last executing test programs: 16.321854284s ago: executing program 3 (id=1508): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x5, [0x10, 0x2, 0x6, 0xa, 0x10, 0xc, 0x9, 0xd, 0x3, 0x9, 0xd, 0x1, 0xc, 0x6, 0x10, 0x10], 0x1, [0x10, 0x3, 0xff, 0x4, 0xacc9, 0xfffd, 0x200, 0x6, 0x3, 0x2, 0x1, 0x5, 0x0, 0x7, 0x4, 0x9], [0x4, 0x6, 0x2, 0x8001, 0x1, 0x8, 0x5, 0x0, 0x1, 0x6d5, 0xfff, 0x7, 0xffff, 0xa, 0x5, 0x2]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 14.85978097s ago: executing program 3 (id=1514): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 14.203793173s ago: executing program 3 (id=1515): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0xe, 0x7, 0x6361, 0x1, 0xfffffffd, 0x6}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0xc4, 0x4, 0x6, 0x2}}]}, @TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008001}, 0x24004880) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 13.605838461s ago: executing program 3 (id=1518): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120) lseek(r4, 0x101, 0x1) getdents(r4, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000001c0)) r5 = userfaultfd(0x801) r6 = epoll_create1(0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x4}) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000662000/0x2000)=nil, 0x2000}, 0x1}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) 11.362660824s ago: executing program 4 (id=1524): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x5, [0x10, 0x2, 0x6, 0xa, 0x10, 0xc, 0x9, 0xd, 0x3, 0x9, 0xd, 0x1, 0xc, 0x6, 0x10, 0x10], 0x1, [0x10, 0x3, 0xff, 0x4, 0xacc9, 0xfffd, 0x200, 0x6, 0x3, 0x2, 0x1, 0x5, 0x0, 0x7, 0x4, 0x9], [0x4, 0x6, 0x2, 0x8001, 0x1, 0x8, 0x5, 0x0, 0x1, 0x6d5, 0xfff, 0x7, 0xffff, 0xa, 0x5, 0x2]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 10.708245195s ago: executing program 4 (id=1526): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) 9.59729277s ago: executing program 4 (id=1528): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000007c0)={0x8000, 0x5, 0x1, {0x2, @pix_mp={0x9, 0x81, 0x31364d59, 0x8, 0xd593b3ba1f0bd427, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80e9, 0x7fffffff}, {0x200, 0x3fe}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0xa}, {0x6, 0x1}], 0x7, 0x0, 0x3, 0x0, 0x5}}}) 9.06640354s ago: executing program 4 (id=1530): openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/pm_trace', 0xa0502, 0x49) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_complete(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040), &(0x7f0000000080)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x2c, 0x107, 0x0, 0x0, {0x2, 0x7c}, [@nested={0x4, 0xfe}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x44e}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x10000) r3 = dup(r2) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003, 0x0, 0x0, r3}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, &(0x7f0000edfff0)={0x0, 0x989680}, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x3) 7.438472945s ago: executing program 4 (id=1534): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r1 = dup(r0) sendmmsg$inet(r1, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)="2256f44aa803588ccf14bcf8fbd3402b67963b4a4400023444fa564b44243bc061254ab38e3b99e97cf45aca78fc7243d5538e0a0cc5deef1793ca8870aabc71e8460cee972fdd2556ca38c56371c2ea2b", 0x51}], 0x1}}], 0x1, 0x400d5) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) 6.815696491s ago: executing program 4 (id=1538): syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="f9", 0x1}], 0x1, 0x0, 0x0, 0x80020}], 0x1, 0x40c0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x240, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x3, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x5) sendfile(r6, r5, &(0x7f00000001c0)=0x1, 0x8) 6.027044415s ago: executing program 3 (id=1540): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000007c0)={0x8000, 0x5, 0x1, {0x2, @pix_mp={0x9, 0x81, 0x31364d59, 0x8, 0xd593b3ba1f0bd427, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80e9, 0x7fffffff}, {0x200, 0x3fe}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0xa}, {0x6, 0x1}], 0x7, 0x0, 0x3, 0x0, 0x5}}}) 5.834029833s ago: executing program 1 (id=1542): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) socket$inet6(0xa, 0xa, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) eventfd2(0x5, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) fsopen(&(0x7f00000003c0)='pipefs\x00', 0x1) r2 = socket$unix(0x1, 0x1, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x473b}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x13f}}, 0x20) socket(0xb, 0x80000, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706006e652043617074557265272030303030303034303030303030303030303030300a20"], 0xb8) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r5, r4, 0x0) 5.62381481s ago: executing program 3 (id=1543): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) dup(r2) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}}, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) close(r4) r5 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x44e880, 0x0) ftruncate(r5, 0x200004) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_emit_ethernet(0x46, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$BLKRAGET(r5, 0x1263, &(0x7f0000000180)) r8 = socket$inet6(0xa, 0x80802, 0x0) sendmmsg$inet6(r8, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) ppoll(&(0x7f0000000140)=[{r8, 0x5}], 0x1, 0x0, 0x0, 0x0) shutdown(r8, 0x0) 5.604006148s ago: executing program 0 (id=1544): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0), 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000016c0)={&(0x7f00000005c0)="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", &(0x7f00000003c0)=""/229, &(0x7f00000002c0)="e5706dc1a88b7e438f2ba2b09d43bc8b95f6b192edc8670030dc4fe064f2b4fbaf3f1e0ecf0d73adf6244d80c9edf845598e8ce1eb2f760e8b8dae5f9f1a23c910a53b5107de8e81cb0d9b45965934980adcd763efa722adffbb934d1d38aa2fb822f0afb6a225303071af5b9043", &(0x7f00000015c0)="64194b214a0483d597c65db708da6ada03628f5846322e49b97f6c9046f74c75536162e9c000f9227246cbfd0149ffc9f2366d4e47a99f3fca66dfa15a5960490e4ec15a1c17baa7824e97152e0488559de60239f91b5205610c056f4c67bac61e41797421c7315853a82f2c2078ec967fb9229c513e8d0deadb9c723bc9f926d1156295bbc4aa113bc3f9a9e3b67fe764b7b5812ff9311a8e455f845be019cba55c54eeb90f4691322c5b54d157bc21bd091c218e785f6c53d044d041b5b6ed6eb289db099f020dc7022f133ee6df30b7b6d9fe7a17e23dc69a", 0x0, r3}, 0x38) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000210001000000000000000000ac1ee100000000002000000000000000403403f438bd9e2800000000000000000000000000000000020000edffffff00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011"], 0xec}}, 0x0) sendmsg$AUDIT_GET(r1, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x4100480}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x10, 0x3e8, 0x10, 0x70bd2d, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x80d1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, 0x0, &(0x7f0000002180)) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1}, @address_request}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000018c0)=ANY=[@ANYBLOB, @ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0x7fffdffff000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) r6 = accept4$alg(r3, 0x0, 0x0, 0x80000) accept(r6, &(0x7f0000001700)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000001900)=0x80) 5.315710611s ago: executing program 2 (id=1545): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="38000000031401"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100"], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x0) write$nci(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="500403"], 0x7) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="1163469003d4166957cc7c2fe84c5849a3a94fd56840876c9b109421381fedea5fa252d62e9c7418336a7997447107c343f1df409a1e130986ed409cc71d38459ca274094820cce499", 0x49}], 0x1) 4.830090227s ago: executing program 0 (id=1546): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x9, 0x6}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3cb, 0x1, 0x5}, {0x2, 0x49a, 0x9, 0x4, 0x6, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8}, 0x8000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) close(r8) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r9, 0x1c}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000480)="03", 0x1}, {&(0x7f0000000340)="dd41dc0a1a1e55cc094c6bad", 0xc}], 0x2}, 0x4) 4.552656902s ago: executing program 1 (id=1547): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000), 0x0) 4.171947869s ago: executing program 2 (id=1548): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r1 = dup(r0) sendmmsg$inet(r1, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)="2256f44aa803588ccf14bcf8fbd3402b67963b4a4400023444fa564b44243bc061254ab38e3b99e97cf45aca78fc7243d5538e0a0cc5deef1793ca8870aabc71e8460cee972fdd2556ca38c56371c2ea2b", 0x51}], 0x1}}], 0x1, 0x400d5) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) 3.634049196s ago: executing program 2 (id=1549): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x82, 0x5, 0x6, 0x0, 0x0, 0x7, 0x0, 0x4b, 0xf7, 0x4, 0x6, 0x0, 0x0, 0x1, 0xb, 0x0, 0xf, 0x8, 0xfd, '\x00', 0x2, 0xb4}) 3.057653163s ago: executing program 1 (id=1550): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000400)=0x4614, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x1}, @sack_perm, @mss={0x2, 0x3}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm, @window={0x3, 0xfffe}, @timestamp], 0x2000000000000133) sendto(r0, &(0x7f0000000000)="cd", 0x1, 0xc0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 2.830774956s ago: executing program 2 (id=1551): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x1410, 0x8, 0x70bd26, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0xdc70cee010f17bf}, 0xc000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000280)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x4, 0x5, 0x4, 0x7f, 0x4230, 0x500000000000000, 0x81, 0x9c1, 0x8001, 0x5, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xdddd1000, 0x80300}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x3) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.593343724s ago: executing program 0 (id=1552): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x5, [0x10, 0x2, 0x6, 0xa, 0x10, 0xc, 0x9, 0xd, 0x3, 0x9, 0xd, 0x1, 0xc, 0x6, 0x10, 0x10], 0x1, [0x10, 0x3, 0xff, 0x4, 0xacc9, 0xfffd, 0x200, 0x6, 0x3, 0x2, 0x1, 0x5, 0x0, 0x7, 0x4, 0x9], [0x4, 0x6, 0x2, 0x8001, 0x1, 0x8, 0x5, 0x0, 0x1, 0x6d5, 0xfff, 0x7, 0xffff, 0xa, 0x5, 0x2]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 2.283936315s ago: executing program 1 (id=1553): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=@delchain={0x3c, 0x65, 0x1, 0x70bd2e, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xc}, {}, {0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x8}}, @TCA_RATE={0x6, 0x5, {0x8, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) 1.366042843s ago: executing program 2 (id=1554): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01010000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4008010) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="140004006e6963766630000000000000000000000800"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2400c890) 1.2284371s ago: executing program 0 (id=1555): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000240)=0x8b, 0x100000500) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) 1.048409173s ago: executing program 1 (id=1556): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0), 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000016c0)={&(0x7f00000005c0)="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", &(0x7f00000003c0)=""/229, &(0x7f00000002c0)="e5706dc1a88b7e438f2ba2b09d43bc8b95f6b192edc8670030dc4fe064f2b4fbaf3f1e0ecf0d73adf6244d80c9edf845598e8ce1eb2f760e8b8dae5f9f1a23c910a53b5107de8e81cb0d9b45965934980adcd763efa722adffbb934d1d38aa2fb822f0afb6a225303071af5b9043", &(0x7f00000015c0)="64194b214a0483d597c65db708da6ada03628f5846322e49b97f6c9046f74c75536162e9c000f9227246cbfd0149ffc9f2366d4e47a99f3fca66dfa15a5960490e4ec15a1c17baa7824e97152e0488559de60239f91b5205610c056f4c67bac61e41797421c7315853a82f2c2078ec967fb9229c513e8d0deadb9c723bc9f926d1156295bbc4aa113bc3f9a9e3b67fe764b7b5812ff9311a8e455f845be019cba55c54eeb90f4691322c5b54d157bc21bd091c218e785f6c53d044d041b5b6ed6eb289db099f020dc7022f133ee6df30b7b6d9fe7a17e23dc69a", 0x0, r3}, 0x38) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000210001000000000000000000ac1ee100000000002000000000000000403403f438bd9e2800000000000000000000000000000000020000edffffff00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011"], 0xec}}, 0x0) sendmsg$AUDIT_GET(r1, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x4100480}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x10, 0x3e8, 0x10, 0x70bd2d, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x80d1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, 0x0, &(0x7f0000002180)) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1}, @address_request}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000018c0)=ANY=[@ANYBLOB, @ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0x7fffdffff000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) r6 = accept4$alg(r3, 0x0, 0x0, 0x80000) accept(r6, &(0x7f0000001700)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000001900)=0x80) 723.749638ms ago: executing program 2 (id=1557): openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0) umount2(0x0, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x10}) 688.026578ms ago: executing program 0 (id=1558): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="38000000031401"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100"], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x0) write$nci(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="500403"], 0x7) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="1163469003d4166957cc7c2fe84c5849a3a94fd56840876c9b109421381fedea5fa252d62e9c7418336a7997447107c343f1df409a1e130986ed409cc71d38459ca274094820cce499", 0x49}], 0x1) 522.222084ms ago: executing program 1 (id=1559): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r1 = dup(r0) sendmmsg$inet(r1, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)="2256f44aa803588ccf14bcf8fbd3402b67963b4a4400023444fa564b44243bc061254ab38e3b99e97cf45aca78fc7243d5538e0a0cc5deef1793ca8870aabc71e8460cee972fdd2556ca38c56371c2ea2b", 0x51}, {0x0}], 0x2}}], 0x1, 0x400d5) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) 0s ago: executing program 0 (id=1560): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.7' (ED25519) to the list of known hosts. [ 163.102713][ T5761] cgroup: Unknown subsys name 'net' [ 163.212512][ T5761] cgroup: Unknown subsys name 'cpuset' [ 163.225945][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 168.726243][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 172.821907][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 172.840636][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 172.860733][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 172.880610][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 172.899640][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 172.902271][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 172.908500][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 172.922838][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 172.935252][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 172.945970][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 173.002099][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 173.024160][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 173.040949][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 173.055247][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 173.074905][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 173.120132][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 173.156017][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 173.156300][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 173.169801][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 173.184408][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 173.192892][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 173.203624][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 173.203946][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 173.236802][ T5783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 173.248427][ T5783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.377627][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 174.534946][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 174.602344][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 174.886730][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 175.009669][ T5077] Bluetooth: hci1: command tx timeout [ 175.010215][ T5783] Bluetooth: hci0: command tx timeout [ 175.043919][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 175.170906][ T5783] Bluetooth: hci2: command tx timeout [ 175.249435][ T5783] Bluetooth: hci3: command tx timeout [ 175.329429][ T5783] Bluetooth: hci4: command tx timeout [ 175.512105][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.519855][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.542403][ T5785] bridge_slave_0: entered allmulticast mode [ 175.555674][ T5785] bridge_slave_0: entered promiscuous mode [ 175.606119][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.614247][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.625855][ T5785] bridge_slave_1: entered allmulticast mode [ 175.635516][ T5785] bridge_slave_1: entered promiscuous mode [ 175.681686][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.689651][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.698410][ T5789] bridge_slave_0: entered allmulticast mode [ 175.708797][ T5789] bridge_slave_0: entered promiscuous mode [ 175.778083][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.785632][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.793424][ T5789] bridge_slave_1: entered allmulticast mode [ 175.801711][ T5789] bridge_slave_1: entered promiscuous mode [ 175.856266][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.863766][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.872072][ T5781] bridge_slave_0: entered allmulticast mode [ 175.880811][ T5781] bridge_slave_0: entered promiscuous mode [ 175.943280][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.975388][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.982944][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.990881][ T5781] bridge_slave_1: entered allmulticast mode [ 175.998958][ T5781] bridge_slave_1: entered promiscuous mode [ 176.060624][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.070335][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.077776][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.085529][ T5792] bridge_slave_0: entered allmulticast mode [ 176.094912][ T5792] bridge_slave_0: entered promiscuous mode [ 176.125783][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.133397][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.141635][ T5794] bridge_slave_0: entered allmulticast mode [ 176.150113][ T5794] bridge_slave_0: entered promiscuous mode [ 176.167978][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.201543][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.209589][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.217219][ T5792] bridge_slave_1: entered allmulticast mode [ 176.225795][ T5792] bridge_slave_1: entered promiscuous mode [ 176.277411][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.285121][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.293085][ T5794] bridge_slave_1: entered allmulticast mode [ 176.302459][ T5794] bridge_slave_1: entered promiscuous mode [ 176.320415][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.387758][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.450644][ T5785] team0: Port device team_slave_0 added [ 176.464468][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.480995][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.542392][ T5785] team0: Port device team_slave_1 added [ 176.556585][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.674455][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.693273][ T5789] team0: Port device team_slave_0 added [ 176.778812][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.794418][ T5789] team0: Port device team_slave_1 added [ 176.848139][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.855380][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.881540][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.900321][ T5781] team0: Port device team_slave_0 added [ 176.956736][ T5792] team0: Port device team_slave_0 added [ 176.971846][ T5794] team0: Port device team_slave_0 added [ 176.980536][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.987624][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.014124][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.032668][ T5781] team0: Port device team_slave_1 added [ 177.066487][ T5792] team0: Port device team_slave_1 added [ 177.074710][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.081951][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.108252][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.111234][ T5783] Bluetooth: hci1: command tx timeout [ 177.124430][ T5783] Bluetooth: hci0: command tx timeout [ 177.136076][ T5794] team0: Port device team_slave_1 added [ 177.183110][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.190685][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.216973][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.249337][ T5077] Bluetooth: hci2: command tx timeout [ 177.332068][ T5077] Bluetooth: hci3: command tx timeout [ 177.375610][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.382819][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.409285][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.409489][ T5077] Bluetooth: hci4: command tx timeout [ 177.426551][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.433767][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.460706][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.474704][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.481993][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.508255][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.525239][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.532447][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.558736][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.613539][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.620728][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.647040][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.674837][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.682119][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.708357][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.842835][ T5785] hsr_slave_0: entered promiscuous mode [ 177.851592][ T5785] hsr_slave_1: entered promiscuous mode [ 177.923011][ T5789] hsr_slave_0: entered promiscuous mode [ 177.931722][ T5789] hsr_slave_1: entered promiscuous mode [ 177.939064][ T5789] debugfs: 'hsr0' already exists in 'hsr' [ 177.945238][ T5789] Cannot create hsr debugfs directory [ 178.141982][ T5794] hsr_slave_0: entered promiscuous mode [ 178.151857][ T5794] hsr_slave_1: entered promiscuous mode [ 178.159895][ T5794] debugfs: 'hsr0' already exists in 'hsr' [ 178.166234][ T5794] Cannot create hsr debugfs directory [ 178.206750][ T5781] hsr_slave_0: entered promiscuous mode [ 178.215312][ T5781] hsr_slave_1: entered promiscuous mode [ 178.223450][ T5781] debugfs: 'hsr0' already exists in 'hsr' [ 178.229426][ T5781] Cannot create hsr debugfs directory [ 178.262120][ T5792] hsr_slave_0: entered promiscuous mode [ 178.271121][ T5792] hsr_slave_1: entered promiscuous mode [ 178.278805][ T5792] debugfs: 'hsr0' already exists in 'hsr' [ 178.284840][ T5792] Cannot create hsr debugfs directory [ 179.169585][ T5077] Bluetooth: hci0: command tx timeout [ 179.175238][ T5783] Bluetooth: hci1: command tx timeout [ 179.329746][ T5783] Bluetooth: hci2: command tx timeout [ 179.419333][ T5783] Bluetooth: hci3: command tx timeout [ 179.489460][ T5783] Bluetooth: hci4: command tx timeout [ 179.501947][ T5785] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 179.537899][ T5785] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 179.568588][ T5785] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 179.587110][ T5785] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 179.699698][ T5789] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 179.728291][ T5789] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 179.769032][ T5789] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 179.804886][ T5789] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 179.933534][ T5794] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 179.961560][ T5794] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 179.985243][ T5794] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 180.004672][ T5794] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 180.230925][ T5792] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 180.256947][ T5792] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 180.300796][ T5792] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 180.321578][ T5792] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 180.641746][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 180.696123][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.704140][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 180.726100][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 180.775738][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 180.927322][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.972338][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.979980][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.082820][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.090410][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.174441][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.250235][ T5783] Bluetooth: hci1: command tx timeout [ 181.251228][ T5077] Bluetooth: hci0: command tx timeout [ 181.280829][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.380830][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.409446][ T5077] Bluetooth: hci2: command tx timeout [ 181.463943][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.471422][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.490822][ T5077] Bluetooth: hci3: command tx timeout [ 181.545968][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.569761][ T5077] Bluetooth: hci4: command tx timeout [ 181.581043][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.640424][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.647879][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.687333][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.694849][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.824106][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.831630][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.888814][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.047381][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.054815][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.149454][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.156915][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.536884][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.584556][ T5794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.747256][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.855026][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.862573][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.922085][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.994219][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.001725][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.417856][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.878374][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.043221][ T5789] veth0_vlan: entered promiscuous mode [ 184.177114][ T5789] veth1_vlan: entered promiscuous mode [ 184.297922][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.579867][ T5794] veth0_vlan: entered promiscuous mode [ 184.592995][ T5789] veth0_macvtap: entered promiscuous mode [ 184.670517][ T5789] veth1_macvtap: entered promiscuous mode [ 184.708086][ T5785] veth0_vlan: entered promiscuous mode [ 184.776793][ T5785] veth1_vlan: entered promiscuous mode [ 184.794935][ T5794] veth1_vlan: entered promiscuous mode [ 184.918957][ T5792] veth0_vlan: entered promiscuous mode [ 184.955622][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.976552][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.031930][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.081309][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.104924][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.115531][ T5794] veth0_macvtap: entered promiscuous mode [ 185.133221][ T78] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.147007][ T5792] veth1_vlan: entered promiscuous mode [ 185.200841][ T78] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.233163][ T5794] veth1_macvtap: entered promiscuous mode [ 185.395117][ T5785] veth0_macvtap: entered promiscuous mode [ 185.469001][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.492051][ T5785] veth1_macvtap: entered promiscuous mode [ 185.567710][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.586599][ T5792] veth0_macvtap: entered promiscuous mode [ 185.722317][ T78] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.762329][ T5792] veth1_macvtap: entered promiscuous mode [ 185.782803][ T78] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.839822][ T78] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.876790][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.931443][ T5781] veth0_vlan: entered promiscuous mode [ 185.940503][ T78] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.974625][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.057832][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.097359][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.129067][ T5781] veth1_vlan: entered promiscuous mode [ 186.173895][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.186445][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.280084][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.305151][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.470705][ T5874] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.484598][ T5874] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.521839][ T5874] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.598012][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.756305][ T5781] veth0_macvtap: entered promiscuous mode [ 186.840811][ T5781] veth1_macvtap: entered promiscuous mode [ 187.022712][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.110815][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.194971][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.241000][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.321896][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.357513][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.358803][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.367301][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.579569][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.587571][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.055014][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.063175][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.111465][ T5789] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 191.262223][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.274033][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.820687][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.828695][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.989545][ T5838] IPVS: starting estimator thread 0... [ 192.003856][ T5958] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 192.089500][ T5965] IPVS: using max 240 ests per chain, 12000 per kthread [ 192.156100][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.164290][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.683602][ T5915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.694291][ T5915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.126928][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.135589][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.424921][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.433251][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.206082][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.214248][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.634273][ T5998] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2'. [ 195.862189][ T6018] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18'. [ 199.179864][ T6075] netlink: 'syz.4.34': attribute type 1 has an invalid length. [ 199.187700][ T6075] netlink: 224 bytes leftover after parsing attributes in process `syz.4.34'. [ 199.665151][ T6079] syzkaller0: entered promiscuous mode [ 199.671876][ T6079] syzkaller0: entered allmulticast mode [ 199.811578][ T6079] tipc: Started in network mode [ 199.816827][ T6079] tipc: Node identity ea8fbac8bca, cluster identity 4711 [ 199.833481][ T6079] tipc: Enabled bearer , priority 0 [ 199.942688][ T6078] tipc: Resetting bearer [ 200.085873][ T6078] tipc: Disabling bearer [ 200.705903][ T6100] Zero length message leads to an empty skb [ 200.789919][ T6100] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 200.824328][ T6100] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 202.285866][ T6125] syz.4.51: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 202.301803][ T6125] CPU: 0 UID: 0 PID: 6125 Comm: syz.4.51 Not tainted syzkaller #0 PREEMPT(voluntary) [ 202.301941][ T6125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 202.302037][ T6125] Call Trace: [ 202.302088][ T6125] [ 202.302136][ T6125] __dump_stack+0x26/0x30 [ 202.302314][ T6125] dump_stack_lvl+0x14c/0x1c0 [ 202.302472][ T6125] dump_stack+0x1e/0x25 [ 202.302612][ T6125] warn_alloc+0x46f/0x6a0 [ 202.302794][ T6125] ? kmsan_get_metadata+0xf1/0x160 [ 202.302998][ T6125] __vmalloc_node_range_noprof+0x142/0x2d80 [ 202.303173][ T6125] ? should_fail_ex+0x45/0x8c0 [ 202.303309][ T6125] ? stack_depot_save_flags+0x610/0x790 [ 202.303452][ T6125] ? kmsan_get_metadata+0xf1/0x160 [ 202.303637][ T6125] ? kmsan_get_metadata+0xf1/0x160 [ 202.303815][ T6125] ? kmsan_get_metadata+0xf1/0x160 [ 202.304002][ T6125] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 202.304197][ T6125] ? __kmalloc_cache_noprof+0x977/0x1710 [ 202.304337][ T6125] ? kmsan_get_metadata+0xf1/0x160 [ 202.304528][ T6125] vmalloc_user_noprof+0xce/0x140 [ 202.304676][ T6125] ? xskq_create+0x11d/0x290 [ 202.304848][ T6125] xskq_create+0x11d/0x290 [ 202.305027][ T6125] xsk_init_queue+0xff/0x1d0 [ 202.305193][ T6125] xsk_setsockopt+0x7f6/0xfe0 [ 202.305346][ T6125] ? __pfx_xsk_setsockopt+0x10/0x10 [ 202.305514][ T6125] ? __pfx_xsk_setsockopt+0x10/0x10 [ 202.305675][ T6125] __sys_setsockopt+0x43e/0x580 [ 202.305879][ T6125] __x64_sys_setsockopt+0xf4/0x1a0 [ 202.306083][ T6125] x64_sys_call+0x28e3/0x3e70 [ 202.306249][ T6125] do_syscall_64+0xc9/0xf80 [ 202.306400][ T6125] ? clear_bhb_loop+0x40/0x90 [ 202.306540][ T6125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.306687][ T6125] RIP: 0033:0x7fdf4cd9aeb9 [ 202.306797][ T6125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.306908][ T6125] RSP: 002b:00007fdf4dcb1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 202.307038][ T6125] RAX: ffffffffffffffda RBX: 00007fdf4d015fa0 RCX: 00007fdf4cd9aeb9 [ 202.307133][ T6125] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 202.307212][ T6125] RBP: 00007fdf4ce08c1f R08: 0000000000000004 R09: 0000000000000000 [ 202.307294][ T6125] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.307377][ T6125] R13: 00007fdf4d016038 R14: 00007fdf4d015fa0 R15: 00007ffd41898a58 [ 202.307506][ T6125] [ 202.307557][ T6125] Mem-Info: [ 202.571168][ T6125] active_anon:6156 inactive_anon:0 isolated_anon:0 [ 202.571168][ T6125] active_file:3413 inactive_file:39919 isolated_file:0 [ 202.571168][ T6125] unevictable:768 dirty:66 writeback:8 [ 202.571168][ T6125] slab_reclaimable:4924 slab_unreclaimable:19900 [ 202.571168][ T6125] mapped:29556 shmem:1356 pagetables:1460 [ 202.571168][ T6125] sec_pagetables:0 bounce:0 [ 202.571168][ T6125] kernel_misc_reclaimable:0 [ 202.571168][ T6125] free:373306 free_pcp:9594 free_cma:0 [ 202.620259][ T6125] Node 0 active_anon:24624kB inactive_anon:0kB active_file:13652kB inactive_file:159468kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118224kB dirty:264kB writeback:32kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5040kB pagetables:5508kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 202.656243][ T6125] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16kB pagetables:332kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 202.687791][ T6125] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 202.720561][ T6125] lowmem_reserve[]: 0 928 1241 1241 1241 [ 202.726693][ T6125] Node 0 DMA32 free:570476kB boost:0kB min:36872kB low:46088kB high:55304kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1600kB inactive_anon:0kB active_file:9988kB inactive_file:75200kB unevictable:0kB writepending:100kB zspages:0kB present:3129332kB managed:951148kB mlocked:0kB bounce:0kB free_pcp:30472kB local_pcp:10736kB free_cma:0kB [ 202.769383][ T6125] lowmem_reserve[]: 0 0 312 312 312 [ 202.775081][ T6125] Node 0 Normal free:20124kB boost:0kB min:13004kB low:16252kB high:19500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23008kB inactive_anon:0kB active_file:3664kB inactive_file:84268kB unevictable:1536kB writepending:196kB zspages:0kB present:1048580kB managed:320476kB mlocked:0kB bounce:0kB free_pcp:7828kB local_pcp:3632kB free_cma:0kB [ 202.816296][ T6125] lowmem_reserve[]: 0 0 0 0 0 [ 202.822687][ T6125] Node 1 Normal free:898528kB boost:0kB min:40064kB low:50080kB high:60096kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:987120kB mlocked:0kB bounce:0kB free_pcp:96kB local_pcp:0kB free_cma:0kB [ 202.854827][ T6125] lowmem_reserve[]: 0 0 0 0 0 [ 202.860229][ T6125] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 202.873277][ T6125] Node 0 DMA32: 45*4kB (UM) 11*8kB (UM) 6*16kB (UME) 2*32kB (U) 1*64kB (M) 3*128kB (UME) 5*256kB (UME) 4*512kB (UM) 3*1024kB (ME) 5*2048kB (UME) 135*4096kB (M) = 570476kB [ 202.892093][ T6125] Node 0 Normal: 1*4kB (U) 3*8kB (E) 3*16kB (UE) 7*32kB (UME) 3*64kB (ME) 3*128kB (ME) 5*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (ME) 2*4096kB (M) = 20076kB [ 202.914948][ T6125] Node 1 Normal: 4*4kB (UME) 8*8kB (UME) 15*16kB (UE) 17*32kB (UME) 14*64kB (UME) 10*128kB (UME) 8*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (ME) 216*4096kB (M) = 898528kB [ 202.942603][ T6125] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 202.952610][ T6125] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 202.962305][ T6125] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 202.972214][ T6125] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 202.982019][ T6125] 44684 total pagecache pages [ 202.986834][ T6125] 0 pages in swap cache [ 202.991345][ T6125] Free swap = 124996kB [ 202.998103][ T6125] Total swap = 124996kB [ 203.003599][ T6125] 2097051 pages RAM [ 203.007549][ T6125] 0 pages HighMem/MovableOnly [ 203.012661][ T6125] 1531341 pages reserved [ 203.017065][ T6125] 0 pages cma reserved [ 204.062331][ T6145] netlink: 32 bytes leftover after parsing attributes in process `syz.4.56'. [ 204.394030][ T6149] syzkaller0: entered promiscuous mode [ 204.399962][ T6149] syzkaller0: entered allmulticast mode [ 204.773031][ T6153] netlink: 'syz.1.62': attribute type 1 has an invalid length. [ 204.781163][ T6153] netlink: 'syz.1.62': attribute type 2 has an invalid length. [ 204.812838][ T6153] netlink: 'syz.1.62': attribute type 1 has an invalid length. [ 204.820828][ T6153] netlink: 'syz.1.62': attribute type 2 has an invalid length. [ 205.079803][ T6157] sctp: [Deprecated]: syz.1.62 (pid 6157) Use of int in max_burst socket option deprecated. [ 205.079803][ T6157] Use struct sctp_assoc_value instead [ 205.529956][ T6164] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 205.656719][ T6164] netlink: 28 bytes leftover after parsing attributes in process `syz.4.66'. [ 205.671750][ T6164] netlink: 28 bytes leftover after parsing attributes in process `syz.4.66'. [ 205.804226][ T6164] dummy0: entered promiscuous mode [ 205.849726][ T6164] team0: entered promiscuous mode [ 205.854981][ T6164] team_slave_0: entered promiscuous mode [ 205.870319][ T6164] team_slave_1: entered promiscuous mode [ 205.960793][ T6169] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 206.034269][ T6169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.68'. [ 206.075978][ T6169] bridge_slave_1: left allmulticast mode [ 206.081936][ T6169] bridge_slave_1: left promiscuous mode [ 206.088702][ T6169] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.146407][ T6169] bridge_slave_0: left allmulticast mode [ 206.152685][ T6169] bridge_slave_0: left promiscuous mode [ 206.159984][ T6169] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.543366][ T6205] nbd0: detected capacity change from 0 to 127 [ 208.617320][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.80'. [ 209.124960][ T5077] block nbd0: Receive control failed (result -104) [ 210.107041][ T6222] syz.4.85 uses obsolete (PF_INET,SOCK_PACKET) [ 210.221103][ T6220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.85'. [ 210.874939][ T6233] tipc: Enabling of bearer rejected, failed to enable media [ 211.254743][ T5840] IPVS: starting estimator thread 0... [ 211.282220][ T6244] IPVS: fo: FWM 3 0x00000003 - no destination available [ 211.297994][ C1] IPVS: fo: FWM 3 0x00000003 - no destination available [ 211.379463][ T6246] IPVS: using max 240 ests per chain, 12000 per kthread [ 211.417547][ T6248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.92'. [ 211.456871][ T6248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.92'. [ 212.516548][ T6263] syzkaller0: entered promiscuous mode [ 212.527740][ T6263] syzkaller0: entered allmulticast mode [ 213.244639][ T6277] tipc: Enabling of bearer rejected, failed to enable media [ 214.681618][ T6303] netlink: 'syz.4.111': attribute type 10 has an invalid length. [ 214.704839][ T6307] netlink: 104 bytes leftover after parsing attributes in process `syz.3.114'. [ 214.748954][ T6303] team0: Device macvtap0 is up. Set it down before adding it as a team port [ 215.041848][ T6307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.114'. [ 215.156603][ T6311] syzkaller0: entered promiscuous mode [ 215.166066][ T6311] syzkaller0: entered allmulticast mode [ 215.968096][ T6323] syzkaller0: entered promiscuous mode [ 215.974171][ T6323] syzkaller0: entered allmulticast mode [ 220.231528][ T6411] netlink: 32 bytes leftover after parsing attributes in process `syz.0.145'. [ 220.368706][ T6415] tipc: Enabled bearer , priority 0 [ 220.378881][ T6415] syzkaller0: entered promiscuous mode [ 220.386229][ T6415] syzkaller0: entered allmulticast mode [ 220.501129][ T6415] netlink: 44 bytes leftover after parsing attributes in process `syz.2.147'. [ 220.575340][ T6415] tipc: Resetting bearer [ 220.595317][ T6419] syzkaller0: entered promiscuous mode [ 220.601233][ T6419] syzkaller0: entered allmulticast mode [ 220.687568][ T6409] tipc: Resetting bearer [ 220.743536][ T6409] tipc: Disabling bearer [ 220.928841][ T6427] netlink: 'syz.4.151': attribute type 1 has an invalid length. [ 220.937050][ T6427] netlink: 236 bytes leftover after parsing attributes in process `syz.4.151'. [ 221.646576][ T6436] syzkaller0: entered promiscuous mode [ 221.652535][ T6436] syzkaller0: entered allmulticast mode [ 222.278282][ T6458] netlink: 28 bytes leftover after parsing attributes in process `syz.4.160'. [ 222.795144][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.164'. [ 222.968115][ T6467] syzkaller0: entered promiscuous mode [ 222.974179][ T6467] syzkaller0: entered allmulticast mode [ 223.183168][ T6470] netlink: 'syz.2.166': attribute type 1 has an invalid length. [ 223.191108][ T6470] netlink: 236 bytes leftover after parsing attributes in process `syz.2.166'. [ 223.336475][ T6473] netlink: 56 bytes leftover after parsing attributes in process `syz.0.167'. [ 223.367361][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.167'. [ 223.521050][ T6476] syzkaller1: entered promiscuous mode [ 223.526821][ T6476] syzkaller1: entered allmulticast mode [ 223.948440][ T6486] netlink: 7 bytes leftover after parsing attributes in process `syz.0.173'. [ 224.032411][ T6486] netlink: 7 bytes leftover after parsing attributes in process `syz.0.173'. [ 224.474372][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.481378][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 224.530677][ T6495] netlink: 'syz.2.174': attribute type 13 has an invalid length. [ 224.538692][ T6495] netlink: 'syz.2.174': attribute type 17 has an invalid length. [ 225.185984][ T6495] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 225.291703][ T6509] netlink: 32 bytes leftover after parsing attributes in process `syz.0.179'. [ 225.844776][ T6512] syzkaller0: entered promiscuous mode [ 225.850690][ T6512] syzkaller0: entered allmulticast mode [ 227.211362][ T6540] netlink: 32 bytes leftover after parsing attributes in process `syz.1.192'. [ 228.637616][ T6553] syzkaller0: entered promiscuous mode [ 228.643499][ T6553] syzkaller0: entered allmulticast mode [ 229.787242][ T6588] netlink: 32 bytes leftover after parsing attributes in process `syz.1.206'. [ 231.406815][ T6613] netlink: 40 bytes leftover after parsing attributes in process `syz.3.215'. [ 231.827742][ T6615] netlink: 24 bytes leftover after parsing attributes in process `syz.4.217'. [ 232.094514][ T6623] netlink: 48 bytes leftover after parsing attributes in process `syz.4.217'. [ 232.356970][ T6630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.222'. [ 232.366652][ T6630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.222'. [ 233.488314][ T6654] netlink: 40 bytes leftover after parsing attributes in process `syz.0.230'. [ 234.357592][ T6666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.237'. [ 234.368940][ T6666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.237'. [ 234.597990][ T6668] syzkaller0: entered promiscuous mode [ 234.603833][ T6668] syzkaller0: entered allmulticast mode [ 234.658111][ T6670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.239'. [ 235.519754][ T6688] netlink: 40 bytes leftover after parsing attributes in process `syz.4.246'. [ 236.452295][ T6704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.252'. [ 236.462006][ T6704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.252'. [ 237.174823][ T6697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.256990][ T6697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.657149][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.253'. [ 237.683935][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.253'. [ 237.694195][ T6706] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 237.757660][ T54] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.844785][ T54] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.906870][ T54] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.955528][ T54] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.564589][ T6730] netlink: 40 bytes leftover after parsing attributes in process `syz.3.261'. [ 239.173216][ T93] block nbd0: Possible stuck request ffff888108812100: control (read@0,1024B). Runtime 30 seconds [ 239.184581][ T93] block nbd0: Possible stuck request ffff888108812280: control (read@1024,1024B). Runtime 30 seconds [ 239.197630][ T93] block nbd0: Possible stuck request ffff888108812400: control (read@2048,1024B). Runtime 30 seconds [ 239.209526][ T93] block nbd0: Possible stuck request ffff888108812580: control (read@3072,1024B). Runtime 30 seconds [ 239.267039][ T6743] netlink: 28 bytes leftover after parsing attributes in process `syz.2.266'. [ 239.277076][ T6743] netlink: 28 bytes leftover after parsing attributes in process `syz.2.266'. [ 239.586871][ T6742] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.596674][ T6742] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.965877][ T6742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.016343][ T6742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.089063][ C1] hrtimer: interrupt took 303024 ns [ 240.543282][ T1126] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.637676][ T1126] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.668473][ T1126] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.711999][ T1126] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.436009][ T6772] netlink: 40 bytes leftover after parsing attributes in process `syz.2.277'. [ 243.369653][ T6807] netlink: 40 bytes leftover after parsing attributes in process `syz.3.291'. [ 243.847956][ T6815] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 244.030181][ T6815] netlink: 'syz.4.294': attribute type 10 has an invalid length. [ 244.107081][ T6822] warning: `syz.4.294' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 244.417681][ T6837] netlink: 24 bytes leftover after parsing attributes in process `syz.3.300'. [ 244.434305][ T6825] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 244.517214][ T6840] netlink: 48 bytes leftover after parsing attributes in process `syz.3.300'. [ 244.606598][ T6829] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 244.962362][ T6819] syzkaller0: entered promiscuous mode [ 244.968204][ T6819] syzkaller0: entered allmulticast mode [ 246.166354][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.306'. [ 246.600242][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.307'. [ 247.420529][ T6891] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20003 [ 247.449695][ T6887] syzkaller0: entered promiscuous mode [ 247.455531][ T6887] syzkaller0: entered allmulticast mode [ 248.050682][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.320'. [ 248.273531][ T6913] syzkaller0: entered promiscuous mode [ 248.279558][ T6913] syzkaller0: entered allmulticast mode [ 248.371779][ T6899] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 248.498632][ T6914] syzkaller0: entered promiscuous mode [ 248.515230][ T6914] syzkaller0: entered allmulticast mode [ 248.717818][ T6917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.324'. [ 248.743680][ T6921] xt_TPROXY: Can be used only with -p tcp or -p udp [ 249.291255][ T6931] netlink: 20 bytes leftover after parsing attributes in process `syz.3.330'. [ 249.652594][ T6936] syzkaller0: entered promiscuous mode [ 249.658400][ T6936] syzkaller0: entered allmulticast mode [ 249.960940][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.334'. [ 250.387716][ T6956] syzkaller0: entered promiscuous mode [ 250.395123][ T6956] syzkaller0: entered allmulticast mode [ 250.475072][ T6957] syzkaller1: entered promiscuous mode [ 250.481494][ T6957] syzkaller1: entered allmulticast mode [ 250.546640][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 250.633187][ T6948] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 251.190544][ T6965] Driver unsupported XDP return value 0 on prog (id 30) dev N/A, expect packet loss! [ 251.764184][ T6981] syzkaller1: entered promiscuous mode [ 251.770584][ T6981] syzkaller1: entered allmulticast mode [ 251.915977][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.349'. [ 251.925958][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.349'. [ 252.193007][ T6987] syzkaller0: entered promiscuous mode [ 252.196679][ T6988] netlink: 28 bytes leftover after parsing attributes in process `syz.0.351'. [ 252.198645][ T6987] syzkaller0: entered allmulticast mode [ 252.208050][ T6988] netlink: 28 bytes leftover after parsing attributes in process `syz.0.351'. [ 252.377444][ T6988] team0: entered promiscuous mode [ 252.383086][ T6988] team_slave_0: entered promiscuous mode [ 252.390520][ T6988] team_slave_1: entered promiscuous mode [ 252.455841][ T6988] bond0: entered promiscuous mode [ 252.461976][ T6988] bond_slave_0: entered promiscuous mode [ 252.468730][ T6988] bond_slave_1: entered promiscuous mode [ 252.502404][ T6988] debugfs: 'hsr1' already exists in 'hsr' [ 252.508546][ T6988] Cannot create hsr debugfs directory [ 252.526325][ T6988] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 252.600782][ T6987] tipc: Started in network mode [ 252.605914][ T6987] tipc: Node identity 5a157c1dea, cluster identity 4711 [ 252.616735][ T6987] tipc: Enabled bearer , priority 0 [ 252.732459][ T6985] tipc: Resetting bearer [ 252.758255][ T6985] tipc: Disabling bearer [ 253.037267][ T6993] syzkaller0: entered promiscuous mode [ 253.043117][ T6993] syzkaller0: entered allmulticast mode [ 253.397114][ T7009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.356'. [ 253.461304][ T7012] netlink: 24 bytes leftover after parsing attributes in process `syz.0.356'. [ 254.283716][ T7029] syzkaller1: entered promiscuous mode [ 254.290110][ T7029] syzkaller1: entered allmulticast mode [ 254.315232][ T7030] __nla_validate_parse: 1 callbacks suppressed [ 254.315304][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.364'. [ 254.331080][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.364'. [ 254.649821][ T7032] Bluetooth: MGMT ver 1.23 [ 255.205614][ T7040] syzkaller0: entered promiscuous mode [ 255.212797][ T7040] syzkaller0: entered allmulticast mode [ 255.675708][ T7042] syzkaller0: entered promiscuous mode [ 255.681702][ T7042] syzkaller0: entered allmulticast mode [ 255.838534][ T7058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.850840][ T7058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.860669][ T7058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.925566][ T7058] netlink: 24 bytes leftover after parsing attributes in process `syz.0.373'. [ 256.805516][ T7076] syzkaller1: entered promiscuous mode [ 256.812825][ T7076] syzkaller1: entered allmulticast mode [ 257.309880][ T7069] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 258.313390][ T7097] syzkaller0: entered promiscuous mode [ 258.330527][ T7097] syzkaller0: entered allmulticast mode [ 259.523823][ T7130] netlink: 84 bytes leftover after parsing attributes in process `syz.0.393'. [ 259.554286][ T7130] netlink: 'syz.0.393': attribute type 1 has an invalid length. [ 259.678665][ T7132] syzkaller1: entered promiscuous mode [ 259.684738][ T7132] syzkaller1: entered allmulticast mode [ 260.452766][ T7138] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 260.603469][ T7154] netlink: 28 bytes leftover after parsing attributes in process `syz.2.402'. [ 260.620963][ T7154] netlink: 28 bytes leftover after parsing attributes in process `syz.2.402'. [ 260.787636][ T7154] team0: entered promiscuous mode [ 260.793255][ T7154] team_slave_0: entered promiscuous mode [ 260.800223][ T7154] team_slave_1: entered promiscuous mode [ 260.841774][ T7154] bond0: entered promiscuous mode [ 260.846999][ T7154] bond_slave_0: entered promiscuous mode [ 260.856111][ T7154] bond_slave_1: entered promiscuous mode [ 260.898955][ T7154] debugfs: 'hsr1' already exists in 'hsr' [ 260.905092][ T7154] Cannot create hsr debugfs directory [ 260.913492][ T7154] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 260.924191][ T7154] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 260.937411][ T7154] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 261.217634][ T7161] tipc: Started in network mode [ 261.223090][ T7161] tipc: Node identity 821cc43934b2, cluster identity 4711 [ 261.231383][ T7161] tipc: Enabled bearer , priority 0 [ 261.257824][ T7161] syzkaller0: entered promiscuous mode [ 261.266950][ T7161] syzkaller0: entered allmulticast mode [ 261.393742][ T7161] tipc: Resetting bearer [ 261.447805][ T7160] tipc: Resetting bearer [ 261.521724][ T7160] tipc: Disabling bearer [ 261.899268][ T7170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.411'. [ 262.922963][ T7177] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 263.438123][ T7206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.425'. [ 264.374525][ T7221] netlink: 44 bytes leftover after parsing attributes in process `syz.4.432'. [ 264.831475][ T7233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.436'. [ 264.835397][ T7232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.438'. [ 265.373075][ T7226] syz.3.435 (7226) used greatest stack depth: 2376 bytes left [ 265.901392][ T7255] netlink: 28 bytes leftover after parsing attributes in process `syz.3.444'. [ 265.911823][ T7255] netlink: 28 bytes leftover after parsing attributes in process `syz.3.444'. [ 266.060018][ T7257] syzkaller0: entered promiscuous mode [ 266.065909][ T7257] syzkaller0: entered allmulticast mode [ 266.231727][ T7257] tipc: Enabled bearer , priority 0 [ 266.254074][ T7253] tipc: Resetting bearer [ 266.303526][ T7253] tipc: Disabling bearer [ 266.681360][ T7267] netlink: 24 bytes leftover after parsing attributes in process `syz.3.448'. [ 266.884506][ T7278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.452'. [ 266.955076][ T7270] syzkaller1: entered promiscuous mode [ 266.964064][ T7270] syzkaller1: entered allmulticast mode [ 267.620460][ T7295] netlink: 28 bytes leftover after parsing attributes in process `syz.1.458'. [ 267.630127][ T7295] netlink: 28 bytes leftover after parsing attributes in process `syz.1.458'. [ 268.241318][ T7305] syzkaller0: entered promiscuous mode [ 268.246992][ T7305] syzkaller0: entered allmulticast mode [ 268.413847][ T7305] tipc: Started in network mode [ 268.419897][ T7305] tipc: Node identity d642aa032973, cluster identity 4711 [ 268.427769][ T7305] tipc: Enabled bearer , priority 0 [ 268.458788][ T7310] gretap0: entered promiscuous mode [ 268.487139][ T7310] vlan2: entered promiscuous mode [ 268.607412][ T7304] tipc: Resetting bearer [ 268.660923][ T7304] tipc: Disabling bearer [ 269.062652][ T7318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.466'. [ 269.133601][ T7316] netlink: 24 bytes leftover after parsing attributes in process `syz.1.465'. [ 269.252444][ T93] block nbd0: Possible stuck request ffff888108812100: control (read@0,1024B). Runtime 60 seconds [ 269.263714][ T93] block nbd0: Possible stuck request ffff888108812280: control (read@1024,1024B). Runtime 60 seconds [ 269.275092][ T93] block nbd0: Possible stuck request ffff888108812400: control (read@2048,1024B). Runtime 60 seconds [ 269.286468][ T93] block nbd0: Possible stuck request ffff888108812580: control (read@3072,1024B). Runtime 60 seconds [ 270.101056][ T7337] netlink: 28 bytes leftover after parsing attributes in process `syz.1.473'. [ 270.110483][ T7337] netlink: 28 bytes leftover after parsing attributes in process `syz.1.473'. [ 271.240145][ T7358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'. [ 271.580772][ T7365] netlink: 24 bytes leftover after parsing attributes in process `syz.4.483'. [ 271.800151][ T7373] netlink: 44 bytes leftover after parsing attributes in process `syz.3.486'. [ 272.258862][ T7381] netlink: 28 bytes leftover after parsing attributes in process `syz.2.488'. [ 272.268534][ T7381] netlink: 28 bytes leftover after parsing attributes in process `syz.2.488'. [ 273.015545][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.494'. [ 273.584330][ T7410] netlink: 44 bytes leftover after parsing attributes in process `syz.3.499'. [ 273.822337][ T7414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.833695][ T7414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.843619][ T7414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.896282][ T7419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.501'. [ 275.670508][ T7457] __nla_validate_parse: 1 callbacks suppressed [ 275.670589][ T7457] netlink: 44 bytes leftover after parsing attributes in process `syz.1.514'. [ 276.273702][ T7464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.518'. [ 276.380510][ T7468] netlink: 24 bytes leftover after parsing attributes in process `syz.3.519'. [ 276.754910][ T7468] netlink: 48 bytes leftover after parsing attributes in process `syz.3.519'. [ 276.989530][ T7480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.523'. [ 277.539019][ T7489] netlink: 44 bytes leftover after parsing attributes in process `syz.1.527'. [ 278.796737][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.537'. [ 280.131487][ T7539] tipc: Enabled bearer , priority 0 [ 280.140662][ T7539] syzkaller0: entered promiscuous mode [ 280.146317][ T7539] syzkaller0: entered allmulticast mode [ 280.256479][ T7539] tipc: Resetting bearer [ 280.305403][ T7536] tipc: Resetting bearer [ 280.362479][ T7536] tipc: Disabling bearer [ 280.725931][ T7551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.550'. [ 281.008092][ T7558] syzkaller1: entered promiscuous mode [ 281.015284][ T7558] syzkaller1: entered allmulticast mode [ 281.877261][ T7571] syzkaller0: entered promiscuous mode [ 281.883146][ T7571] syzkaller0: entered allmulticast mode [ 282.169671][ T7577] tipc: Enabled bearer , priority 0 [ 282.203014][ T7577] syzkaller0: entered promiscuous mode [ 282.208673][ T7577] syzkaller0: entered allmulticast mode [ 282.315918][ T7577] tipc: Resetting bearer [ 282.366773][ T7574] tipc: Resetting bearer [ 282.397553][ T7582] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 282.405150][ T7582] IPv6: NLM_F_CREATE should be set when creating new route [ 282.419810][ T7574] tipc: Disabling bearer [ 282.671461][ T7587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.565'. [ 284.012787][ T7610] netlink: 'syz.3.572': attribute type 1 has an invalid length. [ 284.902967][ T7617] syzkaller0: entered promiscuous mode [ 284.908733][ T7617] syzkaller0: entered allmulticast mode [ 285.150347][ T7631] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 285.678063][ T7638] syzkaller0: entered promiscuous mode [ 285.684090][ T7638] syzkaller0: entered allmulticast mode [ 285.894638][ T7643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.583'. [ 285.907292][ T7643] netlink: 24 bytes leftover after parsing attributes in process `syz.2.583'. [ 285.917070][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.917310][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.617963][ T7653] netlink: 'syz.3.588': attribute type 1 has an invalid length. [ 286.991633][ T7663] syzkaller0: entered promiscuous mode [ 286.997437][ T7663] syzkaller0: entered allmulticast mode [ 287.678053][ T7673] syzkaller0: entered promiscuous mode [ 287.686542][ T7673] syzkaller0: entered allmulticast mode [ 287.807776][ T7678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.599'. [ 287.881253][ T7680] netlink: 24 bytes leftover after parsing attributes in process `syz.0.599'. [ 288.088871][ T7683] netlink: 24 bytes leftover after parsing attributes in process `syz.2.601'. [ 288.220506][ T7683] netlink: 48 bytes leftover after parsing attributes in process `syz.2.601'. [ 289.405475][ T7707] syzkaller0: entered promiscuous mode [ 289.412083][ T7707] syzkaller0: entered allmulticast mode [ 290.256153][ T7711] syzkaller0: entered promiscuous mode [ 290.262171][ T7711] syzkaller0: entered allmulticast mode [ 293.870573][ T7766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.629'. [ 293.904605][ T7766] netlink: 24 bytes leftover after parsing attributes in process `syz.2.629'. [ 293.969916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 294.146341][ T7768] tipc: Enabled bearer , priority 0 [ 294.155885][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 294.178923][ T7769] syzkaller0: entered promiscuous mode [ 294.184676][ T7769] syzkaller0: entered allmulticast mode [ 294.235829][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 294.350648][ T7768] tipc: Resetting bearer [ 294.403635][ T7767] tipc: Resetting bearer [ 294.428718][ T7771] netlink: 28 bytes leftover after parsing attributes in process `syz.2.631'. [ 294.439637][ T7771] netlink: 28 bytes leftover after parsing attributes in process `syz.2.631'. [ 294.443594][ T7767] tipc: Disabling bearer [ 294.734308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 295.261010][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 295.784027][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 297.834388][ T7806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.641'. [ 298.097760][ T7810] tipc: Enabled bearer , priority 0 [ 298.154023][ T7810] syzkaller0: entered promiscuous mode [ 298.159936][ T7810] syzkaller0: entered allmulticast mode [ 298.211422][ T7791] Bluetooth: hci4: command 0x0406 tx timeout [ 298.221156][ T7791] Bluetooth: hci1: command 0x0406 tx timeout [ 298.230449][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 298.233229][ T5787] Bluetooth: hci2: command 0x0406 tx timeout [ 298.237199][ T7791] Bluetooth: hci3: command 0x0406 tx timeout [ 298.312899][ T7810] tipc: Resetting bearer [ 298.394230][ T7809] tipc: Resetting bearer [ 298.425112][ T7809] tipc: Disabling bearer [ 298.697074][ T7820] tipc: Enabled bearer , priority 10 [ 299.330084][ T93] block nbd0: Possible stuck request ffff888108812100: control (read@0,1024B). Runtime 90 seconds [ 299.341223][ T93] block nbd0: Possible stuck request ffff888108812280: control (read@1024,1024B). Runtime 90 seconds [ 299.356792][ T93] block nbd0: Possible stuck request ffff888108812400: control (read@2048,1024B). Runtime 90 seconds [ 299.368080][ T93] block nbd0: Possible stuck request ffff888108812580: control (read@3072,1024B). Runtime 90 seconds [ 300.034797][ T5838] tipc: Node number set to 4281444867 [ 300.573794][ T7853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.655'. [ 300.996996][ T7861] tipc: Enabled bearer , priority 0 [ 301.035092][ T7861] syzkaller0: entered promiscuous mode [ 301.041261][ T7861] syzkaller0: entered allmulticast mode [ 301.141050][ T7861] tipc: Resetting bearer [ 301.153599][ T7859] tipc: Resetting bearer [ 301.182234][ T7863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.660'. [ 301.226259][ T7859] tipc: Disabling bearer [ 301.396190][ T7863] team_slave_0: entered promiscuous mode [ 301.402230][ T7863] team_slave_1: entered promiscuous mode [ 301.412387][ T7863] macvtap1: entered promiscuous mode [ 301.417869][ T7863] team0: entered promiscuous mode [ 301.426181][ T7863] macvtap1: entered allmulticast mode [ 301.431923][ T7863] team0: entered allmulticast mode [ 301.437307][ T7863] team_slave_0: entered allmulticast mode [ 301.443947][ T7863] team_slave_1: entered allmulticast mode [ 301.554163][ T7863] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 301.666725][ T7867] team0: left allmulticast mode [ 301.672009][ T7867] team_slave_0: left allmulticast mode [ 301.677735][ T7867] team_slave_1: left allmulticast mode [ 301.683682][ T7867] team0: left promiscuous mode [ 301.691524][ T7867] team_slave_0: left promiscuous mode [ 301.697104][ T7867] team_slave_1: left promiscuous mode [ 302.120355][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 302.510107][ T30] audit: type=1326 audit(1769618460.743:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.1.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1602f9aeb9 code=0x7ffc0000 [ 302.536164][ T30] audit: type=1326 audit(1769618460.743:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.1.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1602f9aeb9 code=0x7ffc0000 [ 302.559229][ T30] audit: type=1326 audit(1769618460.743:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.1.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f1602f9aeb9 code=0x7ffc0000 [ 302.581684][ T30] audit: type=1326 audit(1769618460.743:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.1.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1602f9aeb9 code=0x7ffc0000 [ 302.604207][ T30] audit: type=1326 audit(1769618460.743:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.1.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1602f9aeb9 code=0x7ffc0000 [ 303.013187][ T30] audit: type=1326 audit(1769618460.753:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.1.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1602f9aeb9 code=0x7ffc0000 [ 303.035987][ T30] audit: type=1326 audit(1769618460.753:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.1.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1602f9aeb9 code=0x7ffc0000 [ 303.060248][ T30] audit: type=1326 audit(1769618460.753:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.1.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1602f9aeb9 code=0x7ffc0000 [ 303.082921][ T30] audit: type=1326 audit(1769618460.913:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.1.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f1602f9aeb9 code=0x7ffc0000 [ 303.105210][ T30] audit: type=1326 audit(1769618460.933:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.1.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1602f9aeb9 code=0x7ffc0000 [ 304.269677][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 305.397100][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 306.748026][ T7938] tipc: Resetting bearer [ 307.759318][ T5838] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 307.966144][ T5838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 307.976755][ T5838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 307.986821][ T5838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 308.044262][ T5838] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 308.053909][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.064372][ T5838] usb 2-1: Product: syz [ 308.068721][ T5838] usb 2-1: Manufacturer: syz [ 308.074449][ T5838] usb 2-1: SerialNumber: syz [ 308.123534][ T5838] usb 2-1: config 0 descriptor?? [ 308.711638][ T7979] tipc: Enabled bearer , priority 0 [ 308.780634][ T7979] syzkaller0: entered promiscuous mode [ 308.786428][ T7979] syzkaller0: entered allmulticast mode [ 308.927533][ T7983] tipc: Resetting bearer [ 309.001237][ T7974] tipc: Resetting bearer [ 309.061967][ T7974] tipc: Disabling bearer [ 309.360317][ T5840] usb 2-1: USB disconnect, device number 2 [ 311.505683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #24a!!! [ 312.149917][ T5840] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 312.413678][ T5840] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.424977][ T5840] usb 3-1: config 0 has no interfaces? [ 312.431093][ T5840] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 312.440484][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.572550][ T5840] usb 3-1: config 0 descriptor?? [ 313.345684][ T8037] tipc: Resetting bearer [ 318.862959][ T5838] usb 3-1: USB disconnect, device number 2 [ 319.886721][ T8121] netlink: 'syz.2.754': attribute type 1 has an invalid length. [ 319.895364][ T8121] netlink: 208 bytes leftover after parsing attributes in process `syz.2.754'. [ 320.481328][ T8136] input: syz1 as /devices/virtual/input/input5 [ 321.975600][ T8156] netlink: 'syz.2.769': attribute type 1 has an invalid length. [ 321.987243][ T8156] netlink: 208 bytes leftover after parsing attributes in process `syz.2.769'. [ 322.426976][ T8162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.772'. [ 323.272174][ T5838] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 323.439400][ T5838] usb 5-1: device descriptor read/64, error -71 [ 323.709445][ T5838] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 323.849864][ T5838] usb 5-1: device descriptor read/64, error -71 [ 323.964375][ T5838] usb usb5-port1: attempt power cycle [ 324.324044][ T8182] netlink: 'syz.0.781': attribute type 1 has an invalid length. [ 324.342251][ T5838] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 324.373155][ T5838] usb 5-1: device descriptor read/8, error -71 [ 324.495156][ T8184] geneve2: entered promiscuous mode [ 324.500867][ T8184] geneve2: entered allmulticast mode [ 324.565314][ T8184] bond1: (slave geneve2): making interface the new active one [ 324.597633][ T8184] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 324.689389][ T5838] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 324.743013][ T5838] usb 5-1: device descriptor read/8, error -71 [ 324.866551][ T5838] usb usb5-port1: unable to enumerate USB device [ 324.883680][ T8189] netlink: 'syz.2.783': attribute type 1 has an invalid length. [ 324.895682][ T8189] netlink: 208 bytes leftover after parsing attributes in process `syz.2.783'. [ 325.458639][ T8193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.785'. [ 327.049915][ T8215] netlink: 'syz.4.795': attribute type 1 has an invalid length. [ 327.057906][ T8215] netlink: 208 bytes leftover after parsing attributes in process `syz.4.795'. [ 327.332295][ T8220] netlink: 12 bytes leftover after parsing attributes in process `syz.3.798'. [ 327.801611][ T8222] syzkaller0: entered promiscuous mode [ 327.807291][ T8222] syzkaller0: entered allmulticast mode [ 328.827496][ T8243] loop7: detected capacity change from 0 to 16384 [ 328.963637][ T8247] netlink: 'syz.3.809': attribute type 1 has an invalid length. [ 328.971902][ T8247] netlink: 208 bytes leftover after parsing attributes in process `syz.3.809'. [ 329.213223][ T8248] loop7: detected capacity change from 16384 to 16383 [ 329.416196][ T93] block nbd0: Possible stuck request ffff888108812100: control (read@0,1024B). Runtime 120 seconds [ 329.427657][ T93] block nbd0: Possible stuck request ffff888108812280: control (read@1024,1024B). Runtime 120 seconds [ 329.439967][ T93] block nbd0: Possible stuck request ffff888108812400: control (read@2048,1024B). Runtime 120 seconds [ 329.452659][ T93] block nbd0: Possible stuck request ffff888108812580: control (read@3072,1024B). Runtime 120 seconds [ 329.605711][ T8254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.811'. [ 330.088618][ T8248] Dev loop7: unable to read RDB block 8 [ 330.129913][ T8248] loop7: unable to read partition table [ 330.136332][ T8248] loop_reread_partitions: partition scan of loop7 ((õÉê—) failed (rc=-5) [ 330.353583][ T8265] syzkaller0: entered promiscuous mode [ 330.359626][ T8265] syzkaller0: entered allmulticast mode [ 331.264996][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.822'. [ 331.274297][ T8278] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 331.281791][ T8278] IPv6: NLM_F_CREATE should be set when creating new route [ 331.289722][ T8279] netlink: 'syz.3.823': attribute type 1 has an invalid length. [ 331.297519][ T8279] netlink: 208 bytes leftover after parsing attributes in process `syz.3.823'. [ 331.571580][ T8285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.826'. [ 332.325435][ T8299] syzkaller0: entered promiscuous mode [ 332.333060][ T8299] syzkaller0: entered allmulticast mode [ 333.171829][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.839'. [ 333.530549][ T8319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.841'. [ 334.080404][ T8324] syzkaller0: entered promiscuous mode [ 334.086072][ T8324] syzkaller0: entered allmulticast mode [ 334.959393][ T8342] syzkaller0: entered promiscuous mode [ 334.965064][ T8342] syzkaller0: entered allmulticast mode [ 334.996770][ T8348] netlink: 40 bytes leftover after parsing attributes in process `syz.2.852'. [ 335.401978][ T8355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.854'. [ 335.411698][ T8355] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 335.419257][ T8355] IPv6: NLM_F_CREATE should be set when creating new route [ 335.744581][ T8358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.856'. [ 337.234143][ T8381] syzkaller0: entered promiscuous mode [ 337.240317][ T8381] syzkaller0: entered allmulticast mode [ 337.326262][ T8388] netlink: 24 bytes leftover after parsing attributes in process `syz.3.869'. [ 338.040412][ T8395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.872'. [ 339.360489][ T8418] syzkaller0: entered promiscuous mode [ 339.366251][ T8418] syzkaller0: entered allmulticast mode [ 340.352099][ T8420] syzkaller0: entered promiscuous mode [ 340.357953][ T8420] syzkaller0: entered allmulticast mode [ 340.903754][ T8440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.888'. [ 340.960894][ T8440] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 340.968463][ T8440] IPv6: NLM_F_CREATE should be set when creating new route [ 341.131252][ T8444] netlink: 28 bytes leftover after parsing attributes in process `syz.0.891'. [ 341.142573][ T8444] netlink: 28 bytes leftover after parsing attributes in process `syz.0.891'. [ 341.730943][ T8456] syzkaller1: entered promiscuous mode [ 341.736609][ T8456] syzkaller1: entered allmulticast mode [ 341.950161][ T5838] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 342.233893][ T5838] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.244295][ T5838] usb 5-1: config 0 has no interfaces? [ 342.250013][ T5838] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 342.261217][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.373043][ T8464] netlink: 68 bytes leftover after parsing attributes in process `syz.3.899'. [ 342.483735][ T5838] usb 5-1: config 0 descriptor?? [ 343.225019][ T8474] netlink: 24 bytes leftover after parsing attributes in process `syz.2.904'. [ 344.041182][ T8481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.905'. [ 344.123357][ T8481] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 344.695511][ T8489] netlink: 28 bytes leftover after parsing attributes in process `syz.2.908'. [ 344.705263][ T8489] netlink: 28 bytes leftover after parsing attributes in process `syz.2.908'. [ 346.707326][ T8511] netlink: 20 bytes leftover after parsing attributes in process `syz.1.918'. [ 347.360936][ T8519] netlink: 28 bytes leftover after parsing attributes in process `syz.1.922'. [ 347.363380][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.370668][ T8519] netlink: 28 bytes leftover after parsing attributes in process `syz.1.922'. [ 347.376589][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.530274][ T8519] team0: entered promiscuous mode [ 347.535505][ T8519] team_slave_0: entered promiscuous mode [ 347.542419][ T8519] team_slave_1: entered promiscuous mode [ 347.606948][ T8519] team0: left promiscuous mode [ 347.612151][ T8519] team_slave_0: left promiscuous mode [ 347.618705][ T8519] team_slave_1: left promiscuous mode [ 349.328984][ T8548] netlink: 20 bytes leftover after parsing attributes in process `syz.3.932'. [ 349.330673][ T5838] usb 5-1: USB disconnect, device number 6 [ 351.607918][ T8596] vlan2: entered promiscuous mode [ 351.613530][ T8596] team0: entered promiscuous mode [ 351.618821][ T8596] team_slave_0: entered promiscuous mode [ 351.633152][ T8596] team_slave_1: entered promiscuous mode [ 351.780116][ T8602] netlink: 20 bytes leftover after parsing attributes in process `syz.2.945'. [ 355.100819][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.962'. [ 355.708509][ T8673] tipc: Started in network mode [ 355.713934][ T8673] tipc: Node identity cec391f6a4f5, cluster identity 4711 [ 355.722085][ T8673] tipc: Enabled bearer , priority 0 [ 355.882635][ T8685] syzkaller0: entered promiscuous mode [ 355.888422][ T8685] syzkaller0: entered allmulticast mode [ 355.966804][ T8672] tipc: Resetting bearer [ 356.051430][ T8672] tipc: Disabling bearer [ 356.457092][ T8690] netlink: 84 bytes leftover after parsing attributes in process `syz.2.969'. [ 356.467615][ T8690] netlink: 'syz.2.969': attribute type 1 has an invalid length. [ 357.260407][ T8702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.975'. [ 358.118349][ T5838] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 358.289641][ T5838] usb 4-1: Using ep0 maxpacket: 8 [ 358.317383][ T5838] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 358.326138][ T5838] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 358.382147][ T5838] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 358.395759][ T5838] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 358.405175][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.480800][ T5838] usbtmc 4-1:16.0: bulk endpoints not found [ 359.096733][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.989'. [ 359.490232][ T93] block nbd0: Possible stuck request ffff888108812100: control (read@0,1024B). Runtime 150 seconds [ 359.501875][ T93] block nbd0: Possible stuck request ffff888108812280: control (read@1024,1024B). Runtime 150 seconds [ 359.513379][ T93] block nbd0: Possible stuck request ffff888108812400: control (read@2048,1024B). Runtime 150 seconds [ 359.524966][ T93] block nbd0: Possible stuck request ffff888108812580: control (read@3072,1024B). Runtime 150 seconds [ 360.025714][ T8751] netlink: 32 bytes leftover after parsing attributes in process `syz.1.995'. [ 360.035261][ T8751] netlink: 16 bytes leftover after parsing attributes in process `syz.1.995'. [ 360.360924][ T8753] syzkaller0: entered promiscuous mode [ 360.366789][ T8753] syzkaller0: entered allmulticast mode [ 360.992929][ T795] usb 4-1: USB disconnect, device number 2 [ 361.853590][ T8787] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1008'. [ 361.863006][ T8787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1008'. [ 362.106535][ T8781] vlan2: entered promiscuous mode [ 363.000974][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1012'. [ 363.061469][ T8800] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1012'. [ 363.279400][ T5838] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 363.459250][ T5838] usb 5-1: Using ep0 maxpacket: 8 [ 363.502669][ T5838] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 363.511415][ T5838] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 363.592007][ T5838] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 363.602365][ T5838] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 363.613339][ T5838] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 363.634971][ T5838] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 363.644450][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.812711][ T5838] usbtmc 5-1:16.0: bulk endpoints not found [ 364.222635][ T8816] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1020'. [ 364.232034][ T8816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1020'. [ 364.547202][ T8822] vlan2: entered promiscuous mode [ 365.660242][ T8839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1027'. [ 365.701845][ T8839] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1027'. [ 365.771948][ T8840] syzkaller0: entered promiscuous mode [ 365.777717][ T8840] syzkaller0: entered allmulticast mode [ 366.115375][ T795] usb 5-1: USB disconnect, device number 7 [ 366.395510][ T8846] syzkaller0: entered promiscuous mode [ 366.401346][ T8846] syzkaller0: entered allmulticast mode [ 366.878618][ T8859] vlan2: entered promiscuous mode [ 368.171236][ T8880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1040'. [ 368.227941][ T8880] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1040'. [ 368.969712][ T5838] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 369.209386][ T5838] usb 1-1: Using ep0 maxpacket: 8 [ 369.227479][ T5838] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 369.235934][ T5838] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 369.259257][ T5838] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 369.269491][ T5838] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 369.279583][ T5838] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 369.294511][ T5838] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 369.304295][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.452410][ T5838] usbtmc 1-1:16.0: bulk endpoints not found [ 370.943562][ T8922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1053'. [ 371.065463][ T8913] syzkaller0: entered promiscuous mode [ 371.071564][ T8913] syzkaller0: entered allmulticast mode [ 371.562997][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1054'. [ 371.682716][ T8926] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1054'. [ 371.903475][ T795] usb 1-1: USB disconnect, device number 2 [ 373.289518][ T8949] syzkaller0: entered promiscuous mode [ 373.295282][ T8949] syzkaller0: entered allmulticast mode [ 373.356863][ T8948] syzkaller0: entered promiscuous mode [ 373.362885][ T8948] syzkaller0: entered allmulticast mode [ 373.403188][ T8953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1064'. [ 374.219381][ T795] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 374.399855][ T5840] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 374.420216][ T795] usb 4-1: Using ep0 maxpacket: 8 [ 374.426755][ T8964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1068'. [ 374.463044][ T795] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 374.470873][ T8959] syzkaller0: entered promiscuous mode [ 374.471766][ T795] usb 4-1: config 0 has no interface number 0 [ 374.476986][ T8959] syzkaller0: entered allmulticast mode [ 374.506465][ T795] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 374.519409][ T795] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 374.531804][ T795] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 374.543234][ T795] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 374.556716][ T795] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 374.566037][ T795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.581565][ T8964] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1068'. [ 374.586516][ T795] usb 4-1: config 0 descriptor?? [ 374.649298][ T5840] usb 2-1: Using ep0 maxpacket: 8 [ 374.662312][ T5840] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 374.671111][ T5840] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 374.698889][ T5840] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 374.709487][ T5840] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 374.719897][ T5840] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 374.734346][ T5840] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 374.743991][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.758228][ T795] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 374.789744][ T5840] usbtmc 2-1:16.0: bulk endpoints not found [ 375.193102][ C0] ldusb 4-1:0.55: usb_submit_urb failed (-1) [ 375.215441][ T5840] usb 4-1: USB disconnect, device number 3 [ 375.244889][ T5840] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 377.202922][ T8990] syzkaller0: entered promiscuous mode [ 377.208593][ T8990] syzkaller0: entered allmulticast mode [ 377.408266][ T795] usb 2-1: USB disconnect, device number 3 [ 377.514340][ T8992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1076'. [ 378.017465][ T8994] syzkaller0: entered promiscuous mode [ 378.023418][ T8994] syzkaller0: entered allmulticast mode [ 378.182107][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1080'. [ 378.250888][ T9003] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1080'. [ 379.159450][ T9006] syzkaller0: entered promiscuous mode [ 379.165134][ T9006] syzkaller0: entered allmulticast mode [ 380.069976][ T5838] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 380.251662][ T5838] usb 4-1: Using ep0 maxpacket: 8 [ 380.302672][ T5838] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 380.340863][ T5838] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 380.351481][ T5838] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 380.364518][ T5838] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 380.375600][ T5838] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 380.388903][ T5838] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 380.398168][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.417826][ T9030] syzkaller0: entered promiscuous mode [ 380.423841][ T9030] syzkaller0: entered allmulticast mode [ 380.621075][ T5838] usbtmc 4-1:16.0: bulk endpoints not found [ 381.122544][ T9036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1092'. [ 381.193146][ T9036] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1092'. [ 382.933304][ T795] usb 4-1: USB disconnect, device number 4 [ 383.081418][ T9056] syzkaller0: entered promiscuous mode [ 383.087094][ T9056] syzkaller0: entered allmulticast mode [ 383.667975][ T9077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1105'. [ 383.725821][ T9081] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1105'. [ 385.543587][ T5838] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 385.723501][ T5838] usb 4-1: Using ep0 maxpacket: 8 [ 385.771164][ T5838] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 385.788419][ T5838] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 385.798857][ T5838] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 385.810725][ T5838] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 385.822561][ T5838] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 385.836052][ T5838] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 385.845456][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.901355][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1119'. [ 385.936797][ T5838] usbtmc 4-1:16.0: bulk endpoints not found [ 386.015206][ T9124] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1119'. [ 386.127163][ T9117] syzkaller0: entered promiscuous mode [ 386.135304][ T9117] syzkaller0: entered allmulticast mode [ 388.523163][ T5838] usb 4-1: USB disconnect, device number 5 [ 388.847759][ T9170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1131'. [ 388.893601][ T9170] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1131'. [ 389.010329][ T9158] syzkaller0: entered promiscuous mode [ 389.016214][ T9158] syzkaller0: entered allmulticast mode [ 389.049923][ T9173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1132'. [ 389.331733][ T9173] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1132'. [ 389.571184][ T93] block nbd0: Possible stuck request ffff888108812100: control (read@0,1024B). Runtime 180 seconds [ 389.582731][ T93] block nbd0: Possible stuck request ffff888108812280: control (read@1024,1024B). Runtime 180 seconds [ 389.594397][ T93] block nbd0: Possible stuck request ffff888108812400: control (read@2048,1024B). Runtime 180 seconds [ 389.606107][ T93] block nbd0: Possible stuck request ffff888108812580: control (read@3072,1024B). Runtime 180 seconds [ 390.034217][ T9177] syzkaller0: entered promiscuous mode [ 390.040498][ T9177] syzkaller0: entered allmulticast mode [ 390.408629][ T9194] tipc: Enabled bearer , priority 0 [ 390.475616][ T9188] tipc: Resetting bearer [ 390.492036][ T5838] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 390.523814][ T9186] tipc: Disabling bearer [ 390.670740][ T5838] usb 4-1: Using ep0 maxpacket: 8 [ 390.712631][ T5838] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 390.721260][ T5838] usb 4-1: config 0 has no interface number 0 [ 390.759295][ T5838] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 390.770894][ T5838] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 390.782988][ T5838] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 390.794301][ T5838] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 390.809989][ T5838] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 390.820244][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.945047][ T5838] usb 4-1: config 0 descriptor?? [ 391.029830][ T5838] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 391.138146][ T9209] Bluetooth: MGMT ver 1.23 [ 391.164954][ T9209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1145'. [ 391.505888][ T795] usb 4-1: USB disconnect, device number 6 [ 391.564358][ T795] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 391.858766][ T9216] syzkaller0: entered promiscuous mode [ 391.864688][ T9216] syzkaller0: entered allmulticast mode [ 393.119367][ T9221] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.129168][ T9221] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.786485][ T9221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.824731][ T9221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.212455][ T9240] syzkaller0: entered promiscuous mode [ 396.218232][ T9240] syzkaller0: entered allmulticast mode [ 396.479506][ T9276] tipc: Enabling of bearer rejected, failed to enable media [ 396.512433][ T9266] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.600034][ T9266] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.619361][ T9266] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.628622][ T9266] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.888311][ T9293] geneve2: entered promiscuous mode [ 396.962290][ T9295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1157'. [ 397.050677][ T3474] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.101529][ T3474] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.150231][ T3474] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.186571][ T3474] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.534312][ T9305] syzkaller0: entered promiscuous mode [ 397.540460][ T9305] syzkaller0: entered allmulticast mode [ 397.746037][ T9311] syzkaller0: entered promiscuous mode [ 397.753224][ T9311] syzkaller0: entered allmulticast mode [ 398.796254][ T9321] syzkaller0: entered promiscuous mode [ 398.802330][ T9321] syzkaller0: entered allmulticast mode [ 399.079303][ T9339] tipc: Enabled bearer , priority 0 [ 399.123088][ T9338] tipc: Resetting bearer [ 399.181714][ T9337] tipc: Disabling bearer [ 399.643520][ T9343] geneve2: entered promiscuous mode [ 399.688551][ T9266] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.702968][ T9346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1173'. [ 399.739754][ T9266] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.748762][ T9266] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.828048][ T9266] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.600237][ T9362] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1180'. [ 401.598106][ T9380] syzkaller0: entered promiscuous mode [ 401.604126][ T9380] syzkaller0: entered allmulticast mode [ 401.873049][ T9386] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1188'. [ 401.884547][ T9386] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1188'. [ 402.038272][ T9382] syzkaller0: entered promiscuous mode [ 402.044344][ T9382] syzkaller0: entered allmulticast mode [ 402.161402][ T9392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1189'. [ 402.207612][ T9381] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1185'. [ 402.239403][ T9386] team0: entered promiscuous mode [ 402.244614][ T9386] team_slave_0: entered promiscuous mode [ 402.253752][ T9386] team_slave_1: entered promiscuous mode [ 402.270659][ T9386] team0: left promiscuous mode [ 402.275623][ T9386] team_slave_0: left promiscuous mode [ 402.282284][ T9386] team_slave_1: left promiscuous mode [ 402.832833][ T9400] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1193'. [ 404.082770][ T9423] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1202'. [ 404.092277][ T9423] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1202'. [ 404.105222][ T9422] syzkaller0: entered promiscuous mode [ 404.112143][ T9422] syzkaller0: entered allmulticast mode [ 404.115354][ T9419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1201'. [ 404.159937][ T9423] team0: entered promiscuous mode [ 404.165269][ T9423] team_slave_0: entered promiscuous mode [ 404.172779][ T9423] team_slave_1: entered promiscuous mode [ 404.188893][ T9423] team0: left promiscuous mode [ 404.194445][ T9423] team_slave_0: left promiscuous mode [ 404.201041][ T9423] team_slave_1: left promiscuous mode [ 404.461497][ T9427] syzkaller0: entered promiscuous mode [ 404.475888][ T9427] syzkaller0: entered allmulticast mode [ 406.882796][ T9478] syzkaller0: entered promiscuous mode [ 406.888463][ T9478] syzkaller0: entered allmulticast mode [ 407.504767][ T9489] input: syz0 as /devices/virtual/input/input6 [ 408.823555][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.830389][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 409.237599][ T9526] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1232'. [ 409.689433][ T9227] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 409.899505][ T9227] usb 4-1: Using ep0 maxpacket: 8 [ 409.925173][ T9227] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 409.971951][ T9532] syzkaller0: entered promiscuous mode [ 409.976092][ T9227] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 409.977594][ T9532] syzkaller0: entered allmulticast mode [ 409.987656][ T9227] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 409.987793][ T9227] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 410.016698][ T9227] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 410.028420][ T9227] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 410.042513][ T9227] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 410.054320][ T9227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.085662][ T9227] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22 [ 410.309292][ T9226] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 410.470117][ T9226] usb 2-1: Using ep0 maxpacket: 8 [ 410.500913][ T9226] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 410.512981][ T9226] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 410.524156][ T9226] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 410.534776][ T9226] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 410.548198][ T9226] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 410.557660][ T9226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.581662][ T9543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1240'. [ 410.894089][ T9226] usb 2-1: GET_CAPABILITIES returned 2f [ 410.900215][ T9226] usbtmc 2-1:16.0: can't read capabilities [ 411.362822][ T9556] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1244'. [ 411.758528][ T9234] usb 2-1: USB disconnect, device number 4 [ 412.344676][ T9572] syzkaller0: entered promiscuous mode [ 412.351030][ T9572] syzkaller0: entered allmulticast mode [ 412.563343][ T9234] usb 4-1: USB disconnect, device number 7 [ 412.919589][ T9579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1252'. [ 413.748182][ T9226] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 413.998958][ T9226] usb 5-1: config 1 interface 0 altsetting 15 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 414.012988][ T9226] usb 5-1: config 1 interface 0 has no altsetting 0 [ 414.121541][ T9226] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 414.131754][ T9226] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.140087][ T9226] usb 5-1: Product: syz [ 414.145320][ T9226] usb 5-1: Manufacturer: syz [ 414.150541][ T9226] usb 5-1: SerialNumber: syz [ 414.396745][ T9591] syzkaller0: entered promiscuous mode [ 414.402619][ T9591] syzkaller0: entered allmulticast mode [ 416.879238][ T795] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 416.962683][ T9226] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 15 proto 1 vid 0x04B8 pid 0x0202 [ 417.054541][ T9226] usb 5-1: USB disconnect, device number 8 [ 417.081539][ T9226] usblp0: removed [ 417.109573][ T795] usb 3-1: Using ep0 maxpacket: 8 [ 417.153544][ T795] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 417.188730][ T795] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 417.198863][ T795] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 417.209270][ T795] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 417.219411][ T795] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 417.229540][ T795] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 417.242702][ T795] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 417.251961][ T795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.364314][ T795] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 419.649868][ T93] block nbd0: Possible stuck request ffff888108812100: control (read@0,1024B). Runtime 210 seconds [ 419.661420][ T93] block nbd0: Possible stuck request ffff888108812280: control (read@1024,1024B). Runtime 210 seconds [ 419.672881][ T93] block nbd0: Possible stuck request ffff888108812400: control (read@2048,1024B). Runtime 210 seconds [ 419.684262][ T93] block nbd0: Possible stuck request ffff888108812580: control (read@3072,1024B). Runtime 210 seconds [ 419.815094][ T795] usb 3-1: USB disconnect, device number 3 [ 419.957498][ T9660] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 423.534531][ T9234] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 423.729997][ T9234] usb 2-1: Using ep0 maxpacket: 8 [ 423.776983][ T9234] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 423.809356][ T9234] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 423.819722][ T9234] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 423.829849][ T9234] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 423.840043][ T9234] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 423.852864][ T9234] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 423.868364][ T9234] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 423.877768][ T9234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.075828][ T9234] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22 [ 425.749414][ T795] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 425.931592][ T795] usb 4-1: Using ep0 maxpacket: 8 [ 425.968538][ T795] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.047865][ T795] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 426.057495][ T795] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.065827][ T795] usb 4-1: Product: syz [ 426.072564][ T795] usb 4-1: Manufacturer: syz [ 426.077327][ T795] usb 4-1: SerialNumber: syz [ 426.193560][ T795] usb 4-1: config 0 descriptor?? [ 426.267196][ T795] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 426.284288][ T795] usb 4-1: selecting invalid altsetting 1 [ 426.534239][ T9233] usb 2-1: USB disconnect, device number 5 [ 426.732164][ T9737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.772247][ T9737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.413763][ T9234] usb 4-1: USB disconnect, device number 8 [ 428.019682][ T9775] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1299'. [ 429.469703][ T9234] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 429.663848][ T9234] usb 4-1: Using ep0 maxpacket: 8 [ 429.721713][ T9234] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 429.753715][ T9234] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 429.764097][ T9234] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 429.774230][ T9234] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 429.784446][ T9234] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 429.794959][ T9234] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 429.808422][ T9234] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 429.817890][ T9234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.973896][ T9234] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22 [ 429.996475][ T9811] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1310'. [ 430.136505][ T9816] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1311'. [ 430.669662][ T9828] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1314'. [ 432.422474][ T795] usb 4-1: USB disconnect, device number 9 [ 433.476273][ T9876] input: syz0 as /devices/virtual/input/input7 [ 433.788787][ T9878] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 435.352841][ T9894] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 439.295996][ T9957] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.305353][ T9957] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.522728][ T9957] tipc: Resetting bearer [ 439.975636][ T9957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.000425][ T9957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.252546][ T9957] geneve2: left promiscuous mode [ 440.257723][ T9957] geneve2: left allmulticast mode [ 440.292533][ T3474] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.320623][ T3474] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.360542][ T3474] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.391638][ T3474] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.756918][ T9995] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1359'. [ 440.959331][ T9234] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 441.188470][ T9234] usb 4-1: Using ep0 maxpacket: 16 [ 441.256531][ T9234] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 441.265952][ T9234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.274328][ T9234] usb 4-1: Product: syz [ 441.278575][ T9234] usb 4-1: Manufacturer: syz [ 441.283320][ T9234] usb 4-1: SerialNumber: syz [ 441.344568][ T9234] usb 4-1: config 0 descriptor?? [ 441.390915][ T9234] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 441.804067][ T9234] usb 4-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 442.489495][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 442.489568][ T30] audit: type=1326 audit(1769618600.723:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.4.1364" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf4cd9aeb9 code=0x0 [ 442.823864][T10020] input: syz0 as /devices/virtual/input/input8 [ 444.109705][ T795] usb 4-1: USB disconnect, device number 10 [ 444.161947][ T795] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 444.214635][ T795] visor 4-1:0.0: device disconnected [ 446.168499][T10057] tipc: Enabled bearer , priority 0 [ 446.275337][T10057] tipc: Resetting bearer [ 447.299710][ T9234] tipc: Node number set to 3064906809 [ 449.687763][T10088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1386'. [ 449.740392][ T93] block nbd0: Possible stuck request ffff888108812100: control (read@0,1024B). Runtime 240 seconds [ 449.751646][ T93] block nbd0: Possible stuck request ffff888108812280: control (read@1024,1024B). Runtime 240 seconds [ 449.763075][ T93] block nbd0: Possible stuck request ffff888108812400: control (read@2048,1024B). Runtime 240 seconds [ 449.779377][ T93] block nbd0: Possible stuck request ffff888108812580: control (read@3072,1024B). Runtime 240 seconds [ 450.534482][T10109] tipc: Enabled bearer , priority 0 [ 450.626770][T10109] tipc: Resetting bearer [ 450.764403][T10108] tipc: Disabling bearer [ 451.819713][T10119] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 451.827369][T10119] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 454.314914][T10141] tipc: Enabled bearer , priority 0 [ 454.354487][T10141] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 454.362265][T10141] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 454.485943][T10141] tipc: Resetting bearer [ 455.339424][ T9226] tipc: Node number set to 1445968584 [ 455.402320][T10149] syzkaller0: entered promiscuous mode [ 455.407998][T10149] syzkaller0: entered allmulticast mode [ 456.922438][T10170] tipc: Enabling of bearer rejected, already enabled [ 458.863028][T10199] tipc: Enabling of bearer rejected, already enabled [ 460.032539][T10224] syzkaller0: entered promiscuous mode [ 460.038317][T10224] syzkaller0: entered allmulticast mode [ 460.320756][T10233] geneve2: entered promiscuous mode [ 460.326329][T10233] geneve2: entered allmulticast mode [ 461.190637][T10247] tipc: Enabling of bearer rejected, failed to enable media [ 461.284714][T10247] netem: change failed [ 461.342184][T10249] syzkaller0: entered promiscuous mode [ 461.347852][T10249] syzkaller0: entered allmulticast mode [ 462.037657][T10265] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1450'. [ 462.560340][T10269] geneve2: entered promiscuous mode [ 462.565743][T10269] geneve2: entered allmulticast mode [ 463.586831][T10288] syzkaller0: entered promiscuous mode [ 463.592874][T10288] syzkaller0: entered allmulticast mode [ 464.273147][T10308] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1461'. [ 464.886869][T10309] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 464.893512][T10309] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 465.051150][T10314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1465'. [ 465.345663][T10309] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 465.352074][T10309] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 465.528224][T10309] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 465.534658][T10309] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 465.640229][T10309] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 465.646632][T10309] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 465.744426][T10309] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 465.750970][T10309] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 467.503677][T10349] tipc: Enabling of bearer rejected, failed to enable media [ 467.592174][T10349] netem: change failed [ 467.674913][T10354] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1475'. [ 468.437414][T10368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1477'. [ 470.281310][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.287922][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 471.026821][T10407] input: syz0 as /devices/virtual/input/input9 [ 471.070790][T10406] tipc: Enabling of bearer rejected, failed to enable media [ 471.133020][T10406] netem: change failed [ 472.050328][T10416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1492'. [ 472.535514][T10426] syzkaller1: entered promiscuous mode [ 472.541513][T10426] syzkaller1: entered allmulticast mode [ 473.296178][T10437] tipc: Enabling of bearer rejected, failed to enable media [ 473.361172][T10437] netem: change failed [ 474.780847][T10466] syzkaller1: entered promiscuous mode [ 474.786516][T10466] syzkaller1: entered allmulticast mode [ 475.590069][T10485] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1511'. [ 476.322427][T10492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1513'. [ 476.650862][T10495] tipc: Enabling of bearer rejected, failed to enable media [ 476.701198][T10495] syzkaller0: entered promiscuous mode [ 476.706953][T10495] syzkaller0: entered allmulticast mode [ 478.347916][T10517] input: syz0 as /devices/virtual/input/input11 [ 479.576044][T10525] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1524'. [ 479.655681][T10527] netlink: 'syz.4.1524': attribute type 1 has an invalid length. [ 479.809779][ T93] block nbd0: Possible stuck request ffff888108812100: control (read@0,1024B). Runtime 270 seconds [ 479.821363][ T93] block nbd0: Possible stuck request ffff888108812280: control (read@1024,1024B). Runtime 270 seconds [ 479.833601][ T93] block nbd0: Possible stuck request ffff888108812400: control (read@2048,1024B). Runtime 270 seconds [ 479.845477][ T93] block nbd0: Possible stuck request ffff888108812580: control (read@3072,1024B). Runtime 270 seconds [ 485.128706][T10598] ALSA: mixer_oss: invalid OSS volume '' [ 485.299363][ T9226] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 485.322748][T10601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1544'. [ 485.542619][ T9226] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.553270][ T9226] usb 5-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 485.566452][ T9226] usb 5-1: config 0 interface 0 has no altsetting 0 [ 485.573380][ T9226] usb 5-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 485.582676][ T9226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.761697][ T9226] usb 5-1: config 0 descriptor?? [ 485.814543][ T9226] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input13 [ 487.145873][ T9226] usb 5-1: USB disconnect, device number 9 [ 487.159401][ T5121] bcm5974 5-1:0.0: could not read from device [ 487.181101][ T5121] bcm5974 5-1:0.0: could not read from device [ 487.241821][ T8789] bcm5974 5-1:0.0: could not read from device [ 487.369469][T10616] syzkaller0: entered promiscuous mode [ 487.375115][T10616] syzkaller0: entered allmulticast mode [ 489.938540][T10653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1556'. [ 490.552306][T10657] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 490.620563][T10661] ===================================================== [ 490.627735][T10661] BUG: KMSAN: uninit-value in pfn_reader_next+0x1d4c/0x3e40 [ 490.635510][T10661] pfn_reader_next+0x1d4c/0x3e40 [ 490.640732][T10661] pfn_reader_first+0xbdc/0xcc0 [ 490.645736][T10661] iopt_area_fill_domains+0x20c/0x13a0 [ 490.651621][T10661] iopt_map_pages+0x1b97/0x2120 [ 490.656649][T10661] iopt_map_common+0x224/0x610 [ 490.661747][T10661] iopt_map_user_pages+0x148/0x1c0 [ 490.667019][T10661] iommufd_ioas_map+0x6a2/0x9b0 [ 490.672046][T10661] iommufd_fops_ioctl+0x82a/0x9e0 [ 490.677177][T10661] __se_sys_ioctl+0x23c/0x400 [ 490.682018][T10661] __x64_sys_ioctl+0x97/0xe0 [ 490.686684][T10661] x64_sys_call+0x18a7/0x3e70 [ 490.692493][T10661] do_syscall_64+0xc9/0xf80 [ 490.697167][T10661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.703687][T10661] [ 490.706048][T10661] Local variable pfns created at: [ 490.711477][T10661] iopt_area_fill_domains+0x5c/0x13a0 [ 490.716927][T10661] iopt_map_pages+0x1b97/0x2120 [ 490.721927][T10661] [ 490.724299][T10661] CPU: 1 UID: 0 PID: 10661 Comm: syz.2.1557 Not tainted syzkaller #0 PREEMPT(voluntary) [ 490.734246][T10661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 490.744502][T10661] ===================================================== [ 490.751676][T10661] Disabling lock debugging due to kernel taint [ 490.757908][T10661] Kernel panic - not syncing: kmsan.panic set ... [ 490.764377][T10661] CPU: 1 UID: 0 PID: 10661 Comm: syz.2.1557 Tainted: G B syzkaller #0 PREEMPT(voluntary) [ 490.775838][T10661] Tainted: [B]=BAD_PAGE [ 490.780018][T10661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 490.790142][T10661] Call Trace: [ 490.793462][T10661] [ 490.796425][T10661] __dump_stack+0x26/0x30 [ 490.800856][T10661] dump_stack_lvl+0x50/0x1c0 [ 490.805590][T10661] ? dump_stack+0x12/0x25 [ 490.810010][T10661] dump_stack+0x1e/0x25 [ 490.814243][T10661] vpanic+0x435/0xd40 [ 490.818316][T10661] panic+0x15d/0x160 [ 490.822327][T10661] kmsan_report+0x31a/0x320 [ 490.826936][T10661] ? __msan_warning+0x1b/0x30 [ 490.831700][T10661] ? pfn_reader_next+0x1d4c/0x3e40 [ 490.836886][T10661] ? pfn_reader_first+0xbdc/0xcc0 [ 490.841976][T10661] ? iopt_area_fill_domains+0x20c/0x13a0 [ 490.847684][T10661] ? iopt_map_pages+0x1b97/0x2120 [ 490.852796][T10661] ? iopt_map_common+0x224/0x610 [ 490.857824][T10661] ? iopt_map_user_pages+0x148/0x1c0 [ 490.863192][T10661] ? iommufd_ioas_map+0x6a2/0x9b0 [ 490.868312][T10661] ? iommufd_fops_ioctl+0x82a/0x9e0 [ 490.873627][T10661] ? __se_sys_ioctl+0x23c/0x400 [ 490.878572][T10661] ? __x64_sys_ioctl+0x97/0xe0 [ 490.883425][T10661] ? x64_sys_call+0x18a7/0x3e70 [ 490.888394][T10661] ? do_syscall_64+0xc9/0xf80 [ 490.893157][T10661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.899315][T10661] ? kmsan_get_metadata+0xf1/0x160 [ 490.904610][T10661] ? kmsan_get_metadata+0xf1/0x160 [ 490.909844][T10661] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 490.915844][T10661] ? pfn_reader_user_pin+0x1d9e/0x20b0 [ 490.921491][T10661] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 490.927686][T10661] ? kmsan_get_metadata+0xf1/0x160 [ 490.932994][T10661] __msan_warning+0x1b/0x30 [ 490.937597][T10661] pfn_reader_next+0x1d4c/0x3e40 [ 490.942624][T10661] ? kmsan_get_metadata+0xf1/0x160 [ 490.947866][T10661] ? kmsan_get_metadata+0xf1/0x160 [ 490.953094][T10661] ? kmsan_get_metadata+0xf1/0x160 [ 490.958328][T10661] pfn_reader_first+0xbdc/0xcc0 [ 490.963261][T10661] iopt_area_fill_domains+0x20c/0x13a0 [ 490.968833][T10661] ? kmsan_get_metadata+0xf1/0x160 [ 490.974058][T10661] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 490.980491][T10661] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 490.986655][T10661] ? kmsan_get_metadata+0xf1/0x160 [ 490.991868][T10661] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 490.997789][T10661] iopt_map_pages+0x1b97/0x2120 [ 491.002783][T10661] iopt_map_common+0x224/0x610 [ 491.007638][T10661] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 491.013556][T10661] iopt_map_user_pages+0x148/0x1c0 [ 491.018765][T10661] iommufd_ioas_map+0x6a2/0x9b0 [ 491.023764][T10661] ? __pfx_iommufd_ioas_map+0x10/0x10 [ 491.029319][T10661] iommufd_fops_ioctl+0x82a/0x9e0 [ 491.034534][T10661] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 491.040181][T10661] __se_sys_ioctl+0x23c/0x400 [ 491.044951][T10661] __x64_sys_ioctl+0x97/0xe0 [ 491.049636][T10661] x64_sys_call+0x18a7/0x3e70 [ 491.054413][T10661] do_syscall_64+0xc9/0xf80 [ 491.059013][T10661] ? clear_bhb_loop+0x40/0x90 [ 491.063821][T10661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.069801][T10661] RIP: 0033:0x7f907859aeb9 [ 491.074269][T10661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.093949][T10661] RSP: 002b:00007f9079397028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 491.102456][T10661] RAX: ffffffffffffffda RBX: 00007f9078816090 RCX: 00007f907859aeb9 [ 491.110485][T10661] RDX: 0000200000000280 RSI: 0000000000003b85 RDI: 0000000000000005 [ 491.118505][T10661] RBP: 00007f9078608c1f R08: 0000000000000000 R09: 0000000000000000 [ 491.126524][T10661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.134543][T10661] R13: 00007f9078816128 R14: 00007f9078816090 R15: 00007fff57f7feb8 [ 491.142598][T10661] [ 491.146065][T10661] Kernel Offset: disabled [ 491.150435][T10661] Rebooting in 86400 seconds..