last executing test programs: 1m9.91965393s ago: executing program 0 (id=2353): socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='source', &(0x7f0000000180)='%\xde({^\xfa@:', 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1, 0x5}}}, 0x90) 1m5.037510065s ago: executing program 0 (id=2371): r0 = socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804003001c0012800b00010067726574617000000c00028008000700ac14142808000a00", @ANYRES32=r4], 0x44}}, 0x804) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) sendto$packet(r5, &(0x7f0000000040)="2717a90af1a30d71286f47000000", 0xe, 0x48000, &(0x7f0000000180)={0x11, 0x16, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) close(0x3) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) 1m3.934217365s ago: executing program 0 (id=2375): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) mount$9p_rdma(0x0, 0x0, &(0x7f0000000340), 0x10400, &(0x7f00000003c0)=ANY=[@ANYBLOB]) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80800, 0x10a) r5 = socket$can_bcm(0x1d, 0x2, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='net/wireless\x00') r6 = msgget(0x1, 0x244) msgctl$MSG_STAT(r6, 0xb, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000280), 0x7fffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000000)={0x980914, 0x8}) connect$can_bcm(r5, &(0x7f00000005c0), 0x10) sendmsg$can_raw(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x2}, 0x24000895) 1m2.585040151s ago: executing program 0 (id=2377): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x7ffffffff000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x890c, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0x3c, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 1m2.316536662s ago: executing program 0 (id=2379): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) socket(0x15, 0x4, 0xff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) io_uring_setup(0xc54, 0x0) io_uring_setup(0x2c28, &(0x7f0000000040)={0x0, 0xc89d, 0x8000, 0x8, 0x2000029}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000000010000089"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, &(0x7f00000025c0), &(0x7f0000000600), 0x80, r3, 0x0, 0x7}, 0x38) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x2000000}, 0x1c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000340)={0x1, 0xb}, 0x8) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x8, 0x20132, 0xffffffffffffffff, 0xb2993000) 57.3369297s ago: executing program 0 (id=2389): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = gettid() r4 = syz_open_procfs(r3, &(0x7f0000000280)='timerslack_ns\x00') write$binfmt_format(r4, &(0x7f0000000180)='1\x00', 0x2) 42.153074679s ago: executing program 32 (id=2389): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = gettid() r4 = syz_open_procfs(r3, &(0x7f0000000280)='timerslack_ns\x00') write$binfmt_format(r4, &(0x7f0000000180)='1\x00', 0x2) 19.626683326s ago: executing program 5 (id=2466): pipe(&(0x7f00000045c0)) socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff0700000059b97b2bf7444ffd7c1baba8d110dadbf270019229b2550687127e25a1f962060c3a884bfaa2dcee7cde8c236f2afc6e88040f14fcb79860c84683ffbdaef67f475dbd745f1132ce076b98708cd84a3ed51c6a407d17172e58158c5be6dced6dc943ebc433779baf2c2169549d0b9e4d3771743f57620bfa67eafc2e9b"], 0x14}}, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000080, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20) 18.844853674s ago: executing program 5 (id=2470): syz_emit_vhci(0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_to_bridge\x00', 0x0}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r6, 0x4000) close(r6) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, &(0x7f0000000080)) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtaction={0xb4, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=ANY=[@ANYBLOB="1000000000000000040000000000000010000000000000001401000003"], 0x20}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYRESHEX=r5], 0x10) 17.846880064s ago: executing program 5 (id=2471): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x3, &(0x7f0000000040)) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000200)=ANY=[@ANYRESOCT], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007a1ff00", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 15.495919148s ago: executing program 3 (id=2474): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$rtc(0x0, 0x80000001, 0x408000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000a00300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f0b2ad1eb9769d74e4f1feff374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724190000006f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0ed9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab778c50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b28448692686ac80d81a89f9c29e27680000000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r5, r4}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, 0x0, 0x0) syz_extract_tcp_res(0x0, 0x9801, 0x4e8dc768) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r7, 0x800c5012, &(0x7f0000000100)) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x1}, 0x1c) 14.741253901s ago: executing program 3 (id=2476): ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = socket(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000380)={0x20179e01}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xb8) io_setup(0x4, &(0x7f0000000240)=0x0) io_submit(r6, 0x0, 0x0) 14.465606321s ago: executing program 4 (id=2478): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3d03) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = userfaultfd(0x801) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]}) kexec_load(0x0, 0x0, 0x0, 0xa0000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x7, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') write$tcp_mem(r5, &(0x7f0000000180)={0x6, 0x20, 0x0, 0x20, 0x1}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r5, 0x0, 0x35) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0], 0x38}}, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x20000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a300000000009"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000d97f7549acbd8989001800", [0x0, 0x2000000000001]}}) 13.912979531s ago: executing program 3 (id=2479): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) semctl$SEM_STAT(0x0, 0x2, 0x12, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f0000000880)=""/254, 0xfe, 0x0, &(0x7f0000000300)=""/113, 0x71}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x2000000}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet(0x2, 0x802, 0x1) r5 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r5, 0x107, 0x13, &(0x7f0000000480)=0x4, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x439, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x18000}}, 0x20}}, 0x0) connect$inet(r4, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10) write(r4, &(0x7f0000000640)="08001800000020a3d57aaadb5155e6d3a1c2c962ebdd592e467fd53c1acc1964043a27ada60f0ff8ce6cfa8636ef74049e7d3c6bf2887a5dcac13b605f3379fbb85f786e4bb6657a8b529c83df621cd4b218f4f772214fb90ef76cefb2ee38b31ee973b82271e780cfb821e5d472b4ab68df7ab1bfdae97c1650a42ab5da5b560b6eec56df7d548d", 0x88) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000080), &(0x7f0000000200)=ANY=[@ANYBLOB="00fb5a0004444e630f7be0945cec871816f1d19af4c6fdd77662539541aa2a097a18255e49b4e769dc2b03aaa07c389b7166d0934ccb430d802756d15ac98c32effb8379b7e26de62f9e688c"], 0x5a, 0x2) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000440)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x4, &(0x7f0000000100)=0x3b0, 0x4) setns(0xffffffffffffffff, 0x20000) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x3beb947}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x10}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 12.319425432s ago: executing program 2 (id=2482): pipe(&(0x7f00000045c0)) socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff0700000059b97b2bf7444ffd7c1baba8d110dadbf270019229b2550687127e25a1f962060c3a884bfaa2dcee7cde8c236f2afc6e88040f14fcb79860c84683ffbdaef67f475dbd745f1132ce076b98708cd84a3ed51c6a407d17172e58158c5be6dced6dc943ebc433779baf2c2169549d0b9e4d3771743f57620bfa67eafc2e9b"], 0x14}}, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000080, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20) 11.407153867s ago: executing program 2 (id=2483): bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0}, 0x90) 11.279199763s ago: executing program 2 (id=2484): r0 = syz_usb_connect(0x2, 0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380002960000000904cc070002596105052406000105240206000d240f0190080000000007000806241a050011090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000940)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 10.761000119s ago: executing program 3 (id=2486): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) setgid(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8905, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000080) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0a00060008061100000000000a00060008021100000000000a000600ffffffffffff0000aba7745d679651a00f5697fb397cd60000"], 0x40}, 0x1, 0x0, 0x0, 0x6}, 0x4048005) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r5 = syz_io_uring_setup(0x497, &(0x7f0000000680)={0x0, 0x465d, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x1}) r8 = syz_io_uring_setup(0x7dc9, 0x0, &(0x7f0000000140), &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x7fffffff]}, 0x8) timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) poll(&(0x7f00000000c0)=[{r9, 0x400}], 0x1, 0xfffffffa) io_uring_enter(r8, 0x184c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r5, 0x39fd, 0x2cf1, 0xa5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x0) 9.8790621s ago: executing program 5 (id=2488): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x56, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) epoll_create1(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000540)={{0xb, 0x6, 0x0, 0x2, 'syz0\x00', 0x281d}, 0x0, [0x1, 0x4ea3, 0x9, 0x56cd, 0x7, 0x6, 0x0, 0x80000001, 0x201, 0x0, 0x3fb, 0x1, 0x9, 0x7, 0x4, 0x10000, 0x43, 0x81, 0x80, 0xe8de, 0xfffffffffffffff9, 0x9, 0x201, 0x9, 0x1, 0x8, 0x1, 0x4, 0x0, 0x8000, 0x8, 0xa34, 0x57bf4b04, 0x4, 0x40000000000001, 0x6, 0x8, 0x100000000, 0x8, 0x7ff, 0x6, 0x401, 0x5, 0x8, 0x1ff, 0x10000, 0x2, 0xb7, 0x0, 0x5, 0xbe5, 0x1, 0x3, 0x1, 0x8, 0x8000000000000003, 0xd3d, 0xbbeb, 0x1, 0x6, 0x7, 0x3, 0x8001, 0x3, 0x1, 0xec7, 0x646, 0xc58e, 0x5, 0x11ad, 0x5, 0x6, 0x8000, 0x100080, 0x7f, 0x9, 0x1, 0x5, 0x8000000000000000, 0x2, 0x7, 0xa5, 0x1b13, 0x4, 0x85, 0x8, 0x3, 0xf75, 0x9, 0xb, 0xffffffffffff66e3, 0x4, 0x851a, 0x5e997b8e, 0x0, 0x7, 0x6, 0x4, 0x100, 0x1000000004, 0x3ff, 0x6, 0x0, 0xffffffffffffff95, 0xa, 0x108000001, 0xcc7e, 0x8, 0x0, 0x6, 0x800000000006, 0xfffffffffffffd96, 0x3f3, 0x1, 0x4, 0x0, 0x7, 0x5, 0x6, 0x0, 0xe1, 0xec2, 0x1, 0x5, 0xfff, 0x0, 0x80]}) 7.732365011s ago: executing program 5 (id=2491): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETA(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket(0x10, 0x3, 0x0) recvmmsg(r3, 0x0, 0x0, 0x1a000, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x9, 0x7}]}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000000c0)=0x2) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000240)={@multicast, @remote, @val={@val={0x88a8, 0x5, 0x0, 0x2}, {0x8100, 0x0, 0x1, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x10, 0x3a, 0xff, @local, @mcast1, {[], @ndisc_ra={0x89, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x4100}}}}}}, 0x0) 7.704054136s ago: executing program 2 (id=2492): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4804, 0x5}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4000400) socket$kcm(0x29, 0x5, 0x0) syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13500}, 0x0, &(0x7f0000000480)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94) 7.658342368s ago: executing program 3 (id=2493): socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x1, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0xffffffff, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) readv(r1, &(0x7f0000001240), 0x0) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 7.056840189s ago: executing program 2 (id=2494): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x20940, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x513101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x200, 0x0) fcntl$dupfd(r2, 0x0, r2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc018aec0, &(0x7f00000000c0)={0x5, 0xffffffffffffffff, 0x1}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x401, 0x0, 0xfd, "0062ba7d06000000000004000000f713000001"}) r6 = syz_open_pts(r0, 0x0) dup3(r0, r6, 0x80000) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 4.313405232s ago: executing program 1 (id=2496): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r0, 0x0, 0x0) 4.170736255s ago: executing program 4 (id=2497): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$rtc(0x0, 0x80000001, 0x408000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r5, r4}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, 0x0, 0x0) syz_extract_tcp_res(0x0, 0x9801, 0x4e8dc768) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r7, 0x800c5012, &(0x7f0000000100)) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) 4.170165715s ago: executing program 5 (id=2498): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}}}, 0x24}}, 0x0) 3.061143804s ago: executing program 4 (id=2499): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) poll(&(0x7f0000000100)=[{r0, 0x400}], 0x1, 0x6) 3.060594025s ago: executing program 1 (id=2500): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008340)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0xfa, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r2, r0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000, 0x0, 0x3ff, 0x4, 0x100000000, 0x8000000000000000}, 0x0, &(0x7f00000001c0)={0x1f, 0x4, 0x7, 0x400000000000, 0x229c, 0x80000000, 0x800000000000004, 0x2}, 0x0, 0x0) 2.974887519s ago: executing program 4 (id=2501): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 2.766564821s ago: executing program 1 (id=2502): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000440)=ANY=[@ANYRES16=r1], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket(0x2c, 0x3, 0xff) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x9a, &(0x7f0000000480)={0x0, 0x5c46, 0x100, 0x7ffd, 0x1e3, 0x0, r3}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x2a, 0x0, r7, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@nfc={0x27, 0x0, 0x1, 0x2}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000003c0)="688e396f2303ba154fce4e724da51cea886ef85d6be1783ecb2f67105b67c108806b47ae426d021c5743e239e95a71306e0273dd6d2c7c9c10e95fa7a4b6084e2d7d0feb60e544c3bdcd723bc04b7c4729", 0x51}, {&(0x7f0000001640)="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", 0x1000}, {&(0x7f0000000500)="bf3be5a1f46dc19d2285d2d3ce87d241c205eb4459a46403182b4d67accf0764e8f8ad34ad0d50e297f4a3c7956d2f66ba9315543364b0fdb487db420ae4ade9ea78cb2411eddafc7bfcd1ca111b43ad0670a98332", 0x55}, {&(0x7f00000008c0)="d7964129fd3b45783b6b0e7e2316e176f45df8f998246cb7cddb23f8b4ebe7e960f4e77ea497b5386671da5164535ae4906918dba4dfa296c89216bc7bf503875cde01b17cf52b5d6ea2f3ad24be7740af0f6d861559d4420cd27cb88ea6507e2d68be64ae9e9caaafdcf576ac46e893fc00a40b24a429334c70ee9be3c2f9471590a52c8ccf8aac3dc6512d5d7f037a62a177c91cf079626fb2c3a06f51737165a2af9f570ea1325183939b10016a0881dfbe878a532429163b6335832f925859a9db6847e56bceeac0642b0159a9cca760aded8dd4075a9283633c3b9c50bbaf27b8df7f94faee25aa913a1f12afc36407338f", 0xf4}, {&(0x7f0000000580)="2d420807b616778ad257d1aefead329e6db459d42c5a60445d3645c42c5038f384d3efe364d307e78103f518b28711fdc2cfa41055185724816a8082388347967199968917afbe8b660861612ef84ab99b9b6b41a515f52e7650a063dd9155c52e81abdf854e787a06937bfe395f086550b7ab109ef979a3d0d377eaf9ca809993b8203b78fa8b9ffc4d0659c8d31c8e3c29dc9b364554606a494964ce28adbe192f", 0xa2}, {&(0x7f0000000180)="98af6b07d3", 0x5}], 0x6}, 0x0, 0x804, 0x1}) io_uring_enter(r4, 0x24a0, 0x4c1, 0x43, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740), 0x2, 0x5}}, 0x20) r9 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="810f26bd7000fcdbdfc3e5098aff"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4000010) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) fsetxattr(r10, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000040)='\x00', 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 2.697442298s ago: executing program 4 (id=2503): setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000}) setpriority(0x1, 0x0, 0x80000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x40, 0x107, 0x70bd2b, 0x25dfdbfa, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @typed={0x4, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r1, &(0x7f0000000140)=""/15, 0xf, 0x4) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) syz_80211_inject_frame(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000a"], 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r7, 0x4068aea3, &(0x7f0000000140)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000009b80)=""/102392, 0x18ff8) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffb}, {0x400000b1, 0x0, 0x8000000000000001}]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100"], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000240)=@NCI_OP_CORE_RESET_NTF={0x0, 0x1, 0x3, 0x0, 0x9, {0x45, 0x2, 0x20, 0x2, 0xf, 0x4}}, 0xc) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x7, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x0, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x4, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x3ff, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1f9, 0x1ff, 0xffffffff]}}) 2.655520531s ago: executing program 2 (id=2504): r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x271b, &(0x7f0000000440)=""/102392, &(0x7f00000000c0)=0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2e}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2000c000) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) 1.688904956s ago: executing program 1 (id=2505): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x73622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x8000000000}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x3c}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1.400377924s ago: executing program 1 (id=2506): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x4, 0xfffbfffd, 0x2, 0x0, "0c41920887e8d2b791f805000000000000006b", 0x4, 0x203}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x90) 993.24682ms ago: executing program 1 (id=2507): pipe(&(0x7f00000045c0)) socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff0700000059b97b2bf7444ffd7c1baba8d110dadbf270019229b2550687127e25a1f962060c3a884bfaa2dcee7cde8c236f2afc6e88040f14fcb79860c84683ffbdaef67f475dbd745f1132ce076b98708cd84a3ed51c6a407d17172e58158c5be6dced6dc943ebc433779baf2c2169549d0b9e4d3771743f57620bfa67eafc2e9b"], 0x14}}, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000080, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20) 992.38216ms ago: executing program 4 (id=2508): pipe(&(0x7f00000045c0)) socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff0700000059b97b2bf7444ffd7c1baba8d110dadbf270019229b2550687127e25a1f962060c3a884bfaa2dcee7cde8c236f2afc6e88040f14fcb79860c84683ffbdaef67f475dbd745f1132ce076b98708cd84a3ed51c6a407d17172e58158c5be6dced6dc943ebc433779baf2c2169549d0b9e4d3771743f57620bfa67eafc2e9b"], 0x14}}, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000080, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20) 0s ago: executing program 3 (id=2509): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1, 0x19, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500001c00000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) r3 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x2dee, 0x400, 0x82000006, 0x3d2}, &(0x7f0000000300)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): d bInterval 0, changing to 10 [ 537.534064][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.545752][ T9719] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 538.581605][ T23] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 538.593743][ T4230] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 538.849676][ T23] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 538.872415][ T4230] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 538.885824][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.027468][ T4230] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 539.039012][ T23] usb 5-1: config 0 descriptor?? [ 539.044164][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.086806][ T4230] usb 4-1: can't set config #27, error -71 [ 539.211215][ T4230] usb 4-1: USB disconnect, device number 30 [ 540.457347][ T7612] net_ratelimit: 5 callbacks suppressed [ 540.457365][ T7612] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 540.761980][ T7612] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 540.851856][T10841] device syzkaller0 entered promiscuous mode [ 540.915592][ T9528] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 541.108585][ T7612] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 541.891823][ T7612] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 542.086138][T10859] (syz.3.1830,10859,0):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 542.094996][T10859] (syz.3.1830,10859,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 542.384378][ C0] MPTCP: addr_signal error, add_addr=2, echo=1 [ 543.364968][ T1323] usb 5-1: USB disconnect, device number 29 [ 543.634200][ T7627] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 545.277463][T10691] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 545.445344][ T9528] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 545.673371][ T4271] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 545.748970][T10885] device syzkaller0 entered promiscuous mode [ 546.023934][T10691] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 546.249637][T10691] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 546.410809][T10691] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 547.198263][T10691] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 548.695951][ C0] MPTCP: addr_signal error, add_addr=2, echo=1 [ 548.710195][T10903] netlink: 'syz.2.1843': attribute type 1 has an invalid length. [ 548.874842][T10903] 8021q: adding VLAN 0 to HW filter on device bond14 [ 548.886170][T10691] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 548.993962][ T7612] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 549.010327][T10914] netlink: set zone limit has 8 unknown bytes [ 549.144046][ T7612] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 549.214927][T10914] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1846'. [ 549.287130][T10691] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 550.735075][T10691] net_ratelimit: 9 callbacks suppressed [ 550.735096][T10691] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 551.733523][ T1259] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 552.405781][ T7612] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 552.541372][ T7627] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 552.604492][T10647] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 552.818936][ T8906] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 553.166264][ T1298] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 553.302672][T10956] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 553.304814][ T8906] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 553.317571][T10956] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 553.322852][T10647] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.354571][T10647] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.366015][T10647] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 553.379542][T10647] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 553.390399][T10647] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.412979][T10647] usb 5-1: config 0 descriptor?? [ 553.613887][ T7] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 554.060595][ T1298] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 554.193891][ T8541] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 554.315845][T10647] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 554.324739][ T8476] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 554.355134][T10966] netlink: 'syz.0.1857': attribute type 1 has an invalid length. [ 554.365330][T10647] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 554.400371][T10966] 8021q: adding VLAN 0 to HW filter on device bond15 [ 554.423935][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.457726][ T7] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 554.565849][ T21] usb 5-1: USB disconnect, device number 30 [ 554.579857][ T7] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 554.612635][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.654313][ T7] usb 2-1: config 0 descriptor?? [ 554.775574][T10978] device syzkaller0 entered promiscuous mode [ 555.625934][T10995] device syzkaller0 entered promiscuous mode [ 555.860658][T11003] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1867'. [ 557.513933][ T9888] net_ratelimit: 9 callbacks suppressed [ 557.513995][ T9888] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 558.023296][ T7] usb 2-1: USB disconnect, device number 29 [ 558.030978][ C1] MPTCP: addr_signal error, add_addr=2, echo=1 [ 558.163992][T11008] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 558.227973][T11015] loop2: detected capacity change from 0 to 7 [ 558.228638][T11014] netlink: 'syz.0.1870': attribute type 1 has an invalid length. [ 558.290036][ T4304] Dev loop2: unable to read RDB block 7 [ 558.299766][T11014] 8021q: adding VLAN 0 to HW filter on device bond16 [ 558.314479][ T4304] loop2: AHDI p1 p2 p3 [ 558.318832][ T4304] loop2: partition table partially beyond EOD, truncated [ 558.327082][ T4304] loop2: p1 start 1601398130 is beyond EOD, truncated [ 558.334157][ T4304] loop2: p2 start 1702059890 is beyond EOD, truncated [ 558.344707][ T1298] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 558.361683][T11015] Dev loop2: unable to read RDB block 7 [ 558.464618][ T9888] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 558.483951][T11015] loop2: AHDI p1 p2 p3 [ 558.488322][T11015] loop2: partition table partially beyond EOD, truncated [ 558.504485][T11015] loop2: p1 start 1601398130 is beyond EOD, truncated [ 558.531801][T11015] loop2: p2 start 1702059890 is beyond EOD, truncated [ 558.614183][ T9029] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 558.744657][ T8803] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 558.864309][T11008] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 559.013790][ T9029] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 559.133861][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 559.204667][ T4194] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 559.243793][ T9029] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 559.643714][ T4194] usb 5-1: Using ep0 maxpacket: 32 [ 559.953965][ T4194] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.997305][ T4194] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.033907][ T4194] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 560.231274][ T4194] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.536358][ T4194] usb 5-1: config 0 descriptor?? [ 561.597906][T11048] device syzkaller0 entered promiscuous mode [ 561.943793][ T4266] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 562.014434][T11054] device syzkaller0 entered promiscuous mode [ 562.167219][ T4194] ft260 0003:0403:6030.001B: unknown main item tag 0x0 [ 562.210328][ T4194] ft260 0003:0403:6030.001B: unknown main item tag 0x0 [ 562.241116][ T4194] ft260 0003:0403:6030.001B: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 562.308701][T11061] netlink: 'syz.0.1884': attribute type 1 has an invalid length. [ 562.354915][T11061] 8021q: adding VLAN 0 to HW filter on device bond17 [ 562.385862][ T4266] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 562.399536][ T4266] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 562.409066][ T4266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.428476][ T4266] usb 4-1: config 0 descriptor?? [ 562.434257][ T4194] ft260 0003:0403:6030.001B: chip code: 0000 0000 [ 562.605250][ T8828] net_ratelimit: 18 callbacks suppressed [ 562.605267][ T8828] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 562.866827][ C0] MPTCP: addr_signal error, add_addr=2, echo=1 [ 562.866961][ C0] MPTCP: addr_signal error, add_addr=2, echo=1 [ 562.874053][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.887824][ T144] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 562.896046][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.904145][ T4194] ft260 0003:0403:6030.001B: failed to retrieve status: -32 [ 563.044922][ T9029] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 563.066363][T11075] netlink: 'syz.2.1889': attribute type 1 has an invalid length. [ 563.115866][T11075] 8021q: adding VLAN 0 to HW filter on device bond15 [ 563.161329][ T4266] usb 5-1: USB disconnect, device number 31 [ 563.216664][ T9029] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 563.465051][ T8828] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 563.599794][ T8828] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 563.984389][ T8828] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 564.270629][ T1298] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 564.425670][T11093] device syzkaller0 entered promiscuous mode [ 564.505192][ T8541] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 564.531819][ T4266] usb 4-1: USB disconnect, device number 31 [ 564.605197][T11104] netlink: 'syz.1.1896': attribute type 1 has an invalid length. [ 564.639484][T11104] 8021q: adding VLAN 0 to HW filter on device bond10 [ 564.767436][ T8541] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 565.923799][T10647] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 566.173791][T10647] usb 4-1: Using ep0 maxpacket: 32 [ 566.293884][T10647] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.313764][T10647] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.333831][T10647] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 566.342918][T10647] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.379567][T10647] usb 4-1: config 0 descriptor?? [ 566.876077][T10647] ft260 0003:0403:6030.001C: unknown main item tag 0x0 [ 566.883021][T10647] ft260 0003:0403:6030.001C: unknown main item tag 0x0 [ 566.905219][T10647] ft260 0003:0403:6030.001C: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 566.986475][T11152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1912'. [ 567.100667][T10647] ft260 0003:0403:6030.001C: chip code: 0000 0000 [ 567.710047][T11008] net_ratelimit: 13 callbacks suppressed [ 567.710816][T11008] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 568.325088][ T7627] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 568.445020][ T9443] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 568.563816][ T8803] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 568.693890][ T8803] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 568.815135][ T8803] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 568.946356][ T7627] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 569.064947][ T7627] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 569.073803][T10647] ft260 0003:0403:6030.001C: failed to retrieve status: -32 [ 569.434107][ T8803] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 569.680858][ T8803] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 570.100115][ T13] usb 4-1: USB disconnect, device number 32 [ 570.563803][T11181] fido_id[11181]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 570.921694][T11197] fuse: Bad value for 'fd' [ 571.106197][T11201] (syz.1.1924,11201,0):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 571.115209][T11201] (syz.1.1924,11201,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 571.844484][ T23] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 572.381636][ T23] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 572.392165][ T23] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 572.401341][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.415258][ T23] usb 5-1: config 0 descriptor?? [ 572.715964][ T144] net_ratelimit: 22 callbacks suppressed [ 572.716084][ T144] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 573.156424][ T7952] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 573.423078][ T144] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 574.045347][ T144] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 574.286397][ T7952] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 574.812959][ T7952] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 574.973798][ T7952] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 575.023251][T10647] usb 5-1: USB disconnect, device number 32 [ 575.080433][T11243] netlink: 'syz.4.1937': attribute type 1 has an invalid length. [ 575.162436][T11243] 8021q: adding VLAN 0 to HW filter on device bond9 [ 575.258634][ T23] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 575.280977][T11248] fuse: Bad value for 'fd' [ 575.335392][ T7952] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 575.485806][ T144] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 575.493581][ T4230] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 575.534197][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 575.604611][ T7215] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 575.683870][ T23] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.704910][ T23] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.723137][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 575.730334][ T23] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 575.746524][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.763804][T11257] device syzkaller0 entered promiscuous mode [ 575.769835][ T4230] usb 2-1: Using ep0 maxpacket: 32 [ 575.776554][ T23] usb 3-1: config 0 descriptor?? [ 575.907718][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.924877][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.955478][ T4230] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 575.975840][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.992967][ T4230] usb 2-1: config 0 descriptor?? [ 576.381091][ T23] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 576.389198][ T23] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 576.397260][ T23] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 576.405590][ T23] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 576.412675][ T23] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 576.420745][ T23] mcp2221 0003:04D8:00DD.001D: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 576.633268][ T4230] ft260 0003:0403:6030.001E: unknown main item tag 0x0 [ 576.809859][ T23] usb 3-1: USB disconnect, device number 24 [ 576.972320][ T4230] ft260 0003:0403:6030.001E: unknown main item tag 0x0 [ 577.196041][ T4230] ft260 0003:0403:6030.001E: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 577.359409][ T4230] ft260 0003:0403:6030.001E: chip code: 0000 0000 [ 577.519686][ T4230] ft260 0003:0403:6030.001E: failed to retrieve status: -32 [ 577.922376][T11276] net_ratelimit: 17 callbacks suppressed [ 577.922397][T11276] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 577.947049][ T4230] usb 2-1: USB disconnect, device number 30 [ 578.019111][T11279] fido_id[11279]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 578.107306][T11283] (syz.2.1947,11283,1):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 578.116278][T11283] (syz.2.1947,11283,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 578.124924][T11276] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 578.238633][ T1259] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 578.373912][ T7952] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 578.493865][T11276] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 578.604976][ T4230] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 578.625940][T11276] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 579.108057][T11290] ptrace attach of "./syz-executor exec"[11291] was attempted by "./syz-executor exec"[11290] [ 580.093775][ T154] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 580.203823][ T154] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 580.353822][T11275] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 580.410447][ T4230] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 580.430808][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.465718][ T4230] usb 5-1: config 0 descriptor?? [ 580.474605][ T1259] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 580.536471][ T4230] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 580.564456][T11295] device syzkaller0 entered promiscuous mode [ 580.894576][T11297] device syzkaller0 entered promiscuous mode [ 582.132515][T11315] fuse: Bad value for 'fd' [ 582.614205][ T4266] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 582.914062][ T4266] usb 2-1: Using ep0 maxpacket: 32 [ 583.027464][ T154] net_ratelimit: 12 callbacks suppressed [ 583.027483][ T154] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 583.040966][ T4230] gspca_stv06xx: I2C: Read error writing address: -71 [ 583.069492][ T4230] usb 5-1: USB disconnect, device number 33 [ 583.116294][ T4266] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.151558][ T4266] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.185332][T11328] bridge0: port 3(bond0) entered blocking state [ 583.192223][T11328] bridge0: port 3(bond0) entered disabled state [ 583.231897][T11328] device bond0 entered promiscuous mode [ 583.241444][T11328] device bond_slave_0 entered promiscuous mode [ 583.245733][ T4266] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 583.248619][T11328] device bond_slave_1 entered promiscuous mode [ 583.275761][ T4266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.303521][ T4370] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 583.330597][ T4266] usb 2-1: config 0 descriptor?? [ 583.443761][T11275] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 583.522754][T11340] device syzkaller0 entered promiscuous mode [ 583.618237][ T154] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 583.865982][ T154] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 583.957717][ T4266] ft260 0003:0403:6030.001F: unknown main item tag 0x0 [ 584.132544][ T4266] ft260 0003:0403:6030.001F: unknown main item tag 0x0 [ 584.393855][ T7627] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 584.425651][ T4266] ft260 0003:0403:6030.001F: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 584.629649][T11350] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 585.446864][T11347] device syzkaller0 entered promiscuous mode [ 585.483850][ T7627] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 585.523811][ T4266] ft260 0003:0403:6030.001F: failed to retrieve chip version [ 585.532672][ T4266] ft260: probe of 0003:0403:6030.001F failed with error -71 [ 585.557272][T11363] (syz.2.1968,11363,1):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 585.566238][T11363] (syz.2.1968,11363,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 585.593788][ T7627] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 585.643140][ T4266] usb 2-1: USB disconnect, device number 31 [ 585.714270][ T7627] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 585.764510][T11370] fuse: Invalid rootmode [ 586.105306][T11371] fido_id[11371]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 586.344431][T11361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 588.086086][T11350] net_ratelimit: 11 callbacks suppressed [ 588.086106][T11350] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 588.188340][T11398] device syzkaller0 entered promiscuous mode [ 588.283833][T11350] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 588.426343][T11350] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 588.593184][T11416] device syzkaller0 entered promiscuous mode [ 588.635313][T11350] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 588.743936][ T7599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 588.958604][ T154] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 589.224183][T11422] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 589.499009][T11424] fuse: Invalid rootmode [ 589.616007][ T7599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 589.773690][T11427] netlink: 'syz.4.1984': attribute type 1 has an invalid length. [ 589.811374][T11427] 8021q: adding VLAN 0 to HW filter on device bond10 [ 589.856208][ T7612] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 589.983872][ T7612] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 590.781058][T11447] device syzkaller0 entered promiscuous mode [ 592.643410][T11476] fuse: Invalid rootmode [ 592.668682][T11472] device syzkaller0 entered promiscuous mode [ 593.101317][T11422] net_ratelimit: 16 callbacks suppressed [ 593.101359][T11422] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 593.463987][ T4370] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 593.718884][ T4370] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 594.137424][ T7612] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 595.497933][ T1298] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 595.570332][T11505] device syzkaller0 entered promiscuous mode [ 595.704249][T11423] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 595.802545][T11517] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2007'. [ 595.874280][T11423] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 595.966035][T11525] fuse: Unknown parameter '00000000000000000000' [ 595.983917][T11276] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 596.013927][ T9967] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 596.088575][T11531] netlink: 'syz.0.2011': attribute type 1 has an invalid length. [ 596.169781][T11531] 8021q: adding VLAN 0 to HW filter on device bond18 [ 596.181423][ T1298] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 596.329566][T11535] device syzkaller1 entered promiscuous mode [ 596.546520][ T9967] usb 4-1: Using ep0 maxpacket: 32 [ 596.593877][ T1298] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 596.704037][ T9967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.727950][ T9967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.752684][ T9967] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 596.792846][ T9967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.848336][ T9967] usb 4-1: config 0 descriptor?? [ 596.955437][T11542] device syzkaller0 entered promiscuous mode [ 597.251576][ T23] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 598.006696][ T9967] ft260 0003:0403:6030.0020: unknown main item tag 0x0 [ 598.126110][ T9528] net_ratelimit: 6 callbacks suppressed [ 598.126137][ T9528] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 598.789247][ T9967] ft260 0003:0403:6030.0020: unknown main item tag 0x0 [ 598.811191][ T9967] ft260 0003:0403:6030.0020: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 598.890458][T11559] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2020'. [ 598.913991][T11423] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 598.924018][ T9967] ft260 0003:0403:6030.0020: chip code: 0000 0000 [ 599.044832][ T7612] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 599.056257][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 599.177284][ T7612] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 599.253298][ T9967] ft260 0003:0403:6030.0020: failed to retrieve status: -32 [ 599.317655][ T4370] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 599.364478][ T23] usb 3-1: config 1 has an invalid interface number: 108 but max is 0 [ 599.372721][ T23] usb 3-1: config 1 has no interface number 0 [ 599.433875][T11580] netlink: 'syz.0.2024': attribute type 1 has an invalid length. [ 599.470439][T11580] 8021q: adding VLAN 0 to HW filter on device bond19 [ 599.485377][ T4370] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 599.510123][ T13] usb 4-1: USB disconnect, device number 33 [ 599.543896][ T23] usb 3-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 599.564086][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.572227][ T23] usb 3-1: Product: syz [ 599.576600][ T23] usb 3-1: Manufacturer: syz [ 599.581344][ T23] usb 3-1: SerialNumber: syz [ 599.607937][ T9528] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 599.619951][T11583] fuse: Unknown parameter '00000000000000000000' [ 599.634612][ T23] hub 3-1:1.108: bad descriptor, ignoring hub [ 599.644580][ T23] hub: probe of 3-1:1.108 failed with error -5 [ 599.723946][ T9528] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 599.763823][ T23] usb 3-1: palm_os_4_probe - error -71 getting connection info [ 599.771600][ T23] visor 3-1:1.108: Handspring Visor / Palm OS converter detected [ 599.795116][ T23] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 599.817076][ T23] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 599.837077][T11585] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2026'. [ 599.846764][ T4370] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 599.884486][ T23] usb 3-1: USB disconnect, device number 25 [ 599.900170][ T23] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 599.989158][T11276] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 600.020160][ T23] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 600.039068][ T23] visor 3-1:1.108: device disconnected [ 600.229760][T11593] device syzkaller0 entered promiscuous mode [ 600.529397][T11602] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2031'. [ 600.629152][T11601] device syzkaller0 entered promiscuous mode [ 600.645795][T11604] netlink: 'syz.1.2034': attribute type 1 has an invalid length. [ 600.689639][T11604] 8021q: adding VLAN 0 to HW filter on device bond11 [ 600.701641][T11606] netlink: 'syz.0.2035': attribute type 1 has an invalid length. [ 600.737708][T11606] 8021q: adding VLAN 0 to HW filter on device bond20 [ 600.978810][T11619] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2038'. [ 601.222737][T11625] binder: 11624:11625 ioctl c0306201 0 returned -14 [ 601.306219][T11630] device syzkaller0 entered promiscuous mode [ 601.393948][ T4194] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 601.414960][T11633] device syzkaller0 entered promiscuous mode [ 601.505040][T11635] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2044'. [ 601.586179][T11639] fuse: Unknown parameter '00000000000000000000' [ 601.619907][T11641] bridge0: port 3(veth0_to_bridge) entered blocking state [ 601.633431][T11641] bridge0: port 3(veth0_to_bridge) entered disabled state [ 601.652907][T11641] device veth0_to_bridge entered promiscuous mode [ 601.659798][ T4194] usb 4-1: Using ep0 maxpacket: 32 [ 601.688868][T11641] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 601.741277][T11641] bridge0: port 3(veth0_to_bridge) entered blocking state [ 601.748683][T11641] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 601.799532][T11644] netlink: 'syz.1.2048': attribute type 1 has an invalid length. [ 601.824776][T11644] 8021q: adding VLAN 0 to HW filter on device bond12 [ 602.056353][T11649] device syzkaller0 entered promiscuous mode [ 602.067783][ T4194] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.080490][ T4194] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.090659][ T4194] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 602.100032][ T4194] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.119445][ T4194] usb 4-1: config 0 descriptor?? [ 602.746610][ T4194] ft260 0003:0403:6030.0021: unknown main item tag 0x0 [ 602.767203][ T4194] ft260 0003:0403:6030.0021: unknown main item tag 0x0 [ 602.834221][ T4194] ft260 0003:0403:6030.0021: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 602.872100][T11663] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2053'. [ 602.888693][T11663] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2053'. [ 602.937496][T11665] binder: 11664:11665 ioctl c0306201 0 returned -14 [ 602.974752][ T4194] ft260 0003:0403:6030.0021: chip code: 0000 0000 [ 603.071417][T11668] device syzkaller0 entered promiscuous mode [ 603.143803][T11276] net_ratelimit: 16 callbacks suppressed [ 603.143823][T11276] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 603.274247][ T1298] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 603.396920][ T4370] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 603.503939][ T4194] ft260 0003:0403:6030.0021: failed to retrieve status: -32 [ 603.517158][ T7612] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 603.530692][T11675] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2057'. [ 603.658849][T11276] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 603.798292][ T1298] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 603.824354][ C0] MPTCP: addr_signal error, add_addr=2, echo=1 [ 603.846159][ T13] usb 4-1: USB disconnect, device number 34 [ 603.984528][ T8476] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 604.113847][ T8476] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 604.206916][T11686] netlink: 'syz.0.2060': attribute type 1 has an invalid length. [ 604.246559][T11686] 8021q: adding VLAN 0 to HW filter on device bond21 [ 604.283794][T11276] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 604.395552][T11690] fuse: Unknown parameter 'user00000000000000000000' [ 604.404066][ T1298] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 604.848440][T11697] device syzkaller0 entered promiscuous mode [ 604.909935][T11701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 604.921572][T11701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 605.714773][T11702] binder: 11699:11702 ioctl c0306201 0 returned -14 [ 606.794276][T11713] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2068'. [ 608.154679][ T1259] net_ratelimit: 10 callbacks suppressed [ 608.154700][ T1259] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 608.233912][ T23] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 608.945151][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 608.957376][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 608.969754][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 608.982006][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 608.994457][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 609.006765][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 609.018979][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 609.031653][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 609.043994][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 609.858803][T11731] netlink: 'syz.0.2075': attribute type 1 has an invalid length. [ 609.983844][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 610.014137][T11731] 8021q: adding VLAN 0 to HW filter on device bond22 [ 610.140378][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.192735][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.267941][ T23] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 610.333798][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.381497][ T23] usb 3-1: config 0 descriptor?? [ 610.401571][T11738] fuse: Unknown parameter 'user00000000000000000000' [ 610.876794][ T23] ft260 0003:0403:6030.0022: unknown main item tag 0x0 [ 610.902267][ T23] ft260 0003:0403:6030.0022: unknown main item tag 0x0 [ 610.964156][ T23] ft260 0003:0403:6030.0022: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 611.196450][ T23] ft260 0003:0403:6030.0022: chip code: 0000 0000 [ 611.497988][T11749] device syzkaller0 entered promiscuous mode [ 611.523658][T11752] device syzkaller0 entered promiscuous mode [ 611.901285][ T23] ft260 0003:0403:6030.0022: failed to retrieve status: -32 [ 612.542512][ T23] usb 3-1: USB disconnect, device number 26 [ 612.926423][T11772] device syzkaller0 entered promiscuous mode [ 612.976753][T11768] fido_id[11768]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 613.163834][ C0] net_ratelimit: 6817 callbacks suppressed [ 613.163852][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 613.182452][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 613.195469][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 613.208852][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 613.222164][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 613.234617][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 613.247836][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 613.260388][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 613.273349][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 613.286009][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 613.685941][T11773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.874642][T11796] fuse: Unknown parameter 'user00000000000000000000' [ 614.532101][T11805] device syzkaller0 entered promiscuous mode [ 615.047413][T11813] loop9: detected capacity change from 0 to 7 [ 615.335343][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 615.346546][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 615.817364][T11815] loop_set_status: loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 615.817364][T11815] ) has still dirty pages (nrpages=1) [ 615.900222][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 615.911270][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 615.921165][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 615.932151][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 615.976780][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 615.982098][ T4194] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 615.987790][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 616.055637][T11830] device syzkaller0 entered promiscuous mode [ 616.062416][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 616.073513][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 616.083322][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 616.094399][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 616.110127][T11834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2104'. [ 616.129719][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 616.140673][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 616.151305][T11813] ldm_validate_partition_table(): Disk read failed. [ 616.168661][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 616.179744][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 616.219162][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 616.230255][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 616.304274][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 616.315371][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 616.378378][T11813] Dev loop9: unable to read RDB block 0 [ 616.438434][ T4194] usb 5-1: Using ep0 maxpacket: 32 [ 616.456502][T11813] loop9: unable to read partition table [ 616.481732][T11813] loop9: partition table beyond EOD, truncated [ 616.510719][T11813] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 616.510719][T11813] ) failed (rc=-5) [ 616.606425][ T4194] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.623562][ T4194] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.717340][ T4194] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 616.734296][T11848] fuse: Unknown parameter 'user_i00000000000000000000' [ 616.752048][ T4194] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.779991][ T4194] usb 5-1: config 0 descriptor?? [ 617.080514][T11852] device syzkaller0 entered promiscuous mode [ 617.295121][ T4194] ft260 0003:0403:6030.0023: unknown main item tag 0x0 [ 617.302459][ T4194] ft260 0003:0403:6030.0023: unknown main item tag 0x0 [ 617.434335][ T4194] ft260 0003:0403:6030.0023: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 617.613188][ T4194] ft260 0003:0403:6030.0023: chip code: 0000 0000 [ 617.995502][T11873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2115'. [ 618.082688][ T4194] ft260 0003:0403:6030.0023: failed to retrieve status: -32 [ 618.209133][ C0] net_ratelimit: 8075 callbacks suppressed [ 618.209153][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 618.227983][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 618.240475][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 618.253050][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 618.265553][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 618.278091][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 618.290572][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 618.303045][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 618.315521][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 618.327951][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 619.023703][ T1323] usb 5-1: USB disconnect, device number 34 [ 619.113209][T11889] device syzkaller0 entered promiscuous mode [ 619.451079][T11895] fuse: Unknown parameter 'user_i00000000000000000000' [ 622.127873][T11923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2129'. [ 622.520461][T11934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2135'. [ 622.564946][T11936] fuse: Unknown parameter 'user_i00000000000000000000' [ 623.844681][ C0] net_ratelimit: 4186 callbacks suppressed [ 623.844699][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 623.850523][T11008] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 623.870356][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 623.882603][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 623.894967][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 623.907455][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 623.919819][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 623.932074][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 623.944336][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 623.956583][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 624.316045][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.322925][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.023069][T11960] (syz.3.2140,11960,0):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 625.062340][T11960] (syz.3.2140,11960,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 626.379966][T11966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2144'. [ 626.698411][T11973] kAFS: unable to lookup cell 'Þ({^ú@' [ 627.833003][T11984] fuse: Unknown parameter 'user_id00000000000000000000' [ 628.937110][ C0] net_ratelimit: 4936 callbacks suppressed [ 628.937125][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 628.955661][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 628.967984][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 628.980393][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 628.993003][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 629.005323][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 629.017880][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 629.030167][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 629.042543][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 629.054827][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 630.541886][ T4194] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 630.560642][T12006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2156'. [ 631.142772][ T4194] usb 5-1: Using ep0 maxpacket: 32 [ 631.193006][T12019] print_req_error: 9 callbacks suppressed [ 631.193023][T12019] blk_update_request: I/O error, dev loop5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 631.209916][T12019] ADFS-fs (loop5): error: unable to read block 3, try 0 [ 631.277242][T12016] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 631.393711][ T4194] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.405332][ T4194] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.432017][ T4194] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 631.455265][ T4194] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.490399][ T4194] usb 5-1: config 0 descriptor?? [ 632.064489][ T4194] ft260 0003:0403:6030.0024: unknown main item tag 0x0 [ 632.813677][ T4194] ft260 0003:0403:6030.0024: unknown main item tag 0x0 [ 632.852615][ T4194] ft260 0003:0403:6030.0024: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 632.886230][T12031] fuse: Unknown parameter 'user_id00000000000000000000' [ 633.052712][ T4194] ft260 0003:0403:6030.0024: chip code: 0000 0000 [ 633.843956][ T4194] ft260 0003:0403:6030.0024: failed to retrieve status: -71 [ 633.871077][ T4194] ft260 0003:0403:6030.0024: failed to reset I2C controller: -71 [ 633.943789][ C0] net_ratelimit: 4624 callbacks suppressed [ 633.943804][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 633.961953][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 633.974359][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 633.986637][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 633.999072][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 634.011736][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 634.025514][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 634.037856][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 634.050599][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 634.062918][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 634.089022][ T4194] usb 5-1: USB disconnect, device number 35 [ 634.711398][T12049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2168'. [ 634.792133][ C0] MPTCP: addr_signal error, add_addr=2, echo=1 [ 636.448829][T12078] fuse: Unknown parameter 'user_id00000000000000000000' [ 638.098082][ T1323] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 638.304060][T12091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2181'. [ 638.413775][ T1323] usb 4-1: Using ep0 maxpacket: 32 [ 638.539857][ T1323] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 638.549979][ T1323] usb 4-1: config 0 has no interface number 0 [ 638.752672][ T1323] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 638.769347][ T1323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.784340][ T1323] usb 4-1: Product: syz [ 638.788659][ T1323] usb 4-1: Manufacturer: syz [ 638.793284][ T1323] usb 4-1: SerialNumber: syz [ 638.848304][ T1323] usb 4-1: config 0 descriptor?? [ 638.894995][ T1323] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 638.953651][ C0] net_ratelimit: 7035 callbacks suppressed [ 638.953671][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 638.972123][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 638.984573][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 638.996892][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 639.009362][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 639.021764][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 639.034313][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 639.046669][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 639.058945][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 639.071566][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 639.164721][ T1323] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 639.191546][T12095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2183'. [ 639.238341][ T1323] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 639.603080][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 639.665309][T10647] usb 4-1: USB disconnect, device number 35 [ 639.703513][T10647] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 639.762342][T10647] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 639.802846][T10647] quatech2 4-1:0.51: device disconnected [ 643.980698][ C0] net_ratelimit: 3774 callbacks suppressed [ 643.980718][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 643.998926][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 644.011378][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 644.023686][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 644.035956][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 644.046061][T11008] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 644.048976][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 644.067751][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 644.080000][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 644.092201][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 644.591971][T12138] netlink: 'syz.0.2192': attribute type 1 has an invalid length. [ 644.656982][T12138] 8021q: adding VLAN 0 to HW filter on device bond23 [ 644.796914][T12155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2196'. [ 645.784514][T12165] device syzkaller0 entered promiscuous mode [ 646.792315][T12169] (syz.0.2197,12169,0):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 646.801084][T12169] (syz.0.2197,12169,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 648.993925][ C0] net_ratelimit: 2577 callbacks suppressed [ 648.993945][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 649.012254][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 649.024584][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 649.037011][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 649.049720][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 649.062068][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 649.074534][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 649.086837][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 649.099139][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 649.111422][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 649.598138][T12208] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 649.634277][T12208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 649.652974][T12208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 649.961575][ C1] MPTCP: addr_signal error, add_addr=2, echo=1 [ 650.679670][T12221] (syz.3.2214,12221,1):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 650.696572][T12221] (syz.3.2214,12221,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 651.721283][T12230] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2219'. [ 651.741662][T12233] device syzkaller0 entered promiscuous mode [ 651.824650][ T4229] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 652.629404][ T4229] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 652.653550][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.702669][ T4229] usb 5-1: Product: syz [ 652.733154][ T4229] usb 5-1: Manufacturer: syz [ 652.767884][ T4229] usb 5-1: SerialNumber: syz [ 652.779413][ T4229] usb 5-1: config 0 descriptor?? [ 653.283937][ T4229] usb 5-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -32 [ 653.319296][ T4229] usb 5-1: Firmware version (0.0) predates our first public release. [ 653.343809][ T4229] usb 5-1: Please update to version 0.2 or newer [ 653.384039][ T4229] usb 5-1: Firmware: build ¶ [ 653.388970][ T4229] usb 5-1: atusb_probe: initialization failed, error = -32 [ 653.404658][ T4229] atusb: probe of 5-1:0.0 failed with error -32 [ 653.643379][ T21] usb 5-1: USB disconnect, device number 36 [ 654.013274][ C0] net_ratelimit: 3825 callbacks suppressed [ 654.013296][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 654.031703][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 654.044718][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 654.057210][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 654.069735][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 654.070301][ T9888] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 654.082463][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 654.102022][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 654.114567][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 654.127165][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 654.436626][T12260] binder: BINDER_SET_CONTEXT_MGR already set [ 654.447579][T12260] binder: 12258:12260 ioctl 4018620d 200000004a80 returned -16 [ 655.092189][ C0] MPTCP: addr_signal error, add_addr=2, echo=1 [ 655.226313][T12266] fuse: Unknown parameter '0x0000000000000003' [ 655.417650][T12269] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2231'. [ 655.447382][T12269] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2231'. [ 656.054925][T12274] (syz.4.2227,12274,1):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 656.113879][T12274] (syz.4.2227,12274,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 657.232389][ T7] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 658.190519][ T7] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 658.202715][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.273633][ T7] usb 2-1: Product: syz [ 658.278053][ T7] usb 2-1: Manufacturer: syz [ 658.282682][ T7] usb 2-1: SerialNumber: syz [ 658.334364][ T7] usb 2-1: config 0 descriptor?? [ 658.938171][ T7] usb 2-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -32 [ 658.966858][ T7] usb 2-1: Firmware version (0.0) predates our first public release. [ 658.999849][ T7] usb 2-1: Please update to version 0.2 or newer [ 659.013723][ C0] net_ratelimit: 4554 callbacks suppressed [ 659.013740][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 659.014319][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 659.014722][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 659.015295][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 659.015704][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 659.016252][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 659.016687][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 659.017254][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 659.017660][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 659.017812][T11008] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 660.477016][ T7] usb 2-1: atusb_probe: initialization failed, error = -32 [ 660.497046][ T7] atusb: probe of 2-1:0.0 failed with error -32 [ 660.516788][T12310] fuse: Unknown parameter '0x0000000000000003' [ 660.609349][ T7] usb 2-1: USB disconnect, device number 32 [ 661.630507][T12321] sp0: Synchronizing with TNC [ 662.496718][T12321] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 662.505979][T12321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 662.513525][T12321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 663.831015][T12327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2247'. [ 663.910982][T12329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2247'. [ 664.007662][T12332] device syzkaller0 entered promiscuous mode [ 664.023739][ C1] net_ratelimit: 2127 callbacks suppressed [ 664.023759][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 664.042753][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.055430][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.062536][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 664.069702][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 664.081075][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 664.092979][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.104675][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 664.116854][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.128631][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 665.434608][ C0] MPTCP: addr_signal error, add_addr=2, echo=1 [ 666.342060][T12344] (syz.0.2252,12344,0):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 666.482608][T12344] (syz.0.2252,12344,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 667.767731][T12355] tipc: Enabled bearer , priority 0 [ 667.814131][T12355] device syzkaller0 entered promiscuous mode [ 667.910752][T12360] fuse: Unknown parameter '0x0000000000000003' [ 667.926765][T12355] tipc: Resetting bearer [ 667.954501][T12354] tipc: Resetting bearer [ 668.001474][T12354] tipc: Disabling bearer [ 668.869341][T12372] device geneve2 entered promiscuous mode [ 669.063050][ C0] net_ratelimit: 8073 callbacks suppressed [ 669.063067][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 669.081301][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 669.093630][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 669.105929][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 669.118202][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 669.131224][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 669.143822][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 669.156198][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 669.168476][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 669.180841][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 670.828522][T12393] 9pnet: Insufficient options for proto=fd [ 670.874616][T12393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 670.907527][T12393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 673.729426][T12402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2268'. [ 673.788129][T12402] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.795549][T12402] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.051697][T12405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2270'. [ 674.064144][ C1] net_ratelimit: 3045 callbacks suppressed [ 674.064163][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 674.082866][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.095165][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.107497][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 674.120088][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 674.132930][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.145251][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.157577][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 674.170606][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 674.183239][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.608343][T12413] tipc: Enabled bearer , priority 0 [ 675.648740][ T4194] tipc: Node number set to 900214536 [ 675.683292][T12413] tipc: Disabling bearer [ 675.716305][T12420] autofs4:pid:12420:autofs_fill_super: called with bogus options [ 679.073823][ C1] net_ratelimit: 5344 callbacks suppressed [ 679.073846][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 679.077165][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 679.081545][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.092705][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 679.104593][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.116427][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 679.128539][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 679.140823][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 679.153364][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 679.164491][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 679.328110][T12450] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 679.380375][T12450] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 680.802819][T12455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2282'. [ 681.029949][T12469] device syzkaller0 entered promiscuous mode [ 681.155600][T12480] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2288'. [ 681.232616][T12480] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2288'. [ 682.633788][ T26] audit: type=1326 audit(1773177337.372:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12498 comm="syz.3.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6380db799 code=0x7ffc0000 [ 682.709535][ T26] audit: type=1326 audit(1773177337.372:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12498 comm="syz.3.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6380db799 code=0x7ffc0000 [ 682.860136][T12501] team0 (unregistering): Port device team_slave_0 removed [ 682.903667][ T26] audit: type=1326 audit(1773177337.382:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12498 comm="syz.3.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fc6380db799 code=0x7ffc0000 [ 682.926050][ C1] vkms_vblank_simulate: vblank timer overrun [ 683.036445][T12501] team0 (unregistering): Port device team_slave_1 removed [ 683.211772][ T26] audit: type=1326 audit(1773177337.382:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12498 comm="syz.3.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6380db799 code=0x7ffc0000 [ 683.293683][ T26] audit: type=1326 audit(1773177337.382:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12498 comm="syz.3.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6380db799 code=0x7ffc0000 [ 683.463763][ T26] audit: type=1326 audit(1773177337.402:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12498 comm="syz.3.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fc6380db799 code=0x7ffc0000 [ 683.603864][ T26] audit: type=1326 audit(1773177337.402:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12498 comm="syz.3.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6380db799 code=0x7ffc0000 [ 683.626642][ C1] vkms_vblank_simulate: vblank timer overrun [ 683.774612][ T26] audit: type=1326 audit(1773177337.402:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12498 comm="syz.3.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6380db799 code=0x7ffc0000 [ 683.899517][ T26] audit: type=1326 audit(1773177337.402:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12498 comm="syz.3.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc6380db799 code=0x7ffc0000 [ 684.026845][ T26] audit: type=1326 audit(1773177337.402:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12498 comm="syz.3.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6380db799 code=0x7ffc0000 [ 684.088176][ C0] net_ratelimit: 10317 callbacks suppressed [ 684.088191][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 684.106614][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 684.119174][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 684.132037][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 684.144578][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 684.156998][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 684.169428][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 684.181716][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 684.194179][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 684.206558][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 685.553176][T12522] kAFS: unable to lookup cell 'Þ({^ú@' [ 685.672469][T12525] binder: BINDER_SET_CONTEXT_MGR already set [ 685.794492][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.800872][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.850662][T12525] binder: 12524:12525 ioctl 4018620d 200000004a80 returned -16 [ 685.974792][ C0] MPTCP: addr_signal error, add_addr=2, echo=1 [ 686.978284][T12538] device syzkaller0 entered promiscuous mode [ 687.442186][T12550] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2306'. [ 688.152317][T12562] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 688.248302][T12562] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 689.099253][ C1] net_ratelimit: 6789 callbacks suppressed [ 689.099268][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.117591][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 689.130377][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 689.142923][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.155167][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.167416][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 689.179873][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 689.192026][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.204222][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.216511][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 689.342469][T12568] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 689.787187][T12568] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 692.820424][T12603] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2322'. [ 692.877113][T12603] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2322'. [ 694.103990][ C1] net_ratelimit: 7097 callbacks suppressed [ 694.104005][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 694.122611][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.135010][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.147474][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 694.160261][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 694.172518][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.184906][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.197321][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 694.210290][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 694.223007][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.902475][T10647] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 696.413212][T10647] usb 4-1: Using ep0 maxpacket: 16 [ 696.742478][T10647] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.776072][T10647] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 696.808727][T10647] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 696.999962][T12646] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2337'. [ 697.037679][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 697.037695][ T26] audit: type=1326 audit(1773177351.782:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.1.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fbcaa0799 code=0x7ffc0000 [ 697.089188][T12646] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2337'. [ 697.292502][T12647] loop6: detected capacity change from 0 to 7 [ 697.702267][ T26] audit: type=1326 audit(1773177351.902:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.1.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f1fbcaa0799 code=0x7ffc0000 [ 697.724829][ C1] vkms_vblank_simulate: vblank timer overrun [ 697.753650][T10647] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 697.762765][T10647] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.816657][ T26] audit: type=1326 audit(1773177351.902:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.1.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fbcaa0799 code=0x7ffc0000 [ 697.839200][ C1] vkms_vblank_simulate: vblank timer overrun [ 697.846180][ T4304] Dev loop6: unable to read RDB block 7 [ 697.851832][ T4304] loop6: AHDI p2 p3 [ 697.886577][ T4304] loop6: partition table partially beyond EOD, truncated [ 697.902032][ T4304] loop6: p2 size 157513074 extends beyond EOD, truncated [ 697.965660][T10647] usb 4-1: config 0 descriptor?? [ 698.057319][ T26] audit: type=1326 audit(1773177351.902:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.1.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1fbcaa0799 code=0x7ffc0000 [ 698.265792][ T26] audit: type=1326 audit(1773177351.912:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.1.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fbcaa0799 code=0x7ffc0000 [ 698.288289][ C1] vkms_vblank_simulate: vblank timer overrun [ 699.407055][T12647] Dev loop6: unable to read RDB block 7 [ 699.412686][T12647] loop6: AHDI p2 p3 [ 699.419280][T12647] loop6: partition table partially beyond EOD, truncated [ 699.429825][ C1] net_ratelimit: 6520 callbacks suppressed [ 699.429852][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.439847][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 699.448762][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 699.460752][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 699.473886][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 699.485103][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 699.496899][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.509041][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 699.521227][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.533095][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 699.567690][T10647] HID 045e:07da: Invalid code 65791 type 1 [ 699.604279][ T26] audit: type=1326 audit(1773177351.912:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.1.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1fbcaa0799 code=0x7ffc0000 [ 699.649008][ T26] audit: type=1326 audit(1773177351.912:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.1.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fbcaa0799 code=0x7ffc0000 [ 699.672002][ T26] audit: type=1326 audit(1773177351.922:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.1.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1fbcaa0799 code=0x7ffc0000 [ 699.696006][ T26] audit: type=1326 audit(1773177351.922:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.1.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fbcaa0799 code=0x7ffc0000 [ 699.740496][ T26] audit: type=1326 audit(1773177351.922:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.1.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1fbcaa0799 code=0x7ffc0000 [ 700.738866][T12647] loop6: p2 size 157513074 extends beyond EOD, truncated [ 700.746490][T10647] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0025/input/input20 [ 700.945830][T10647] microsoft 0003:045E:07DA.0025: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 701.130658][ T4229] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 701.182186][T10647] usb 4-1: USB disconnect, device number 36 [ 701.611860][ T4304] udevd[4304]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 701.797464][ T4229] hid-generic 0000:0000:0000.0026: hidraw1: HID v0.00 Device [syz1] on syz0 [ 702.041056][T12675] fido_id[12675]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 702.081758][T12676] (syz.3.2343,12676,1):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 702.090671][T12676] (syz.3.2343,12676,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 702.638098][T12685] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 702.674459][T12685] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 702.976558][T12695] binder: BINDER_SET_CONTEXT_MGR already set [ 703.144340][T12695] binder: 12694:12695 ioctl 4018620d 200000004a80 returned -16 [ 703.704534][T12702] device syzkaller0 entered promiscuous mode [ 703.786188][T12702] tc action pedit offset must be on 32 bit boundaries [ 703.844297][T12704] kAFS: unable to lookup cell 'Þ({^ú@' [ 704.433867][ C1] net_ratelimit: 7970 callbacks suppressed [ 704.433888][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.442220][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 704.452922][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 704.464877][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 704.478308][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 704.489205][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 704.501860][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.513069][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 704.524952][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.536689][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 704.594369][T12717] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2356'. [ 704.670183][T12720] netlink: 'syz.2.2358': attribute type 1 has an invalid length. [ 704.872388][T12720] 8021q: adding VLAN 0 to HW filter on device bond16 [ 708.218763][T12744] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 708.233987][T12744] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 708.475656][T12768] netlink: 'syz.0.2371': attribute type 1 has an invalid length. [ 708.864554][T12773] (syz.3.2370,12773,0):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 708.873835][T12773] (syz.3.2370,12773,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 708.891751][T12777] syz.2.2373 uses obsolete (PF_INET,SOCK_PACKET) [ 708.946127][T12768] 8021q: adding VLAN 0 to HW filter on device bond24 [ 709.443961][ C0] net_ratelimit: 5224 callbacks suppressed [ 709.443998][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 709.463611][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 709.476817][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 709.490734][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 709.504413][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 709.518386][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 709.532332][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 709.535059][T12783] netlink: set zone limit has 8 unknown bytes [ 709.545658][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 709.563053][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 712.440122][T12808] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 712.473661][T12808] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 715.055496][ C0] net_ratelimit: 4290 callbacks suppressed [ 715.055515][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 715.064999][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.074682][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 715.086407][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.098139][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 715.110425][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 715.122449][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 715.135245][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 715.146262][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 715.158474][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 718.127016][T12836] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2388'. [ 718.384525][ T7] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 718.468896][T12872] netlink: 'syz.4.2394': attribute type 6 has an invalid length. [ 719.106801][ T4266] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 719.531603][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.570099][ T7] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 719.607880][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.304682][ T7] usb 3-1: config 0 descriptor?? [ 720.311712][ C0] net_ratelimit: 4958 callbacks suppressed [ 720.311725][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 720.329840][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 720.342077][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 720.354358][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 720.366542][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 720.378738][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 720.390923][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 720.403103][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 720.415308][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 720.427477][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 720.443953][ T4194] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 720.541076][ T7] pwc: Askey VC010 type 2 USB webcam detected. [ 720.703712][ T4266] usb 2-1: unable to get BOS descriptor or descriptor too short [ 720.850913][ T4266] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 720.863999][ T4266] usb 2-1: can't read configurations, error -71 [ 721.009559][ T7] pwc: recv_control_msg error -32 req 02 val 2b00 [ 721.031750][ T4194] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.042818][ T4194] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 721.077552][ T7] pwc: recv_control_msg error -32 req 02 val 2700 [ 721.155556][ T7] pwc: recv_control_msg error -32 req 02 val 2c00 [ 721.212018][ T7] pwc: recv_control_msg error -32 req 04 val 1000 [ 721.303198][ T4194] usb 5-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 721.328354][ T7] pwc: recv_control_msg error -32 req 04 val 1300 [ 721.348882][ T4194] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.357653][ T4194] usb 5-1: Product: syz [ 721.375992][ T4194] usb 5-1: Manufacturer: syz [ 721.392090][ T4194] usb 5-1: SerialNumber: syz [ 721.405242][ T7] pwc: recv_control_msg error -32 req 04 val 1400 [ 721.425336][ T4194] usb 5-1: config 0 descriptor?? [ 721.482531][ T7] pwc: recv_control_msg error -32 req 02 val 2000 [ 721.556442][ T4194] usb 5-1: can't set config #0, error -71 [ 721.585077][ T7] pwc: recv_control_msg error -32 req 02 val 2100 [ 721.603179][ T4194] usb 5-1: USB disconnect, device number 37 [ 721.642613][ T7] pwc: recv_control_msg error -32 req 04 val 1500 [ 721.703791][ T7] pwc: recv_control_msg error -32 req 02 val 2500 [ 721.983449][ T7] pwc: recv_control_msg error -71 req 02 val 2600 [ 722.099104][ T7] pwc: recv_control_msg error -71 req 02 val 2900 [ 722.172620][ T7] pwc: recv_control_msg error -71 req 02 val 2800 [ 722.322819][ T7] pwc: recv_control_msg error -71 req 04 val 1100 [ 722.385833][ T7] pwc: recv_control_msg error -71 req 04 val 1200 [ 722.402208][ T7] pwc: Registered as video103. [ 722.437135][ T7] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input22 [ 722.568712][ T7] usb 3-1: USB disconnect, device number 27 [ 723.978450][ T4229] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 724.430486][ T4229] usb 3-1: Using ep0 maxpacket: 16 [ 724.742037][ T4229] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 724.764590][ T4229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.861747][ T4229] usb 3-1: config 0 descriptor?? [ 725.026199][ T4229] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 725.401319][ C1] net_ratelimit: 8270 callbacks suppressed [ 725.401335][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.419679][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.432181][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 725.438995][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 725.446221][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 725.457233][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 725.469413][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.482012][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 725.495199][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.505776][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 726.456598][T12920] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2408'. [ 727.976021][ T4229] gspca_sonixj: i2c_w8 err -71 [ 728.088698][ T4229] sonixj: probe of 3-1:0.0 failed with error -71 [ 728.366907][ T4229] usb 3-1: USB disconnect, device number 28 [ 728.492591][T12936] (syz.3.2414,12936,0):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 728.501378][T12936] (syz.3.2414,12936,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 728.609998][T10647] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 729.259993][T10647] usb 5-1: Using ep0 maxpacket: 32 [ 730.194044][T10647] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 730.203442][T10647] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.275194][T10647] usb 5-1: config 0 descriptor?? [ 730.404812][ C0] net_ratelimit: 5377 callbacks suppressed [ 730.404826][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 730.423162][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 730.435383][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 730.447658][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 730.459870][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 730.472255][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 730.484617][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 730.497211][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 730.509568][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 730.521864][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 730.554812][T10647] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 730.595404][T10647] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 730.721625][T10647] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 730.798396][T10647] usb 5-1: media controller created [ 730.871562][T10647] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 731.019449][T10647] az6027: usb out operation failed. (-71) [ 731.065187][T10647] az6027: usb out operation failed. (-71) [ 731.070961][T10647] stb0899_attach: Driver disabled by Kconfig [ 731.098728][T10647] az6027: no front-end attached [ 731.098728][T10647] [ 731.173359][T10647] az6027: usb out operation failed. (-71) [ 731.196667][T10647] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 731.229617][T10647] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input23 [ 731.283049][T10647] dvb-usb: schedule remote query interval to 400 msecs. [ 731.334004][T10647] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 731.450525][T10647] usb 5-1: USB disconnect, device number 38 [ 733.440513][T10647] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 733.778559][T12950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 734.741958][ T4913] bond4: (slave vlan2): Releasing backup interface [ 735.062291][T12984] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2424'. [ 735.413985][ C1] net_ratelimit: 5643 callbacks suppressed [ 735.414002][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 735.435565][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.447870][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.460260][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 735.472779][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 735.485037][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.497663][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.510173][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 735.523354][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 735.536158][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.576440][T12985] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.585830][T12985] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.594759][T12985] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.603646][T12985] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.712366][T12985] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.721332][T12985] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.730370][T12985] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.739283][T12985] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.925462][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 736.211992][T12972] chnl_net:caif_netlink_parms(): no params data found [ 736.967119][T12972] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.094348][T12972] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.133072][T12972] device bridge_slave_0 entered promiscuous mode [ 737.194971][T12972] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.252180][T12972] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.294851][T12972] device bridge_slave_1 entered promiscuous mode [ 737.383981][T12972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.439276][T12998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2426'. [ 737.485811][T12972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.635534][T12972] team0: Port device team_slave_0 added [ 737.659013][T12972] team0: Port device team_slave_1 added [ 737.902791][T12972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.931947][T12972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.001461][T12972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.113211][T13007] tmpfs: Bad value for 'mpol' [ 738.484107][ T21] Bluetooth: hci5: command 0x041b tx timeout [ 738.512105][T13003] tipc: Enabling of bearer rejected, failed to enable media [ 738.554318][T12972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.561322][T12972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.640580][T12972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.781611][T12972] device hsr_slave_0 entered promiscuous mode [ 739.063538][T12972] device hsr_slave_1 entered promiscuous mode [ 739.079468][T12972] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 739.093307][T12972] Cannot create hsr debugfs directory [ 739.914285][T12972] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 739.949161][T12972] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 740.003323][T12972] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 740.608518][T12972] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 740.615675][ C0] net_ratelimit: 5901 callbacks suppressed [ 740.615691][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 740.618444][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 740.622454][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 740.635822][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.647119][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 740.659201][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.670815][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 740.682892][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 740.694931][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 740.707934][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 740.762614][ T9967] Bluetooth: hci5: command 0x040f tx timeout [ 740.792335][T13034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2436'. [ 741.949033][T12972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.140257][T11346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 742.154426][T11346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 742.196289][T12972] 8021q: adding VLAN 0 to HW filter on device team0 [ 742.359115][T11346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 742.408860][T11346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 742.436870][T11346] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.444032][T11346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 742.500506][T11346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 742.590114][T11346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 742.865430][T11346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 742.915849][ T21] Bluetooth: hci5: command 0x0419 tx timeout [ 742.937437][T11346] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.944744][T11346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 742.957230][T11346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 743.091499][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 743.107930][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 743.170379][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 743.179542][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 743.226472][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 743.254556][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 743.286444][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 743.295275][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 743.317431][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 743.379353][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 743.996047][ T7217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 744.021600][ T7217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 744.112808][T12972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 744.820773][ T4194] Bluetooth: hci0: command 0x1003 tx timeout [ 744.834672][ T4195] Bluetooth: hci0: sending frame failed (-49) [ 745.578837][T11346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 745.590934][T11346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 745.647393][ C1] net_ratelimit: 4437 callbacks suppressed [ 745.647412][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 745.649646][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 745.655459][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.666051][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 745.678519][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.690635][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 745.702486][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 745.714121][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 745.727289][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 745.738883][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 746.170257][T13095] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 746.189417][T13095] F2FS-fs (loop3): Unable to read 1th superblock [ 746.206356][T13095] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 746.222942][T13095] F2FS-fs (loop3): Unable to read 2th superblock [ 746.383382][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 746.408100][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 746.483699][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 746.523101][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 746.551694][T12972] device veth0_vlan entered promiscuous mode [ 746.642430][T12972] device veth1_vlan entered promiscuous mode [ 747.011340][ T4194] Bluetooth: hci0: command 0x1001 tx timeout [ 747.273675][ T4195] Bluetooth: hci0: sending frame failed (-49) [ 747.274144][T11468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 747.309378][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.315759][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.519296][T11468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 747.600483][T12972] device veth0_macvtap entered promiscuous mode [ 747.611356][T12972] device veth1_macvtap entered promiscuous mode [ 747.744960][T11468] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 747.753402][T11468] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 747.798394][T12972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.859149][T12972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.892991][T12972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.941926][T12972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.962633][T12972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 748.007870][T12972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.036816][T12972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 748.122099][T12972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.156048][T13110] 9pnet: Insufficient options for proto=fd [ 748.164446][T13110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 748.175822][T13110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 748.596433][T12972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 748.794494][T12972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.827031][T12972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 748.850776][T12972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 748.910015][T13123] kAFS: unable to lookup cell 'Þ({^ú@' [ 748.950851][T12972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.476598][ T1323] Bluetooth: hci0: command 0x1009 tx timeout [ 749.499351][T12972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 749.589750][T12972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.652863][T12972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 749.718800][T12972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.790128][T12972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 749.817842][T12972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.863166][T12972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 750.122365][T12972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.173401][T12972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 750.978680][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 750.991525][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 751.002343][ C1] net_ratelimit: 6260 callbacks suppressed [ 751.002361][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 751.012212][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 751.021342][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 751.033175][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 751.045104][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 751.057164][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 751.069981][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 751.081425][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 751.093261][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 751.105020][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 751.230819][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 751.283139][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 751.322469][T12972] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.332437][T12972] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.359097][T12972] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.380021][T12972] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.045518][T13134] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 752.192322][ T8541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.225507][ T8541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.344024][T11423] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 752.422797][T11423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.430868][T11423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.440421][T13144] kAFS: unable to lookup cell 'Þ({^ú@' [ 752.447144][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 752.979170][T13151] binder: 13149:13151 ioctl c0306201 0 returned -14 [ 754.372251][T13161] 9pnet: Insufficient options for proto=fd [ 754.380764][T13161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 754.392253][T13161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 756.018474][ C1] net_ratelimit: 6839 callbacks suppressed [ 756.018494][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 756.019529][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 756.026518][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 756.037922][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 756.049545][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 756.061424][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 756.074739][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 756.085889][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 756.097710][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 756.109456][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 756.741059][T13175] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2472'. [ 757.448853][ C0] MPTCP: addr_signal error, add_addr=2, echo=1 [ 759.305039][T13200] xt_CT: No such helper "pptp" [ 759.717243][T13195] 9pnet: p9_fd_create_tcp (13195): problem connecting socket to 127.0.0.1 [ 760.006601][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 760.006617][ T26] audit: type=1326 audit(1773177414.752:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13198 comm="syz.4.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b436e799 code=0x7ffc0000 [ 760.227788][ T26] audit: type=1326 audit(1773177414.842:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13198 comm="syz.4.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b436e799 code=0x7ffc0000 [ 760.414602][ T26] audit: type=1326 audit(1773177414.862:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13198 comm="syz.4.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f28b436e799 code=0x7ffc0000 [ 760.653031][ T26] audit: type=1326 audit(1773177414.862:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13198 comm="syz.4.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b436e799 code=0x7ffc0000 [ 760.723218][ T26] audit: type=1326 audit(1773177414.862:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13198 comm="syz.4.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b436e799 code=0x7ffc0000 [ 761.176403][ C1] net_ratelimit: 3859 callbacks suppressed [ 761.176424][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 761.195225][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 761.208772][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 761.221741][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 761.235075][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 761.248233][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 761.260885][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 761.273489][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 761.286504][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 761.298968][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 762.890549][T10647] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 765.965816][T10647] usb 3-1: device descriptor read/all, error -71 [ 766.131551][T13259] input: syz1 as /devices/virtual/input/input24 [ 766.306115][ C1] net_ratelimit: 3681 callbacks suppressed [ 766.306135][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 766.314075][ T4271] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 766.325138][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 766.344122][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 766.356638][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 766.369549][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 766.382042][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 766.394364][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 766.407159][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 766.419893][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 768.265040][T13268] 9pnet: Insufficient options for proto=fd [ 768.273589][T13268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 768.287955][T13268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 770.413173][T13286] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2498'. [ 770.486235][T13286] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2498'. [ 770.557352][T13286] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.801913][T13286] device bridge_slave_0 left promiscuous mode [ 770.850444][T13286] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.467701][ C0] net_ratelimit: 3333 callbacks suppressed [ 771.467720][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 771.486116][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 771.498323][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 771.510937][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 771.523155][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 771.535750][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 771.547950][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 771.560405][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 771.572709][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:68:b0:39:5a:39, vlan:0) [ 771.584970][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 771.750955][T13297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 773.512245][T13318] ================================================================== [ 773.520979][T13318] BUG: KASAN: use-after-free in ax25_dev_device_down+0x35e/0x520 [ 773.528756][T13318] Write of size 4 at addr ffff88802519d5b8 by task syz.2.2504/13318 [ 773.536768][T13318] [ 773.539121][T13318] CPU: 1 PID: 13318 Comm: syz.2.2504 Not tainted syzkaller #0 [ 773.546611][T13318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 773.556700][T13318] Call Trace: [ 773.560006][T13318] [ 773.562969][T13318] dump_stack_lvl+0x188/0x250 [ 773.567688][T13318] ? show_regs_print_info+0x20/0x20 [ 773.572945][T13318] ? _printk+0xda/0x130 [ 773.577132][T13318] ? ax25_dev_device_down+0x35e/0x520 [ 773.582549][T13318] ? load_image+0x400/0x400 [ 773.587471][T13318] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 773.592982][T13318] ? lockdep_hardirqs_on+0x94/0x140 [ 773.598247][T13318] print_address_description+0x60/0x2d0 [ 773.603829][T13318] ? ax25_dev_device_down+0x35e/0x520 [ 773.609239][T13318] kasan_report+0xdf/0x130 [ 773.613693][T13318] ? ax25_dev_device_down+0x35e/0x520 [ 773.619106][T13318] kasan_check_range+0x235/0x290 [ 773.624088][T13318] ax25_dev_device_down+0x35e/0x520 [ 773.629336][T13318] ax25_device_event+0x4b4/0x4f0 [ 773.634322][T13318] raw_notifier_call_chain+0xcb/0x160 [ 773.639734][T13318] dev_close_many+0x29f/0x400 [ 773.644590][T13318] ? __dev_open+0x430/0x430 [ 773.649213][T13318] ? bond_netdev_event+0x163/0xee0 [ 773.654359][T13318] dev_close+0x154/0x210 [ 773.658650][T13318] ? __dev_close_many+0x2b0/0x2b0 [ 773.663722][T13318] ? memset+0x1e/0x40 [ 773.667768][T13318] bpq_device_event+0x2f4/0x9c0 [ 773.672658][T13318] ? lockdep_rtnl_is_held+0x22/0x30 [ 773.677902][T13318] ? team_device_event+0x11b/0x9e0 [ 773.683084][T13318] raw_notifier_call_chain+0xcb/0x160 [ 773.688515][T13318] dev_close_many+0x29f/0x400 [ 773.693247][T13318] ? __dev_open+0x430/0x430 [ 773.697831][T13318] ? lock_chain_count+0x20/0x20 [ 773.702731][T13318] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 773.708754][T13318] dev_close+0x154/0x210 [ 773.713041][T13318] ? __dev_close_many+0x2b0/0x2b0 [ 773.718101][T13318] ? __local_bh_enable_ip+0x136/0x1c0 [ 773.723695][T13318] ? _local_bh_enable+0xa0/0xa0 [ 773.728586][T13318] bond_setup_by_slave+0x61/0x3a0 [ 773.733661][T13318] bond_enslave+0x8bb/0x3c50 [ 773.738314][T13318] ? stack_trace_save+0xa6/0xf0 [ 773.743260][T13318] ? stack_trace_snprint+0xf0/0xf0 [ 773.748421][T13318] ? verify_lock_unused+0x140/0x140 [ 773.753661][T13318] ? mark_lock+0x94/0x320 [ 773.758030][T13318] ? aa_get_newest_label+0xf5/0x5a0 [ 773.763312][T13318] ? bond_lower_state_changed+0x160/0x160 [ 773.769092][T13318] ? apparmor_capable+0x12c/0x190 [ 773.774160][T13318] ? bpf_lsm_capable+0x5/0x10 [ 773.778882][T13318] ? full_name_hash+0x8e/0xe0 [ 773.783607][T13318] bond_do_ioctl+0x2b2/0x920 [ 773.788257][T13318] ? bond_eth_ioctl+0x240/0x240 [ 773.793138][T13318] ? lock_chain_count+0x20/0x20 [ 773.798132][T13318] ? dev_ioctl+0x534/0xe30 [ 773.802599][T13318] ? __mutex_lock_common+0x465/0x2400 [ 773.808200][T13318] ? full_name_hash+0x8e/0xe0 [ 773.812916][T13318] ? dev_siocbond+0xcf/0x100 [ 773.817547][T13318] dev_ifsioc+0xb43/0xd50 [ 773.822015][T13318] ? dev_ioctl+0xe30/0xe30 [ 773.826472][T13318] ? apparmor_capable+0x12c/0x190 [ 773.831635][T13318] ? full_name_hash+0x8e/0xe0 [ 773.836608][T13318] dev_ioctl+0x545/0xe30 [ 773.840895][T13318] ? _copy_from_user+0x111/0x170 [ 773.845892][T13318] sock_do_ioctl+0x245/0x320 [ 773.850650][T13318] ? sock_show_fdinfo+0xb0/0xb0 [ 773.855551][T13318] sock_ioctl+0x4d2/0x710 [ 773.859919][T13318] ? sock_poll+0x410/0x410 [ 773.864389][T13318] ? bpf_lsm_file_ioctl+0x5/0x10 [ 773.869456][T13318] ? security_file_ioctl+0x7c/0xa0 [ 773.874604][T13318] ? sock_poll+0x410/0x410 [ 773.879063][T13318] __se_sys_ioctl+0xfa/0x170 [ 773.883697][T13318] do_syscall_64+0x4c/0xa0 [ 773.888174][T13318] ? clear_bhb_loop+0x30/0x80 [ 773.892987][T13318] ? clear_bhb_loop+0x30/0x80 [ 773.897705][T13318] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 773.903653][T13318] RIP: 0033:0x7fd7b157f799 [ 773.908105][T13318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.927746][T13318] RSP: 002b:00007fd7af7d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 773.936202][T13318] RAX: ffffffffffffffda RBX: 00007fd7b17f8fa0 RCX: 00007fd7b157f799 [ 773.944219][T13318] RDX: 0000200000000180 RSI: 0000000000008990 RDI: 0000000000000005 [ 773.952240][T13318] RBP: 00007fd7b1615c99 R08: 0000000000000000 R09: 0000000000000000 [ 773.960253][T13318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 773.968264][T13318] R13: 00007fd7b17f9038 R14: 00007fd7b17f8fa0 R15: 00007ffc06acfab8 [ 773.976374][T13318] [ 773.979519][T13318] [ 773.981868][T13318] Allocated by task 7671: [ 773.986324][T13318] __kasan_kmalloc+0xb5/0xf0 [ 773.991040][T13318] ax25_dev_device_up+0x50/0x580 [ 773.996009][T13318] ax25_device_event+0x483/0x4f0 [ 774.000976][T13318] raw_notifier_call_chain+0xcb/0x160 [ 774.006384][T13318] __dev_notify_flags+0x194/0x300 [ 774.011439][T13318] dev_change_flags+0xe3/0x1a0 [ 774.016239][T13318] dev_ifsioc+0x130/0xd50 [ 774.020604][T13318] dev_ioctl+0x545/0xe30 [ 774.024891][T13318] sock_do_ioctl+0x245/0x320 [ 774.029514][T13318] sock_ioctl+0x4d2/0x710 [ 774.033869][T13318] __se_sys_ioctl+0xfa/0x170 [ 774.038486][T13318] do_syscall_64+0x4c/0xa0 [ 774.042936][T13318] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 774.048866][T13318] [ 774.051210][T13318] Freed by task 13318: [ 774.055401][T13318] kasan_set_track+0x4b/0x70 [ 774.060027][T13318] kasan_set_free_info+0x1f/0x40 [ 774.065010][T13318] ____kasan_slab_free+0xd5/0x110 [ 774.070079][T13318] slab_free_freelist_hook+0xea/0x170 [ 774.075487][T13318] kfree+0xef/0x2a0 [ 774.079333][T13318] ax25_dev_device_down+0x1c0/0x520 [ 774.084567][T13318] ax25_device_event+0x4b4/0x4f0 [ 774.089552][T13318] raw_notifier_call_chain+0xcb/0x160 [ 774.094959][T13318] dev_close_many+0x29f/0x400 [ 774.099667][T13318] dev_close+0x154/0x210 [ 774.103942][T13318] bpq_device_event+0x2f4/0x9c0 [ 774.108822][T13318] raw_notifier_call_chain+0xcb/0x160 [ 774.114237][T13318] dev_close_many+0x29f/0x400 [ 774.118953][T13318] dev_close+0x154/0x210 [ 774.123248][T13318] bond_setup_by_slave+0x61/0x3a0 [ 774.128321][T13318] bond_enslave+0x8bb/0x3c50 [ 774.132961][T13318] bond_do_ioctl+0x2b2/0x920 [ 774.137589][T13318] dev_ifsioc+0xb43/0xd50 [ 774.141948][T13318] dev_ioctl+0x545/0xe30 [ 774.146324][T13318] sock_do_ioctl+0x245/0x320 [ 774.150951][T13318] sock_ioctl+0x4d2/0x710 [ 774.155316][T13318] __se_sys_ioctl+0xfa/0x170 [ 774.159936][T13318] do_syscall_64+0x4c/0xa0 [ 774.164381][T13318] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 774.170306][T13318] [ 774.172656][T13318] Last potentially related work creation: [ 774.178395][T13318] kasan_save_stack+0x35/0x60 [ 774.183120][T13318] kasan_record_aux_stack+0xb8/0x100 [ 774.188534][T13318] insert_work+0x54/0x3d0 [ 774.192899][T13318] __queue_work+0x9c5/0xd50 [ 774.197442][T13318] queue_work_on+0x124/0x1f0 [ 774.202063][T13318] inet6addr_event+0x9c/0xc0 [ 774.206682][T13318] atomic_notifier_call_chain+0x15d/0x280 [ 774.212868][T13318] ipv6_add_addr+0xb57/0xe10 [ 774.217483][T13318] addrconf_add_linklocal+0x26a/0x6c0 [ 774.222882][T13318] addrconf_addr_gen+0x559/0x6b0 [ 774.228018][T13318] addrconf_init_auto_addrs+0x747/0xb00 [ 774.233598][T13318] addrconf_notify+0xa6b/0xf00 [ 774.238397][T13318] raw_notifier_call_chain+0xcb/0x160 [ 774.243801][T13318] __dev_notify_flags+0x194/0x300 [ 774.248855][T13318] dev_change_flags+0xe3/0x1a0 [ 774.253684][T13318] dev_ifsioc+0x130/0xd50 [ 774.258040][T13318] dev_ioctl+0x545/0xe30 [ 774.262309][T13318] sock_do_ioctl+0x245/0x320 [ 774.266927][T13318] sock_ioctl+0x4d2/0x710 [ 774.271287][T13318] __se_sys_ioctl+0xfa/0x170 [ 774.275911][T13318] do_syscall_64+0x4c/0xa0 [ 774.280356][T13318] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 774.286290][T13318] [ 774.288638][T13318] Second to last potentially related work creation: [ 774.295244][T13318] kasan_save_stack+0x35/0x60 [ 774.299957][T13318] kasan_record_aux_stack+0xb8/0x100 [ 774.305275][T13318] insert_work+0x54/0x3d0 [ 774.309650][T13318] __queue_work+0x9c5/0xd50 [ 774.314180][T13318] queue_work_on+0x124/0x1f0 [ 774.318804][T13318] netdevice_event+0x803/0x900 [ 774.323598][T13318] raw_notifier_call_chain+0xcb/0x160 [ 774.329009][T13318] unregister_netdevice_many+0x1049/0x19f0 [ 774.335015][T13318] unregister_netdevice_queue+0x324/0x370 [ 774.340855][T13318] __tun_detach+0xd4a/0x1500 [ 774.345472][T13318] tun_chr_close+0x109/0x1b0 [ 774.350185][T13318] __fput+0x234/0x930 [ 774.354212][T13318] task_work_run+0x125/0x1a0 [ 774.358840][T13318] exit_to_user_mode_loop+0x10f/0x130 [ 774.364235][T13318] exit_to_user_mode_prepare+0xee/0x180 [ 774.369830][T13318] syscall_exit_to_user_mode+0x16/0x40 [ 774.375320][T13318] do_syscall_64+0x58/0xa0 [ 774.379775][T13318] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 774.385702][T13318] [ 774.388062][T13318] The buggy address belongs to the object at ffff88802519d500 [ 774.388062][T13318] which belongs to the cache kmalloc-192 of size 192 [ 774.402491][T13318] The buggy address is located 184 bytes inside of [ 774.402491][T13318] 192-byte region [ffff88802519d500, ffff88802519d5c0) [ 774.415811][T13318] The buggy address belongs to the page: [ 774.421483][T13318] page:ffffea0000946740 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802519d600 pfn:0x2519d [ 774.432977][T13318] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 774.440576][T13318] raw: 00fff00000000200 ffffea0000a93bc8 ffffea0000896188 ffff888016c41a00 [ 774.449406][T13318] raw: ffff88802519d600 000000000010000f 00000001ffffffff 0000000000000000 [ 774.458009][T13318] page dumped because: kasan: bad access detected [ 774.464454][T13318] page_owner tracks the page as allocated [ 774.470220][T13318] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 12451843802, free_ts 0 [ 774.485333][T13318] get_page_from_freelist+0x1bbd/0x1ca0 [ 774.490920][T13318] __alloc_pages+0x1ee/0x480 [ 774.495540][T13318] alloc_page_interleave+0x24/0x1e0 [ 774.500768][T13318] new_slab+0xc0/0x4b0 [ 774.504868][T13318] ___slab_alloc+0x80a/0xdd0 [ 774.509492][T13318] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 774.514885][T13318] call_usermodehelper_setup+0x8a/0x260 [ 774.520464][T13318] kobject_uevent_env+0x65e/0x890 [ 774.525520][T13318] device_add+0x91c/0xfb0 [ 774.529878][T13318] device_create+0x266/0x300 [ 774.534501][T13318] mon_bin_add+0xb2/0x120 [ 774.538858][T13318] mon_bus_init+0x162/0x290 [ 774.543394][T13318] mon_notify+0x10e/0x3e0 [ 774.547852][T13318] blocking_notifier_call_chain+0x103/0x1b0 [ 774.553778][T13318] usb_register_bus+0xcf/0x140 [ 774.558574][T13318] usb_add_hcd+0x356/0xef0 [ 774.563021][T13318] page_owner free stack trace missing [ 774.568410][T13318] [ 774.570758][T13318] Memory state around the buggy address: [ 774.576413][T13318] ffff88802519d480: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 774.584508][T13318] ffff88802519d500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 774.592611][T13318] >ffff88802519d580: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 774.600693][T13318] ^ [ 774.606620][T13318] ffff88802519d600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 774.614715][T13318] ffff88802519d680: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 774.623237][T13318] ================================================================== [ 774.631406][T13318] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 774.733333][T13318] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 774.740590][T13318] CPU: 0 PID: 13318 Comm: syz.2.2504 Tainted: G B syzkaller #0 [ 774.749591][T13318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 774.759686][T13318] Call Trace: [ 774.762990][T13318] [ 774.766032][T13318] dump_stack_lvl+0x188/0x250 [ 774.770740][T13318] ? show_regs_print_info+0x20/0x20 [ 774.775974][T13318] ? load_image+0x400/0x400 [ 774.780510][T13318] panic+0x2e5/0x810 [ 774.784436][T13318] ? asm_common_interrupt+0x22/0x40 [ 774.789678][T13318] ? bpf_jit_dump+0xd0/0xd0 [ 774.794224][T13318] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 774.800239][T13318] ? _raw_spin_unlock+0x40/0x40 [ 774.805124][T13318] ? ax25_dev_device_down+0x35e/0x520 [ 774.810541][T13318] check_panic_on_warn+0x80/0xa0 [ 774.815603][T13318] ? ax25_dev_device_down+0x35e/0x520 [ 774.821088][T13318] end_report+0x6d/0xf0 [ 774.825292][T13318] kasan_report+0x102/0x130 [ 774.829841][T13318] ? ax25_dev_device_down+0x35e/0x520 [ 774.835331][T13318] kasan_check_range+0x235/0x290 [ 774.840296][T13318] ax25_dev_device_down+0x35e/0x520 [ 774.845526][T13318] ax25_device_event+0x4b4/0x4f0 [ 774.850498][T13318] raw_notifier_call_chain+0xcb/0x160 [ 774.856004][T13318] dev_close_many+0x29f/0x400 [ 774.860848][T13318] ? __dev_open+0x430/0x430 [ 774.865379][T13318] ? bond_netdev_event+0x163/0xee0 [ 774.870525][T13318] dev_close+0x154/0x210 [ 774.875171][T13318] ? __dev_close_many+0x2b0/0x2b0 [ 774.880222][T13318] ? memset+0x1e/0x40 [ 774.884243][T13318] bpq_device_event+0x2f4/0x9c0 [ 774.889147][T13318] ? lockdep_rtnl_is_held+0x22/0x30 [ 774.894633][T13318] ? team_device_event+0x11b/0x9e0 [ 774.899770][T13318] raw_notifier_call_chain+0xcb/0x160 [ 774.905170][T13318] dev_close_many+0x29f/0x400 [ 774.909882][T13318] ? __dev_open+0x430/0x430 [ 774.914431][T13318] ? lock_chain_count+0x20/0x20 [ 774.919323][T13318] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 774.925351][T13318] dev_close+0x154/0x210 [ 774.929637][T13318] ? __dev_close_many+0x2b0/0x2b0 [ 774.934697][T13318] ? __local_bh_enable_ip+0x136/0x1c0 [ 774.940100][T13318] ? _local_bh_enable+0xa0/0xa0 [ 774.944992][T13318] bond_setup_by_slave+0x61/0x3a0 [ 774.950063][T13318] bond_enslave+0x8bb/0x3c50 [ 774.954696][T13318] ? stack_trace_save+0xa6/0xf0 [ 774.959577][T13318] ? stack_trace_snprint+0xf0/0xf0 [ 774.965012][T13318] ? verify_lock_unused+0x140/0x140 [ 774.970240][T13318] ? mark_lock+0x94/0x320 [ 774.974599][T13318] ? aa_get_newest_label+0xf5/0x5a0 [ 774.980009][T13318] ? bond_lower_state_changed+0x160/0x160 [ 774.985765][T13318] ? apparmor_capable+0x12c/0x190 [ 774.990843][T13318] ? bpf_lsm_capable+0x5/0x10 [ 774.995547][T13318] ? full_name_hash+0x8e/0xe0 [ 775.000361][T13318] bond_do_ioctl+0x2b2/0x920 [ 775.004990][T13318] ? bond_eth_ioctl+0x240/0x240 [ 775.009868][T13318] ? lock_chain_count+0x20/0x20 [ 775.014751][T13318] ? dev_ioctl+0x534/0xe30 [ 775.019294][T13318] ? __mutex_lock_common+0x465/0x2400 [ 775.024802][T13318] ? full_name_hash+0x8e/0xe0 [ 775.029705][T13318] ? dev_siocbond+0xcf/0x100 [ 775.034323][T13318] dev_ifsioc+0xb43/0xd50 [ 775.038720][T13318] ? dev_ioctl+0xe30/0xe30 [ 775.043254][T13318] ? apparmor_capable+0x12c/0x190 [ 775.048305][T13318] ? full_name_hash+0x8e/0xe0 [ 775.053043][T13318] dev_ioctl+0x545/0xe30 [ 775.057317][T13318] ? _copy_from_user+0x111/0x170 [ 775.062376][T13318] sock_do_ioctl+0x245/0x320 [ 775.066996][T13318] ? sock_show_fdinfo+0xb0/0xb0 [ 775.071978][T13318] sock_ioctl+0x4d2/0x710 [ 775.076338][T13318] ? sock_poll+0x410/0x410 [ 775.080793][T13318] ? bpf_lsm_file_ioctl+0x5/0x10 [ 775.085931][T13318] ? security_file_ioctl+0x7c/0xa0 [ 775.091081][T13318] ? sock_poll+0x410/0x410 [ 775.095532][T13318] __se_sys_ioctl+0xfa/0x170 [ 775.100149][T13318] do_syscall_64+0x4c/0xa0 [ 775.104637][T13318] ? clear_bhb_loop+0x30/0x80 [ 775.109356][T13318] ? clear_bhb_loop+0x30/0x80 [ 775.114120][T13318] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 775.120061][T13318] RIP: 0033:0x7fd7b157f799 [ 775.124593][T13318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.144321][T13318] RSP: 002b:00007fd7af7d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 775.152776][T13318] RAX: ffffffffffffffda RBX: 00007fd7b17f8fa0 RCX: 00007fd7b157f799 [ 775.160786][T13318] RDX: 0000200000000180 RSI: 0000000000008990 RDI: 0000000000000005 [ 775.168790][T13318] RBP: 00007fd7b1615c99 R08: 0000000000000000 R09: 0000000000000000 [ 775.176815][T13318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 775.184902][T13318] R13: 00007fd7b17f9038 R14: 00007fd7b17f8fa0 R15: 00007ffc06acfab8 [ 775.192999][T13318] [ 775.196286][T13318] Kernel Offset: disabled [ 775.200625][T13318] Rebooting in 86400 seconds..