last executing test programs: 5.100534666s ago: executing program 0 (id=638): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x54) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r1, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r3, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/150, 0x96}], 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) flock(r0, 0x5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$dsp(0xffffff9c, &(0x7f0000000000), 0x8a880, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 3.507107659s ago: executing program 0 (id=643): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) io_uring_enter(r0, 0x2219, 0x771e, 0x16, 0x0, 0x0) 3.227198582s ago: executing program 0 (id=645): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000500)={{0x9000, 0x41000, 0x8, 0x9, 0x9, 0x40, 0x40, 0x9, 0x0, 0x2e, 0x10}, {0x2000, 0x100000, 0xf, 0xc, 0x2, 0x4, 0x7d, 0x7, 0x58, 0x1, 0x3}, {0x50000, 0xfec00000, 0x9, 0x5, 0x3, 0x7, 0xfe, 0x9, 0x1, 0xab, 0x5, 0x81}, {0xffff1000, 0x26000, 0x3, 0x5d, 0x4, 0x42, 0x9, 0x2, 0x26, 0x7, 0xf5, 0xff}, {0x0, 0x9000, 0xb, 0x3, 0x3, 0x7, 0xf3, 0x7b, 0x7, 0x83, 0xf5, 0x83}, {0x1000, 0xe000, 0x0, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x6, 0xf, 0x1, 0xff}, {0x4, 0x2, 0x9, 0x3, 0x7, 0x2, 0x5, 0x2, 0x1, 0x82, 0xff}, {0xe000, 0x84efa2808ad4a1f5, 0xa, 0x5, 0xf, 0x3, 0x4, 0x18, 0x2, 0x3, 0x7, 0x9}, {0x41000, 0x30}, {0xeeef0000, 0x86}, 0x80040035, 0x0, 0x8000000, 0x42004, 0x3, 0x800, 0xdddd1000, [0x1, 0x1ff, 0x5e, 0x102]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x9, 0x0, 0x0) 3.019930591s ago: executing program 0 (id=647): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, &(0x7f0000000180)}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f00000000c0)={0x1, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000000), 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, 0x0, &(0x7f0000000200)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup2(r3, r5) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) r7 = socket$netlink(0x10, 0x3, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r8, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001042022eb4a6015"], 0xfdef) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000500)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e00000000", 0x44}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b40500000000000061104a00000000001c010000000000009500000000000000f718538aa378a60b0894ce4d713215e949a9ad4e93d1cd5289dafa471fdc7e492bd161dd0dc89e45319e5042bbaa835a3126905ba6fb0d380f9022a2d5ba03275652541736666cee6d64ac9f868dd85a2eda2abafcd6f3eeef01eb47d3d1709e02ab7c495ca5b958f1ba3ea740321751562e67621c7329f3dbc504e676a2b8ba8f6fc7d1ebeeaba33826dc60ad38623996003427e2642b9fe444e2ff18abf0dfba3484ea447669b67e68132ccd52a796a94b41277871b3355fb5f0a27925d6931066a27173f84f0c171f3b58ae47297da280ab"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYRES64=r1, @ANYRESOCT=r7, @ANYRESDEC=r7, @ANYRES16, @ANYRESDEC=r5], 0x20}}, 0x4040) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000140)={0x10, 0x2, 0x100, 0x3, 0x0, 0x3}) sendto$inet6(r5, &(0x7f0000000600)='\x00', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000180)={0x20, r5}, 0x1) syz_usb_connect$uac2(0x5, 0x106, &(0x7f0000002080)=ANY=[@ANYBLOB="1201010200000010990451104000010203010902f4000301810008080b01010107200909040000000101200009240107000c1e00000924"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) socket$kcm(0x10, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 2.070130055s ago: executing program 2 (id=653): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000023c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {}, {0xd, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x1000000, 0x0, 0x400c0}, 0x44840) 1.865328535s ago: executing program 2 (id=655): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000500)={{0x9000, 0x41000, 0x8, 0x9, 0x9, 0x40, 0x40, 0x9, 0x0, 0x2e, 0x10}, {0x2000, 0x100000, 0xf, 0xc, 0x2, 0x4, 0x7d, 0x7, 0x58, 0x1, 0x3}, {0x50000, 0xfec00000, 0x9, 0x5, 0x3, 0x7, 0xfe, 0x9, 0x1, 0xab, 0x5, 0x81}, {0xffff1000, 0x26000, 0x3, 0x5d, 0x4, 0x42, 0x9, 0x2, 0x26, 0x7, 0xf5, 0xff}, {0x0, 0x9000, 0xb, 0x3, 0x3, 0x7, 0xf3, 0x7b, 0x7, 0x83, 0xf5, 0x83}, {0x1000, 0xe000, 0x0, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x6, 0xf, 0x1, 0xff}, {0x4, 0x2, 0x9, 0x3, 0x7, 0x2, 0x5, 0x2, 0x1, 0x82, 0xff}, {0xe000, 0x84efa2808ad4a1f5, 0xa, 0x5, 0xf, 0x3, 0x4, 0x18, 0x2, 0x3, 0x7, 0x9}, {0x41000, 0x30}, {0xeeef0000, 0x86}, 0x80040035, 0x0, 0x8000000, 0x42004, 0x3, 0x800, 0xdddd1000, [0x1, 0x1ff, 0x5e, 0x102]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x9, 0x0, 0x0) 1.647328724s ago: executing program 2 (id=656): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 1.646986555s ago: executing program 1 (id=657): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) preadv(r0, &(0x7f000001b240)=[{&(0x7f0000000200)=""/146, 0x92}, {&(0x7f00000002c0)=""/87, 0x57}, {&(0x7f0000000340)=""/221, 0xdd}, {&(0x7f0000000580)=""/207, 0xcf}, {&(0x7f0000000680)=""/28, 0x1c}, {&(0x7f0000000780)=""/105, 0x69}, {&(0x7f0000000800)=""/221, 0xdd}, {&(0x7f000001a240)=""/4096, 0x1000}], 0x8, 0x7e79, 0x2) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/115, 0x0, 0x80a0000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x3, 0x1, 0x0, &(0x7f0000000700)=""/100, 0x0, 0x1000}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e24, 0xfffffff2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x108}, 0x1c) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4028af11, &(0x7f00000001c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r2, &(0x7f0000001240)=""/102373, 0x18fe5, 0x80) ioctl$FITHAW(r2, 0xc0045878) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_CLOCK(r5, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004}) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, &(0x7f0000000080)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b805000000f3a5baf80c66b80e5ca48f66efbafc0cec0f01310f019c09000f01c2", 0x71}], 0x1, 0xc656a780b89bb02a, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) socket$unix(0x1, 0x1, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r7, 0x0, 0x20000023896) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') 1.54352921s ago: executing program 3 (id=658): unshare(0x22020600) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) 1.437190484s ago: executing program 3 (id=659): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000002440)=[{&(0x7f0000001040)="05faa1d13aeb87e8c95d3ae29c4589f75608cf4f96f66c23ae2a2e5200909984738c875ae7c648fa34b6c134239aa3a71086aeeab8d0e33bb78ee36adb1ff9ecb91db75ee6048b581b0fa9273005916e6c3bd9f4cb3d44291d503540a24fd7f44566f6969512e8f28be370e9", 0x6c}], 0x1000000000000255, 0x0) 1.263154112s ago: executing program 3 (id=660): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202) socket$inet6_sctp(0xa, 0x1, 0x84) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x1, 0x8, 0xffff, 0xc, 0x1, 0x8, 0xfffffffffffffff2, 0x7fffffffffffffff}, &(0x7f0000000100)={0xfb5, 0x1, 0xfffffffffffffffe, 0x0, 0x1, 0x6, 0x7, 0xf}, &(0x7f0000000140)={0x9, 0xfffffffffffff001, 0x6a, 0x1b, 0x0, 0x59e3, 0x9, 0x7}, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f0000000240)={&(0x7f00000001c0)={[0x3]}, 0x8}) 1.200156645s ago: executing program 3 (id=661): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x10000001, 0x0, 0x3}, @loopback, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x5}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[], 0x20) 1.110878489s ago: executing program 0 (id=662): socket$key(0xf, 0x3, 0x2) r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='timeout\x00', &(0x7f0000000200)='1\x00', 0x0) r1 = syz_io_uring_setup(0x3cc7, &(0x7f0000000580)={0x0, 0x3f7, 0x1, 0xff7ffffe, 0x2e7}, &(0x7f0000000a80), &(0x7f0000000340), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x0, 0x0, r1, 0x0, 0x0, 0x8, 0x2, 0x1, {0x0, 0x0, r1}}, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x8) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x804) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket(0x10, 0x803, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) lseek(0xffffffffffffffff, 0x7, 0x0) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendto$packet(r7, 0x0, 0x0, 0x20000085, &(0x7f0000000180)={0x11, 0x18, r9, 0x1, 0x0, 0x6, @local}, 0x14) 934.124937ms ago: executing program 1 (id=663): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000023c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {}, {0xd, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x1000000, 0x0, 0x400c0}, 0x44840) 933.368027ms ago: executing program 3 (id=664): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000780), 0x40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000007c0)=0x19) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8800, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x2f, &(0x7f0000000040), 0x3b) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000400)=@multiplanar_overlay={0x9, 0x8, 0xffffffffffffff47, 0x200, 0x12, {}, {0x5, 0xb, 0x8, 0x6, 0x29, 0x3, "c9e76fba"}, 0xffe, 0x3, {0x0}, 0x6}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) socket$inet6_sctp(0xa, 0x1, 0x84) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r2], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x4) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 715.905118ms ago: executing program 1 (id=665): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000500)={{0x9000, 0x41000, 0x8, 0x9, 0x9, 0x40, 0x40, 0x9, 0x0, 0x2e, 0x10}, {0x2000, 0x100000, 0xf, 0xc, 0x2, 0x4, 0x7d, 0x7, 0x58, 0x1, 0x3}, {0x50000, 0xfec00000, 0x9, 0x5, 0x3, 0x7, 0xfe, 0x9, 0x1, 0xab, 0x5, 0x81}, {0xffff1000, 0x26000, 0x3, 0x5d, 0x4, 0x42, 0x9, 0x2, 0x26, 0x7, 0xf5, 0xff}, {0x0, 0x9000, 0xb, 0x3, 0x3, 0x7, 0xf3, 0x7b, 0x7, 0x83, 0xf5, 0x83}, {0x1000, 0xe000, 0x0, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x6, 0xf, 0x1, 0xff}, {0x4, 0x2, 0x9, 0x3, 0x7, 0x2, 0x5, 0x2, 0x1, 0x82, 0xff}, {0xe000, 0x84efa2808ad4a1f5, 0xa, 0x5, 0xf, 0x3, 0x4, 0x18, 0x2, 0x3, 0x7, 0x9}, {0x41000, 0x30}, {0xeeef0000, 0x86}, 0x80040035, 0x0, 0x8000000, 0x42004, 0x3, 0x800, 0xdddd1000, [0x1, 0x1ff, 0x5e, 0x102]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x9, 0x0, 0x0) 688.232919ms ago: executing program 3 (id=666): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xf08, &(0x7f0000000400)={0x0, 0x8000595d, 0x1000, 0x20002, 0x1000051, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r2, r3, r4, 0x0) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000200)=0x104) ioctl$PPPIOCSACTIVE(r5, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r5, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/103, 0x67}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 677.772049ms ago: executing program 2 (id=667): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(0xffffffffffffffff, 0x2219, 0x771e, 0x16, 0x0, 0x0) 499.270067ms ago: executing program 1 (id=668): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001140)={'tunl0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="3400000014000b032bbd7000fcdbdf250a281000", @ANYRES32=r2, @ANYBLOB="080008000604000014000100ff"], 0x34}, 0x1, 0x0, 0x0, 0x891}, 0x0) 490.123868ms ago: executing program 2 (id=669): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202) socket$inet6_sctp(0xa, 0x1, 0x84) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x1, 0x8, 0xffff, 0xc, 0x1, 0x8, 0xfffffffffffffff2, 0x7fffffffffffffff}, &(0x7f0000000100)={0xfb5, 0x1, 0xfffffffffffffffe, 0x0, 0x1, 0x6, 0x7, 0xf}, &(0x7f0000000140)={0x9, 0xfffffffffffff001, 0x6a, 0x1b, 0x0, 0x59e3, 0x9, 0x7}, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f0000000240)={&(0x7f00000001c0)={[0x3]}, 0x8}) 383.454423ms ago: executing program 2 (id=670): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, &(0x7f0000000180)}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f00000000c0)={0x1, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000000), 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, 0x0, &(0x7f0000000200)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup2(r3, r5) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) r7 = socket$netlink(0x10, 0x3, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r8, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001042022eb4a6015"], 0xfdef) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000500)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e00000000", 0x44}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b40500000000000061104a00000000001c010000000000009500000000000000f718538aa378a60b0894ce4d713215e949a9ad4e93d1cd5289dafa471fdc7e492bd161dd0dc89e45319e5042bbaa835a3126905ba6fb0d380f9022a2d5ba03275652541736666cee6d64ac9f868dd85a2eda2abafcd6f3eeef01eb47d3d1709e02ab7c495ca5b958f1ba3ea740321751562e67621c7329f3dbc504e676a2b8ba8f6fc7d1ebeeaba33826dc60ad38623996003427e2642b9fe444e2ff18abf0dfba3484ea447669b67e68132ccd52a796a94b41277871b3355fb5f0a27925d6931066a27173f84f0c171f3b58ae47297da280ab"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYRES64=r1, @ANYRESOCT=r7, @ANYRESDEC=r7, @ANYRES16, @ANYRESDEC=r5], 0x20}}, 0x4040) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000140)={0x10, 0x2, 0x100, 0x3, 0x0, 0x3}) sendto$inet6(r5, &(0x7f0000000600)='\x00', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000180)={0x20, r5}, 0x1) syz_usb_connect$uac2(0x5, 0x106, &(0x7f0000002080)=ANY=[@ANYBLOB="1201010200000010990451104000010203010902f4000301810008080b01010107200909040000000101200009240107000c1e00000924"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) socket$kcm(0x10, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 353.925234ms ago: executing program 1 (id=671): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020}, 0x2020) unshare(0x42000000) 67.050957ms ago: executing program 0 (id=672): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000280)={0x0, 0x5e, {}, {0xffffffffffffffff}, 0x1, 0xc67}) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x34001405) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0x20, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x1, 0x7}, {0x4, 0x10}, {0xffe0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040098}, 0xc8a1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 1 (id=673): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000023c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {}, {0xd, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x1000000, 0x0, 0x400c0}, 0x44840) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.1' (ED25519) to the list of known hosts. [ 80.294918][ T5766] cgroup: Unknown subsys name 'net' [ 80.433576][ T5766] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.120048][ T5766] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.851027][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.862468][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.870797][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.878526][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.888017][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.896451][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.914117][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.971661][ T5794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.980754][ T5794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.988615][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.996734][ T5794] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.004573][ T5794] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.012957][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.022832][ T5794] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.028894][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.031883][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.046248][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.053499][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.061257][ T5794] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.068969][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.111353][ T5089] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.122139][ T5089] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.135253][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.152314][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.575582][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 84.680598][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 84.697014][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 84.806319][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 84.852585][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.860402][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.870289][ T5778] bridge_slave_0: entered allmulticast mode [ 84.877706][ T5778] bridge_slave_0: entered promiscuous mode [ 84.909583][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.919708][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.927272][ T5778] bridge_slave_1: entered allmulticast mode [ 84.934510][ T5778] bridge_slave_1: entered promiscuous mode [ 84.959224][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.966604][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.974119][ T5779] bridge_slave_0: entered allmulticast mode [ 84.981190][ T5779] bridge_slave_0: entered promiscuous mode [ 85.000676][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.008010][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.015311][ T5779] bridge_slave_1: entered allmulticast mode [ 85.022529][ T5779] bridge_slave_1: entered promiscuous mode [ 85.089310][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.130596][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.153280][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.171817][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.179183][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.187188][ T5777] bridge_slave_0: entered allmulticast mode [ 85.194876][ T5777] bridge_slave_0: entered promiscuous mode [ 85.216936][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.250849][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.258223][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.267332][ T5777] bridge_slave_1: entered allmulticast mode [ 85.274872][ T5777] bridge_slave_1: entered promiscuous mode [ 85.285972][ T5778] team0: Port device team_slave_0 added [ 85.323064][ T5778] team0: Port device team_slave_1 added [ 85.345450][ T5779] team0: Port device team_slave_0 added [ 85.351810][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.360766][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.368306][ T5780] bridge_slave_0: entered allmulticast mode [ 85.376048][ T5780] bridge_slave_0: entered promiscuous mode [ 85.399013][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.420960][ T5779] team0: Port device team_slave_1 added [ 85.427601][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.434929][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.442384][ T5780] bridge_slave_1: entered allmulticast mode [ 85.450051][ T5780] bridge_slave_1: entered promiscuous mode [ 85.458973][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.472029][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.479186][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.505505][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.572171][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.579260][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.605655][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.641050][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.660854][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.668428][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.695131][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.709711][ T5777] team0: Port device team_slave_0 added [ 85.719207][ T5777] team0: Port device team_slave_1 added [ 85.727571][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.753530][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.760635][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.786915][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.843353][ T5780] team0: Port device team_slave_0 added [ 85.869961][ T5780] team0: Port device team_slave_1 added [ 85.887741][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.895885][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.922889][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.962289][ T5778] hsr_slave_0: entered promiscuous mode [ 85.968822][ T5778] hsr_slave_1: entered promiscuous mode [ 85.976656][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.984206][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.010645][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.041247][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.048284][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.077581][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.107548][ T5779] hsr_slave_0: entered promiscuous mode [ 86.114675][ T5779] hsr_slave_1: entered promiscuous mode [ 86.121075][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.129443][ T5779] Cannot create hsr debugfs directory [ 86.139523][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.147392][ T51] Bluetooth: hci2: command tx timeout [ 86.147930][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.154127][ T51] Bluetooth: hci0: command tx timeout [ 86.179986][ T5786] Bluetooth: hci1: command tx timeout [ 86.185362][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.223963][ T5786] Bluetooth: hci3: command tx timeout [ 86.281840][ T5780] hsr_slave_0: entered promiscuous mode [ 86.288336][ T5780] hsr_slave_1: entered promiscuous mode [ 86.294787][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.302383][ T5780] Cannot create hsr debugfs directory [ 86.376913][ T5777] hsr_slave_0: entered promiscuous mode [ 86.386434][ T5777] hsr_slave_1: entered promiscuous mode [ 86.392806][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.400604][ T5777] Cannot create hsr debugfs directory [ 86.806147][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.819785][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.836181][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.847331][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.934398][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.950752][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.984935][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.003074][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.100059][ T5780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.140487][ T5780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.167733][ T5780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.204896][ T5780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.296425][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.316198][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.355445][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.368070][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.392891][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.437253][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.498126][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.505783][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.522039][ T1333] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.529267][ T1333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.568797][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.609727][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.657686][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.664918][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.705239][ T1333] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.712427][ T1333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.760855][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.792510][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.871259][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.948092][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.969785][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.977026][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.991149][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.998506][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.087117][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.130354][ T1325] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.137575][ T1325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.190320][ T1325] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.197571][ T1325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.227919][ T5786] Bluetooth: hci0: command tx timeout [ 88.227951][ T5089] Bluetooth: hci1: command tx timeout [ 88.239820][ T51] Bluetooth: hci2: command tx timeout [ 88.263106][ T5780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.304589][ T5089] Bluetooth: hci3: command tx timeout [ 88.391882][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.572606][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.649396][ T5778] veth0_vlan: entered promiscuous mode [ 88.688886][ T5778] veth1_vlan: entered promiscuous mode [ 88.753237][ T5779] veth0_vlan: entered promiscuous mode [ 88.821915][ T5778] veth0_macvtap: entered promiscuous mode [ 88.838312][ T5779] veth1_vlan: entered promiscuous mode [ 88.899442][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.909120][ T5778] veth1_macvtap: entered promiscuous mode [ 88.953482][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.969455][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.991460][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.008169][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.017588][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.028224][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.037840][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.110399][ T5779] veth0_macvtap: entered promiscuous mode [ 89.133498][ T5780] veth0_vlan: entered promiscuous mode [ 89.142267][ T5779] veth1_macvtap: entered promiscuous mode [ 89.172991][ T5780] veth1_vlan: entered promiscuous mode [ 89.258690][ T3517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.272068][ T3517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.292666][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.306428][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.319067][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.328258][ T5777] veth0_vlan: entered promiscuous mode [ 89.352762][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.364979][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.377276][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.398891][ T3517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.413033][ T5779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.421899][ T3517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.429812][ T5779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.429884][ T5779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.429916][ T5779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.482780][ T5780] veth0_macvtap: entered promiscuous mode [ 89.496802][ T5777] veth1_vlan: entered promiscuous mode [ 89.570119][ T5780] veth1_macvtap: entered promiscuous mode [ 89.641041][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.654618][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.728856][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.741283][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.765403][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.780386][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.801008][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.815753][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.832905][ T5846] fuse: Bad value for 'group_id' [ 89.838328][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.848529][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.863634][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.880041][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.892024][ T3517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.911280][ T3517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.954038][ T5780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.962996][ T5780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.976124][ T5780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.988880][ T5780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.010059][ T5777] veth0_macvtap: entered promiscuous mode [ 90.064663][ T5777] veth1_macvtap: entered promiscuous mode [ 90.139460][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.167131][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.177718][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.203848][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.223923][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.243546][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.258997][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.270902][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.286463][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.296786][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.307780][ T5089] Bluetooth: hci0: command tx timeout [ 90.314804][ T2139] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.316887][ T5089] Bluetooth: hci1: command tx timeout [ 90.327994][ T51] Bluetooth: hci2: command tx timeout [ 90.344507][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.355328][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.368518][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.386073][ T5089] Bluetooth: hci3: command tx timeout [ 90.394546][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.516521][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.532034][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.536021][ T2139] usb 1-1: Using ep0 maxpacket: 16 [ 90.543107][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.556706][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.571144][ T3517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.587503][ T3517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.604302][ T2139] usb 1-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 32 [ 90.631759][ T2139] usb 1-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 90.657968][ T2139] usb 1-1: config 1 interface 0 has no altsetting 0 [ 90.671871][ T2139] usb 1-1: string descriptor 0 read error: -22 [ 90.680517][ T2139] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 90.697633][ T2139] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.750810][ T5848] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 90.792040][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.833285][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.846198][ T5858] netlink: 136 bytes leftover after parsing attributes in process `syz.1.8'. [ 90.973944][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.002256][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.059340][ T2139] usb 1-1: USB disconnect, device number 2 [ 91.073712][ T27] audit: type=1326 audit(1789275962.299:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5847 comm="syz.0.5" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa863b9e159 code=0x0 [ 91.158253][ T3517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.166692][ T5861] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.214722][ T3517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.656986][ T5874] netlink: 'syz.1.11': attribute type 11 has an invalid length. [ 91.994870][ T2182] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.071995][ T28] cfg80211: failed to load regulatory.db [ 92.163837][ T2182] usb 3-1: device descriptor read/64, error -71 [ 92.384689][ T5089] Bluetooth: hci1: command tx timeout [ 92.390153][ T5089] Bluetooth: hci2: command tx timeout [ 92.395835][ T51] Bluetooth: hci0: command tx timeout [ 92.452508][ T2182] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 92.466518][ T5089] Bluetooth: hci3: command tx timeout [ 92.633838][ T2182] usb 3-1: device descriptor read/64, error -71 [ 92.755490][ T2182] usb usb3-port1: attempt power cycle [ 92.840592][ T5903] tipc: Started in network mode [ 92.847327][ T5903] tipc: Node identity 4, cluster identity 4711 [ 92.861684][ T5903] tipc: Node number set to 4 [ 93.203779][ T2182] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 93.293082][ T2182] usb 3-1: device descriptor read/8, error -71 [ 93.587328][ T2182] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 93.644169][ T2182] usb 3-1: device descriptor read/8, error -71 [ 93.773407][ T2182] usb usb3-port1: unable to enumerate USB device [ 94.322448][ T5940] tipc: Started in network mode [ 94.328082][ T5940] tipc: Node identity 4, cluster identity 4711 [ 94.347346][ T5940] tipc: Node number set to 4 [ 95.780439][ T5975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.44'. [ 96.362073][ T5989] netlink: 'syz.2.49': attribute type 1 has an invalid length. [ 96.374056][ T172] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.413335][ T5989] team0: Device ip6gre1 is of different type [ 96.598130][ T172] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 96.619534][ T172] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 96.644397][ T172] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 96.688739][ T172] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 96.699123][ T172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 96.718102][ T172] usb 2-1: SerialNumber: syz [ 96.749578][ T172] hub 2-1:1.0: bad descriptor, ignoring hub [ 96.774220][ T172] hub: probe of 2-1:1.0 failed with error -5 [ 96.786628][ T172] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 96.981439][ T6009] syzkaller0: entered promiscuous mode [ 96.989445][ T6009] syzkaller0: entered allmulticast mode [ 97.521650][ T6022] netlink: 28 bytes leftover after parsing attributes in process `syz.0.59'. [ 97.563898][ T6022] netlink: 'syz.0.59': attribute type 10 has an invalid length. [ 97.691304][ T6026] syz.1.47[6026]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 97.701679][ T6022] team0 (unregistering): Port device team_slave_0 removed [ 97.712428][ T6026] process 'syz.1.47' launched '/dev/fd/6' with NULL argv: empty string added [ 97.742381][ T6022] team0 (unregistering): Port device team_slave_1 removed [ 98.330406][ T6038] syzkaller0: entered promiscuous mode [ 98.338142][ T6038] syzkaller0: entered allmulticast mode [ 99.285307][ T172] usb 2-1: USB disconnect, device number 2 [ 99.633808][ T172] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.819893][ T6066] syzkaller0: entered promiscuous mode [ 99.832779][ T172] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 99.845613][ T6066] syzkaller0: entered allmulticast mode [ 99.856256][ T172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.894887][ T172] usb 4-1: Product: syz [ 99.899244][ T172] usb 4-1: Manufacturer: syz [ 99.920453][ T172] usb 4-1: SerialNumber: syz [ 99.936929][ T172] usb 4-1: config 0 descriptor?? [ 99.992579][ T6070] fuse: Unknown parameter 'grou00000000000000000000' [ 100.279162][ T5089] Bluetooth: hci1: unknown advertising packet type: 0x05 [ 100.644310][ T2182] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 100.702056][ T9] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 100.720010][ T6059] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 100.809999][ T172] usb 4-1: f81604_read: reg: 105 failed: -EPROTO [ 100.824824][ T172] f81604 4-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 100.833320][ T172] f81604: probe of 4-1:0.0 failed with error -71 [ 100.852793][ T172] usb 4-1: USB disconnect, device number 2 [ 100.867800][ T2182] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 100.900378][ T2182] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 100.931260][ T2182] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 100.945597][ T2182] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 100.972216][ T2182] usb 3-1: SerialNumber: syz [ 100.988246][ T2182] hub 3-1:1.0: bad descriptor, ignoring hub [ 100.995578][ T2182] hub: probe of 3-1:1.0 failed with error -5 [ 101.029722][ T2182] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 101.560191][ T6095] syzkaller0: entered promiscuous mode [ 101.727253][ T6099] netlink: 'syz.3.87': attribute type 1 has an invalid length. [ 101.748202][ T6100] fuse: Unknown parameter 'grou00000000000000000000' [ 101.938205][ T6102] syzkaller0: entered promiscuous mode [ 101.949937][ T6102] syzkaller0: entered allmulticast mode [ 102.423938][ T970] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 102.639015][ T970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 102.659461][ T970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.673275][ T970] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 102.692738][ T970] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.702326][ T970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.718422][ T970] usb 4-1: config 0 descriptor?? [ 103.175637][ T970] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 103.191025][ T970] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 103.199033][ T970] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 103.217611][ T970] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 103.227156][ T970] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 103.238613][ T970] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 103.248685][ T970] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 103.260024][ T970] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 103.267986][ T970] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 103.283539][ T970] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 103.291478][ T970] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 103.305358][ T970] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 103.315699][ T970] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 103.323297][ T970] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 103.331316][ T970] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 103.341027][ T970] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 103.378084][ T970] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 103.449195][ T970] usb 4-1: USB disconnect, device number 3 [ 103.496117][ T6123] syzkaller0: entered promiscuous mode [ 103.565946][ T6121] fido_id[6121]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 103.604127][ T2182] usb 3-1: USB disconnect, device number 6 [ 103.730464][ T6127] fuse: Unknown parameter 'grou00000000000000000000' [ 104.068199][ T6132] netlink: 'syz.3.99': attribute type 1 has an invalid length. [ 104.168605][ T6132] bond1: entered promiscuous mode [ 104.184741][ T6132] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.262255][ T6138] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.289646][ T6138] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 104.303188][ T6138] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 104.334997][ T6136] netlink: 'syz.2.101': attribute type 1 has an invalid length. [ 104.343022][ T6136] netlink: 'syz.2.101': attribute type 2 has an invalid length. [ 104.460584][ T6145] netlink: 'syz.1.102': attribute type 1 has an invalid length. [ 104.503503][ T6145] bond1: entered promiscuous mode [ 104.509990][ T6145] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.558223][ T6145] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.590573][ T6145] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 104.601171][ T6145] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 104.615429][ T6145] bond1: (slave ip6gre1): making interface the new active one [ 104.623139][ T6145] ip6gre1: entered promiscuous mode [ 104.631737][ T6145] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 104.837502][ T6153] syzkaller0: entered promiscuous mode [ 104.846928][ T6155] fuse: Unknown parameter 'group_i00000000000000000000' [ 104.953802][ T2182] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 105.167935][ T2182] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 105.186158][ T2182] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 105.225890][ T2182] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 105.235427][ T2182] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 105.243491][ T2182] usb 3-1: SerialNumber: syz [ 105.265422][ T2182] hub 3-1:1.0: bad descriptor, ignoring hub [ 105.280357][ T2182] hub: probe of 3-1:1.0 failed with error -5 [ 105.297517][ T2182] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 105.537461][ T6169] kernel read not supported for file / 7âW)s!Qfsr)rO2:"T+͟v|ղDvc֠6xc: (pid: 6169 comm: syz.3.111) [ 105.554012][ T27] audit: type=1800 audit(1789275976.799:3): pid=6169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.111" name=20019C1437B3CFFCC3A25729AB7393A7C721518FF6ECA56673F58772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=8754 res=0 errno=0 [ 105.622048][ T6171] netlink: 'syz.0.112': attribute type 1 has an invalid length. [ 105.754533][ T6175] netlink: 'syz.0.114': attribute type 1 has an invalid length. [ 106.029573][ T6181] fuse: Unknown parameter 'group_i00000000000000000000' [ 106.453772][ T2182] IPVS: starting estimator thread 0... [ 106.507903][ T6193] KVM: debugfs: duplicate directory 6193-6 [ 106.574068][ T6194] IPVS: using max 27 ests per chain, 64800 per kthread [ 107.495203][ T6216] fuse: Unknown parameter 'group_i00000000000000000000' [ 107.838119][ T9] usb 3-1: USB disconnect, device number 7 [ 107.992176][ T27] audit: type=1326 audit(1789275979.229:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6234 comm="syz.2.132" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24af9e159 code=0x7ffc0000 [ 108.101145][ T27] audit: type=1326 audit(1789275979.229:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6234 comm="syz.2.132" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24af9e159 code=0x7ffc0000 [ 108.162177][ T27] audit: type=1326 audit(1789275979.269:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6234 comm="syz.2.132" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd24af9e159 code=0x7ffc0000 [ 108.250571][ T27] audit: type=1326 audit(1789275979.269:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6234 comm="syz.2.132" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24af9e159 code=0x7ffc0000 [ 108.296394][ T27] audit: type=1326 audit(1789275979.269:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6234 comm="syz.2.132" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd24af5e98e code=0x7ffc0000 [ 108.385651][ T27] audit: type=1326 audit(1789275979.269:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6234 comm="syz.2.132" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24af9e159 code=0x7ffc0000 [ 108.437514][ T6242] fuse: Unknown parameter 'group_id00000000000000000000' [ 108.464312][ T27] audit: type=1326 audit(1789275979.269:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6234 comm="syz.2.132" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24af9e159 code=0x7ffc0000 [ 108.502849][ T27] audit: type=1326 audit(1789275979.269:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6234 comm="syz.2.132" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7fd24af9e159 code=0x7ffc0000 [ 108.616539][ T27] audit: type=1326 audit(1789275979.269:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6234 comm="syz.2.132" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24af9e159 code=0x7ffc0000 [ 109.043879][ T2182] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 109.266606][ T2182] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 109.293847][ T2182] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 109.333550][ T2182] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 109.346387][ T2182] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 109.361556][ T2182] usb 4-1: SerialNumber: syz [ 109.383175][ T2182] hub 4-1:1.0: bad descriptor, ignoring hub [ 109.400494][ T2182] hub: probe of 4-1:1.0 failed with error -5 [ 109.413577][ T2182] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 109.681157][ T6265] fuse: Unknown parameter 'group_id00000000000000000000' [ 109.750005][ T6264] Zero length message leads to an empty skb [ 110.146662][ T6277] netlink: 'syz.1.148': attribute type 1 has an invalid length. [ 110.213117][ T6277] bond2: entered promiscuous mode [ 110.219231][ T6277] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.272871][ T6277] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.287655][ T6277] bond2: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 110.304807][ T6277] bond2: (slave ip6gre2): Error -95 calling set_mac_address [ 110.363241][ T6285] syzkaller0: entered promiscuous mode [ 110.373902][ T6285] syzkaller0: entered allmulticast mode [ 110.585834][ T5784] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 110.604841][ T27] kauditd_printk_skb: 43 callbacks suppressed [ 110.604857][ T27] audit: type=1326 audit(1789275981.849:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.2.149" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd24af9ddeb code=0x7ffc0000 [ 110.668448][ T27] audit: type=1326 audit(1789275981.879:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.2.149" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd24af9ddeb code=0x7ffc0000 [ 110.705111][ T6292] fuse: Unknown parameter 'group_id00000000000000000000' [ 110.830445][ T5784] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.841502][ T27] audit: type=1326 audit(1789275982.069:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.2.149" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd24af9ddeb code=0x7ffc0000 [ 110.867606][ T5784] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 110.879025][ T27] audit: type=1326 audit(1789275982.069:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.2.149" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd24af9ddeb code=0x7ffc0000 [ 110.916488][ T27] audit: type=1326 audit(1789275982.069:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.2.149" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd24af9ddeb code=0x7ffc0000 [ 110.944356][ T5784] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 110.953457][ T5784] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.954582][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.154'. [ 110.972997][ T5784] usb 3-1: Product: syz [ 110.981517][ T5784] usb 3-1: Manufacturer: syz [ 110.986735][ T27] audit: type=1326 audit(1789275982.069:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.2.149" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd24af9ddeb code=0x7ffc0000 [ 111.012144][ T5784] usb 3-1: SerialNumber: syz [ 111.022816][ T5784] usb 3-1: config 0 descriptor?? [ 111.041325][ T27] audit: type=1326 audit(1789275982.069:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.2.149" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd24af9ddeb code=0x7ffc0000 [ 111.075163][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.154'. [ 111.112332][ T27] audit: type=1326 audit(1789275982.079:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.2.149" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd24af9ddeb code=0x7ffc0000 [ 111.116022][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.154'. [ 111.178499][ T27] audit: type=1326 audit(1789275982.149:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.2.149" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd24af9ddeb code=0x7ffc0000 [ 111.202764][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.154'. [ 111.202955][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.154'. [ 111.262771][ T27] audit: type=1326 audit(1789275982.149:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.2.149" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd24af9ddeb code=0x7ffc0000 [ 111.893925][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 111.944003][ T172] usb 4-1: USB disconnect, device number 4 [ 112.100049][ T9] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 112.124918][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.132995][ T9] usb 1-1: Product: syz [ 112.154424][ T9] usb 1-1: Manufacturer: syz [ 112.163718][ T9] usb 1-1: SerialNumber: syz [ 112.200963][ T9] usb 1-1: config 0 descriptor?? [ 112.396256][ T28] IPVS: starting estimator thread 0... [ 112.477437][ T6325] KVM: debugfs: duplicate directory 6325-6 [ 112.513796][ T6326] IPVS: using max 19 ests per chain, 45600 per kthread [ 112.833016][ T9] usb 1-1: f81604_read: reg: 105 failed: -EPROTO [ 112.846883][ T9] f81604 1-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 112.856421][ T9] f81604: probe of 1-1:0.0 failed with error -71 [ 112.877708][ T9] usb 1-1: USB disconnect, device number 3 [ 113.456367][ T6353] netlink: 'syz.0.172': attribute type 1 has an invalid length. [ 113.490571][ T6353] bond1: entered promiscuous mode [ 113.496113][ T6353] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.623725][ T5784] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 113.701048][ T172] usb 3-1: USB disconnect, device number 8 [ 113.844573][ T5784] usb 4-1: Using ep0 maxpacket: 16 [ 113.858856][ T5784] usb 4-1: unable to get BOS descriptor or descriptor too short [ 113.876560][ T5784] usb 4-1: config 4 has an invalid interface number: 28 but max is 0 [ 113.887291][ T5784] usb 4-1: config 4 has no interface number 0 [ 113.913797][ T5784] usb 4-1: config 4 interface 28 has no altsetting 0 [ 113.927752][ T5784] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 113.937228][ T5784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.959994][ T5784] usb 4-1: Product: syz [ 113.985106][ T5784] usb 4-1: Manufacturer: syz [ 114.006119][ T5784] usb 4-1: SerialNumber: syz [ 114.265957][ T6351] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 114.394347][ T6351] af_packet: tpacket_rcv: packet too big, clamped from 4674 to 3952. macoff=96 [ 114.530067][ T5784] usb 4-1: USB disconnect, device number 5 [ 114.934849][ T6368] syz.0.177 uses obsolete (PF_INET,SOCK_PACKET) [ 115.224491][ T6376] fuse: Bad value for 'user_id' [ 115.284167][ T28] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 115.473756][ T28] usb 1-1: Using ep0 maxpacket: 16 [ 115.485902][ T28] usb 1-1: unable to get BOS descriptor or descriptor too short [ 115.511551][ T28] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.525504][ T28] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.540156][ T28] usb 1-1: New USB device found, idVendor=0499, idProduct=1051, bcdDevice= 0.40 [ 115.555358][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.567478][ T28] usb 1-1: Product: syz [ 115.571790][ T28] usb 1-1: Manufacturer: syz [ 115.579866][ T28] usb 1-1: SerialNumber: syz [ 115.890557][ T28] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 115.987423][ T28] snd-usb-audio: probe of 1-1:1.0 failed with error -2 [ 116.027714][ T28] usb 1-1: USB disconnect, device number 4 [ 116.071212][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.860267][ T6412] fuse: Bad value for 'fd' [ 116.907615][ T6414] fuse: Unknown parameter 'grou00000000000000000000' [ 117.170669][ T6419] C: renamed from team_slave_0 (while UP) [ 117.179363][ T6419] netlink: 'syz.2.195': attribute type 2 has an invalid length. [ 117.187859][ T6419] netlink: 156 bytes leftover after parsing attributes in process `syz.2.195'. [ 117.197723][ T6419] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 117.885269][ T6436] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:0000:00fd with DS=0x19 [ 118.171436][ T6443] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.187392][ T6445] fuse: Bad value for 'fd' [ 118.220595][ T6443] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 118.238841][ T6443] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 118.245656][ T6443] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 118.258815][ T6443] vhci_hcd vhci_hcd.0: Device attached [ 118.315738][ T6449] fuse: Unknown parameter 'grou00000000000000000000' [ 118.323716][ T5849] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 118.366226][ T6443] hsr0: entered promiscuous mode [ 118.474946][ T6446] vhci_hcd: connection closed [ 118.477626][ T1142] vhci_hcd: stop threads [ 118.490885][ T1142] vhci_hcd: release socket [ 118.498098][ T1142] vhci_hcd: disconnect device [ 118.524456][ T5849] usb 2-1: Using ep0 maxpacket: 16 [ 118.538375][ T5849] usb 2-1: unable to get BOS descriptor or descriptor too short [ 118.553344][ T5849] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.564978][ T5849] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.574422][ T5784] usb 38-1: enqueue for inactive port 0 [ 118.585905][ T5849] usb 2-1: New USB device found, idVendor=0499, idProduct=1051, bcdDevice= 0.40 [ 118.597567][ T5849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.614093][ T5849] usb 2-1: Product: syz [ 118.618513][ T5849] usb 2-1: Manufacturer: syz [ 118.626552][ T5849] usb 2-1: SerialNumber: syz [ 118.890295][ T5849] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 118.989335][ T5849] snd-usb-audio: probe of 2-1:1.0 failed with error -2 [ 119.040169][ T5849] usb 2-1: USB disconnect, device number 3 [ 119.098861][ T5784] usb usb38-port1: attempt power cycle [ 119.108569][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.332011][ T6472] netlink: 'syz.3.210': attribute type 5 has an invalid length. [ 119.580187][ T6476] fuse: Bad value for 'fd' [ 119.784725][ T5784] usb usb38-port1: unable to enumerate USB device [ 119.876914][ T6479] fuse: Unknown parameter 'grou00000000000000000000' [ 120.797657][ T6502] fuse: Bad value for 'fd' [ 121.268408][ T5784] IPVS: starting estimator thread 0... [ 121.310527][ T970] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 121.384308][ T6518] IPVS: using max 18 ests per chain, 43200 per kthread [ 121.506451][ T970] usb 1-1: Using ep0 maxpacket: 16 [ 121.518938][ T970] usb 1-1: unable to get BOS descriptor or descriptor too short [ 121.559389][ T970] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.580244][ T970] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.607820][ T970] usb 1-1: New USB device found, idVendor=0499, idProduct=1051, bcdDevice= 0.40 [ 121.623926][ T970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.656861][ T970] usb 1-1: Product: syz [ 121.661099][ T970] usb 1-1: Manufacturer: syz [ 121.673829][ T970] usb 1-1: SerialNumber: syz [ 121.747296][ T6531] fuse: Bad value for 'fd' [ 121.983177][ T970] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 122.053477][ T970] snd-usb-audio: probe of 1-1:1.0 failed with error -2 [ 122.105535][ T970] usb 1-1: USB disconnect, device number 5 [ 122.196146][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.980958][ T5849] IPVS: starting estimator thread 0... [ 123.113794][ T6554] IPVS: using max 18 ests per chain, 43200 per kthread [ 123.154426][ T6560] fuse: Bad value for 'fd' [ 123.574072][ T6568] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.621639][ T6568] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 123.653837][ T6568] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 123.660426][ T6568] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 123.699211][ T6568] vhci_hcd vhci_hcd.0: Device attached [ 123.799104][ T6568] hsr0: entered promiscuous mode [ 123.937458][ T6569] vhci_hcd: connection closed [ 123.938469][ T78] vhci_hcd: stop threads [ 123.952147][ T78] vhci_hcd: release socket [ 123.960812][ T78] vhci_hcd: disconnect device [ 124.024170][ T2139] usb 36-1: enqueue for inactive port 0 [ 124.132191][ T6587] fuse: Invalid rootmode [ 124.273949][ T5784] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 124.474068][ T5784] usb 4-1: Using ep0 maxpacket: 16 [ 124.492087][ T5784] usb 4-1: unable to get BOS descriptor or descriptor too short [ 124.526035][ T5784] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.552115][ T5784] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.568584][ T2139] usb usb36-port1: attempt power cycle [ 124.588667][ T5784] usb 4-1: New USB device found, idVendor=0499, idProduct=1051, bcdDevice= 0.40 [ 124.615566][ T6600] netlink: 'syz.1.253': attribute type 1 has an invalid length. [ 124.623385][ T5784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.653436][ T5784] usb 4-1: Product: syz [ 124.663562][ T5784] usb 4-1: Manufacturer: syz [ 124.676974][ T5784] usb 4-1: SerialNumber: syz [ 124.742678][ T6600] bond3: entered promiscuous mode [ 124.760749][ T6600] 8021q: adding VLAN 0 to HW filter on device bond3 [ 124.984607][ T5784] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 125.062048][ T5784] snd-usb-audio: probe of 4-1:1.0 failed with error -2 [ 125.077030][ T5784] usb 4-1: USB disconnect, device number 6 [ 125.120309][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.244541][ T2139] usb usb36-port1: unable to enumerate USB device [ 125.604380][ T6617] fuse: Invalid rootmode [ 126.075139][ T6624] netlink: 'syz.0.264': attribute type 1 has an invalid length. [ 126.160295][ T6624] bond2: entered promiscuous mode [ 126.167767][ T6624] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.827965][ T6647] fuse: Invalid rootmode [ 126.973743][ T5784] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 127.182859][ T5784] usb 1-1: Using ep0 maxpacket: 16 [ 127.205129][ T5784] usb 1-1: unable to get BOS descriptor or descriptor too short [ 127.228349][ T5784] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.254258][ T5784] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 127.277237][ T5784] usb 1-1: New USB device found, idVendor=0499, idProduct=1051, bcdDevice= 0.40 [ 127.287708][ T6656] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.294925][ T5784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.321666][ T5784] usb 1-1: Product: syz [ 127.326292][ T6656] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 127.344135][ T6656] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 127.350696][ T6656] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 127.374040][ T6656] vhci_hcd vhci_hcd.0: Device attached [ 127.407376][ T6659] vhci_hcd: connection closed [ 127.413437][ T5784] usb 1-1: Manufacturer: syz [ 127.427864][ T78] vhci_hcd: stop threads [ 127.432150][ T78] vhci_hcd: release socket [ 127.444636][ T5784] usb 1-1: SerialNumber: syz [ 127.451723][ T78] vhci_hcd: disconnect device [ 127.541610][ T6663] netlink: 'syz.3.277': attribute type 1 has an invalid length. [ 127.587496][ T6663] bond2: entered promiscuous mode [ 127.593339][ T6663] 8021q: adding VLAN 0 to HW filter on device bond2 [ 127.709638][ T5784] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 127.840456][ T5784] snd-usb-audio: probe of 1-1:1.0 failed with error -2 [ 127.891721][ T5784] usb 1-1: USB disconnect, device number 6 [ 127.987241][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.374139][ T6675] fuse: Bad value for 'rootmode' [ 128.771771][ T6684] netlink: 'syz.0.286': attribute type 1 has an invalid length. [ 128.848143][ T6684] bond3: entered promiscuous mode [ 128.856398][ T6684] 8021q: adding VLAN 0 to HW filter on device bond3 [ 129.405926][ T6698] fuse: Bad value for 'rootmode' [ 129.572120][ T6702] C: renamed from team_slave_0 [ 129.598499][ T6702] netlink: 'syz.0.292': attribute type 2 has an invalid length. [ 129.644040][ T6702] netlink: 156 bytes leftover after parsing attributes in process `syz.0.292'. [ 129.653078][ T6702] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 129.844653][ T172] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 129.960766][ T6711] netlink: 'syz.2.295': attribute type 1 has an invalid length. [ 129.988008][ T6711] bond1: entered promiscuous mode [ 129.995401][ T6711] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.024633][ T172] usb 4-1: Using ep0 maxpacket: 16 [ 130.046675][ T172] usb 4-1: unable to get BOS descriptor or descriptor too short [ 130.083742][ T172] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.130203][ T172] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 130.181738][ T172] usb 4-1: New USB device found, idVendor=0499, idProduct=1051, bcdDevice= 0.40 [ 130.197855][ T172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.218079][ T172] usb 4-1: Product: syz [ 130.242795][ T172] usb 4-1: Manufacturer: syz [ 130.249619][ T172] usb 4-1: SerialNumber: syz [ 130.545979][ T172] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 130.694739][ T172] snd-usb-audio: probe of 4-1:1.0 failed with error -2 [ 130.725279][ T172] usb 4-1: USB disconnect, device number 7 [ 130.779614][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.230205][ T6729] fuse: Bad value for 'rootmode' [ 131.689664][ T6741] netlink: 'syz.3.304': attribute type 1 has an invalid length. [ 131.782901][ T6741] bond3: entered promiscuous mode [ 131.811362][ T6741] 8021q: adding VLAN 0 to HW filter on device bond3 [ 131.961928][ T6744] C: renamed from team_slave_0 (while UP) [ 132.093460][ T6744] netlink: 'syz.1.305': attribute type 2 has an invalid length. [ 132.129139][ T6744] netlink: 156 bytes leftover after parsing attributes in process `syz.1.305'. [ 132.224471][ T6744] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 133.034194][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.044470][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.331684][ T6762] fuse: Unknown parameter 'use00000000000000000000' [ 133.513981][ T172] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 133.713814][ T172] usb 4-1: Using ep0 maxpacket: 16 [ 133.898141][ T172] usb 4-1: unable to get BOS descriptor or descriptor too short [ 133.965667][ T172] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.009931][ T172] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 134.052227][ T172] usb 4-1: New USB device found, idVendor=0499, idProduct=1051, bcdDevice= 0.40 [ 134.079443][ T172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.109801][ T172] usb 4-1: Product: syz [ 134.123920][ T172] usb 4-1: Manufacturer: syz [ 134.160482][ T172] usb 4-1: SerialNumber: syz [ 134.426625][ T172] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 134.512820][ T172] snd-usb-audio: probe of 4-1:1.0 failed with error -2 [ 134.556460][ T172] usb 4-1: USB disconnect, device number 8 [ 134.592678][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.397002][ T6808] usb usb8: usbfs: process 6808 (syz.3.326) did not claim interface 0 before use [ 136.688183][ T6792] netlink: 88 bytes leftover after parsing attributes in process `syz.1.322'. [ 136.793770][ T5784] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 136.973743][ T5784] usb 4-1: Using ep0 maxpacket: 16 [ 136.993096][ T5784] usb 4-1: unable to get BOS descriptor or descriptor too short [ 137.012875][ T5784] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.032169][ T5784] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 137.048679][ T5784] usb 4-1: New USB device found, idVendor=0499, idProduct=1051, bcdDevice= 0.40 [ 137.060715][ T5784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.069890][ T5784] usb 4-1: Product: syz [ 137.074288][ T5784] usb 4-1: Manufacturer: syz [ 137.078962][ T5784] usb 4-1: SerialNumber: syz [ 137.326987][ T5784] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 137.464750][ T5784] snd-usb-audio: probe of 4-1:1.0 failed with error -2 [ 137.550302][ T5784] usb 4-1: USB disconnect, device number 9 [ 137.607354][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.122213][ T6853] usb usb8: usbfs: process 6853 (syz.1.343) did not claim interface 0 before use [ 139.179751][ T6855] netlink: 'syz.2.344': attribute type 1 has an invalid length. [ 139.208059][ T6855] bond2: entered promiscuous mode [ 139.213431][ T6855] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.290816][ T6858] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.309133][ T6858] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 139.320443][ T6858] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 139.334950][ T6858] bond2: (slave ip6gre1): making interface the new active one [ 139.342775][ T6858] ip6gre1: entered promiscuous mode [ 139.351072][ T6858] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 139.563993][ T172] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 139.755065][ T172] usb 2-1: Using ep0 maxpacket: 16 [ 139.768723][ T172] usb 2-1: unable to get BOS descriptor or descriptor too short [ 139.787001][ T172] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.815586][ T172] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 139.830883][ T172] usb 2-1: New USB device found, idVendor=0499, idProduct=1051, bcdDevice= 0.40 [ 139.841669][ T172] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.856001][ T172] usb 2-1: Product: syz [ 139.860369][ T172] usb 2-1: Manufacturer: syz [ 139.870482][ T172] usb 2-1: SerialNumber: syz [ 140.108151][ T172] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 140.180532][ T172] snd-usb-audio: probe of 2-1:1.0 failed with error -2 [ 140.210602][ T172] usb 2-1: USB disconnect, device number 4 [ 140.236771][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.780325][ T6905] usb usb8: usbfs: process 6905 (syz.1.361) did not claim interface 0 before use [ 142.162217][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 142.343828][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 142.360382][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 142.372043][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.382722][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 142.404999][ T9] usb 2-1: New USB device found, idVendor=0499, idProduct=1051, bcdDevice= 0.40 [ 142.414769][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.428553][ T9] usb 2-1: Product: syz [ 142.432962][ T9] usb 2-1: Manufacturer: syz [ 142.440314][ T9] usb 2-1: SerialNumber: syz [ 142.770318][ T9] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 142.847325][ T9] snd-usb-audio: probe of 2-1:1.0 failed with error -2 [ 142.877561][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.894246][ T9] usb 2-1: USB disconnect, device number 5 [ 143.887823][ T6935] netlink: 'syz.1.372': attribute type 1 has an invalid length. [ 143.969058][ T6935] bond4: entered promiscuous mode [ 143.974808][ T6935] 8021q: adding VLAN 0 to HW filter on device bond4 [ 143.992858][ T6938] 8021q: adding VLAN 0 to HW filter on device bond4 [ 144.000275][ T6938] bond4: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 144.024210][ T6938] bond4: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 144.042171][ T6938] bond4: (slave ip6gre2): making interface the new active one [ 144.051082][ T6938] ip6gre2: entered promiscuous mode [ 144.059735][ T6938] bond4: (slave ip6gre2): Enslaving as an active interface with an up link [ 145.025690][ T6963] fuse: Bad value for 'fd' [ 145.476705][ T6969] fuse: Bad value for 'rootmode' [ 145.950625][ T6984] fuse: Bad value for 'fd' [ 146.894524][ T7004] fuse: Unknown parameter '0x0000000000000003' [ 147.101068][ T7009] netlink: 'syz.0.402': attribute type 1 has an invalid length. [ 147.224066][ T7009] bond4: entered promiscuous mode [ 147.229481][ T7009] 8021q: adding VLAN 0 to HW filter on device bond4 [ 147.261569][ T7018] 8021q: adding VLAN 0 to HW filter on device bond4 [ 147.282384][ T7018] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 147.296292][ T7018] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 147.313101][ T7018] bond4: (slave ip6gre1): making interface the new active one [ 147.333161][ T7018] ip6gre1: entered promiscuous mode [ 147.353325][ T7018] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 147.377961][ T7021] netlink: 'syz.2.404': attribute type 2 has an invalid length. [ 147.391103][ T7021] netlink: 156 bytes leftover after parsing attributes in process `syz.2.404'. [ 147.434374][ T7021] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 147.483803][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 147.689097][ T9] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 147.712274][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.723812][ T9] usb 2-1: Product: syz [ 147.728174][ T9] usb 2-1: Manufacturer: syz [ 147.733164][ T9] usb 2-1: SerialNumber: syz [ 147.744701][ T9] usb 2-1: config 0 descriptor?? [ 148.373695][ T9] usb 2-1: f81604_read: reg: 105 failed: -EPROTO [ 148.380125][ T9] f81604 2-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 148.432234][ T9] f81604: probe of 2-1:0.0 failed with error -71 [ 148.463534][ T9] usb 2-1: USB disconnect, device number 6 [ 148.615890][ T7035] netlink: 28 bytes leftover after parsing attributes in process `syz.3.410'. [ 148.638199][ T7035] netlink: 'syz.3.410': attribute type 10 has an invalid length. [ 148.655550][ T7037] fuse: Unknown parameter '0x0000000000000003' [ 148.827994][ T7041] syz.0.412 (7041) used greatest stack depth: 20752 bytes left [ 148.850100][ T7035] team0 (unregistering): Port device team_slave_0 removed [ 148.914135][ T7035] team0 (unregistering): Port device team_slave_1 removed [ 149.913954][ T7066] fuse: Unknown parameter 'use00000000000000000000' [ 150.037041][ T7061] lo: entered allmulticast mode [ 150.733694][ T5822] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 150.973254][ T5822] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 151.006938][ T5822] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.024011][ T5822] usb 4-1: config 0 has no interface number 0 [ 151.035964][ T5822] usb 4-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 151.068255][ T5822] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 151.081914][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.134650][ T5822] usb 4-1: Product: syz [ 151.138897][ T5822] usb 4-1: Manufacturer: syz [ 151.143544][ T5822] usb 4-1: SerialNumber: syz [ 151.186958][ T5822] usb 4-1: config 0 descriptor?? [ 151.416824][ T5822] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 151.428271][ T5822] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 82 [ 151.442949][ T5822] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 151.464394][ T5822] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 151.472249][ T5822] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 151.516428][ T5822] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 151.620588][ T7093] fuse: Unknown parameter 'user_i00000000000000000000' [ 151.991512][ T7100] fuse: Unknown parameter '0x0000000000000003' [ 152.169241][ T8] usb 4-1: USB disconnect, device number 10 [ 152.230909][ T8] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 152.281598][ T8] keyspan 4-1:0.133: device disconnected [ 152.825752][ T7116] fuse: Unknown parameter 'user_i00000000000000000000' [ 152.853746][ T5822] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 152.902037][ T7118] netlink: 'syz.3.444': attribute type 1 has an invalid length. [ 152.952496][ T7118] bond4: entered promiscuous mode [ 152.960433][ T7118] 8021q: adding VLAN 0 to HW filter on device bond4 [ 153.069371][ T5822] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 153.079970][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.088942][ T5822] usb 2-1: Product: syz [ 153.093236][ T5822] usb 2-1: Manufacturer: syz [ 153.103389][ T5822] usb 2-1: SerialNumber: syz [ 153.115073][ T5822] usb 2-1: config 0 descriptor?? [ 153.358982][ T7126] fuse: Unknown parameter '0x0000000000000003' [ 153.741219][ T5822] usb 2-1: f81604_read: reg: 105 failed: -EPROTO [ 153.768284][ T5822] f81604 2-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 153.806997][ T5822] f81604: probe of 2-1:0.0 failed with error -71 [ 153.849582][ T5822] usb 2-1: USB disconnect, device number 7 [ 153.994445][ T7136] netlink: 28 bytes leftover after parsing attributes in process `syz.3.452'. [ 154.042408][ T7136] netlink: 'syz.3.452': attribute type 10 has an invalid length. [ 154.103550][ T7140] netlink: 'syz.2.454': attribute type 1 has an invalid length. [ 154.132329][ T7140] bond3: entered promiscuous mode [ 154.137802][ T7140] 8021q: adding VLAN 0 to HW filter on device bond3 [ 154.149915][ T7138] netlink: 'syz.0.453': attribute type 1 has an invalid length. [ 154.185385][ T7138] 8021q: adding VLAN 0 to HW filter on device bond5 [ 154.204293][ T7143] bond5: (slave gretap1): making interface the new active one [ 154.214043][ T7143] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 154.499922][ T7150] fuse: Unknown parameter 'fd0x0000000000000003' [ 154.704962][ T7143] syz.0.453 (7143) used greatest stack depth: 20344 bytes left [ 155.342800][ T7174] netlink: 28 bytes leftover after parsing attributes in process `syz.3.468'. [ 155.419402][ T7174] netlink: 'syz.3.468': attribute type 10 has an invalid length. [ 155.445962][ T7179] fuse: Unknown parameter 'user_id00000000000000000000' [ 156.489373][ T7211] lo: entered allmulticast mode [ 157.543684][ T28] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 157.748364][ T28] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 157.768491][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.792191][ T28] usb 3-1: Product: syz [ 157.803682][ T28] usb 3-1: Manufacturer: syz [ 157.814232][ T28] usb 3-1: SerialNumber: syz [ 157.836992][ T28] usb 3-1: config 0 descriptor?? [ 158.461932][ T28] usb 3-1: f81604_read: reg: 105 failed: -EPROTO [ 158.480316][ T28] f81604 3-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 158.500196][ T28] f81604: probe of 3-1:0.0 failed with error -71 [ 158.535690][ T28] usb 3-1: USB disconnect, device number 9 [ 158.842400][ T7271] netlink: 'syz.0.511': attribute type 2 has an invalid length. [ 158.860095][ T7271] netlink: 156 bytes leftover after parsing attributes in process `syz.0.511'. [ 158.873724][ T7271] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 159.799310][ T7293] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.807043][ T7293] IPv6: NLM_F_CREATE should be set when creating new route [ 159.814425][ T7293] IPv6: NLM_F_CREATE should be set when creating new route [ 160.175608][ T2139] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 160.355963][ T7312] netlink: 'syz.2.529': attribute type 1 has an invalid length. [ 160.387149][ T2139] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 160.405886][ T2139] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.417966][ T2139] usb 4-1: Product: syz [ 160.422209][ T2139] usb 4-1: Manufacturer: syz [ 160.427149][ T2139] usb 4-1: SerialNumber: syz [ 160.435173][ T2139] usb 4-1: config 0 descriptor?? [ 160.464031][ T7312] 8021q: adding VLAN 0 to HW filter on device bond4 [ 160.521165][ T7315] bond4: (slave gretap1): making interface the new active one [ 160.532633][ T7315] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 161.020140][ T7315] syz.2.529 (7315) used greatest stack depth: 20056 bytes left [ 161.066965][ T2139] usb 4-1: f81604_read: reg: 105 failed: -EPROTO [ 161.093905][ T2139] f81604 4-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 161.112276][ T2139] f81604: probe of 4-1:0.0 failed with error -71 [ 161.137491][ T2139] usb 4-1: USB disconnect, device number 11 [ 161.148658][ T7325] netlink: 28 bytes leftover after parsing attributes in process `syz.1.533'. [ 161.370921][ T7329] netlink: 'syz.0.534': attribute type 2 has an invalid length. [ 161.400674][ T7329] netlink: 156 bytes leftover after parsing attributes in process `syz.0.534'. [ 161.435590][ T7329] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 162.308786][ T7357] netlink: 'syz.1.547': attribute type 1 has an invalid length. [ 162.410094][ T7357] 8021q: adding VLAN 0 to HW filter on device bond5 [ 162.443469][ T7360] bond5: (slave gretap1): making interface the new active one [ 162.455630][ T7360] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 163.774760][ T7387] netlink: 'syz.1.558': attribute type 2 has an invalid length. [ 163.803974][ T7387] netlink: 156 bytes leftover after parsing attributes in process `syz.1.558'. [ 163.812994][ T7387] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 165.244288][ T7407] netlink: 'syz.2.566': attribute type 1 has an invalid length. [ 165.380900][ T7407] bond5: entered promiscuous mode [ 165.408336][ T7407] 8021q: adding VLAN 0 to HW filter on device bond5 [ 166.638443][ T7447] io-wq is not configured for unbound workers [ 166.856899][ T7452] netlink: 'syz.1.579': attribute type 1 has an invalid length. [ 166.899852][ T7452] bond6: entered promiscuous mode [ 166.907417][ T7452] 8021q: adding VLAN 0 to HW filter on device bond6 [ 167.093734][ T5822] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 167.185642][ T7456] netlink: 28 bytes leftover after parsing attributes in process `syz.1.580'. [ 167.220759][ T7456] netlink: 'syz.1.580': attribute type 10 has an invalid length. [ 167.306394][ T5822] usb 3-1: Using ep0 maxpacket: 16 [ 167.319012][ T5822] usb 3-1: unable to get BOS descriptor or descriptor too short [ 167.338693][ T5822] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.370234][ T5822] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 167.412608][ T5822] usb 3-1: New USB device found, idVendor=0499, idProduct=1051, bcdDevice= 0.40 [ 167.427660][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.457903][ T5822] usb 3-1: Product: syz [ 167.467621][ T5822] usb 3-1: Manufacturer: syz [ 167.478276][ T5822] usb 3-1: SerialNumber: syz [ 167.478831][ T7456] team0 (unregistering): Port device C removed [ 167.554964][ T7456] team0 (unregistering): Port device team_slave_1 removed [ 167.732269][ T5822] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 167.799138][ T5822] snd-usb-audio: probe of 3-1:1.0 failed with error -2 [ 167.839338][ T5822] usb 3-1: USB disconnect, device number 10 [ 167.891963][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 168.085240][ T7467] fuse: Unknown parameter '0x0000000000000004' [ 168.314757][ T7469] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 168.713079][ T7482] netlink: 'syz.1.588': attribute type 1 has an invalid length. [ 168.817452][ T7482] bond7: entered promiscuous mode [ 168.827222][ T7482] 8021q: adding VLAN 0 to HW filter on device bond7 [ 168.867440][ T7488] C: renamed from team_slave_0 [ 168.893066][ T7488] netlink: 'syz.3.589': attribute type 2 has an invalid length. [ 168.962866][ T7488] netlink: 156 bytes leftover after parsing attributes in process `syz.3.589'. [ 168.985515][ T7488] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 169.150043][ T7498] fuse: Unknown parameter 'fd0x0000000000000004' [ 169.545408][ T7509] netlink: 28 bytes leftover after parsing attributes in process `syz.1.594'. [ 169.560336][ T7509] netlink: 'syz.1.594': attribute type 10 has an invalid length. [ 170.089292][ T7520] netlink: 'syz.3.598': attribute type 1 has an invalid length. [ 170.103918][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 170.289439][ T7520] bond5: entered promiscuous mode [ 170.312808][ T7520] 8021q: adding VLAN 0 to HW filter on device bond5 [ 170.373722][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 170.392862][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 170.411691][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.432467][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 170.445452][ T8] usb 1-1: New USB device found, idVendor=0499, idProduct=1051, bcdDevice= 0.40 [ 170.458128][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.490795][ T8] usb 1-1: Product: syz [ 170.499022][ T8] usb 1-1: Manufacturer: syz [ 170.519130][ T8] usb 1-1: SerialNumber: syz [ 170.799621][ T8] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 170.837164][ T8] snd-usb-audio: probe of 1-1:1.0 failed with error -2 [ 170.847264][ T8] usb 1-1: USB disconnect, device number 7 [ 170.890873][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.486130][ T7543] netlink: 'syz.1.603': attribute type 1 has an invalid length. [ 171.676621][ T7543] 8021q: adding VLAN 0 to HW filter on device bond8 [ 171.787112][ T7548] netlink: 'syz.2.604': attribute type 2 has an invalid length. [ 171.803973][ T7548] netlink: 156 bytes leftover after parsing attributes in process `syz.2.604'. [ 171.854030][ T7548] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 172.092227][ T7558] netlink: 'syz.0.608': attribute type 1 has an invalid length. [ 172.134433][ T7558] bond6: entered promiscuous mode [ 172.139965][ T7558] 8021q: adding VLAN 0 to HW filter on device bond6 [ 172.150418][ T7556] netlink: 28 bytes leftover after parsing attributes in process `syz.3.607'. [ 172.180077][ T7556] netlink: 'syz.3.607': attribute type 10 has an invalid length. [ 173.223818][ T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 173.423905][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 173.432066][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 173.441682][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.455071][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.483072][ T8] usb 4-1: New USB device found, idVendor=0499, idProduct=1051, bcdDevice= 0.40 [ 173.501199][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.512985][ T8] usb 4-1: Product: syz [ 173.523045][ T8] usb 4-1: Manufacturer: syz [ 173.538171][ T8] usb 4-1: SerialNumber: syz [ 173.794037][ T8] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 173.884512][ T8] snd-usb-audio: probe of 4-1:1.0 failed with error -2 [ 173.913158][ T8] usb 4-1: USB disconnect, device number 12 [ 173.978956][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.131269][ T7595] netlink: 'syz.1.619': attribute type 1 has an invalid length. [ 174.208196][ T7595] 8021q: adding VLAN 0 to HW filter on device bond9 [ 174.673701][ T2139] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 174.876441][ T2139] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 174.904522][ T2139] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.924019][ T2139] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 174.942461][ T2139] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 174.968799][ T2139] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.989167][ T2139] usb 1-1: config 0 descriptor?? [ 175.091382][ T7613] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 175.107857][ T7613] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 175.476586][ T2139] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 175.511697][ T2139] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 176.241867][ T7628] netlink: 28 bytes leftover after parsing attributes in process `syz.1.630'. [ 176.267611][ T7628] netlink: 'syz.1.630': attribute type 10 has an invalid length. [ 176.523757][ T5849] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 176.743727][ T5849] usb 4-1: Using ep0 maxpacket: 16 [ 176.762732][ T5849] usb 4-1: unable to get BOS descriptor or descriptor too short [ 176.804960][ T5849] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.820403][ T5849] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 176.864305][ T5849] usb 4-1: New USB device found, idVendor=0499, idProduct=1051, bcdDevice= 0.40 [ 176.903210][ T5849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.924531][ T5849] usb 4-1: Product: syz [ 176.928767][ T5849] usb 4-1: Manufacturer: syz [ 176.938257][ T5849] usb 4-1: SerialNumber: syz [ 177.203103][ T5849] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 177.290196][ T5849] snd-usb-audio: probe of 4-1:1.0 failed with error -2 [ 177.320181][ T7637] netlink: 'syz.2.634': attribute type 1 has an invalid length. [ 177.328442][ T5849] usb 4-1: USB disconnect, device number 13 [ 177.450698][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.503101][ T7637] 8021q: adding VLAN 0 to HW filter on device bond6 [ 177.631692][ T5822] usb 1-1: USB disconnect, device number 8 [ 178.360406][ T7662] netlink: 28 bytes leftover after parsing attributes in process `syz.2.640'. [ 178.380803][ T7662] netlink: 'syz.2.640': attribute type 10 has an invalid length. [ 178.537393][ T7662] team0 (unregistering): Port device C removed [ 178.561932][ T7662] team0 (unregistering): Port device team_slave_1 removed [ 179.994637][ T7681] netlink: 'syz.1.648': attribute type 1 has an invalid length. [ 180.169726][ T7681] 8021q: adding VLAN 0 to HW filter on device bond10 [ 180.212419][ T7688] netlink: 'syz.2.649': attribute type 5 has an invalid length. [ 180.265711][ T5849] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 180.453703][ T5849] usb 1-1: Using ep0 maxpacket: 16 [ 180.465716][ T5849] usb 1-1: unable to get BOS descriptor or descriptor too short [ 180.483379][ T5849] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.505916][ T5849] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 180.527236][ T5849] usb 1-1: New USB device found, idVendor=0499, idProduct=1051, bcdDevice= 0.40 [ 180.537190][ T5849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.550609][ T5849] usb 1-1: Product: syz [ 180.558898][ T5849] usb 1-1: Manufacturer: syz [ 180.564500][ T5849] usb 1-1: SerialNumber: syz [ 180.815433][ T5849] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 180.902085][ T5849] snd-usb-audio: probe of 1-1:1.0 failed with error -2 [ 180.926624][ T5849] usb 1-1: USB disconnect, device number 9 [ 180.970054][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 181.648069][ T7718] netlink: 'syz.0.662': attribute type 1 has an invalid length. [ 181.685765][ T7718] 8021q: adding VLAN 0 to HW filter on device bond7 [ 182.645240][ T7743] netlink: 40 bytes leftover after parsing attributes in process `syz.0.672'. [ 182.654816][ T7743] ------------[ cut here ]------------ [ 182.660365][ T7743] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 182.675417][ T7743] WARNING: CPU: 0 PID: 7743 at net/sched/cls_u32.c:855 u32_change+0x1df2/0x2860 [ 182.684768][ T7743] Modules linked in: [ 182.688727][ T7743] CPU: 0 PID: 7743 Comm: syz.0.672 Not tainted syzkaller #0 [ 182.696224][ T7743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 182.706633][ T7743] RIP: 0010:u32_change+0x1df2/0x2860 [ 182.712000][ T7743] Code: f8 eb 59 e8 e0 58 cf f8 c6 05 28 eb be 05 01 b9 10 00 00 00 48 c7 c7 00 62 c8 8b 4c 89 f6 48 c7 c2 80 62 c8 8b e8 7e 25 99 f8 <0f> 0b e9 10 ef ff ff e8 b2 58 cf f8 eb 24 e8 ab 58 cf f8 c6 05 a0 [ 182.731770][ T7743] RSP: 0018:ffffc90004a2ed60 EFLAGS: 00010246 [ 182.737957][ T7743] RAX: b8f8568566356800 RBX: ffff88805f21ac00 RCX: 0000000000080000 [ 182.746056][ T7743] RDX: ffffc9000d1f9000 RSI: 0000000000005aa6 RDI: 0000000000005aa7 [ 182.754278][ T7743] RBP: ffffc90004a2eef8 R08: ffffc90004a2e967 R09: 1ffff92000945d2c [ 182.762307][ T7743] R10: dffffc0000000000 R11: fffff52000945d2d R12: 1ffff92000945dbc [ 182.771724][ T7743] R13: ffff88805f219ce8 R14: 0000000000000020 R15: 0000000000000001 [ 182.780041][ T7743] FS: 00007fa864ae06c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 182.789136][ T7743] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 182.795839][ T7743] CR2: 0000200000006040 CR3: 00000000260a2000 CR4: 00000000003506f0 [ 182.803945][ T7743] Call Trace: [ 182.807286][ T7743] [ 182.810282][ T7743] ? u32_get+0x370/0x370 [ 182.814696][ T7743] tc_new_tfilter+0x1109/0x1840 [ 182.819640][ T7743] ? tcf_proto_signal_destroying+0x240/0x240 [ 182.825789][ T7743] ? rcu_read_unlock+0x8c/0xa0 [ 182.830632][ T7743] ? tcf_proto_signal_destroying+0x240/0x240 [ 182.836781][ T7743] ? tcf_proto_signal_destroying+0x240/0x240 [ 182.842821][ T7743] rtnetlink_rcv_msg+0x892/0xf90 [ 182.847942][ T7743] ? rtnetlink_rcv_msg+0x220/0xf90 [ 182.853126][ T7743] ? rtnetlink_bind+0x80/0x80 [ 182.856763][ T28] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 182.857990][ T7743] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 182.872831][ T7743] ? lock_chain_count+0x20/0x20 [ 182.878013][ T7743] ? __local_bh_enable_ip+0x13a/0x1c0 [ 182.883452][ T7743] ? lockdep_hardirqs_on+0x98/0x150 [ 182.888810][ T7743] ? __local_bh_enable_ip+0x13a/0x1c0 [ 182.894322][ T7743] ? _local_bh_enable+0xa0/0xa0 [ 182.899240][ T7743] ? __dev_queue_xmit+0x272/0x37e0 [ 182.904525][ T7743] ? __dev_queue_xmit+0x1329/0x37e0 [ 182.909789][ T7743] ? __dev_queue_xmit+0x272/0x37e0 [ 182.915078][ T7743] ? ref_tracker_free+0x686/0x830 [ 182.920182][ T7743] netlink_rcv_skb+0x235/0x4c0 [ 182.925067][ T7743] ? rtnetlink_bind+0x80/0x80 [ 182.929842][ T7743] ? netlink_ack+0x1160/0x1160 [ 182.934754][ T7743] ? __lock_acquire+0x7d80/0x7d80 [ 182.939850][ T7743] ? netlink_deliver_tap+0x2e/0x1b0 [ 182.945299][ T7743] netlink_unicast+0x7b1/0x930 [ 182.950138][ T7743] netlink_sendmsg+0x8d0/0xbf0 [ 182.955061][ T7743] ? netlink_getsockopt+0x590/0x590 [ 182.960350][ T7743] ? apparmor_socket_sendmsg+0x8e/0x330 [ 182.966046][ T7743] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 182.972592][ T7743] ? security_socket_sendmsg+0x80/0xa0 [ 182.978437][ T7743] ? netlink_getsockopt+0x590/0x590 [ 182.983762][ T7743] ____sys_sendmsg+0x61b/0x980 [ 182.988593][ T7743] ? __asan_memset+0x22/0x40 [ 182.993269][ T7743] ? __sys_sendmsg_sock+0x30/0x30 [ 182.998416][ T7743] ? __import_iovec+0x5f2/0x850 [ 183.003346][ T7743] ? import_iovec+0x73/0xa0 [ 183.008060][ T7743] ___sys_sendmsg+0x2a6/0x360 [ 183.012809][ T7743] ? __sys_sendmsg+0x2b0/0x2b0 [ 183.017700][ T7743] ? futex_setup_timer+0xc0/0xc0 [ 183.022723][ T7743] __sys_sendmmsg+0x2ca/0x510 [ 183.027651][ T7743] ? __ia32_sys_sendmsg+0x90/0x90 [ 183.032750][ T7743] ? __ia32_sys_get_robust_list+0x110/0x110 [ 183.038785][ T7743] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 183.044922][ T7743] ? lock_chain_count+0x20/0x20 [ 183.049846][ T7743] __x64_sys_sendmmsg+0xa0/0xb0 [ 183.054802][ T7743] do_syscall_64+0x55/0xb0 [ 183.059278][ T7743] ? clear_bhb_loop+0x40/0x90 [ 183.064091][ T7743] ? clear_bhb_loop+0x40/0x90 [ 183.068828][ T7743] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 183.076043][ T7743] RIP: 0033:0x7fa863b9e159 [ 183.080530][ T7743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.100423][ T7743] RSP: 002b:00007fa864ae0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 183.104472][ T28] usb 3-1: Using ep0 maxpacket: 16 [ 183.109208][ T7743] RAX: ffffffffffffffda RBX: 00007fa863e25fa0 RCX: 00007fa863b9e159 [ 183.122168][ T7743] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 183.130260][ T7743] RBP: 00007fa863c3503b R08: 0000000000000000 R09: 0000000000000000 [ 183.138397][ T7743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.146489][ T7743] R13: 00007fa863e26038 R14: 00007fa863e25fa0 R15: 00007ffc489e0098 [ 183.154627][ T7743] [ 183.157699][ T7743] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 183.165029][ T7743] CPU: 0 PID: 7743 Comm: syz.0.672 Not tainted syzkaller #0 [ 183.172360][ T7743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 183.182458][ T7743] Call Trace: [ 183.185776][ T7743] [ 183.188755][ T7743] dump_stack_lvl+0x18c/0x250 [ 183.192369][ T28] usb 3-1: unable to get BOS descriptor or descriptor too short [ 183.201142][ T7743] ? show_regs_print_info+0x20/0x20 [ 183.206409][ T7743] ? load_image+0x420/0x420 [ 183.210975][ T7743] panic+0x2ca/0x720 [ 183.214932][ T28] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.214932][ T7743] ? bpf_jit_dump+0xd0/0xd0 [ 183.214958][ T28] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 183.238460][ T7743] __warn+0x2e0/0x470 [ 183.242497][ T7743] ? u32_change+0x1df2/0x2860 [ 183.247218][ T7743] ? u32_change+0x1df2/0x2860 [ 183.251931][ T7743] report_bug+0x2be/0x4f0 [ 183.256300][ T7743] ? u32_change+0x1df2/0x2860 [ 183.261019][ T7743] ? u32_change+0x1df2/0x2860 [ 183.265736][ T7743] ? u32_change+0x1df4/0x2860 [ 183.270446][ T7743] handle_bug+0xcf/0x120 [ 183.274726][ T7743] exc_invalid_op+0x1a/0x50 [ 183.279257][ T7743] asm_exc_invalid_op+0x1a/0x20 [ 183.284145][ T7743] RIP: 0010:u32_change+0x1df2/0x2860 [ 183.289527][ T7743] Code: f8 eb 59 e8 e0 58 cf f8 c6 05 28 eb be 05 01 b9 10 00 00 00 48 c7 c7 00 62 c8 8b 4c 89 f6 48 c7 c2 80 62 c8 8b e8 7e 25 99 f8 <0f> 0b e9 10 ef ff ff e8 b2 58 cf f8 eb 24 e8 ab 58 cf f8 c6 05 a0 [ 183.310487][ T7743] RSP: 0018:ffffc90004a2ed60 EFLAGS: 00010246 [ 183.316592][ T7743] RAX: b8f8568566356800 RBX: ffff88805f21ac00 RCX: 0000000000080000 [ 183.324592][ T7743] RDX: ffffc9000d1f9000 RSI: 0000000000005aa6 RDI: 0000000000005aa7 [ 183.332598][ T7743] RBP: ffffc90004a2eef8 R08: ffffc90004a2e967 R09: 1ffff92000945d2c [ 183.340603][ T7743] R10: dffffc0000000000 R11: fffff52000945d2d R12: 1ffff92000945dbc [ 183.348601][ T7743] R13: ffff88805f219ce8 R14: 0000000000000020 R15: 0000000000000001 [ 183.356641][ T7743] ? u32_get+0x370/0x370 [ 183.360940][ T7743] tc_new_tfilter+0x1109/0x1840 [ 183.365848][ T7743] ? tcf_proto_signal_destroying+0x240/0x240 [ 183.371913][ T7743] ? rcu_read_unlock+0x8c/0xa0 [ 183.376715][ T7743] ? tcf_proto_signal_destroying+0x240/0x240 [ 183.382728][ T7743] ? tcf_proto_signal_destroying+0x240/0x240 [ 183.388743][ T7743] rtnetlink_rcv_msg+0x892/0xf90 [ 183.393719][ T7743] ? rtnetlink_rcv_msg+0x220/0xf90 [ 183.398868][ T7743] ? rtnetlink_bind+0x80/0x80 [ 183.403591][ T7743] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 183.409627][ T7743] ? lock_chain_count+0x20/0x20 [ 183.414524][ T7743] ? __local_bh_enable_ip+0x13a/0x1c0 [ 183.419941][ T7743] ? lockdep_hardirqs_on+0x98/0x150 [ 183.425186][ T7743] ? __local_bh_enable_ip+0x13a/0x1c0 [ 183.430602][ T7743] ? _local_bh_enable+0xa0/0xa0 [ 183.435493][ T7743] ? __dev_queue_xmit+0x272/0x37e0 [ 183.440649][ T7743] ? __dev_queue_xmit+0x1329/0x37e0 [ 183.445907][ T7743] ? __dev_queue_xmit+0x272/0x37e0 [ 183.451070][ T7743] ? ref_tracker_free+0x686/0x830 [ 183.456145][ T7743] netlink_rcv_skb+0x235/0x4c0 [ 183.460942][ T7743] ? rtnetlink_bind+0x80/0x80 [ 183.465656][ T7743] ? netlink_ack+0x1160/0x1160 [ 183.470491][ T7743] ? __lock_acquire+0x7d80/0x7d80 [ 183.475562][ T7743] ? netlink_deliver_tap+0x2e/0x1b0 [ 183.480813][ T7743] netlink_unicast+0x7b1/0x930 [ 183.485617][ T7743] netlink_sendmsg+0x8d0/0xbf0 [ 183.490429][ T7743] ? netlink_getsockopt+0x590/0x590 [ 183.495687][ T7743] ? apparmor_socket_sendmsg+0x8e/0x330 [ 183.501268][ T7743] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 183.506598][ T7743] ? security_socket_sendmsg+0x80/0xa0 [ 183.512094][ T7743] ? netlink_getsockopt+0x590/0x590 [ 183.517384][ T7743] ____sys_sendmsg+0x61b/0x980 [ 183.522195][ T7743] ? __asan_memset+0x22/0x40 [ 183.526830][ T7743] ? __sys_sendmsg_sock+0x30/0x30 [ 183.531901][ T7743] ? __import_iovec+0x5f2/0x850 [ 183.536820][ T7743] ? import_iovec+0x73/0xa0 [ 183.541381][ T7743] ___sys_sendmsg+0x2a6/0x360 [ 183.546102][ T7743] ? __sys_sendmsg+0x2b0/0x2b0 [ 183.550923][ T7743] ? futex_setup_timer+0xc0/0xc0 [ 183.555914][ T7743] __sys_sendmmsg+0x2ca/0x510 [ 183.560632][ T7743] ? __ia32_sys_sendmsg+0x90/0x90 [ 183.565699][ T7743] ? __ia32_sys_get_robust_list+0x110/0x110 [ 183.571635][ T7743] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 183.577655][ T7743] ? lock_chain_count+0x20/0x20 [ 183.582544][ T7743] __x64_sys_sendmmsg+0xa0/0xb0 [ 183.587431][ T7743] do_syscall_64+0x55/0xb0 [ 183.591885][ T7743] ? clear_bhb_loop+0x40/0x90 [ 183.596596][ T7743] ? clear_bhb_loop+0x40/0x90 [ 183.601304][ T7743] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 183.607224][ T7743] RIP: 0033:0x7fa863b9e159 [ 183.611668][ T7743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.631304][ T7743] RSP: 002b:00007fa864ae0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 183.639749][ T7743] RAX: ffffffffffffffda RBX: 00007fa863e25fa0 RCX: 00007fa863b9e159 [ 183.647747][ T7743] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 183.655741][ T7743] RBP: 00007fa863c3503b R08: 0000000000000000 R09: 0000000000000000 [ 183.663742][ T7743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.671737][ T7743] R13: 00007fa863e26038 R14: 00007fa863e25fa0 R15: 00007ffc489e0098 [ 183.679753][ T7743] [ 183.682944][ T7743] Kernel Offset: disabled [ 183.687285][ T7743] Rebooting in 86400 seconds..