xd8\a\xda=\xb7\x8d\xcf\xaf\x8b?8\x16\x89\xda\x9f\x1dzS\x8f\xbc\xf3\x9a\xd0\x02\":\x03\xc2\x88bS6h0\xe9oZ3\x8d\x16U\xbea\xa2\x9d\x16YV\xfcU\x9c\xa2\xd5\x13\x0f\x88\a\x02\xc4\xc3\xca\x05U\xfaM\tG\xc4T\x19!\xc4\x9f\x80U^\x8a,\x18\x86~3\xad\xbf\xc5\n\xa1\"\xcaHI\x1c\t\x1f\xc9\xf6\xfb\xd2a\x8caq\x86\x91\x92\x14\"3;\xad\xc3\xa0\xf3\xc2\xd8n\xd3\xdb\xcc\nv\xbdM[\x18.\x8ch4\r\x83\x9d\xd1}q\xcb\xc6\x05\xe2>'}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 12.097011693s ago: executing program 0 (id=3226): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) close(r0) close(0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 9.985565935s ago: executing program 4 (id=3227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a340000001f0affffffff00000000000002000009080003400000000a"], 0x70}}, 0x0) 9.141472626s ago: executing program 1 (id=3228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) 9.072061135s ago: executing program 5 (id=3229): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @host}, 0x10) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYRES8], 0x3c}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, 0x0) 9.039089223s ago: executing program 0 (id=3230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x24}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e0000001"], 0x5c}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) 6.91818781s ago: executing program 4 (id=3250): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0xcc, r1, 0xf03, 0x0, 0x200, {}, [@NLBL_MGMT_A_DOMAIN={0xb8, 0x1, '\x00\x00\x00\x81jq\x00\xa6M\xe6\xa19\x8f\xa5f\xbfr\xe0\xaf\f4\x8d0r\xaf\x03\xe8u\x1f(\x99.\x97J\xfa\xd8\xa8`\x05c\xd8\a\xda=\xb7\x8d\xcf\xaf\x8b?8\x16\x89\xda\x9f\x1dzS\x8f\xbc\xf3\x9a\xd0\x02\":\x03\xc2\x88bS6h0\xe9oZ3\x8d\x16U\xbea\xa2\x9d\x16YV\xfcU\x9c\xa2\xd5\x13\x0f\x88\a\x02\xc4\xc3\xca\x05U\xfaM\tG\xc4T\x19!\xc4\x9f\x80U^\x8a,\x18\x86~3\xad\xbf\xc5\n\xa1\"\xcaHI\x1c\t\x1f\xc9\xf6\xfb\xd2a\x8caq\x86\x91\x92\x14\"3;\xad\xc3\xa0\xf3\xc2\xd8n\xd3\xdb\xcc\nv\xbdM[\x18.\x8ch4\r\x83\x9d\xd1}q\xcb\xc6\x05\xe2>'}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 6.104719476s ago: executing program 1 (id=3255): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000280), 0x4) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xc}, 0x80, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000240)='\x00'/10, 0xa}, {&(0x7f00000002c0)="832debe16dcb86c87d5aef", 0xb}], 0x3}, 0x8080) 6.028686155s ago: executing program 5 (id=3256): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 5.949193247s ago: executing program 0 (id=3257): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) close(r4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x7, 0x2, 0x10001}) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000200)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000040)={0x1d, @rand_addr=0x64010100, 0x4e22, 0x0, 'wrr\x00', 0xe, 0xa41, 0x1c}, 0x2c) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0400268073b712b7ea46d927874ae80e42270e23707ff496287e1b0013f6e43a720eddc9cdaa29cc7abc0000000c003f0000000000000002000d00d880fc8cd828b704001880000000872dbabf04e79912548c2fe9ac2b28ebb91a02adeb0e89fac194f81a94f00d8e4c5c27ae6d83671d383ee2612e5764749d234069aa3b81f4e5707b7bfa7c7e67c9dfbb2ee974b282aa79b6c69c56debaf4749d43354e5db6bff424d6d15abe353a582bd87dab76a6075566a419610127a2f2a4df7c3d8407b73c667770f5445674871db43e2b7304405587059b16717bcdcfad1267b1f34563f9369d0aa5da400708000500", @ANYRES32=r0, @ANYBLOB="00f400080001004024"], 0x61c}], 0x1, 0x0, 0x0, 0x1}, 0x0) 3.833566344s ago: executing program 4 (id=3274): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00110000000000", @ANYRES32=0x0, @ANYBLOB="0300"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4004844) 3.009553583s ago: executing program 1 (id=3280): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 2.979332563s ago: executing program 5 (id=3281): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fcffffff00000000800000001801", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.946386726s ago: executing program 0 (id=3282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a340000001f0affffffff00000000000002000009080003400000000a0900010073797a30"], 0x70}}, 0x0) 1.919044203s ago: executing program 3 (id=3290): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000280), 0x4) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xc}, 0x80, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000240)='\x00'/10, 0xa}, {&(0x7f00000002c0)="832debe16dcb86c87d5aefe65d", 0xd}], 0x3}, 0x8080) 1.855477426s ago: executing program 3 (id=3291): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 972.950074ms ago: executing program 3 (id=3292): r0 = socket(0x400000000010, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 889.535179ms ago: executing program 3 (id=3293): pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 826.629957ms ago: executing program 4 (id=3294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900c72b00040002800900010073797a310000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4008850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe0}}, 0x0) close(r0) 52.688691ms ago: executing program 3 (id=3295): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0xcc, r1, 0xf03, 0x0, 0x200, {}, [@NLBL_MGMT_A_DOMAIN={0xb8, 0x1, '\x00\x00\x00\x81jq\x00\xa6M\xe6\xa19\x8f\xa5f\xbfr\xe0\xaf\f4\x8d0r\xaf\x03\xe8u\x1f(\x99.\x97J\xfa\xd8\xa8`\x05c\xd8\a\xda=\xb7\x8d\xcf\xaf\x8b?8\x16\x89\xda\x9f\x1dzS\x8f\xbc\xf3\x9a\xd0\x02\":\x03\xc2\x88bS6h0\xe9oZ3\x8d\x16U\xbea\xa2\x9d\x16YV\xfcU\x9c\xa2\xd5\x13\x0f\x88\a\x02\xc4\xc3\xca\x05U\xfaM\tG\xc4T\x19!\xc4\x9f\x80U^\x8a,\x18\x86~3\xad\xbf\xc5\n\xa1\"\xcaHI\x1c\t\x1f\xc9\xf6\xfb\xd2a\x8caq\x86\x91\x92\x14\"3;\xad\xc3\xa0\xf3\xc2\xd8n\xd3\xdb\xcc\nv\xbdM[\x18.\x8ch4\r\x83\x9d\xd1}q\xcb\xc6\x05\xe2>'}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 0s ago: executing program 3 (id=3296): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) listen(0xffffffffffffffff, 0x8) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010003000000000000000000010008000100", @ANYRES32=0x0, @ANYBLOB="06000600040000000c000300000000000000"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x32, 0x0, 0xa, 0x2}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) kernel console output (not intermixed with test programs): :0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 480.524345][ T5813] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 482.550210][ T5813] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 483.187856][ T31] usb 1-1: USB disconnect, device number 31 [ 483.209253][ T5813] usb 4-1: Using ep0 maxpacket: 8 [ 483.212234][ T5813] usb 4-1: config 255 has an invalid interface number: 106 but max is 0 [ 483.212266][ T5813] usb 4-1: config 255 has no interface number 0 [ 483.212319][ T5813] usb 4-1: config 255 interface 106 altsetting 15 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 483.212350][ T5813] usb 4-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 483.212382][ T5813] usb 4-1: config 255 interface 106 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 483.212513][ T5813] usb 4-1: config 255 interface 106 has no altsetting 0 [ 483.215208][ T5813] usb 4-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=9a.82 [ 483.215236][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.215256][ T5813] usb 4-1: Product: syz [ 483.215270][ T5813] usb 4-1: Manufacturer: syz [ 483.215285][ T5813] usb 4-1: SerialNumber: syz [ 483.637013][ T9] usb 2-1: USB disconnect, device number 27 [ 483.715183][ T37] audit: type=1800 audit(1774041381.600:33): pid=8606 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.648" name="SYSV00000000" dev="hugetlbfs" ino=8 res=0 errno=0 [ 484.633477][ T8619] netlink: 'syz.4.653': attribute type 72 has an invalid length. [ 486.015139][ T5813] sierra 4-1:255.106: Sierra USB modem converter detected [ 486.045702][ T5813] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 486.096911][ T5813] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 486.122795][ T5813] usb 4-1: USB disconnect, device number 30 [ 486.145790][ T5813] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 486.181015][ T5813] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 486.181937][ T5813] sierra 4-1:255.106: device disconnected [ 486.315569][ T5819] Bluetooth: hci5: unexpected event for opcode 0x0c58 [ 486.352818][ T8633] netlink: 'syz.5.657': attribute type 1 has an invalid length. [ 486.684452][ T8633] 8021q: adding VLAN 0 to HW filter on device bond8 [ 486.799031][ T5992] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 487.359711][ T5992] usb 1-1: Using ep0 maxpacket: 32 [ 487.392573][ T5992] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 487.392605][ T5992] usb 1-1: config 0 has no interface number 0 [ 487.405025][ T5992] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 487.405060][ T5992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.405082][ T5992] usb 1-1: Product: syz [ 487.405098][ T5992] usb 1-1: Manufacturer: syz [ 487.405114][ T5992] usb 1-1: SerialNumber: syz [ 487.468224][ T5992] usb 1-1: config 0 descriptor?? [ 487.789940][ T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 488.118880][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 488.123697][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.123727][ T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 488.170198][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 488.170232][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.170255][ T9] usb 6-1: Product: syz [ 488.170270][ T9] usb 6-1: Manufacturer: syz [ 488.170286][ T9] usb 6-1: SerialNumber: syz [ 488.177059][ T9] usb 6-1: config 0 descriptor?? [ 488.762309][ T5992] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 488.762341][ T5992] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 488.762872][ T5992] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 488.763169][ T5992] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 488.819382][ T5992] usb 1-1: USB disconnect, device number 32 [ 488.950893][ T6007] usb 6-1: USB disconnect, device number 26 [ 489.220243][ T8653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.661'. [ 489.861090][ T5819] Bluetooth: hci2: unexpected event for opcode 0x0c58 [ 489.896995][ T8659] netlink: 'syz.3.663': attribute type 1 has an invalid length. [ 490.132493][ T8659] 8021q: adding VLAN 0 to HW filter on device bond3 [ 490.242095][ T5813] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 491.459190][ T5813] usb 6-1: Using ep0 maxpacket: 8 [ 491.462774][ T5813] usb 6-1: config 255 has an invalid interface number: 106 but max is 0 [ 491.462806][ T5813] usb 6-1: config 255 has no interface number 0 [ 491.462842][ T5813] usb 6-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 491.462860][ T5813] usb 6-1: config 255 interface 106 has no altsetting 0 [ 491.469264][ T5813] usb 6-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=9a.82 [ 491.469296][ T5813] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.469316][ T5813] usb 6-1: Product: syz [ 491.469330][ T5813] usb 6-1: Manufacturer: syz [ 491.469343][ T5813] usb 6-1: SerialNumber: syz [ 491.679852][ T5955] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 492.619370][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 492.803919][ T8657] fuse: Bad value for 'rootmode' [ 492.879042][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 493.150650][ T5813] sierra 6-1:255.106: Sierra USB modem converter detected [ 493.193934][ T9] usb 2-1: device descriptor read/all, error -71 [ 493.220897][ T5813] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 493.246041][ T5813] usb 6-1: USB disconnect, device number 27 [ 493.336489][ T5813] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 493.337320][ T5813] sierra 6-1:255.106: device disconnected [ 493.785471][ T8691] kvm: kvm [8690]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1000 [ 493.826693][ T8691] kvm: kvm [8690]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xfffe00000000 [ 493.919086][ T5992] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 493.943966][ T5955] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 493.943999][ T5955] usb 4-1: config 0 has no interface number 0 [ 493.948396][ T5955] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 493.948426][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.948449][ T5955] usb 4-1: Product: syz [ 493.948463][ T5955] usb 4-1: Manufacturer: syz [ 493.948479][ T5955] usb 4-1: SerialNumber: syz [ 494.926355][ T5955] usb 4-1: config 0 descriptor?? [ 495.108879][ T5813] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 495.219091][ T5992] usb 5-1: Using ep0 maxpacket: 32 [ 495.226261][ T5992] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.226293][ T5992] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 495.230894][ T5992] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 495.230924][ T5992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.231179][ T5992] usb 5-1: Product: syz [ 495.231193][ T5992] usb 5-1: Manufacturer: syz [ 495.231207][ T5992] usb 5-1: SerialNumber: syz [ 495.244809][ T5992] usb 5-1: config 0 descriptor?? [ 495.308880][ T5813] usb 6-1: Using ep0 maxpacket: 8 [ 495.311229][ T5813] usb 6-1: config 255 has an invalid interface number: 106 but max is 0 [ 495.311259][ T5813] usb 6-1: config 255 has no interface number 0 [ 495.311312][ T5813] usb 6-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 495.311344][ T5813] usb 6-1: config 255 interface 106 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 495.311373][ T5813] usb 6-1: config 255 interface 106 has no altsetting 0 [ 495.360310][ T5813] usb 6-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=9a.82 [ 495.360346][ T5813] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.360370][ T5813] usb 6-1: Product: syz [ 495.360384][ T5813] usb 6-1: Manufacturer: syz [ 495.360399][ T5813] usb 6-1: SerialNumber: syz [ 495.458961][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 495.678322][ T8696] fuse: Bad value for 'rootmode' [ 495.848837][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 496.840241][ T9] usb 1-1: config 255 has an invalid interface number: 106 but max is 0 [ 496.840277][ T9] usb 1-1: config 255 has no interface number 0 [ 496.840347][ T9] usb 1-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 496.840378][ T9] usb 1-1: config 255 interface 106 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 496.840408][ T9] usb 1-1: config 255 interface 106 has no altsetting 0 [ 496.843198][ T5813] sierra 6-1:255.106: Sierra USB modem converter detected [ 497.008458][ T5955] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 497.008492][ T5955] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 497.068628][ T5813] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 497.081780][ T9] usb 1-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=9a.82 [ 497.081816][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.081838][ T9] usb 1-1: Product: syz [ 497.081855][ T9] usb 1-1: Manufacturer: syz [ 497.081871][ T9] usb 1-1: SerialNumber: syz [ 497.129856][ T5813] usb 6-1: USB disconnect, device number 28 [ 497.341404][ T5813] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 497.354932][ T31] usb 5-1: USB disconnect, device number 34 [ 497.380156][ T5813] sierra 6-1:255.106: device disconnected [ 498.788670][ T5955] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 498.789595][ T5955] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 498.863845][ T9] sierra 1-1:255.106: Sierra USB modem converter detected [ 498.872979][ T5955] usb 4-1: USB disconnect, device number 31 [ 499.270107][ T31] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 499.470274][ T9] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 499.524398][ T9] usb 1-1: USB disconnect, device number 33 [ 499.568905][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 499.575528][ T31] usb 5-1: config 255 has an invalid interface number: 106 but max is 0 [ 499.575563][ T31] usb 5-1: config 255 has no interface number 0 [ 499.575617][ T31] usb 5-1: config 255 interface 106 altsetting 15 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 499.575647][ T31] usb 5-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 499.575689][ T31] usb 5-1: config 255 interface 106 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 499.575717][ T31] usb 5-1: config 255 interface 106 has no altsetting 0 [ 499.599570][ T31] usb 5-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=9a.82 [ 499.599602][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.599621][ T31] usb 5-1: Product: syz [ 499.599635][ T31] usb 5-1: Manufacturer: syz [ 499.599649][ T31] usb 5-1: SerialNumber: syz [ 499.685639][ T9] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 499.686554][ T9] sierra 1-1:255.106: device disconnected [ 499.851505][ T8728] netlink: 52 bytes leftover after parsing attributes in process `syz.3.683'. [ 500.458948][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 500.618842][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 500.621755][ T9] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 500.621786][ T9] usb 1-1: config 0 has no interface number 0 [ 500.621861][ T9] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 500.621887][ T9] usb 1-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 500.625334][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 500.625361][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.625381][ T9] usb 1-1: Product: syz [ 500.625395][ T9] usb 1-1: Manufacturer: syz [ 500.625407][ T9] usb 1-1: SerialNumber: syz [ 500.632179][ T9] usb 1-1: config 0 descriptor?? [ 500.802571][ T8737] netlink: 52 bytes leftover after parsing attributes in process `syz.1.685'. [ 500.804097][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 500.804355][ T9] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 501.822280][ T31] sierra 5-1:255.106: Sierra USB modem converter detected [ 501.842544][ T31] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 501.856633][ T31] usb 5-1: Sierra USB modem converter now attached to ttyUSB1 [ 501.886040][ T31] usb 5-1: USB disconnect, device number 35 [ 501.933254][ T31] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 501.977933][ T31] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 502.005850][ T31] sierra 5-1:255.106: device disconnected [ 502.092168][ T5808] usb 1-1: USB disconnect, device number 34 [ 502.238932][ T9] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 502.598951][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 502.602311][ T9] usb 6-1: config 255 has an invalid interface number: 106 but max is 0 [ 502.602331][ T9] usb 6-1: config 255 has no interface number 0 [ 502.602359][ T9] usb 6-1: config 255 interface 106 altsetting 15 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 502.602381][ T9] usb 6-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 502.602398][ T9] usb 6-1: config 255 interface 106 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 502.602414][ T9] usb 6-1: config 255 interface 106 has no altsetting 0 [ 502.605167][ T9] usb 6-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=9a.82 [ 502.605186][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.605198][ T9] usb 6-1: Product: syz [ 502.605549][ T9] usb 6-1: Manufacturer: syz [ 502.605561][ T9] usb 6-1: SerialNumber: syz [ 502.837223][ T8748] fuse: Bad value for 'rootmode' [ 503.187936][ T9] sierra 6-1:255.106: Sierra USB modem converter detected [ 503.220163][ T9] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 503.251630][ T5819] Bluetooth: hci0: unexpected event for opcode 0x0c58 [ 503.322985][ T9] usb 6-1: USB disconnect, device number 29 [ 503.340189][ T8766] netlink: 'syz.0.691': attribute type 1 has an invalid length. [ 505.264107][ T9] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 505.264645][ T9] sierra 6-1:255.106: device disconnected [ 505.478077][ T8766] 8021q: adding VLAN 0 to HW filter on device bond2 [ 505.551724][ T8677] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 506.045715][ T5955] IPVS: starting estimator thread 0... [ 506.169547][ T8677] usb 1-1: unable to get BOS descriptor or descriptor too short [ 506.170662][ T8677] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 506.170704][ T8677] usb 1-1: can't read configurations, error -71 [ 506.179675][ T8784] IPVS: using max 8 ests per chain, 19200 per kthread [ 506.568913][ T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 506.724125][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 506.736200][ T10] usb 5-1: config 255 has an invalid interface number: 106 but max is 0 [ 506.736221][ T10] usb 5-1: config 255 has no interface number 0 [ 506.736251][ T10] usb 5-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 506.736270][ T10] usb 5-1: config 255 interface 106 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 506.736289][ T10] usb 5-1: config 255 interface 106 has no altsetting 0 [ 506.738322][ T10] usb 5-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=9a.82 [ 506.738341][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.738353][ T10] usb 5-1: Product: syz [ 506.738362][ T10] usb 5-1: Manufacturer: syz [ 506.738370][ T10] usb 5-1: SerialNumber: syz [ 506.739301][ T5813] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 506.902063][ T5813] usb 6-1: Using ep0 maxpacket: 8 [ 506.905010][ T5813] usb 6-1: config 255 has an invalid interface number: 106 but max is 0 [ 506.905333][ T5813] usb 6-1: config 255 has no interface number 0 [ 506.905387][ T5813] usb 6-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 506.905494][ T5813] usb 6-1: config 255 interface 106 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 506.905525][ T5813] usb 6-1: config 255 interface 106 has no altsetting 0 [ 506.978349][ T5813] usb 6-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=9a.82 [ 506.978373][ T5813] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.978390][ T5813] usb 6-1: Product: syz [ 507.010234][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.010394][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.016662][ T5813] usb 6-1: Manufacturer: syz [ 507.016679][ T5813] usb 6-1: SerialNumber: syz [ 507.121007][ T8787] fuse: Bad value for 'rootmode' [ 507.608095][ T8790] fuse: Bad value for 'rootmode' [ 509.126523][ T5813] sierra 6-1:255.106: Sierra USB modem converter detected [ 509.249668][ T5813] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 509.309626][ T5813] usb 6-1: USB disconnect, device number 30 [ 509.317792][ T10] sierra 5-1:255.106: Sierra USB modem converter detected [ 509.364560][ T10] usb 5-1: Sierra USB modem converter now attached to ttyUSB1 [ 509.384634][ T5813] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 509.385465][ T5813] sierra 6-1:255.106: device disconnected [ 509.416799][ T10] usb 5-1: USB disconnect, device number 36 [ 509.478501][ T10] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 509.481688][ T10] sierra 5-1:255.106: device disconnected [ 511.115934][ T8814] kvm: kvm [8811]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1000 [ 511.127314][ T8814] kvm: kvm [8811]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xfffe00000000 [ 511.499424][ T31] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 511.679348][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 512.029610][ T31] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 512.029643][ T31] usb 4-1: config 0 has no interface number 0 [ 512.029697][ T31] usb 4-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 512.029723][ T31] usb 4-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 512.043675][ T31] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 512.043709][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.043731][ T31] usb 4-1: Product: syz [ 512.043747][ T31] usb 4-1: Manufacturer: syz [ 512.043762][ T31] usb 4-1: SerialNumber: syz [ 512.339391][ T31] usb 4-1: config 0 descriptor?? [ 512.351112][ T31] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 512.351300][ T31] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 514.075653][ T31] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 514.228948][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 514.233844][ T31] usb 1-1: config 255 has an invalid interface number: 106 but max is 0 [ 514.233877][ T31] usb 1-1: config 255 has no interface number 0 [ 514.233926][ T31] usb 1-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 514.233948][ T31] usb 1-1: config 255 interface 106 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 514.233965][ T31] usb 1-1: config 255 interface 106 has no altsetting 0 [ 514.236620][ T31] usb 1-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=9a.82 [ 514.236656][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.236669][ T31] usb 1-1: Product: syz [ 514.236677][ T31] usb 1-1: Manufacturer: syz [ 514.236686][ T31] usb 1-1: SerialNumber: syz [ 514.242333][ T8677] usb 4-1: USB disconnect, device number 32 [ 514.820697][ T8838] fuse: Bad value for 'rootmode' [ 514.930078][ T5819] Bluetooth: hci2: unexpected event for opcode 0x0c58 [ 514.969764][ T8848] netlink: 'syz.3.713': attribute type 1 has an invalid length. [ 515.282530][ T8848] 8021q: adding VLAN 0 to HW filter on device bond4 [ 515.314906][ T31] sierra 1-1:255.106: Sierra USB modem converter detected [ 515.341702][ T31] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 515.375872][ T31] usb 1-1: USB disconnect, device number 37 [ 515.401942][ T31] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 515.403060][ T31] sierra 1-1:255.106: device disconnected [ 515.499046][ T5808] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 515.752792][ T5808] usb 4-1: unable to get BOS descriptor or descriptor too short [ 515.755022][ T5808] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 515.755066][ T5808] usb 4-1: can't read configurations, error -71 [ 518.865503][ T8877] netlink: 4 bytes leftover after parsing attributes in process `syz.5.721'. [ 521.208682][ T1249] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 521.728852][ T1249] usb 6-1: Using ep0 maxpacket: 8 [ 521.785196][ T1249] usb 6-1: config 255 has an invalid interface number: 106 but max is 0 [ 521.785231][ T1249] usb 6-1: config 255 has no interface number 0 [ 521.785284][ T1249] usb 6-1: config 255 interface 106 altsetting 15 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 521.785313][ T1249] usb 6-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 521.785343][ T1249] usb 6-1: config 255 interface 106 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 521.785372][ T1249] usb 6-1: config 255 interface 106 has no altsetting 0 [ 521.802940][ T1249] usb 6-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=9a.82 [ 521.802973][ T1249] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.802993][ T1249] usb 6-1: Product: syz [ 521.803007][ T1249] usb 6-1: Manufacturer: syz [ 521.803020][ T1249] usb 6-1: SerialNumber: syz [ 522.057897][ T8889] fuse: Bad value for 'rootmode' [ 522.169123][ T5955] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 522.320500][ T5955] usb 4-1: Using ep0 maxpacket: 32 [ 522.338164][ T5955] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 522.338198][ T5955] usb 4-1: config 0 has no interface number 0 [ 522.338246][ T5955] usb 4-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 522.380779][ T5955] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 522.380808][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.380821][ T5955] usb 4-1: Product: syz [ 522.380830][ T5955] usb 4-1: Manufacturer: syz [ 522.380842][ T5955] usb 4-1: SerialNumber: syz [ 522.428966][ T5955] usb 4-1: config 0 descriptor?? [ 522.453121][ T5955] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 522.453741][ T5955] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 522.560746][ T1249] sierra 6-1:255.106: Sierra USB modem converter detected [ 522.608104][ T1249] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 523.949959][ T1249] usb 6-1: USB disconnect, device number 31 [ 524.227322][ T1249] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 524.256895][ T1249] sierra 6-1:255.106: device disconnected [ 524.591828][ T1249] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 525.578836][ T1249] usb 6-1: Using ep0 maxpacket: 8 [ 525.581018][ T1249] usb 6-1: config 255 has an invalid interface number: 106 but max is 0 [ 525.581038][ T1249] usb 6-1: config 255 has no interface number 0 [ 525.581068][ T1249] usb 6-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 525.581086][ T1249] usb 6-1: config 255 interface 106 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 525.581102][ T1249] usb 6-1: config 255 interface 106 has no altsetting 0 [ 525.584052][ T1249] usb 6-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=9a.82 [ 525.584071][ T1249] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.584083][ T1249] usb 6-1: Product: syz [ 525.584092][ T1249] usb 6-1: Manufacturer: syz [ 525.584101][ T1249] usb 6-1: SerialNumber: syz [ 525.768362][ T1249] usb 6-1: can't set config #255, error -71 [ 525.779053][ T5920] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 525.813874][ T1249] usb 6-1: USB disconnect, device number 32 [ 525.903185][ T5808] usb 4-1: USB disconnect, device number 35 [ 525.949600][ T5920] usb 1-1: device descriptor read/64, error -71 [ 526.548947][ T5920] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 526.635365][ T8926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.734'. [ 526.679504][ T5920] usb 1-1: device descriptor read/64, error -71 [ 526.815452][ T5920] usb usb1-port1: attempt power cycle [ 527.857363][ T5920] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 527.879653][ T5920] usb 1-1: device descriptor read/8, error -71 [ 529.758837][ T1249] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 530.018916][ T1249] usb 6-1: Using ep0 maxpacket: 8 [ 530.021333][ T1249] usb 6-1: config 255 has an invalid interface number: 106 but max is 0 [ 530.021366][ T1249] usb 6-1: config 255 has no interface number 0 [ 530.021418][ T1249] usb 6-1: config 255 interface 106 altsetting 15 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 530.021448][ T1249] usb 6-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 530.021480][ T1249] usb 6-1: config 255 interface 106 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 530.021510][ T1249] usb 6-1: config 255 interface 106 has no altsetting 0 [ 530.024647][ T1249] usb 6-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=9a.82 [ 530.024678][ T1249] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.024700][ T1249] usb 6-1: Product: syz [ 530.024716][ T1249] usb 6-1: Manufacturer: syz [ 530.024732][ T1249] usb 6-1: SerialNumber: syz [ 532.251646][ T8965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.742'. [ 532.802552][ T1249] sierra 6-1:255.106: Sierra USB modem converter detected [ 532.853350][ T1249] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 532.874299][ T1249] usb 6-1: Sierra USB modem converter now attached to ttyUSB1 [ 534.091524][ T1249] usb 6-1: USB disconnect, device number 33 [ 534.323535][ T1249] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 534.390078][ T1249] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 534.392126][ T1249] sierra 6-1:255.106: device disconnected [ 536.448495][ T8986] netlink: 52 bytes leftover after parsing attributes in process `syz.5.749'. [ 538.062476][ T8996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.752'. [ 543.439870][ T1249] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 543.998800][ T1249] usb 6-1: Using ep0 maxpacket: 8 [ 544.029691][ T1249] usb 6-1: config 255 has an invalid interface number: 106 but max is 0 [ 544.029726][ T1249] usb 6-1: config 255 has no interface number 0 [ 544.029796][ T1249] usb 6-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 544.029826][ T1249] usb 6-1: config 255 interface 106 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 544.029854][ T1249] usb 6-1: config 255 interface 106 has no altsetting 0 [ 544.035348][ T1249] usb 6-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=9a.82 [ 544.035384][ T1249] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.035406][ T1249] usb 6-1: Product: syz [ 544.035432][ T1249] usb 6-1: Manufacturer: syz [ 544.035448][ T1249] usb 6-1: SerialNumber: syz [ 544.619773][ T9025] fuse: Bad value for 'rootmode' [ 545.935467][ T1249] sierra 6-1:255.106: Sierra USB modem converter detected [ 545.958989][ T1249] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 545.980027][ T1249] usb 6-1: USB disconnect, device number 34 [ 546.023643][ T1249] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 546.038536][ T1249] sierra 6-1:255.106: device disconnected [ 556.638930][ T5920] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 556.788937][ T5920] usb 6-1: Using ep0 maxpacket: 8 [ 556.793557][ T5920] usb 6-1: config 255 has an invalid interface number: 106 but max is 0 [ 556.793584][ T5920] usb 6-1: config 255 has no interface number 0 [ 556.793614][ T5920] usb 6-1: config 255 interface 106 altsetting 15 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 556.793632][ T5920] usb 6-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 556.793650][ T5920] usb 6-1: config 255 interface 106 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 556.793665][ T5920] usb 6-1: config 255 interface 106 has no altsetting 0 [ 556.796196][ T5920] usb 6-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=9a.82 [ 556.796225][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.796237][ T5920] usb 6-1: Product: syz [ 556.796246][ T5920] usb 6-1: Manufacturer: syz [ 556.796255][ T5920] usb 6-1: SerialNumber: syz [ 556.879228][ T1249] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 556.909027][ T5813] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 557.059118][ T5813] usb 2-1: Using ep0 maxpacket: 8 [ 557.062044][ T5813] usb 2-1: config 255 has an invalid interface number: 106 but max is 0 [ 557.062075][ T5813] usb 2-1: config 255 has no interface number 0 [ 557.062126][ T5813] usb 2-1: config 255 interface 106 altsetting 15 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 557.062156][ T5813] usb 2-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 557.062187][ T5813] usb 2-1: config 255 interface 106 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 557.062215][ T5813] usb 2-1: config 255 interface 106 has no altsetting 0 [ 557.064647][ T5813] usb 2-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=9a.82 [ 557.064675][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.064696][ T5813] usb 2-1: Product: syz [ 557.064711][ T5813] usb 2-1: Manufacturer: syz [ 557.064727][ T5813] usb 2-1: SerialNumber: syz [ 557.078812][ T1249] usb 5-1: Using ep0 maxpacket: 8 [ 557.181613][ T1249] usb 5-1: config 255 has an invalid interface number: 106 but max is 0 [ 557.181646][ T1249] usb 5-1: config 255 has no interface number 0 [ 557.181785][ T1249] usb 5-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 557.181816][ T1249] usb 5-1: config 255 interface 106 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 557.181889][ T1249] usb 5-1: config 255 interface 106 has no altsetting 0 [ 557.190937][ T1249] usb 5-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=9a.82 [ 557.191190][ T1249] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.191212][ T1249] usb 5-1: Product: syz [ 557.191226][ T1249] usb 5-1: Manufacturer: syz [ 557.191240][ T1249] usb 5-1: SerialNumber: syz [ 557.609010][ T10] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 557.653058][ T9072] fuse: Bad value for 'rootmode' [ 557.764206][ T5920] sierra 6-1:255.106: Sierra USB modem converter detected [ 557.789980][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 557.797445][ T5920] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 557.818314][ T10] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 557.818345][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 557.824171][ T10] usb 4-1: config 0 has no interface number 0 [ 557.824231][ T10] usb 4-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 557.872662][ T5920] usb 6-1: Sierra USB modem converter now attached to ttyUSB1 [ 557.893336][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 557.893361][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.895514][ T10] usb 4-1: Product: syz [ 557.895539][ T10] usb 4-1: Manufacturer: syz [ 557.895555][ T10] usb 4-1: SerialNumber: syz [ 557.957824][ T5920] usb 6-1: USB disconnect, device number 35 [ 558.013615][ T5920] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 558.059336][ T5920] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 558.062718][ T5920] sierra 6-1:255.106: device disconnected [ 558.209169][ T10] usb 4-1: config 0 descriptor?? [ 558.287960][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 558.291076][ T10] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 558.307183][ T5813] sierra 2-1:255.106: Sierra USB modem converter detected [ 558.470005][ T5813] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 558.577838][ T5813] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 558.825299][ T1249] sierra 5-1:255.106: Sierra USB modem converter detected [ 558.871424][ T5813] usb 2-1: USB disconnect, device number 30 [ 558.929170][ T1249] usb 5-1: Sierra USB modem converter now attached to ttyUSB2 [ 558.956220][ T5813] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 559.052443][ T5813] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 559.068934][ T5813] sierra 2-1:255.106: device disconnected [ 559.074705][ T1249] usb 5-1: USB disconnect, device number 37 [ 559.124759][ T1249] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 559.125651][ T1249] sierra 5-1:255.106: device disconnected [ 559.269170][ T10] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 559.510058][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 559.512108][ T10] usb 6-1: config 255 has an invalid interface number: 106 but max is 0 [ 559.512138][ T10] usb 6-1: config 255 has no interface number 0 [ 559.512188][ T10] usb 6-1: config 255 interface 106 altsetting 15 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 559.512217][ T10] usb 6-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 559.512241][ T10] usb 6-1: config 255 interface 106 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 559.512258][ T10] usb 6-1: config 255 interface 106 has no altsetting 0 [ 559.515118][ T10] usb 6-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=9a.82 [ 559.515138][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.515151][ T10] usb 6-1: Product: syz [ 559.515160][ T10] usb 6-1: Manufacturer: syz [ 559.515169][ T10] usb 6-1: SerialNumber: syz [ 559.518882][ T5813] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 559.638988][ T5920] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 559.668855][ T5813] usb 2-1: Using ep0 maxpacket: 8 [ 559.678066][ T5813] usb 2-1: config 255 has an invalid interface number: 106 but max is 0 [ 559.678088][ T5813] usb 2-1: config 255 has no interface number 0 [ 559.678123][ T5813] usb 2-1: config 255 interface 106 altsetting 15 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 559.678408][ T5813] usb 2-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 559.678440][ T5813] usb 2-1: config 255 interface 106 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 559.735970][ T5813] usb 2-1: config 255 interface 106 has no altsetting 0 [ 559.748992][ T5813] usb 2-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=9a.82 [ 559.749088][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.749111][ T5813] usb 2-1: Product: syz [ 559.749126][ T5813] usb 2-1: Manufacturer: syz [ 559.749142][ T5813] usb 2-1: SerialNumber: syz [ 559.795184][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 559.798222][ T5920] usb 5-1: config 255 has an invalid interface number: 106 but max is 0 [ 559.798245][ T5920] usb 5-1: config 255 has no interface number 0 [ 559.798278][ T5920] usb 5-1: config 255 interface 106 altsetting 15 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 559.798320][ T5920] usb 5-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 559.798350][ T5920] usb 5-1: config 255 interface 106 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 559.798387][ T5920] usb 5-1: config 255 interface 106 has no altsetting 0 [ 559.803360][ T5920] usb 5-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=9a.82 [ 559.803391][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.803411][ T5920] usb 5-1: Product: syz [ 559.803426][ T5920] usb 5-1: Manufacturer: syz [ 559.803439][ T5920] usb 5-1: SerialNumber: syz [ 559.999889][ T9093] fuse: Bad value for 'rootmode' [ 560.359752][ T9102] fuse: Bad value for 'rootmode' [ 560.508291][ T10] sierra 6-1:255.106: Sierra USB modem converter detected [ 560.913489][ T10] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 560.973686][ T10] usb 6-1: USB disconnect, device number 36 [ 561.054301][ T10] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 561.058101][ T10] sierra 6-1:255.106: device disconnected [ 561.396086][ T6007] usb 4-1: USB disconnect, device number 36 [ 561.501893][ T10] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 561.678906][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 561.688506][ T10] usb 6-1: config 255 has an invalid interface number: 106 but max is 0 [ 561.688531][ T10] usb 6-1: config 255 has no interface number 0 [ 561.690663][ T10] usb 6-1: config 255 interface 106 altsetting 15 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 561.690698][ T10] usb 6-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 561.690727][ T10] usb 6-1: config 255 interface 106 has no altsetting 0 [ 561.723098][ T10] usb 6-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=9a.82 [ 561.724153][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.724177][ T10] usb 6-1: Product: syz [ 561.724191][ T10] usb 6-1: Manufacturer: syz [ 561.724205][ T10] usb 6-1: SerialNumber: syz [ 561.833213][ T5813] sierra 2-1:255.106: Sierra USB modem converter detected [ 561.863347][ T5920] sierra 5-1:255.106: Sierra USB modem converter detected [ 561.882974][ T5920] usb 5-1: Sierra USB modem converter now attached to ttyUSB2 [ 561.904313][ T5920] usb 5-1: Sierra USB modem converter now attached to ttyUSB3 [ 561.966959][ T5920] usb 5-1: USB disconnect, device number 38 [ 561.969771][ T5813] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 562.002372][ T5920] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 562.029807][ T5920] sierra ttyUSB3: Sierra USB modem converter now disconnected from ttyUSB3 [ 562.033716][ T5920] sierra 5-1:255.106: device disconnected [ 562.092512][ T5813] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 563.394409][ T5813] usb 2-1: USB disconnect, device number 31 [ 563.649401][ T5813] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 563.651778][ T10] sierra 6-1:255.106: Sierra USB modem converter detected [ 563.682717][ T5813] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 563.683905][ T5813] sierra 2-1:255.106: device disconnected [ 563.688533][ T10] usb 6-1: Sierra USB modem converter now attached to ttyUSB2 [ 563.731570][ T5819] Bluetooth: hci3: unexpected event for opcode 0x0c58 [ 563.744870][ T10] usb 6-1: USB disconnect, device number 37 [ 563.780360][ T9126] netlink: 'syz.1.784': attribute type 1 has an invalid length. [ 563.828646][ T10] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 563.834954][ T10] sierra 6-1:255.106: device disconnected [ 563.883831][ T9130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.786'. [ 563.897320][ T9126] 8021q: adding VLAN 0 to HW filter on device bond3 [ 564.368873][ T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 564.573983][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 564.575003][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 564.575039][ T10] usb 2-1: can't read configurations, error -71 [ 565.037697][ T5819] Bluetooth: hci5: unexpected event for opcode 0x0c58 [ 565.089578][ T9150] netlink: 'syz.5.792': attribute type 1 has an invalid length. [ 565.109047][ T5920] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 565.187977][ T9150] 8021q: adding VLAN 0 to HW filter on device bond9 [ 565.358823][ T5920] usb 4-1: Using ep0 maxpacket: 32 [ 565.361379][ T5920] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 565.361410][ T5920] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.361432][ T5920] usb 4-1: config 0 has no interface number 0 [ 565.361483][ T5920] usb 4-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 565.364762][ T5920] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 565.364793][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.364815][ T5920] usb 4-1: Product: syz [ 565.364831][ T5920] usb 4-1: Manufacturer: syz [ 565.364847][ T5920] usb 4-1: SerialNumber: syz [ 565.454354][ T5920] usb 4-1: config 0 descriptor?? [ 565.462430][ T5920] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 565.462709][ T5920] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 566.557426][ T9167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.795'. [ 566.572493][ T9168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.797'. [ 568.689710][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.689792][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.731809][ T31] usb 4-1: USB disconnect, device number 37 [ 571.145879][ T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 571.146022][ T5813] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 571.388860][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 571.404262][ T5813] usb 1-1: Using ep0 maxpacket: 8 [ 571.519093][ T5813] usb 1-1: config 255 has an invalid interface number: 106 but max is 0 [ 571.519245][ T5813] usb 1-1: config 255 has no interface number 0 [ 571.519309][ T5813] usb 1-1: config 255 interface 106 altsetting 15 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 571.519338][ T5813] usb 1-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 571.519368][ T5813] usb 1-1: config 255 interface 106 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 571.519397][ T5813] usb 1-1: config 255 interface 106 has no altsetting 0 [ 571.519590][ T10] usb 2-1: config 255 has an invalid interface number: 106 but max is 0 [ 571.519613][ T10] usb 2-1: config 255 has no interface number 0 [ 571.519937][ T10] usb 2-1: config 255 interface 106 altsetting 15 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 571.519969][ T10] usb 2-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 571.520000][ T10] usb 2-1: config 255 interface 106 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 571.520105][ T10] usb 2-1: config 255 interface 106 has no altsetting 0 [ 571.525678][ T10] usb 2-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=9a.82 [ 571.525700][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.525713][ T10] usb 2-1: Product: syz [ 571.525722][ T10] usb 2-1: Manufacturer: syz [ 571.525731][ T10] usb 2-1: SerialNumber: syz [ 571.529572][ T5813] usb 1-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=9a.82 [ 571.529591][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.529603][ T5813] usb 1-1: Product: syz [ 571.529611][ T5813] usb 1-1: Manufacturer: syz [ 571.529620][ T5813] usb 1-1: SerialNumber: syz [ 572.638126][ T9220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.813'. [ 573.670431][ T9224] netlink: 4 bytes leftover after parsing attributes in process `syz.5.812'. [ 575.548172][ T5813] sierra 1-1:255.106: Sierra USB modem converter detected [ 575.565812][ T10] sierra 2-1:255.106: Sierra USB modem converter detected [ 575.589093][ T10] usb 2-1: Sierra USB modem converter now attached to ttyUSB2 [ 575.618352][ T5813] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 575.648413][ T5813] usb 1-1: Sierra USB modem converter now attached to ttyUSB1 [ 575.673134][ T10] usb 2-1: Sierra USB modem converter now attached to ttyUSB3 [ 575.794983][ T10] usb 2-1: USB disconnect, device number 34 [ 575.807982][ T5813] usb 1-1: USB disconnect, device number 42 [ 575.900619][ T10] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 575.924776][ T10] sierra ttyUSB3: Sierra USB modem converter now disconnected from ttyUSB3 [ 575.926964][ T10] sierra 2-1:255.106: device disconnected [ 577.190384][ T5813] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 577.219773][ T5813] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 577.222617][ T5813] sierra 1-1:255.106: device disconnected [ 580.176756][ T5819] Bluetooth: hci5: unexpected event for opcode 0x0c58 [ 580.210010][ T9264] netlink: 'syz.5.825': attribute type 1 has an invalid length. [ 580.991433][ T9264] 8021q: adding VLAN 0 to HW filter on device bond10 [ 584.489474][ T5808] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 585.568663][ T5808] usb 6-1: Using ep0 maxpacket: 8 [ 585.591134][ T5808] usb 6-1: config 255 has an invalid interface number: 106 but max is 0 [ 585.591166][ T5808] usb 6-1: config 255 has no interface number 0 [ 585.591220][ T5808] usb 6-1: config 255 interface 106 altsetting 15 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 585.591251][ T5808] usb 6-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 585.591280][ T5808] usb 6-1: config 255 interface 106 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 585.591309][ T5808] usb 6-1: config 255 interface 106 has no altsetting 0 [ 585.657948][ T5808] usb 6-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=9a.82 [ 585.657985][ T5808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.658007][ T5808] usb 6-1: Product: syz [ 585.658023][ T5808] usb 6-1: Manufacturer: syz [ 585.658039][ T5808] usb 6-1: SerialNumber: syz [ 586.512088][ T9290] fuse: Bad value for 'fd' [ 587.507721][ T5808] sierra 6-1:255.106: Sierra USB modem converter detected [ 587.549174][ T5808] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 587.555698][ T5808] usb 6-1: Sierra USB modem converter now attached to ttyUSB1 [ 587.639149][ T5808] usb 6-1: USB disconnect, device number 38 [ 587.706191][ T5808] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 587.724616][ T5808] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 587.725558][ T5808] sierra 6-1:255.106: device disconnected [ 587.859068][ T5819] Bluetooth: hci5: unexpected event for opcode 0x0c58 [ 587.870383][ T9311] netlink: 'syz.5.838': attribute type 1 has an invalid length. [ 588.034294][ T9311] 8021q: adding VLAN 0 to HW filter on device bond11 [ 588.344596][ T810] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 588.344810][ T5808] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 588.499757][ T810] usb 4-1: Using ep0 maxpacket: 8 [ 588.499924][ T5808] usb 1-1: Using ep0 maxpacket: 32 [ 588.502996][ T810] usb 4-1: config 255 has an invalid interface number: 106 but max is 0 [ 588.503026][ T810] usb 4-1: config 255 has no interface number 0 [ 588.503079][ T810] usb 4-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 588.503112][ T810] usb 4-1: config 255 interface 106 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 588.503149][ T810] usb 4-1: config 255 interface 106 has no altsetting 0 [ 588.508423][ T5808] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 588.508452][ T5808] usb 1-1: config 0 has no interface number 0 [ 588.508560][ T5808] usb 1-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 588.553995][ T5808] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 588.554029][ T5808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.554051][ T5808] usb 1-1: Product: syz [ 588.554066][ T5808] usb 1-1: Manufacturer: syz [ 588.554082][ T5808] usb 1-1: SerialNumber: syz [ 588.561726][ T810] usb 4-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=9a.82 [ 588.561748][ T810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.561763][ T810] usb 4-1: Product: syz [ 588.561772][ T810] usb 4-1: Manufacturer: syz [ 588.561781][ T810] usb 4-1: SerialNumber: syz [ 588.678311][ T5808] usb 1-1: config 0 descriptor?? [ 588.703913][ T5808] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 588.704188][ T5808] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 589.048539][ T9318] fuse: Bad value for 'rootmode' [ 589.143394][ T1249] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 589.288823][ T1249] usb 6-1: Using ep0 maxpacket: 8 [ 589.291461][ T1249] usb 6-1: config 255 has an invalid interface number: 106 but max is 0 [ 589.291496][ T1249] usb 6-1: config 255 has no interface number 0 [ 589.291548][ T1249] usb 6-1: config 255 interface 106 altsetting 15 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 589.291580][ T1249] usb 6-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 589.291610][ T1249] usb 6-1: config 255 interface 106 has no altsetting 0 [ 589.296552][ T1249] usb 6-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=9a.82 [ 589.296585][ T1249] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.296607][ T1249] usb 6-1: Product: syz [ 589.296622][ T1249] usb 6-1: Manufacturer: syz [ 589.296639][ T1249] usb 6-1: SerialNumber: syz [ 589.410716][ T6007] usb 1-1: USB disconnect, device number 43 [ 591.067651][ T9328] fuse: Bad value for 'rootmode' [ 591.336965][ T810] sierra 4-1:255.106: Sierra USB modem converter detected [ 591.382456][ T810] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 591.501723][ T810] usb 4-1: USB disconnect, device number 38 [ 591.639212][ T810] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 591.697462][ T810] sierra 4-1:255.106: device disconnected [ 591.760801][ T1249] sierra 6-1:255.106: Sierra USB modem converter detected [ 591.805431][ T1249] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 591.835034][ T1249] usb 6-1: USB disconnect, device number 39 [ 591.867749][ T1249] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 591.868640][ T1249] sierra 6-1:255.106: device disconnected [ 593.057235][ T9355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.848'. [ 594.751033][ T5819] Bluetooth: hci5: unexpected event for opcode 0x0c58 [ 594.754211][ T9366] netlink: 'syz.5.852': attribute type 1 has an invalid length. [ 594.922226][ T9366] 8021q: adding VLAN 0 to HW filter on device bond12 [ 595.747211][ T5808] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 596.058886][ T5808] usb 6-1: Using ep0 maxpacket: 8 [ 596.061117][ T5808] usb 6-1: config 255 has an invalid interface number: 106 but max is 0 [ 596.061148][ T5808] usb 6-1: config 255 has no interface number 0 [ 596.061200][ T5808] usb 6-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 596.061230][ T5808] usb 6-1: config 255 interface 106 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 596.061256][ T5808] usb 6-1: config 255 interface 106 has no altsetting 0 [ 596.064200][ T5808] usb 6-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=9a.82 [ 596.064227][ T5808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.064240][ T5808] usb 6-1: Product: syz [ 596.064248][ T5808] usb 6-1: Manufacturer: syz [ 596.064257][ T5808] usb 6-1: SerialNumber: syz [ 596.374186][ T9375] fuse: Bad value for 'rootmode' [ 596.624530][ T5808] sierra 6-1:255.106: Sierra USB modem converter detected [ 596.654034][ T5808] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 596.713983][ T5808] usb 6-1: USB disconnect, device number 40 [ 596.784919][ T5808] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 596.785411][ T5808] sierra 6-1:255.106: device disconnected [ 596.849937][ T9384] netlink: 4 bytes leftover after parsing attributes in process `syz.5.857'. [ 597.348809][ T5813] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 597.578942][ T5813] usb 5-1: Using ep0 maxpacket: 32 [ 597.588337][ T5813] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 597.588357][ T5813] usb 5-1: config 0 has no interface number 0 [ 597.611342][ T5813] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 597.611362][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.611375][ T5813] usb 5-1: Product: syz [ 597.611384][ T5813] usb 5-1: Manufacturer: syz [ 597.611393][ T5813] usb 5-1: SerialNumber: syz [ 598.576868][ T5813] usb 5-1: config 0 descriptor?? [ 600.958449][ T5813] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 600.958474][ T5813] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 600.959438][ T5813] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 600.959816][ T5813] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 601.038812][ T810] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 601.059810][ T5813] usb 5-1: USB disconnect, device number 39 [ 601.141769][ T5819] Bluetooth: hci5: unexpected event for opcode 0x0c58 [ 601.146515][ T9411] netlink: 'syz.5.865': attribute type 1 has an invalid length. [ 601.208911][ T810] usb 1-1: Using ep0 maxpacket: 8 [ 601.213226][ T810] usb 1-1: config 255 has an invalid interface number: 106 but max is 0 [ 601.213258][ T810] usb 1-1: config 255 has no interface number 0 [ 601.213309][ T810] usb 1-1: config 255 interface 106 altsetting 15 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 601.213339][ T810] usb 1-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 601.213369][ T810] usb 1-1: config 255 interface 106 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 601.213399][ T810] usb 1-1: config 255 interface 106 has no altsetting 0 [ 601.215707][ T810] usb 1-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=9a.82 [ 601.215726][ T810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.215739][ T810] usb 1-1: Product: syz [ 601.215747][ T810] usb 1-1: Manufacturer: syz [ 601.215755][ T810] usb 1-1: SerialNumber: syz [ 601.366084][ T9411] 8021q: adding VLAN 0 to HW filter on device bond13 [ 601.840387][ T5808] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 602.388843][ T5808] usb 4-1: Using ep0 maxpacket: 8 [ 602.391487][ T5808] usb 4-1: config 255 has an invalid interface number: 106 but max is 0 [ 602.391518][ T5808] usb 4-1: config 255 has no interface number 0 [ 602.391608][ T5808] usb 4-1: config 255 interface 106 altsetting 15 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 602.391628][ T5808] usb 4-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 602.391645][ T5808] usb 4-1: config 255 interface 106 has no altsetting 0 [ 602.396020][ T5808] usb 4-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=9a.82 [ 602.396042][ T5808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.396054][ T5808] usb 4-1: Product: syz [ 602.396063][ T5808] usb 4-1: Manufacturer: syz [ 602.396071][ T5808] usb 4-1: SerialNumber: syz [ 602.471380][ T5955] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 602.618887][ T5955] usb 5-1: Using ep0 maxpacket: 8 [ 602.622177][ T5955] usb 5-1: config 255 has an invalid interface number: 106 but max is 0 [ 602.622208][ T5955] usb 5-1: config 255 has no interface number 0 [ 602.622336][ T5955] usb 5-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 602.622368][ T5955] usb 5-1: config 255 interface 106 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 602.622457][ T5955] usb 5-1: config 255 interface 106 has no altsetting 0 [ 602.627521][ T5955] usb 5-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=9a.82 [ 602.627555][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.627636][ T5955] usb 5-1: Product: syz [ 602.627652][ T5955] usb 5-1: Manufacturer: syz [ 602.627667][ T5955] usb 5-1: SerialNumber: syz [ 602.738059][ T810] sierra 1-1:255.106: Sierra USB modem converter detected [ 602.815928][ T810] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 602.873008][ T9416] fuse: Bad value for 'fd' [ 602.875425][ T810] usb 1-1: Sierra USB modem converter now attached to ttyUSB1 [ 602.961474][ T810] usb 1-1: USB disconnect, device number 44 [ 603.061689][ T9419] fuse: Bad value for 'rootmode' [ 603.174617][ T5808] sierra 4-1:255.106: Sierra USB modem converter detected [ 603.181628][ T810] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 603.256198][ T5808] usb 4-1: Sierra USB modem converter now attached to ttyUSB2 [ 603.272223][ T810] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 603.284209][ T810] sierra 1-1:255.106: device disconnected [ 603.443039][ T5808] usb 4-1: USB disconnect, device number 39 [ 603.512506][ T5955] sierra 5-1:255.106: Sierra USB modem converter detected [ 603.516219][ T5808] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 603.517027][ T5808] sierra 4-1:255.106: device disconnected [ 603.559749][ T5955] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 603.676207][ T5955] usb 5-1: USB disconnect, device number 40 [ 603.764625][ T5955] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 603.765113][ T5955] sierra 5-1:255.106: device disconnected [ 604.812279][ T5813] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 605.808843][ T5813] usb 4-1: Using ep0 maxpacket: 8 [ 605.841332][ T5813] usb 4-1: config 255 has an invalid interface number: 106 but max is 0 [ 605.841366][ T5813] usb 4-1: config 255 has no interface number 0 [ 605.841417][ T5813] usb 4-1: config 255 interface 106 altsetting 15 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 605.841448][ T5813] usb 4-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 605.841479][ T5813] usb 4-1: config 255 interface 106 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 605.841508][ T5813] usb 4-1: config 255 interface 106 has no altsetting 0 [ 605.908716][ T5813] usb 4-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=9a.82 [ 605.908750][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.908773][ T5813] usb 4-1: Product: syz [ 605.908789][ T5813] usb 4-1: Manufacturer: syz [ 605.908805][ T5813] usb 4-1: SerialNumber: syz [ 606.966970][ T5813] sierra 4-1:255.106: Sierra USB modem converter detected [ 606.999845][ T5813] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 607.018635][ T5813] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 607.089069][ T5813] usb 4-1: USB disconnect, device number 40 [ 607.112679][ T5813] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 607.136830][ T5813] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 607.149209][ T5813] sierra 4-1:255.106: device disconnected [ 629.876546][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.876667][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 638.747731][ T5813] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 639.818811][ T5813] usb 4-1: Using ep0 maxpacket: 8 [ 639.839924][ T5813] usb 4-1: config 255 has an invalid interface number: 106 but max is 0 [ 639.839945][ T5813] usb 4-1: config 255 has no interface number 0 [ 639.839975][ T5813] usb 4-1: config 255 interface 106 altsetting 15 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 639.839992][ T5813] usb 4-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 639.840009][ T5813] usb 4-1: config 255 interface 106 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 639.840026][ T5813] usb 4-1: config 255 interface 106 has no altsetting 0 [ 639.847155][ T5813] usb 4-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=9a.82 [ 639.847189][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.847212][ T5813] usb 4-1: Product: syz [ 639.847228][ T5813] usb 4-1: Manufacturer: syz [ 639.847243][ T5813] usb 4-1: SerialNumber: syz [ 642.422155][ T5813] sierra 4-1:255.106: Sierra USB modem converter detected [ 642.449019][ T5813] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 642.476288][ T5813] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 642.541324][ T5813] usb 4-1: USB disconnect, device number 41 [ 642.600660][ T5813] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 642.607050][ T5813] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 642.607617][ T5813] sierra 4-1:255.106: device disconnected [ 650.166918][ T9547] netlink: 52 bytes leftover after parsing attributes in process `syz.3.897'. [ 654.298843][ T5813] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 654.458848][ T5813] usb 6-1: Using ep0 maxpacket: 8 [ 654.461219][ T5813] usb 6-1: config 255 has an invalid interface number: 106 but max is 0 [ 654.461250][ T5813] usb 6-1: config 255 has no interface number 0 [ 654.461304][ T5813] usb 6-1: config 255 interface 106 altsetting 15 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 654.461334][ T5813] usb 6-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 654.461363][ T5813] usb 6-1: config 255 interface 106 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 654.461392][ T5813] usb 6-1: config 255 interface 106 has no altsetting 0 [ 654.464591][ T5813] usb 6-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=9a.82 [ 654.464622][ T5813] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.464644][ T5813] usb 6-1: Product: syz [ 654.464660][ T5813] usb 6-1: Manufacturer: syz [ 654.464675][ T5813] usb 6-1: SerialNumber: syz [ 654.719493][ T5870] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 654.878956][ T5870] usb 1-1: Using ep0 maxpacket: 8 [ 654.882212][ T5870] usb 1-1: config 255 has an invalid interface number: 106 but max is 0 [ 654.882245][ T5870] usb 1-1: config 255 has no interface number 0 [ 654.882300][ T5870] usb 1-1: config 255 interface 106 altsetting 15 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 654.882557][ T5870] usb 1-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 654.882589][ T5870] usb 1-1: config 255 interface 106 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 654.882619][ T5870] usb 1-1: config 255 interface 106 has no altsetting 0 [ 654.886559][ T5870] usb 1-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=9a.82 [ 654.886810][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.886832][ T5870] usb 1-1: Product: syz [ 654.886848][ T5870] usb 1-1: Manufacturer: syz [ 654.886863][ T5870] usb 1-1: SerialNumber: syz [ 655.496802][ T9575] fuse: Bad value for 'fd' [ 656.123607][ T5813] sierra 6-1:255.106: Sierra USB modem converter detected [ 657.163755][ T5813] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 657.246735][ T5813] usb 6-1: Sierra USB modem converter now attached to ttyUSB1 [ 657.811737][ T5813] usb 6-1: USB disconnect, device number 41 [ 657.982388][ T5870] sierra 1-1:255.106: Sierra USB modem converter detected [ 658.003910][ T5813] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 658.010903][ T5870] usb 1-1: Sierra USB modem converter now attached to ttyUSB2 [ 658.047942][ T5813] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 658.064166][ T5870] usb 1-1: Sierra USB modem converter now attached to ttyUSB3 [ 658.064494][ T5813] sierra 6-1:255.106: device disconnected [ 658.166695][ T5870] usb 1-1: USB disconnect, device number 45 [ 658.254318][ T5870] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 658.273171][ T5870] sierra ttyUSB3: Sierra USB modem converter now disconnected from ttyUSB3 [ 658.274093][ T5870] sierra 1-1:255.106: device disconnected [ 660.171316][ T9616] netlink: 4 bytes leftover after parsing attributes in process `syz.5.913'. [ 660.199288][ T810] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 660.265045][ T5870] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 660.838846][ T810] usb 2-1: Using ep0 maxpacket: 8 [ 660.841810][ T810] usb 2-1: config 255 has an invalid interface number: 106 but max is 0 [ 660.841843][ T810] usb 2-1: config 255 has no interface number 0 [ 660.841893][ T810] usb 2-1: config 255 interface 106 altsetting 15 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 660.841917][ T810] usb 2-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 660.841934][ T810] usb 2-1: config 255 interface 106 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 660.841951][ T810] usb 2-1: config 255 interface 106 has no altsetting 0 [ 660.844658][ T810] usb 2-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=9a.82 [ 660.844686][ T810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.844698][ T810] usb 2-1: Product: syz [ 660.844707][ T810] usb 2-1: Manufacturer: syz [ 660.844715][ T810] usb 2-1: SerialNumber: syz [ 660.858828][ T5870] usb 1-1: Using ep0 maxpacket: 8 [ 660.860983][ T5870] usb 1-1: config 255 has an invalid interface number: 106 but max is 0 [ 660.861010][ T5870] usb 1-1: config 255 has no interface number 0 [ 660.861056][ T5870] usb 1-1: config 255 interface 106 altsetting 15 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 660.861084][ T5870] usb 1-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 660.861111][ T5870] usb 1-1: config 255 interface 106 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 660.861137][ T5870] usb 1-1: config 255 interface 106 has no altsetting 0 [ 660.863776][ T5870] usb 1-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=9a.82 [ 660.863803][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.863822][ T5870] usb 1-1: Product: syz [ 660.863836][ T5870] usb 1-1: Manufacturer: syz [ 660.863850][ T5870] usb 1-1: SerialNumber: syz [ 661.331593][ T9614] fuse: Bad value for 'rootmode' [ 662.696214][ T5870] sierra 1-1:255.106: Sierra USB modem converter detected [ 662.730667][ T5955] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 662.744026][ T5870] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 662.878813][ T5955] usb 6-1: Using ep0 maxpacket: 8 [ 662.887758][ T5955] usb 6-1: config 255 has an invalid interface number: 106 but max is 0 [ 662.887792][ T5955] usb 6-1: config 255 has no interface number 0 [ 662.887913][ T5955] usb 6-1: config 255 interface 106 altsetting 15 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 662.887947][ T5955] usb 6-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 662.887978][ T5955] usb 6-1: config 255 interface 106 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 662.888006][ T5955] usb 6-1: config 255 interface 106 has no altsetting 0 [ 662.892332][ T5955] usb 6-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=9a.82 [ 662.892425][ T5955] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.892447][ T5955] usb 6-1: Product: syz [ 662.892463][ T5955] usb 6-1: Manufacturer: syz [ 662.892477][ T5955] usb 6-1: SerialNumber: syz [ 663.050567][ T5870] usb 1-1: Sierra USB modem converter now attached to ttyUSB1 [ 663.428353][ T5870] usb 1-1: USB disconnect, device number 46 [ 663.644155][ T5870] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 663.732574][ T5870] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 663.733553][ T5870] sierra 1-1:255.106: device disconnected [ 663.799250][ T810] sierra 2-1:255.106: Sierra USB modem converter detected [ 665.602841][ T5955] sierra 6-1:255.106: Sierra USB modem converter detected [ 665.619041][ T810] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 665.724851][ T5955] usb 6-1: Sierra USB modem converter now attached to ttyUSB2 [ 665.738137][ T810] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 665.799375][ T5955] usb 6-1: Sierra USB modem converter now attached to ttyUSB3 [ 665.832385][ T5955] usb 6-1: USB disconnect, device number 42 [ 665.832519][ T810] usb 2-1: USB disconnect, device number 35 [ 665.889922][ T810] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 665.895469][ T810] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 665.895941][ T810] sierra 2-1:255.106: device disconnected [ 666.018504][ T5955] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 666.036803][ T5955] sierra ttyUSB3: Sierra USB modem converter now disconnected from ttyUSB3 [ 666.037318][ T5955] sierra 6-1:255.106: device disconnected [ 666.516381][ T9661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.922'. [ 670.940591][ T9741] fuse: root generation should be zero [ 671.056689][ T9752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.957'. [ 671.226978][ T9754] bond3: (slave gretap0): Enslaving as an active interface with an up link [ 671.341566][ T9752] bond3 (unregistering): (slave gretap0): Releasing backup interface [ 671.499927][ T9752] bond3 (unregistering): Released all slaves [ 671.573140][ T9770] Illegal XDP return value 4294967283 on prog (id 52) dev N/A, expect packet loss! [ 671.937711][ T9765] bond3 (unregistering): Released all slaves [ 672.094111][ T9769] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 672.334650][ T9787] af_packet: tpacket_rcv: packet too big, clamped from 48 to 4294967272. macoff=96 [ 672.629092][ T9803] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 676.870435][ T9915] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 677.379374][ T9934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1033'. [ 677.882388][ T9934] team0: Port device team_slave_0 removed [ 678.584189][ T9966] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1048'. [ 678.964785][ T9987] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 680.306708][T10002] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 680.710242][T10020] ======================================================= [ 680.710242][T10020] WARNING: The mand mount option has been deprecated and [ 680.710242][T10020] and is ignored by this kernel. Remove the mand [ 680.710242][T10020] option from the mount to silence this warning. [ 680.710242][T10020] ======================================================= [ 681.310982][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 685.974568][T10140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1123'. [ 686.133799][T10140] team0: Port device team_slave_0 removed [ 686.780902][T10171] process 'syz.4.1138' launched './file1' with NULL argv: empty string added [ 686.969037][T10164] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 686.970593][T10166] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 688.646897][T10225] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1163'. [ 688.768451][T10225] team0: Port device team_slave_0 removed [ 689.058236][T10237] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1167'. [ 690.370742][ T37] audit: type=1326 audit(1774041588.260:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10266 comm="syz.3.1182" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8e5fec799 code=0x0 [ 691.118968][T10270] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 691.119257][T10270] block device autoloading is deprecated and will be removed. [ 691.314311][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.314391][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.940154][T10308] No control pipe specified [ 696.546044][T10378] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 697.978533][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 698.082918][T10397] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 700.149213][T10440] fuse: Bad value for 'fd' [ 703.539300][T10466] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 710.248984][T10454] kexec: Could not allocate control_code_buffer [ 710.501891][T10513] autofs: Bad value for 'fd' [ 710.569429][T10518] kAFS: No cell specified [ 710.927655][T10526] overlayfs: failed to resolve './file0': -2 [ 712.665296][T10552] autofs: Bad value for 'fd' [ 712.923563][T10556] kAFS: No cell specified [ 713.319923][T10568] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 713.319923][T10568] The task syz.3.1300 (10568) triggered the difference, watch for misbehavior. [ 714.349110][T10593] kAFS: No cell specified [ 714.687815][T10603] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 715.996689][T10646] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 716.167665][T10652] afs: Unknown parameter 'dy' [ 716.817271][T10677] bridge1: entered promiscuous mode [ 716.817311][T10677] bridge1: entered allmulticast mode [ 716.847254][T10677] team0: Port device bridge1 added [ 716.869340][T10677] mmap: syz.3.1343 (10677) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 716.890263][T10681] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 718.318869][T10737] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1368'. [ 718.986142][T10767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1380'. [ 719.087116][T10771] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1382'. [ 720.419164][T10794] overlayfs: failed to resolve './file0': -2 [ 720.703363][T10808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1394'. [ 720.880081][T10808] team0: Port device team_slave_0 removed [ 721.038924][T10812] pim6reg1: tun_chr_ioctl cmd 1074812118 [ 721.412253][T10834] overlayfs: failed to resolve './file0': -2 [ 723.366921][T10850] bridge1: entered promiscuous mode [ 723.366950][T10850] bridge1: entered allmulticast mode [ 723.432120][T10850] team0: Port device bridge1 added [ 723.705661][T10862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1417'. [ 723.785497][T10869] overlayfs: failed to resolve './file1/file0': -2 [ 723.997668][T10870] bond5 (unregistering): Released all slaves [ 724.666802][T10899] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.840836][T10905] overlayfs: failed to resolve './file1/file0': -2 [ 725.242492][T10914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1438'. [ 725.345295][T10914] bond3 (unregistering): Released all slaves [ 725.680180][T10926] tmpfs: Unknown parameter 'grpquota_b' [ 725.949352][ T37] audit: type=1326 audit(1774041623.830:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10931 comm="syz.5.1447" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3d7c4c799 code=0x0 [ 726.003159][T10936] overlayfs: failed to resolve './file1/file0': -2 [ 726.073067][T10941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1448'. [ 726.348447][T10949] kernel profiling enabled (shift: 25) [ 726.546161][T10955] tmpfs: Unknown parameter 'grpquota_b' [ 726.822913][T10966] trusted_key: encrypted_key: keylen parameter is missing [ 727.670035][T10988] tmpfs: Unknown parameter 'grpquota_b' [ 728.103308][T11000] fuse: Bad value for 'fd' [ 728.263937][T11002] overlayfs: overlapping lowerdir path [ 728.569352][T11016] tmpfs: Unknown parameter 'grpquota_block_har' [ 729.161210][T11035] overlayfs: overlapping lowerdir path [ 730.233468][T11067] overlayfs: overlapping lowerdir path [ 730.561107][T11074] overlayfs: overlapping lowerdir path [ 731.925687][T11100] overlayfs: overlapping lowerdir path [ 732.979977][T11134] QAT: Invalid ioctl 21532 [ 732.983055][T11134] QAT: Invalid ioctl 21531 [ 733.082949][T11137] overlayfs: overlapping lowerdir path [ 734.581055][T11148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 735.937285][T11184] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 736.901213][T11215] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 737.676581][T11234] overlayfs: missing 'lowerdir' [ 738.801132][T11265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1577'. [ 739.311684][T11281] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 740.133719][T11314] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1600'. [ 740.150772][T11315] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 740.304261][T11314] bond15 (unregistering): Released all slaves [ 740.419423][T11320] fuse: Bad value for 'fd' [ 740.548182][T11322] overlayfs: overlapping lowerdir path [ 740.593218][T11322] overlayfs: overlapping lowerdir path [ 741.901362][T11345] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 742.028681][T11347] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 742.060554][T11349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1613'. [ 742.203797][T11349] bond3 (unregistering): Released all slaves [ 742.733993][ T37] audit: type=1326 audit(1774041640.620:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11371 comm="syz.4.1622" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f723c7bc799 code=0x0 [ 743.685909][T11416] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 743.860341][T11427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1639'. [ 744.657812][T11452] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 745.085670][T11467] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1656'. [ 745.259555][T11473] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 745.282235][T11476] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 746.162190][T11503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1669'. [ 747.220296][T11539] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1683'. [ 748.706376][T11578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1697'. [ 748.887670][T11586] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1698'. [ 749.401773][T11600] overlayfs: missing 'lowerdir' [ 749.559461][T11609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1706'. [ 749.566880][T11611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1709'. [ 749.931626][T11623] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1713'. [ 750.454739][T11639] overlayfs: missing 'lowerdir' [ 750.716623][T11649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1724'. [ 750.868058][T11653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 752.764580][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 752.958902][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.958986][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.032242][T11661] kexec: Could not allocate control_code_buffer [ 754.238563][T11677] overlayfs: missing 'lowerdir' [ 754.291820][T11679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1735'. [ 754.944896][T11698] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 756.237950][T11713] overlay: Unknown parameter '/file0' [ 756.995443][T11731] overlayfs: missing 'lowerdir' [ 757.851426][T11753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1764'. [ 757.880331][T11752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1761'. [ 757.880365][T11752] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1761'. [ 758.139185][T11753] team0: Port device team_slave_0 removed [ 759.060630][T11777] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1773'. [ 759.067427][T11776] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1773'. [ 759.067725][T11776] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1773'. [ 759.067961][T11776] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1773'. [ 759.068254][T11776] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1773'. [ 759.068490][T11776] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1773'. [ 759.572088][T11784] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 759.724544][T11784] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 759.726743][T11784] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 759.736337][T11784] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 759.744721][T11784] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 759.744775][T11784] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 759.745099][T11784] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 759.745766][T11784] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 759.746118][T11784] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 759.746343][T11784] kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 760.156416][T11798] overlay: Unknown parameter '/' [ 760.347371][T11801] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 760.347438][T11801] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 760.431405][T11803] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 760.972547][T11813] __nla_validate_parse: 32 callbacks suppressed [ 760.972570][T11813] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1787'. [ 761.452173][T11825] overlay: Unknown parameter '/' [ 761.647585][T11833] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 761.647650][T11833] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 762.129716][T11846] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1801'. [ 762.433508][T11857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1804'. [ 762.851913][T11865] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 762.851974][T11865] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 763.846733][T11880] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1814'. [ 765.678474][T11916] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1827'. [ 766.655381][T11934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1834'. [ 767.353160][T11950] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1840'. [ 767.385033][T11951] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 768.577912][T11978] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1853'. [ 769.031375][T11988] overlayfs: missing 'workdir' [ 769.075315][T11984] create_pit_timer: 7 callbacks suppressed [ 769.075335][T11984] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 769.165994][T11984] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 769.203938][T11984] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 769.204708][T11984] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 769.204764][T11984] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 769.205139][T11984] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 769.241907][T11984] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 769.242204][T11984] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 769.242331][T11984] kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 769.255786][T11984] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 769.364165][T11997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1860'. [ 770.015065][T12011] overlayfs: missing 'lowerdir' [ 770.137137][T12014] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1867'. [ 770.406974][T12020] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1870'. [ 770.500767][T12023] overlayfs: missing 'workdir' [ 770.650197][T12030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1873'. [ 771.879329][T12044] overlayfs: missing 'lowerdir' [ 772.199759][T12047] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1881'. [ 773.819155][ T37] audit: type=1326 audit(1774041671.700:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12091 comm="syz.3.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8e5fec799 code=0x7ffc0000 [ 773.819595][ T37] audit: type=1326 audit(1774041671.710:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12091 comm="syz.3.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8e5fec799 code=0x7ffc0000 [ 773.823452][ T37] audit: type=1326 audit(1774041671.710:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12091 comm="syz.3.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8e5fec799 code=0x7ffc0000 [ 773.823796][ T37] audit: type=1326 audit(1774041671.710:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12091 comm="syz.3.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fc8e5fec799 code=0x7ffc0000 [ 773.921635][ T37] audit: type=1326 audit(1774041671.710:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12091 comm="syz.3.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8e5fec799 code=0x7ffc0000 [ 773.921692][ T37] audit: type=1326 audit(1774041671.780:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12091 comm="syz.3.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8e5fec799 code=0x7ffc0000 [ 773.926236][ T37] audit: type=1326 audit(1774041671.810:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12091 comm="syz.3.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8e5fec799 code=0x7ffc0000 [ 773.926293][ T37] audit: type=1326 audit(1774041671.810:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12091 comm="syz.3.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc8e5fec799 code=0x7ffc0000 [ 773.929091][ T37] audit: type=1326 audit(1774041671.810:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12091 comm="syz.3.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc8e5fec799 code=0x7ffc0000 [ 774.530546][T12106] fuse: Bad value for 'user_id' [ 774.530570][T12106] fuse: Bad value for 'user_id' [ 775.565180][T12137] fuse: Bad value for 'fd' [ 776.431451][T12164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1926'. [ 779.712303][T12243] fuse: Bad value for 'group_id' [ 779.712325][T12243] fuse: Bad value for 'group_id' [ 779.717123][ T37] audit: type=1326 audit(1774041677.600:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12242 comm="syz.5.1959" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3d7c4c799 code=0x0 [ 780.060094][ T37] audit: type=1326 audit(1774041677.950:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12249 comm="syz.5.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3d7c4c799 code=0x7ffc0000 [ 780.060156][ T37] audit: type=1326 audit(1774041677.950:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12249 comm="syz.5.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3d7c4c799 code=0x7ffc0000 [ 780.062090][ T37] audit: type=1326 audit(1774041677.950:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12249 comm="syz.5.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fe3d7c4c799 code=0x7ffc0000 [ 780.062442][ T37] audit: type=1326 audit(1774041677.950:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12249 comm="syz.5.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3d7c4c799 code=0x7ffc0000 [ 780.705914][T12262] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 780.855046][T12264] bridge1: entered promiscuous mode [ 780.855079][T12264] bridge1: entered allmulticast mode [ 781.116361][T12274] fuse: Bad value for 'group_id' [ 781.116385][T12274] fuse: Bad value for 'group_id' [ 781.125162][ T37] audit: type=1326 audit(1774041679.000:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12273 comm="syz.5.1972" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3d7c4c799 code=0x0 [ 781.279842][T12282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1973'. [ 784.056328][T12335] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 784.687381][T12343] syz.5.1995 uses obsolete (PF_INET,SOCK_PACKET) [ 785.247737][T12347] vcan0: tx address claim with different name [ 785.620644][T12354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2000'. [ 786.877747][T12370] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2007'. [ 786.901492][T12371] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 787.025499][T12373] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2008'. [ 787.025536][T12373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2008'. [ 788.304275][T12398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2015'. [ 788.705742][T12404] fuse: Unknown parameter 'user_i00000000000000000000' [ 788.710577][T12405] fuse: Bad value for 'rootmode' [ 790.933100][T12442] fuse: Unknown parameter 'user_id00000000000000000000' [ 791.065253][T12299] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 791.092171][T12299] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 791.112549][T12299] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 791.150468][T12299] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 791.160169][T12299] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 792.262172][T12454] syzkaller1: entered promiscuous mode [ 792.262201][T12454] syzkaller1: entered allmulticast mode [ 792.836106][T12468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 793.061190][T12471] fuse: Unknown parameter 'user_id00000000000000000000' [ 793.241303][ T5819] Bluetooth: hci1: command tx timeout [ 793.301382][ T4841] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.767226][ T4841] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.146544][ T4841] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.219599][T12443] chnl_net:caif_netlink_parms(): no params data found [ 794.492181][ T4841] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.772207][T12498] fuse: Unknown parameter 'user_id00000000000000000000' [ 795.041549][T12443] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.041787][T12443] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.042040][T12443] bridge_slave_0: entered allmulticast mode [ 795.077256][T12443] bridge_slave_0: entered promiscuous mode [ 795.123860][T12443] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.124080][T12443] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.124289][T12443] bridge_slave_1: entered allmulticast mode [ 795.127233][T12443] bridge_slave_1: entered promiscuous mode [ 795.283624][T12506] warning: `syz.3.2056' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 795.319052][ T5819] Bluetooth: hci1: command tx timeout [ 795.484372][T12512] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 795.667159][T12443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 795.683637][T12443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 795.718374][ T4841] bridge_slave_1: left allmulticast mode [ 795.718405][ T4841] bridge_slave_1: left promiscuous mode [ 795.734490][ T4841] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.770681][ T4841] bridge_slave_0: left allmulticast mode [ 795.770713][ T4841] bridge_slave_0: left promiscuous mode [ 795.772831][ T4841] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.331565][T12524] fuse: Bad value for 'fd' [ 796.862070][T12541] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 797.312754][ T4841] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 797.364987][T12543] fuse: Bad value for 'fd' [ 797.379519][ T4841] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 797.388842][ T5819] Bluetooth: hci1: command tx timeout [ 797.423177][ T4841] bond0 (unregistering): Released all slaves [ 797.457772][ T4841] bond1 (unregistering): Released all slaves [ 797.491923][ T4841] bond2 (unregistering): Released all slaves [ 797.514128][ T4841] bond3 (unregistering): Released all slaves [ 797.537791][ T4841] bond4 (unregistering): Released all slaves [ 797.564425][ T4841] bond5 (unregistering): Released all slaves [ 797.596578][ T4841] bond6 (unregistering): Released all slaves [ 797.615824][ T4841] bond7 (unregistering): Released all slaves [ 797.621112][T12549] vcan0: tx address claim with dest, not broadcast [ 797.641128][ T4841] bond8 (unregistering): Released all slaves [ 797.673624][ T4841] bond9 (unregistering): Released all slaves [ 797.700977][ T4841] bond10 (unregistering): Released all slaves [ 797.759350][ T4841] bond11 (unregistering): Released all slaves [ 797.852832][ T4841] bond12 (unregistering): Released all slaves [ 797.888424][ T4841] bond13 (unregistering): Released all slaves [ 797.930468][ T4841] bond14 (unregistering): Released all slaves [ 797.971201][ T4841] bond15 (unregistering): Released all slaves [ 798.067827][T12561] fuse: Bad value for 'fd' [ 798.196438][T12443] team0: Port device team_slave_0 added [ 798.205177][T12443] team0: Port device team_slave_1 added [ 798.320069][T12443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 798.320089][T12443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.320119][T12443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 798.322585][T12443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 798.322602][T12443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.322633][T12443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 798.425095][T12569] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 798.540869][T12443] hsr_slave_0: entered promiscuous mode [ 798.542439][T12443] hsr_slave_1: entered promiscuous mode [ 798.543569][T12443] debugfs: 'hsr0' already exists in 'hsr' [ 798.543595][T12443] Cannot create hsr debugfs directory [ 799.479119][ T5819] Bluetooth: hci1: command tx timeout [ 799.868868][T12592] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 799.978878][ T4841] hsr_slave_0: left promiscuous mode [ 799.999461][ T4841] hsr_slave_1: left promiscuous mode [ 800.001456][ T4841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 800.001477][ T4841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 800.049660][ T4841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 800.049688][ T4841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 800.110515][ T4841] veth1_macvtap: left promiscuous mode [ 800.110586][ T4841] veth0_macvtap: left promiscuous mode [ 800.110747][ T4841] veth1_vlan: left promiscuous mode [ 800.112643][ T4841] veth0_vlan: left promiscuous mode [ 800.849938][ T4841] team0 (unregistering): Port device team_slave_1 removed [ 800.925908][T12599] fuse: Unknown parameter '0x0000000000000003' [ 802.286543][T12633] fuse: Unknown parameter '0x0000000000000003' [ 802.600491][ T4841] IPVS: stop unused estimator thread 0... [ 803.072808][T12443] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 803.094996][T12443] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 803.154686][T12443] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 803.244695][T12443] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 803.295962][T12667] fuse: Unknown parameter '0x0000000000000003' [ 803.565969][T12443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 803.596173][T12443] 8021q: adding VLAN 0 to HW filter on device team0 [ 803.607357][ T4841] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.607574][ T4841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.622847][ T4841] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.623045][ T4841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 804.085238][T12443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.763682][T12443] veth0_vlan: entered promiscuous mode [ 804.778105][T12443] veth1_vlan: entered promiscuous mode [ 804.860908][T12443] veth0_macvtap: entered promiscuous mode [ 804.868409][T12443] veth1_macvtap: entered promiscuous mode [ 804.923155][T12443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 804.943483][T12443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 804.975557][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.975837][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.975880][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.975918][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.356643][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.356667][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.486240][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.486264][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.676254][T12733] fuse: Bad value for 'rootmode' [ 806.322332][T12749] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2126'. [ 806.322359][T12749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2126'. [ 806.510069][T12760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2131'. [ 806.927647][T12779] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2139'. [ 806.927674][T12779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2139'. [ 807.211161][T12784] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2141'. [ 809.137339][T12851] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2168'. [ 809.245944][T12851] team0: Port device team_slave_0 removed [ 813.197141][T12929] fuse: Unknown parameter 'user_i00000000000000000000' [ 814.195990][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.196071][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.897109][T12968] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 815.082277][T12979] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 815.756106][T12985] fuse: Unknown parameter '0x0000000000000003' [ 815.818188][T12987] fuse: Unknown parameter 'user_id00000000000000000000' [ 816.406819][T13010] fuse: Unknown parameter 'fd0x0000000000000003' [ 816.453690][T13012] fuse: Unknown parameter 'user_id00000000000000000000' [ 816.989391][T13035] fuse: Unknown parameter 'fd0x0000000000000003' [ 818.856231][T13109] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 818.978216][T13106] bridge0: entered promiscuous mode [ 818.978248][T13106] bridge0: entered allmulticast mode [ 821.299655][T13175] vcan0: tx address claim with dest, not broadcast [ 822.066624][T13205] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2311'. [ 822.066652][T13205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2311'. [ 822.746978][T13233] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2324'. [ 822.747004][T13233] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2324'. [ 823.415133][T13248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2331'. [ 823.422727][T13249] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 823.493108][T13248] bond7 (unregistering): Released all slaves [ 824.287882][T13278] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2343'. [ 824.517599][T13290] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2347'. [ 826.965175][T13342] fuse: Unknown parameter '0x0000000000000003' [ 829.391118][T13391] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2391'. [ 831.131676][T13415] fuse: Invalid rootmode [ 831.136739][ T37] audit: type=1326 audit(1774041729.020:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13414 comm="syz.4.2402" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f723c7bc799 code=0x0 [ 834.072466][T13466] fuse: Invalid rootmode [ 834.073950][ T37] audit: type=1326 audit(1774041731.960:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13465 comm="syz.4.2417" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f723c7bc799 code=0x0 [ 834.938053][T13472] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 837.351978][T13493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2429'. [ 837.351995][T13493] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2429'. [ 837.352154][T13493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2429'. [ 837.352163][T13493] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2429'. [ 837.421492][T13495] fuse: Invalid rootmode [ 837.427668][ T37] audit: type=1326 audit(1774041735.310:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13494 comm="syz.4.2430" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f723c7bc799 code=0x0 [ 838.283252][T13501] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2434'. [ 839.862199][T13525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2443'. [ 839.932399][T13525] bond5 (unregistering): Released all slaves [ 840.066719][T13528] fuse: Bad value for 'rootmode' [ 840.068332][ T37] audit: type=1326 audit(1774041737.950:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13527 comm="syz.4.2444" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f723c7bc799 code=0x0 [ 842.213357][T13550] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2455'. [ 875.633511][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.633589][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 913.555306][ T5819] Bluetooth: hci1: command 0x0405 tx timeout [ 937.073666][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.073765][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.513149][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.513229][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.953044][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.953143][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1114.343047][T14088] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1114.346786][T14088] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1114.358005][T14088] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1114.376218][T14088] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1114.379749][T14088] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1114.817916][T14086] chnl_net:caif_netlink_parms(): no params data found [ 1114.981416][T14086] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.981656][T14086] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.981889][T14086] bridge_slave_0: entered allmulticast mode [ 1114.984852][T14086] bridge_slave_0: entered promiscuous mode [ 1115.015959][T14086] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.016208][T14086] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.016467][T14086] bridge_slave_1: entered allmulticast mode [ 1115.041735][T14086] bridge_slave_1: entered promiscuous mode [ 1115.098756][T14086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1115.103533][T14086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1115.178724][T14086] team0: Port device team_slave_0 added [ 1115.182746][T14086] team0: Port device team_slave_1 added [ 1115.247386][T14086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1115.247407][T14086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1115.247619][T14086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1115.270129][T14086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1115.270146][T14086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1115.270173][T14086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1115.348361][T14086] hsr_slave_0: entered promiscuous mode [ 1115.350434][T14086] hsr_slave_1: entered promiscuous mode [ 1115.351469][T14086] debugfs: 'hsr0' already exists in 'hsr' [ 1115.351493][T14086] Cannot create hsr debugfs directory [ 1116.341872][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.431424][T12299] Bluetooth: hci5: command tx timeout [ 1116.625386][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.844661][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.053018][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.451798][ T12] bridge_slave_1: left allmulticast mode [ 1117.451831][ T12] bridge_slave_1: left promiscuous mode [ 1117.456115][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.545284][ T12] bridge_slave_0: left allmulticast mode [ 1117.545307][ T12] bridge_slave_0: left promiscuous mode [ 1117.545482][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.431305][ T12] team0: Port device bridge1 removed [ 1118.508985][T12299] Bluetooth: hci5: command tx timeout [ 1118.524912][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1118.599260][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1118.622572][ T12] bond0 (unregistering): Released all slaves [ 1118.629525][ T12] bond1 (unregistering): Released all slaves [ 1118.645914][ T12] bond2 (unregistering): Released all slaves [ 1118.662313][ T12] bond3 (unregistering): Released all slaves [ 1118.687536][ T12] bond4 (unregistering): Released all slaves [ 1120.248742][ T12] hsr_slave_0: left promiscuous mode [ 1120.288759][ T12] hsr_slave_1: left promiscuous mode [ 1120.289582][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1120.289602][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1120.350424][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1120.350456][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1120.480722][ T12] veth1_macvtap: left promiscuous mode [ 1120.480841][ T12] veth0_macvtap: left promiscuous mode [ 1120.481150][ T12] veth1_vlan: left promiscuous mode [ 1120.481332][ T12] veth0_vlan: left promiscuous mode [ 1120.589688][T12299] Bluetooth: hci5: command tx timeout [ 1121.170443][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1121.397346][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.397427][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.770637][T14086] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1121.817416][T14086] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1121.892432][T14086] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1121.922936][T14086] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1122.133445][T14086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1122.157918][T14086] 8021q: adding VLAN 0 to HW filter on device team0 [ 1122.198162][ T8408] bridge0: port 1(bridge_slave_0) entered blocking state [ 1122.198308][ T8408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1122.214801][ T8408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1122.214894][ T8408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1122.425828][ T12] IPVS: stop unused estimator thread 0... [ 1122.532268][T14086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1122.669585][T12299] Bluetooth: hci5: command tx timeout [ 1122.792880][T14086] veth0_vlan: entered promiscuous mode [ 1122.800069][T14086] veth1_vlan: entered promiscuous mode [ 1122.833971][T14086] veth0_macvtap: entered promiscuous mode [ 1122.837969][T14086] veth1_macvtap: entered promiscuous mode [ 1122.855739][T14086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1122.876588][T14086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1122.894279][ T8408] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.894536][ T8408] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.895353][ T8408] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.895588][ T8408] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.145052][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1123.145074][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1123.203395][T13848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1123.203429][T13848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1124.014118][T14202] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2928'. [ 1124.254029][T14212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2933'. [ 1124.254054][T14212] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1127.380350][T14254] netlink: 'syz.4.2955': attribute type 1 has an invalid length. [ 1127.431562][T14256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2956'. [ 1127.863907][T14266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2961'. [ 1129.002649][T14298] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2977'. [ 1129.346197][T14310] syzkaller0: entered promiscuous mode [ 1129.346216][T14310] syzkaller0: entered allmulticast mode [ 1131.285920][T14335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2996'. [ 1132.885205][T14363] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3011'. [ 1133.718062][T14393] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3026'. [ 1133.935567][T14399] tipc: Started in network mode [ 1133.935595][T14399] tipc: Node identity 2e5cbf701026, cluster identity 4711 [ 1133.935927][T14399] tipc: Enabled bearer , priority 0 [ 1133.936622][T14399] syzkaller0: entered promiscuous mode [ 1133.936638][T14399] syzkaller0: entered allmulticast mode [ 1133.963164][T14399] tipc: Resetting bearer [ 1133.989010][T14398] tipc: Resetting bearer [ 1134.089717][T14398] tipc: Disabling bearer [ 1134.364910][T14405] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3032'. [ 1135.820464][T14424] tipc: Enabled bearer , priority 0 [ 1135.821077][T14424] syzkaller0: entered promiscuous mode [ 1135.821094][T14424] syzkaller0: entered allmulticast mode [ 1135.849127][T14424] tipc: Resetting bearer [ 1135.880339][T14423] tipc: Resetting bearer [ 1136.014627][T14423] tipc: Disabling bearer [ 1136.365476][T14437] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3049'. [ 1140.223647][T14505] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1140.223672][T14505] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1142.473922][T14528] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3096'. [ 1142.837450][T14542] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3103'. [ 1145.314605][T14571] bond_slave_0: entered promiscuous mode [ 1145.314669][T14571] bond_slave_1: entered promiscuous mode [ 1145.315240][T14571] vlan2: entered promiscuous mode [ 1145.315252][T14571] bond0: entered promiscuous mode [ 1182.832874][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.832974][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1200.041564][T14088] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1200.065639][T14088] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1200.081309][T14088] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1200.085404][T14088] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1200.086715][T14088] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1200.654812][T14775] chnl_net:caif_netlink_parms(): no params data found [ 1201.186355][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.276764][T14775] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.276903][T14775] bridge0: port 1(bridge_slave_0) entered disabled state [ 1201.277034][T14775] bridge_slave_0: entered allmulticast mode [ 1201.279757][T14775] bridge_slave_0: entered promiscuous mode [ 1201.283100][T14775] bridge0: port 2(bridge_slave_1) entered blocking state [ 1201.283291][T14775] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.283468][T14775] bridge_slave_1: entered allmulticast mode [ 1201.286060][T14775] bridge_slave_1: entered promiscuous mode [ 1201.347622][T14775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1201.361739][T14775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1201.607252][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.641593][T14775] team0: Port device team_slave_0 added [ 1201.644246][T14775] team0: Port device team_slave_1 added [ 1201.674531][T14775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1201.674547][T14775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1201.674564][T14775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1201.675934][T14775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1201.675946][T14775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1201.675967][T14775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1201.853957][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.926844][T14775] hsr_slave_0: entered promiscuous mode [ 1201.927707][T14775] hsr_slave_1: entered promiscuous mode [ 1202.103225][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1202.188580][T12299] Bluetooth: hci4: command tx timeout [ 1202.646940][ T12] bridge_slave_1: left allmulticast mode [ 1202.646973][ T12] bridge_slave_1: left promiscuous mode [ 1202.647244][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1202.731096][ T12] bridge_slave_0: left allmulticast mode [ 1202.731131][ T12] bridge_slave_0: left promiscuous mode [ 1202.731408][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.680460][ T12] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1203.819400][ T12] team0: Port device bridge1 removed [ 1203.999241][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1204.060016][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1204.102327][ T12] bond0 (unregistering): Released all slaves [ 1204.109471][ T12] bond1 (unregistering): Released all slaves [ 1204.124851][ T12] bond2 (unregistering): Released all slaves [ 1204.140464][ T12] bond3 (unregistering): Released all slaves [ 1204.164385][ T12] bond4 (unregistering): Released all slaves [ 1204.187596][ T12] bond5 (unregistering): Released all slaves [ 1204.207739][ T12] bond6 (unregistering): Released all slaves [ 1204.268791][T12299] Bluetooth: hci4: command tx timeout [ 1205.780979][ T12] hsr_slave_0: left promiscuous mode [ 1205.821735][ T12] hsr_slave_1: left promiscuous mode [ 1205.822900][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1205.822927][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1205.868895][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1205.868936][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1206.086817][ T12] veth1_macvtap: left promiscuous mode [ 1206.086945][ T12] veth0_macvtap: left promiscuous mode [ 1206.087227][ T12] veth1_vlan: left promiscuous mode [ 1206.087427][ T12] veth0_vlan: left promiscuous mode [ 1206.358843][T12299] Bluetooth: hci4: command tx timeout [ 1206.961384][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1207.327398][T14775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1207.362474][T14775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1207.408980][T14775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1207.466389][T14775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1207.613938][T14775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1207.636160][T14775] 8021q: adding VLAN 0 to HW filter on device team0 [ 1207.653813][T13848] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.654069][T13848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1207.682929][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.683046][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1208.022631][T14775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1208.099892][T14775] veth0_vlan: entered promiscuous mode [ 1208.105629][T14775] veth1_vlan: entered promiscuous mode [ 1208.158787][T14775] veth0_macvtap: entered promiscuous mode [ 1208.167680][T14775] veth1_macvtap: entered promiscuous mode [ 1208.220326][ T12] IPVS: stop unused estimator thread 0... [ 1208.254149][T14775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1208.273354][T14775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1208.294120][ T8175] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.294189][ T8175] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.294233][ T8175] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.294297][ T8175] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.429799][T12299] Bluetooth: hci4: command tx timeout [ 1208.564524][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1208.564549][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1208.617791][ T8408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1208.617814][ T8408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1208.801166][T14861] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3218'. [ 1209.947016][T14880] tipc: Started in network mode [ 1209.947037][T14880] tipc: Node identity 9a47464390e7, cluster identity 4711 [ 1209.947180][T14880] tipc: Enabled bearer , priority 0 [ 1210.002266][T14880] tipc: Resetting bearer [ 1210.122241][T14879] tipc: Disabling bearer [ 1210.982605][T14903] tipc: Enabled bearer , priority 0 [ 1211.022210][T14903] tipc: Resetting bearer [ 1211.179432][T14902] tipc: Disabling bearer [ 1212.477748][T14923] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3260'. [ 1212.975471][T14937] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3267'. [ 1212.975491][T14937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3267'. [ 1212.975500][T14937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3267'. [ 1214.007697][T14946] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3271'. [ 1214.575149][T14959] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3278'. [ 1214.575168][T14959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3278'. [ 1214.575177][T14959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3278'. [ 1215.816532][T14975] syzkaller0: entered promiscuous mode [ 1215.816561][T14975] syzkaller0: entered allmulticast mode [ 1216.249605][T14980] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3289'. [ 1218.246152][T14995] netlink: 'syz.3.3296': attribute type 3 has an invalid length. [ 1218.246178][T14995] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3296'. [ 1218.246234][T14995] ------------[ cut here ]------------ [ 1218.246244][T14995] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 1218.246262][T14995] WARNING: net/sched/cls_u32.c:855 at u32_change+0x1d64/0x26d0, CPU#0: syz.3.3296/14995 [ 1218.246315][T14995] Modules linked in: [ 1218.246337][T14995] CPU: 0 UID: 0 PID: 14995 Comm: syz.3.3296 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1218.246365][T14995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1218.246378][T14995] RIP: 0010:u32_change+0x1d73/0x26d0 [ 1218.246415][T14995] Code: 3d c4 14 24 06 01 75 33 e8 7a 40 94 f8 eb 50 e8 73 40 94 f8 48 8d 3d fc 03 48 06 b9 10 00 00 00 4c 89 f6 48 c7 c2 40 9e 50 8c <67> 48 0f b9 3a e9 eb ee ff ff e8 4e 40 94 f8 eb 24 e8 47 40 94 f8 [ 1218.246436][T14995] RSP: 0018:ffffc9000db9efe0 EFLAGS: 00010283 [ 1218.246455][T14995] RAX: ffffffff893036ad RBX: ffff88805d2e7400 RCX: 0000000000000010 [ 1218.246498][T14995] RDX: ffffffff8c509e40 RSI: 0000000000000020 RDI: ffffffff8f783ab0 [ 1218.246516][T14995] RBP: ffffc9000db9f198 R08: 0000000000000000 R09: 0000000000000000 [ 1218.246531][T14995] R10: dffffc0000000000 R11: fffffbfff1ed48b7 R12: ffff88805d2e68e8 [ 1218.246549][T14995] R13: 0000000000000001 R14: 0000000000000020 R15: 0000000000000001 [ 1218.246564][T14995] FS: 00007f812a0866c0(0000) GS:ffff88812633c000(0000) knlGS:0000000000000000 [ 1218.246585][T14995] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1218.246602][T14995] CR2: 0000200000006040 CR3: 000000004d502000 CR4: 00000000003526f0 [ 1218.246624][T14995] Call Trace: [ 1218.246633][T14995] [ 1218.246662][T14995] ? __pfx_u32_change+0x10/0x10 [ 1218.246726][T14995] tc_new_tfilter+0xff8/0x1780 [ 1218.246764][T14995] ? kmem_cache_free+0x185/0x6b0 [ 1218.246815][T14995] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1218.246897][T14995] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1218.246932][T14995] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1218.246970][T14995] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1218.247001][T14995] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1218.247031][T14995] ? ref_tracker_free+0x673/0x820 [ 1218.247060][T14995] ? __copy_skb_header+0xa3/0x4a0 [ 1218.247087][T14995] ? __pfx_ref_tracker_free+0x10/0x10 [ 1218.247114][T14995] ? __skb_clone+0x63/0x7a0 [ 1218.247148][T14995] netlink_rcv_skb+0x232/0x4b0 [ 1218.247181][T14995] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1218.247215][T14995] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1218.247259][T14995] ? netlink_deliver_tap+0x2e/0x1b0 [ 1218.247300][T14995] netlink_unicast+0x831/0x9f0 [ 1218.247339][T14995] ? __pfx_netlink_unicast+0x10/0x10 [ 1218.247370][T14995] ? netlink_sendmsg+0x650/0xb40 [ 1218.247399][T14995] ? skb_put+0x11b/0x210 [ 1218.247439][T14995] netlink_sendmsg+0x813/0xb40 [ 1218.247481][T14995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1218.247522][T14995] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1218.247561][T14995] ____sys_sendmsg+0x94c/0x9c0 [ 1218.247593][T14995] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1218.247627][T14995] ? import_iovec+0x73/0xa0 [ 1218.247666][T14995] ___sys_sendmsg+0x2a5/0x360 [ 1218.247696][T14995] ? __pfx____sys_sendmsg+0x10/0x10 [ 1218.247728][T14995] ? __pfx_futex_wake_mark+0x10/0x10 [ 1218.247786][T14995] ? __fget_files+0x2a/0x420 [ 1218.247815][T14995] ? __fget_files+0x3a6/0x420 [ 1218.247856][T14995] __sys_sendmmsg+0x282/0x4e0 [ 1218.247896][T14995] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1218.247917][T14995] ? do_futex+0x333/0x420 [ 1218.247974][T14995] ? rcu_is_watching+0x15/0xb0 [ 1218.248009][T14995] __x64_sys_sendmmsg+0xa0/0xc0 [ 1218.248036][T14995] do_syscall_64+0x14d/0xf80 [ 1218.248072][T14995] ? trace_irq_disable+0x3b/0x150 [ 1218.248100][T14995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.248124][T14995] ? clear_bhb_loop+0x40/0x90 [ 1218.248154][T14995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.248177][T14995] RIP: 0033:0x7f812be2c799 [ 1218.248199][T14995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1218.248219][T14995] RSP: 002b:00007f812a086028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1218.248244][T14995] RAX: ffffffffffffffda RBX: 00007f812c0a5fa0 RCX: 00007f812be2c799 [ 1218.248261][T14995] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000007 [ 1218.248279][T14995] RBP: 00007f812bec2c99 R08: 0000000000000000 R09: 0000000000000000 [ 1218.248293][T14995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1218.248307][T14995] R13: 00007f812c0a6038 R14: 00007f812c0a5fa0 R15: 00007fffc69b0718 [ 1218.248344][T14995] [ 1218.248356][T14995] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1218.248374][T14995] CPU: 0 UID: 0 PID: 14995 Comm: syz.3.3296 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1218.248405][T14995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1218.248418][T14995] Call Trace: [ 1218.248426][T14995] [ 1218.248435][T14995] vpanic+0x56c/0xa60 [ 1218.248468][T14995] ? __pfx__printk+0x10/0x10 [ 1218.248493][T14995] ? __pfx_vpanic+0x10/0x10 [ 1218.248521][T14995] ? is_bpf_text_address+0x292/0x2b0 [ 1218.248551][T14995] ? is_bpf_text_address+0x26/0x2b0 [ 1218.248591][T14995] panic+0xc5/0xd0 [ 1218.248624][T14995] ? __pfx_panic+0x10/0x10 [ 1218.248674][T14995] __warn+0x315/0x4f0 [ 1218.248706][T14995] ? u32_change+0x1d64/0x26d0 [ 1218.248743][T14995] ? u32_change+0x1d64/0x26d0 [ 1218.248780][T14995] __report_bug+0x29a/0x540 [ 1218.248813][T14995] ? ___sys_sendmsg+0x2a5/0x360 [ 1218.248834][T14995] ? __sys_sendmmsg+0x282/0x4e0 [ 1218.248855][T14995] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 1218.248892][T14995] ? u32_change+0x1d64/0x26d0 [ 1218.248928][T14995] ? __pfx___report_bug+0x10/0x10 [ 1218.248985][T14995] report_bug_entry+0x19a/0x290 [ 1218.249017][T14995] ? u32_change+0x1d73/0x26d0 [ 1218.249047][T14995] ? u32_change+0x1d78/0x26d0 [ 1218.249078][T14995] handle_bug+0xce/0x200 [ 1218.249102][T14995] exc_invalid_op+0x1a/0x50 [ 1218.249126][T14995] asm_exc_invalid_op+0x1a/0x20 [ 1218.249149][T14995] RIP: 0010:u32_change+0x1d73/0x26d0 [ 1218.249184][T14995] Code: 3d c4 14 24 06 01 75 33 e8 7a 40 94 f8 eb 50 e8 73 40 94 f8 48 8d 3d fc 03 48 06 b9 10 00 00 00 4c 89 f6 48 c7 c2 40 9e 50 8c <67> 48 0f b9 3a e9 eb ee ff ff e8 4e 40 94 f8 eb 24 e8 47 40 94 f8 [ 1218.249205][T14995] RSP: 0018:ffffc9000db9efe0 EFLAGS: 00010283 [ 1218.249225][T14995] RAX: ffffffff893036ad RBX: ffff88805d2e7400 RCX: 0000000000000010 [ 1218.249242][T14995] RDX: ffffffff8c509e40 RSI: 0000000000000020 RDI: ffffffff8f783ab0 [ 1218.249258][T14995] RBP: ffffc9000db9f198 R08: 0000000000000000 R09: 0000000000000000 [ 1218.249273][T14995] R10: dffffc0000000000 R11: fffffbfff1ed48b7 R12: ffff88805d2e68e8 [ 1218.249291][T14995] R13: 0000000000000001 R14: 0000000000000020 R15: 0000000000000001 [ 1218.249313][T14995] ? u32_change+0x1d5d/0x26d0 [ 1218.249383][T14995] ? __pfx_u32_change+0x10/0x10 [ 1218.249446][T14995] tc_new_tfilter+0xff8/0x1780 [ 1218.249482][T14995] ? kmem_cache_free+0x185/0x6b0 [ 1218.249528][T14995] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1218.249599][T14995] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1218.249633][T14995] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1218.249669][T14995] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1218.249700][T14995] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1218.249730][T14995] ? ref_tracker_free+0x673/0x820 [ 1218.249758][T14995] ? __copy_skb_header+0xa3/0x4a0 [ 1218.249785][T14995] ? __pfx_ref_tracker_free+0x10/0x10 [ 1218.249812][T14995] ? __skb_clone+0x63/0x7a0 [ 1218.249845][T14995] netlink_rcv_skb+0x232/0x4b0 [ 1218.249886][T14995] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1218.249919][T14995] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1218.249963][T14995] ? netlink_deliver_tap+0x2e/0x1b0 [ 1218.250003][T14995] netlink_unicast+0x831/0x9f0 [ 1218.250040][T14995] ? __pfx_netlink_unicast+0x10/0x10 [ 1218.250070][T14995] ? netlink_sendmsg+0x650/0xb40 [ 1218.250101][T14995] ? skb_put+0x11b/0x210 [ 1218.250137][T14995] netlink_sendmsg+0x813/0xb40 [ 1218.250179][T14995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1218.250220][T14995] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1218.250259][T14995] ____sys_sendmsg+0x94c/0x9c0 [ 1218.250289][T14995] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1218.250323][T14995] ? import_iovec+0x73/0xa0 [ 1218.250362][T14995] ___sys_sendmsg+0x2a5/0x360 [ 1218.250393][T14995] ? __pfx____sys_sendmsg+0x10/0x10 [ 1218.250423][T14995] ? __pfx_futex_wake_mark+0x10/0x10 [ 1218.250481][T14995] ? __fget_files+0x2a/0x420 [ 1218.250509][T14995] ? __fget_files+0x3a6/0x420 [ 1218.250550][T14995] __sys_sendmmsg+0x282/0x4e0 [ 1218.250580][T14995] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1218.250603][T14995] ? do_futex+0x333/0x420 [ 1218.250658][T14995] ? rcu_is_watching+0x15/0xb0 [ 1218.250694][T14995] __x64_sys_sendmmsg+0xa0/0xc0 [ 1218.250719][T14995] do_syscall_64+0x14d/0xf80 [ 1218.250754][T14995] ? trace_irq_disable+0x3b/0x150 [ 1218.250781][T14995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.250805][T14995] ? clear_bhb_loop+0x40/0x90 [ 1218.250835][T14995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.250866][T14995] RIP: 0033:0x7f812be2c799 [ 1218.250888][T14995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1218.250907][T14995] RSP: 002b:00007f812a086028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1218.250930][T14995] RAX: ffffffffffffffda RBX: 00007f812c0a5fa0 RCX: 00007f812be2c799 [ 1218.250947][T14995] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000007 [ 1218.250963][T14995] RBP: 00007f812bec2c99 R08: 0000000000000000 R09: 0000000000000000 [ 1218.250978][T14995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1218.250992][T14995] R13: 00007f812c0a6038 R14: 00007f812c0a5fa0 R15: 00007fffc69b0718 [ 1218.251029][T14995] [ 1218.251559][T14995] Kernel Offset: disabled