last executing test programs: 1h33m17.089126084s ago: executing program 32 (id=153): move_pages(0x0, 0x20000000000001ab, &(0x7f0000000000), 0x0, &(0x7f0000000000)=[0x0], 0x0) socket$inet(0x2, 0x3, 0x4) fchdir(0xffffffffffffffff) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000040), 0x0) ftruncate(0xffffffffffffffff, 0x0) shmget$private(0x0, 0x400000, 0x20, &(0x7f000000e000/0x400000)=nil) r0 = shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmdt(r0) 1h33m3.306993769s ago: executing program 33 (id=159): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201d8ac00000040d2e1200c1f07600000000000d7afc4398f153e0f1d822c3700680109022400010000000009040000010300000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) close(r2) 1h23m46.2477849s ago: executing program 34 (id=303): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000100)='reno\x00', 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006400000003"], 0xac}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x18, 0x18, 0x1, 0x0, 0x0, {0xa}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="3a10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1h11m14.201636765s ago: executing program 4 (id=481): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{}, "023a19f82c9b38d7", "b7584d0fc3daf69ab974689e508a7f07", "b01aea26", "fdae1e06439d207f"}, 0x28) 1h11m10.373309649s ago: executing program 4 (id=483): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000009c0)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x4008090) 1h11m4.882995359s ago: executing program 4 (id=485): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000280)={0x4000001, 0x4}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000300)={0x5, 0x20400, 0x8001, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x4, 0xfffffffd, 0x8}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000007c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r4, @ANYRESHEX=r4], 0x38}}, 0x40804) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r5) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000340)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f00000016c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r8, 0x6, 0x15, &(0x7f0000000400), 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000240)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r11, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="060000001464c2d5e951736340d17efa9a40b550e910abeb842fe65bb08d9d66280f79ce45fea4d5ed910839bbc626ddf70c8a1becee7eea93a493b5af9ef46a253522e1ff625907ff60f4f6c5", @ANYRES16=r6, @ANYBLOB="020029bd7000fcdbdf25150000000a0014007770616e3100000008000100", @ANYRES32=r9, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r12 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 1h10m55.47398819s ago: executing program 4 (id=486): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a140000727c"], 0x28}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000005e000109"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) 1h10m53.273911218s ago: executing program 4 (id=487): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000400)=""/229, 0xe5}, {&(0x7f0000000500)=""/222, 0xde}, {&(0x7f00000002c0)=""/28, 0x1c}, {&(0x7f0000000600)=""/247, 0xf7}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/4081, 0xff1}, {&(0x7f0000003a00)=""/4101, 0x1005}, {&(0x7f0000003700)=""/186, 0xba}, {&(0x7f0000003840)=""/79, 0x4f}], 0x9}, 0x0) 1h10m51.065667257s ago: executing program 4 (id=488): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8142, 0x0) r1 = dup(r0) fallocate(r1, 0x11, 0x0, 0x100000061200) 1h10m2.730824718s ago: executing program 35 (id=488): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8142, 0x0) r1 = dup(r0) fallocate(r1, 0x11, 0x0, 0x100000061200) 59m28.880799736s ago: executing program 5 (id=605): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x5}, {}, {0xffff, 0x0, 0x6}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x420008}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 59m23.655293114s ago: executing program 5 (id=608): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@local, 0x0, r1}) socket$unix(0x1, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) 59m19.688661427s ago: executing program 5 (id=609): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000900)=@NCI_OP_CORE_CONN_CLOSE_RSP={0x0, 0x0, 0x2, 0x5, 0x1, 0x1}, 0x4) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) 59m17.133153102s ago: executing program 0 (id=610): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) epoll_create1(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000140)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_ro(r1, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002280)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000300)={r2}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r3, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="8252", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r3, &(0x7f0000000300), 0x16, 0x0, 0x0, 0xfffffffffffffdfd) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@SMC_PNETID_IBPORT={0x5}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010400000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000004c0)={0x0, 0x0}) r8 = socket$key(0xf, 0x3, 0x2) sendto$inet6(r5, &(0x7f0000000540)="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", 0xfff, 0x48800, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={r6, 0x3, r8}) ptrace(0x8, r7) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@multicast, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @local}}}}, 0x0) 59m12.56735666s ago: executing program 5 (id=611): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_script(r1, 0x0, 0xfffffe5d) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9c3, 0x61804}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'team_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 59m7.866352358s ago: executing program 0 (id=612): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C(\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\x8f\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xeeC\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc\xc2U\x89\xa4*2\xd0\xac\x920\x00=\xf2', 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x800000, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002de8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000300)={0x0, {}, 0x0, {}, 0x9, 0x12, 0xb, 0x1d, "522530d6e597ca54b72437f1295d5713b017ddc8f03f7f9431388f9a2df4e1857ad78ca88090d709b29ee70700000000000000aaa5f78a000000000080030900", "012a519a6f0231000000002b637a4b34368b41cd260b66da3010a9da97c74ba2", [0x1, 0x100000000b]}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x800008001ffc0) 59m2.686430873s ago: executing program 5 (id=613): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) 59m1.634057593s ago: executing program 0 (id=614): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@local, 0x0, r1}) socket$unix(0x1, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r5}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) 58m58.976150966s ago: executing program 0 (id=615): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002500)=@newtfilter={0x3c, 0x2c, 0xd27, 0x1000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x7, 0x5}}]}}]}, 0x3c}}, 0x4000) 58m53.854035566s ago: executing program 5 (id=616): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 58m52.063052793s ago: executing program 0 (id=617): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001040)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56141, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r3}}, 0x3b}}, 0x0) 58m36.281606726s ago: executing program 0 (id=618): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000d00)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b43c03", 0xb}, {&(0x7f0000000100)="2303942fe0df", 0x6}], 0x2) 58m5.617233274s ago: executing program 36 (id=616): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 57m48.998959401s ago: executing program 37 (id=618): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000d00)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b43c03", 0xb}, {&(0x7f0000000100)="2303942fe0df", 0x6}], 0x2) 48m14.106207587s ago: executing program 7 (id=643): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f00000000c0), 0xfec8) recvmmsg(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000200)=""/128, 0x80}], 0x1}}], 0x1, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 48m1.619158261s ago: executing program 7 (id=644): ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4bfb, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x22701, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000280)={0x82, 0x4, 0x8, 0x7ff, 0x0, "7a0d265f32280ea0"}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000ffff00"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x0, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f00000041c0)={0x2020}, 0x2020) 47m50.74946349s ago: executing program 7 (id=646): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfcffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 47m36.674784795s ago: executing program 7 (id=648): socket$key(0xf, 0x3, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000080)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket(0x0, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, 0x0}, 0x20) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 47m24.980710948s ago: executing program 7 (id=650): r0 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x181, 0x3}], ['\x00']}) statx(0xffffffffffffffff, 0x0, 0x6000, 0x100, 0x0) setreuid(0x0, 0xee00) memfd_create(&(0x7f0000000180)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0K\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e\xb6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t\xe7?/C\xaa\xd9\xc4\xc9\xbe\x12\xed\xb3*f\xd1J\x14\x80Iy4\xa9\xf88C\xe3', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) r1 = fcntl$getown(r0, 0x9) r2 = msgget(0x2, 0x202) msgctl$IPC_SET(r2, 0x1, &(0x7f0000001c80)={{0x0, 0xee00}, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x943b, 0x0, r1}) 47m16.118727555s ago: executing program 7 (id=651): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000001c0)=r3) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c980128876340860cc0702c1ffe80000000000000ffffa1dce408db9d13"], 0xffdd) 46m27.400629856s ago: executing program 38 (id=651): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000001c0)=r3) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c980128876340860cc0702c1ffe80000000000000ffffa1dce408db9d13"], 0xffdd) 45m36.209374226s ago: executing program 6 (id=659): sched_setaffinity(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') fsetxattr$system_posix_acl(r3, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [], {0x4, 0x2}, [{0x8, 0x1}], {}, {0x20, 0x2}}, 0x2c, 0x0) 45m25.777662602s ago: executing program 6 (id=660): futex_waitv(&(0x7f0000002940)=[{0x0, &(0x7f0000001000), 0x82}, {0x0, &(0x7f0000001040), 0x82}, {0x0, &(0x7f0000001080), 0x82}, {0x0, &(0x7f00000010c0), 0x82}, {0x0, &(0x7f0000001100), 0x82}, {0x0, &(0x7f0000001140), 0x82}, {0x0, &(0x7f0000001180)}, {0x0, &(0x7f00000011c0)}, {0x0, &(0x7f0000001200)}, {0x0, &(0x7f0000001240)}, {0x0, &(0x7f0000001280)}, {0x0, &(0x7f00000012c0)}, {0x0, &(0x7f0000001300)}, {0x0, &(0x7f0000001340)}, {0x0, &(0x7f0000001380)}, {0x0, &(0x7f00000013c0)}, {0x0, &(0x7f0000001400)}, {0x0, &(0x7f0000001440)}, {0x0, &(0x7f0000001480)}, {0x0, &(0x7f00000014c0)}, {0x0, &(0x7f0000001500)}, {0x0, &(0x7f0000001540)}, {0x0, &(0x7f0000001580)}, {0x0, &(0x7f00000015c0)}, {0x0, &(0x7f0000001640)}, {0x0, &(0x7f0000001680)}, {0x0, &(0x7f00000016c0)}, {0x0, &(0x7f0000001700)}, {0x0, &(0x7f0000001740)}, {0x0, &(0x7f0000001780)}, {0x0, &(0x7f00000017c0)}, {0x0, &(0x7f0000001800)}, {0x0, &(0x7f0000001840)}, {0x0, &(0x7f0000001880)}, {0x0, &(0x7f00000018c0)}, {0x0, &(0x7f0000001900)}, {0x0, &(0x7f0000001940)}, {0x0, &(0x7f0000001980)}, {0x0, &(0x7f00000019c0)}, {0x0, &(0x7f0000001a00)}, {0x0, &(0x7f0000001a40)}, {0x0, &(0x7f0000001a80)}, {0x0, &(0x7f0000001ac0)}, {0x0, &(0x7f0000001b00)}, {0x0, &(0x7f0000001b40)}, {0x0, &(0x7f0000001b80)}, {0x0, &(0x7f0000001bc0)}, {0x0, &(0x7f0000001c00)}, {0x0, &(0x7f0000001c40)}, {0x0, &(0x7f0000001c80)}, {0x0, &(0x7f0000001cc0)}, {0x0, &(0x7f0000001d00)}, {0x0, &(0x7f0000001d40)}, {0x0, &(0x7f0000001d80)}, {0x0, &(0x7f0000001dc0)}, {0x0, &(0x7f0000001e00)}, {0x0, &(0x7f0000001e40)}, {0x0, &(0x7f0000001e80)}, {0x0, &(0x7f0000001ec0)}, {0x0, &(0x7f0000001f00)}, {0x0, &(0x7f0000001f40)}, {0x0, &(0x7f0000001f80)}, {0x0, &(0x7f0000001fc0)}, {0x0, &(0x7f0000002000)}, {0x0, &(0x7f0000002040)}, {0x0, &(0x7f0000002080)}, {0x0, &(0x7f00000020c0)}, {0x0, &(0x7f0000002100)}, {0x0, &(0x7f0000002140)}, {0x0, &(0x7f0000002180)}, {0x0, &(0x7f00000021c0)}, {0x0, &(0x7f0000002200)}, {0x0, &(0x7f0000002240)}, {0x0, &(0x7f0000002280)}, {0x0, &(0x7f00000022c0)}, {0x0, &(0x7f0000002300)}, {0x0, &(0x7f0000002340)}, {0x0, &(0x7f0000002380)}, {0x0, &(0x7f00000023c0)}, {0x0, &(0x7f0000002400)}, {0x0, &(0x7f0000002440)}, {0x0, &(0x7f0000002480)}, {0x0, &(0x7f00000024c0)}, {0x0, &(0x7f0000002500)}, {0x0, &(0x7f0000002540)}, {0x0, &(0x7f0000002580)}, {0x0, &(0x7f00000025c0)}, {0x0, &(0x7f0000002600)}, {0x0, &(0x7f0000002640)}, {0x0, &(0x7f0000002680)}, {0x0, &(0x7f00000026c0)}, {0x0, &(0x7f0000002700)}, {0x0, &(0x7f0000002740)}, {0x0, &(0x7f0000002780)}, {0x0, &(0x7f00000027c0)}, {0x0, &(0x7f0000002800)}, {0x0, &(0x7f0000002840)}, {0x0, &(0x7f0000002880)}, {0x0, &(0x7f0000003380)}, {0x0, &(0x7f0000002900)}], 0x64, 0x0, &(0x7f0000003300), 0x1) 45m20.213872507s ago: executing program 6 (id=661): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 45m12.798399223s ago: executing program 6 (id=662): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0x4004662b, &(0x7f0000000180)={@id={0x2, 0x0, @d}}) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000100), 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000004c0), 0x0) 44m58.299584561s ago: executing program 6 (id=663): socket$key(0xf, 0x3, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e6", 0xa1) socket$key(0xf, 0x3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 44m49.225296284s ago: executing program 6 (id=664): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x45d0f620, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 44m2.364742003s ago: executing program 39 (id=664): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x45d0f620, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 36m4.793103856s ago: executing program 9 (id=665): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 35m54.379380351s ago: executing program 9 (id=669): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) prctl$PR_SET_SECUREBITS(0x1c, 0x10) setresuid(0x0, 0xffffffffffffffff, 0xee00) getresuid(&(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000080)=0x0) setresuid(0x0, r1, 0xffffffffffffffff) getresuid(&(0x7f0000000000), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r5, 0x0) setresuid(r2, r1, r1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r6 = accept4(r0, 0x0, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0) pwritev2(r7, &(0x7f0000000300)=[{&(0x7f0000000140)="e7", 0x1}], 0x1, 0x0, 0x0, 0x300) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000006, 0x2010, 0xffffffffffffffff, 0x6) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x24, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r8}, {0x7, 0x0, 0xb, 0x9}, {0x46, 0x8, 0xfff0, 0x76}}, @printk={@u, {0x3, 0x3, 0x3, 0x4, 0x9}, {0x7, 0x1, 0xb, 0x1, 0x2}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5d}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) sendmsg$alg(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001440)="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", 0x9fe}, {&(0x7f0000000480)="41185a733ffbee07e79bd071f0c81cb20cfedc1b91c375edffd83dda59a25463ca079228cb9a325e31259967abf2798db29b660d38cd7ac3dc83cdc3c2cd4ff8c6e702c6a42dad98a39247ab624afbdb57e8287eb6299f48c67a7e632e89d26c0dfb88f15ca597d76f251188b6079b9192b48b90996f651dc8910c2b1cae377b2884f9106311be6e2e7e2b2d463a7c1e0d0d8c6a43d2f57ed755236dac67a30a93204be37a3885794fa06ab7eaddf3a54c2530fefc5a7302ca78ac5dfcfd2793a853493849bcdd11ac37feec0be6bc032f385902c87e91e3aff8fe06e5637e5a584855849cf1474024bf7d3318c84768a912", 0xf2}, {&(0x7f0000000100)="26885ef7c635fa1234e5c4d57af85d50b94f568acb60d6071402c534aea257f882affeed2ec3e2887ab66526e783980bdbe905588b3bd76bb7478d8cc24cc6c655055904ca09", 0x46}, {&(0x7f0000000580)="8e3dd372577d9a3c16d6af580e2bcba9f19661192925b2e000e01558dbd986a9f889c9d606db1aaeb32381006b48ccd5dd9fd7d00ccfc03b9d44151f0a71f7535c87311a3cbbebdc21e668fb719509aae3f2d9c3adb5e6f4e8ffe6d7", 0x5c}], 0x4, 0x0, 0x0, 0x4000005}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x9d, 0xfffd, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001400)={{r9}, &(0x7f0000001380), &(0x7f00000013c0)='%-010d \x00'}, 0x20) r10 = accept4(r6, 0x0, 0x0, 0x80800) sendmmsg$inet6(r10, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) 35m41.192806389s ago: executing program 9 (id=671): r0 = syz_io_uring_setup(0x1ff, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000280), &(0x7f0000000240)) io_uring_enter(r0, 0x0, 0x400000, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x52e, 0x0, 0x0, 0x0, 0x0) 34m56.031624478s ago: executing program 40 (id=671): r0 = syz_io_uring_setup(0x1ff, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000280), &(0x7f0000000240)) io_uring_enter(r0, 0x0, 0x400000, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x52e, 0x0, 0x0, 0x0, 0x0) 27m29.539685409s ago: executing program 8 (id=704): r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) io_uring_enter(r0, 0x54, 0x0, 0x0, 0x0, 0x0) 27m13.465544969s ago: executing program 8 (id=705): setresuid(0xee01, 0xee01, 0xee01) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) prlimit64(r1, 0x0, 0x0, 0x0) 27m1.345959341s ago: executing program 8 (id=706): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x74, 0x28, 0xc2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x6768ba97ed41ad29}, {}, {0x3, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x40, 0x3}}, @filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_nat={0x2c, 0x19, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x2000c880}, 0x0) 26m50.201584929s ago: executing program 8 (id=707): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000, 0x100000000000}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r1, r1, 0x3, 0x8000000000, 0x3fff}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f0000000180)='O', 0x1, 0x6}) 26m37.981260258s ago: executing program 8 (id=708): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x3, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000700)={0x2000a0080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 26m10.592018349s ago: executing program 8 (id=709): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r1, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 25m34.005030662s ago: executing program 1 (id=711): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='lp\x00', 0x3) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 25m18.677393725s ago: executing program 41 (id=709): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r1, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 25m17.68699491s ago: executing program 1 (id=713): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4, 0x8}}]}, 0x30}}, 0x0) 25m5.549069403s ago: executing program 1 (id=714): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x88602, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 24m47.888047172s ago: executing program 1 (id=715): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x7b, 0xa, 0xff00}, [@call={0x1d, 0xa}, @exit, @map_fd={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x10, 0x0, 0x0, 0x25000000}, @generic]}, &(0x7f0000000140)='GPL\x00', 0xa, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x47, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) write$binfmt_script(r1, &(0x7f0000000080), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180), &(0x7f0000000200)=0x10) 24m29.365095646s ago: executing program 1 (id=716): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xf1d, 0x1, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe, 0x9}, {0x2}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) 24m7.630926011s ago: executing program 1 (id=717): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@delchain={0x2c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffe}]}, 0x2c}}, 0x0) 23m21.296894748s ago: executing program 42 (id=717): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@delchain={0x2c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffe}]}, 0x2c}}, 0x0) 9m6.114282898s ago: executing program 3 (id=754): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x2) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0xbf9ee4c7390f54e4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x2c}}, 0x0) dup(0xffffffffffffffff) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) 8m53.717897372s ago: executing program 3 (id=756): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000a40)="90b4", &(0x7f0000000040)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0}, &(0x7f0000000700), &(0x7f0000000740)=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000a80)="b5e0", &(0x7f00000001c0)=@udp6=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket(0x200000100000011, 0x803, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000100)="4dcdc7d96a760000000180040200000000000000", 0x34, 0x0, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000000)='block_bio_remap\x00', r2}, 0x10) write$cgroup_type(r6, &(0x7f0000000180), 0x40001) 8m29.896449588s ago: executing program 3 (id=758): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) r3 = dup3(r1, r2, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000680)={0x806, 0xfffffffd, 0x8, 0x3}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @fd=r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040810}, 0x200040c0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001200055a"], 0x2c}}, 0x0) recvmmsg(r5, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xe04}, {0x0, 0x478}, {&(0x7f0000002a80)=""/4090, 0x734}], 0x3, 0x0, 0xa}}], 0x2f3, 0x10000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0), 0x78}}, 0x0) sendto$inet6(r7, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r7, 0x1) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r7, @ANYRESOCT=r8, @ANYRES64=r8], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2) sendmsg$nl_route(r8, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@ipv6_getnetconf={0x2c, 0x52, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r10}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0xfffffffb}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd441}, 0x10) sendmsg$IPVS_CMD_GET_INFO(r8, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x41517f18f97c4463}, 0x0) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r6) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r11, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000000740)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f0000000a80)={0xbb8, 0x1, 0x5, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [{{0x254, 0x1, {{0x2, 0xffff}, 0x8, 0x4, 0x4, 0x9, 0x1c, 'syz1\x00', "d9315c8ecf0ab88d94f3571b4c478b46bf53c200b689bca3e618a3f3186a8ee2", "1f22bf231b797ac248bdc401dcb63eb20fb765763bbdbd76a56c84b5f8c9941a", [{0x1, 0x0, {0x0, 0x400}}, {0x80, 0xaed1, {0x0, 0x2}}, {0x400, 0x0, {0x1, 0xfffffcd5}}, {0x9c, 0xcbe2, {0x2, 0x7}}, {0x3, 0x0, {0x2, 0xfffffffc}}, {0xf5fa, 0x9, {0x2}}, {0x7ff, 0x3, {0x0, 0x80000001}}, {0x5, 0x7f, {0x0, 0x1f}}, {0x0, 0xff74}, {0x40, 0x9, {0x0, 0x2}}, {0x2, 0x3b, {0x3, 0x4d9f}}, {0x8000, 0x7d6, {0x1, 0x1000}}, {0x6, 0x101, {0x0, 0x8}}, {0x3, 0x400, {0x1, 0x101}}, {0x3, 0x1, {0x1, 0x8}}, {0x8, 0x1, {0x2, 0x2}}, {0x1, 0x3}, {0x8000, 0x5, {0x2, 0xaa}}, {0x6, 0x4, {0x0, 0x2}}, {0x5, 0x27, {0x1, 0x40}}, {0x8, 0x5edb, {0x3, 0x1}}, {0x8, 0x6, {0x3, 0xfffffff9}}, {0x40, 0x1, {0x1, 0x6}}, {0xf3f, 0x4, {0x2, 0x2}}, {0x100, 0x3f, {0x2, 0x8}}, {0x4, 0xff, {0x3, 0x1}}, {0x2, 0x0, {0x1, 0x5}}, {0xffff, 0x4, {0x0, 0xffff0001}}, {0xb424, 0x100, {0x1, 0x8001}}, {0x4, 0x0, {0x1, 0x2}}, {0x100, 0x0, {0x3, 0xff}}, {0x7, 0x7f, {0x1, 0x1}}, {0xfffe, 0x4, {0x2, 0x4}}, {0x101, 0x0, {0x1, 0x7f}}, {0x2, 0x6, {0x1, 0x4}}, {0xfbff, 0x2, {0x2, 0x200}}, {0x2, 0x200, {0x1, 0x9}}, {0x1, 0x8, {0x0, 0x3}}, {0x5, 0x24, {0x0, 0x1}}, {0x41, 0x6, {0x0, 0x81}}]}}}, {{0x254, 0x1, {{0x2, 0xffffff48}, 0x8, 0x15, 0x8, 0x63, 0x28, 'syz0\x00', "a7369cec04f31f3d7aa70eaf74d95bb4ecbed2ba1c0ffa5f153ca8a8a8a853b7", "a0fd6e4ad8f2c023e35347370a18536993efb9d1a79d2992f4352fced4bd0127", [{0x40, 0x1, {0x0, 0x1}}, {0x1ff, 0x900, {0x2, 0x81}}, {0x1, 0x8, {0x3, 0x28a}}, {0x6, 0x1}, {0x8, 0x7, {0x2, 0x3}}, {0x8001, 0x7, {0x1, 0x6}}, {0xfd9, 0x9, {0x2, 0x80}}, {0x3b, 0x401, {0x1, 0xb2a}}, {0x1, 0x9, {0x3, 0x8000}}, {0x9, 0x0, {0x2, 0x6}}, {0x1, 0x1, {0x2, 0xdc5}}, {0x2, 0x3, {0x3, 0x8001}}, {0x2, 0x1, {0x2, 0xd5d}}, {0x400, 0x441, {0x1, 0x1565c359}}, {0x1, 0x7, {0x3, 0xc000}}, {0x3f, 0x2, {0x2, 0x1}}, {0x101, 0x0, {0x1, 0x3}}, {0xda, 0xffff, {0x1, 0x8}}, {0x2, 0x0, {0x3}}, {0x5, 0x40, {0x3, 0x3e}}, {0x1, 0x5, {0x3, 0xe7}}, {0x5aa, 0x64e8, {0x3, 0x77d5}}, {0x9, 0x2, {0x3, 0x5fc3}}, {0xffff, 0x5, {0x1, 0x3}}, {0x26, 0x7, {0x2, 0xfffffffb}}, {0x5, 0xed98, {0x0, 0x1}}, {0xb5, 0x800, {0x3, 0x4}}, {0x1, 0x0, {0x0, 0x9}}, {0x74, 0x2, {0x3, 0x9}}, {0x0, 0x1, {0x0, 0x5e4}}, {0x5, 0x83, {0x2, 0x1f}}, {0x8, 0x4}, {0x9, 0x0, {0x1, 0x1f}}, {0xe53a, 0x8c29, {0x0, 0x3f}}, {0x2a4, 0x200, {0x3, 0x3}}, {0x98f5, 0x0, {0x1, 0x8408}}, {0x1f, 0x80, {0x0, 0xb3ef}}, {0xdc7, 0xfff, {0x1, 0x200}}, {0x9, 0x2, {0x2, 0xffffffc0}}, {0x8, 0x6, {0x2}}]}}}, {{0x254, 0x1, {{0x0, 0xae}, 0x8, 0x8, 0x3, 0x8000, 0x2, 'syz1\x00', "f0289abffa1e5ca48eafaba1ca743deff640684f00385bd29055e9d7b762ddf6", "717830978eb72cd56283faef9ce4bd725777e56061a71904da48b8d1ed62dfaf", [{0x0, 0xf8c, {0x2, 0xdb1}}, {0x11ec, 0x5, {0x0, 0x4}}, {0x5, 0x12, {0x2, 0x100}}, {0x7f, 0xc000, {0x0, 0x1}}, {0x7, 0x9, {0x1, 0x7fff}}, {0x400, 0xff, {0x0, 0x8001}}, {0xd6, 0x2, {0x3, 0x60d}}, {0x3, 0x4, {0x1, 0x9}}, {0x9, 0x7fff, {0x3}}, {0x7fff, 0x9, {0x1, 0x8e2d}}, {0x80, 0x7, {0x0, 0x7}}, {0x3, 0x3, {0x1, 0x4}}, {0x3, 0x6, {0x0, 0xb2a2}}, {0x2, 0x3, {0x3, 0x2}}, {0xfff, 0xfffd, {0x3, 0x5}}, {0x6, 0xfeff, {0x2, 0x3}}, {0xfe00, 0x1ff, {0x1, 0x8}}, {0xff, 0x2, {0x3, 0x7}}, {0x7, 0x974, {0x0, 0x80000000}}, {0x621, 0x0, {0x2, 0x90}}, {0xfff, 0x3f, {0x1, 0x5}}, {0x1f7e, 0xff27, {0x0, 0xfffffffa}}, {0x9, 0x2f0e, {0x0, 0x5}}, {0xdf66, 0x800, {0x2, 0x7}}, {0x12e8, 0x100, {0x0, 0x1}}, {0x5, 0x3, {0x3, 0x9}}, {0x1, 0x8, {0x1, 0x3f}}, {0x5, 0x5, {0x1, 0x7ff}}, {0x7cfb, 0x8000, {0x3, 0x4}}, {0x8, 0x4, {0x0, 0x7ff}}, {0x40, 0x2, {0x2}}, {0x3ff, 0x14d3, {0x0, 0x1f}}, {0x1e, 0x1, {0x3, 0x211}}, {0xd3, 0x1, {0x3, 0x9}}, {0x1, 0x7f, {0x1, 0x7}}, {0x3, 0x7, {0x0, 0x8}}, {0xae, 0x9, {0x3, 0x80000000}}, {0x9, 0x1000, {0x1, 0x7}}, {0x80, 0x1, {0x2, 0x80000000}}, {0xae, 0x7, {0x1, 0x8}}]}}}, {{0x254, 0x1, {{0x0, 0x5}, 0x20, 0x3, 0x5, 0x9, 0x23, 'syz1\x00', "73e8ef2c7d5dd1476fc42af5a635867d8e7b72850278a7b114f6f37378f8a44f", "6f84b7f7a5d148d14f884fcd06dd762b2ba9975e3cbff4ad1e0d0127f9b90875", [{0x1, 0x4, {0x3, 0x7}}, {0x3, 0xfff, {0x1, 0x8}}, {0x1, 0x8, {0x2, 0x8}}, {0x5, 0x200, {0x2, 0x2}}, {0x2, 0x6, {0x0, 0xc89}}, {0x0, 0x9, {0x0, 0x53}}, {0x6, 0x4, {0x0, 0xd865}}, {0x1ff, 0x7, {0x1, 0xd36}}, {0x5, 0x634, {0x0, 0x3}}, {0x5, 0x3, {0x0, 0xca48}}, {0x4, 0x0, {0x0, 0x4}}, {0xfffd, 0x5, {0x2, 0xffc000}}, {0x1, 0x8001, {0x0, 0x1}}, {0xd6c, 0x3, {0x3, 0x9}}, {0x0, 0xd92d, {0x0, 0x9}}, {0x1f, 0x6, {0x2, 0x2}}, {0x4, 0x2, {0x1, 0x7b3}}, {0x40, 0xff81, {0x0, 0x3}}, {0x9, 0x1, {0x2, 0x9}}, {0x8000, 0x2, {0x3, 0x200}}, {0xf0e, 0x4, {0x3, 0xffffffff}}, {0x8, 0x3, {0x1, 0xff}}, {0x401, 0x8, {0x1, 0x4}}, {0x3ca, 0x97aa, {0x1}}, {0x19a, 0x5, {0x2, 0x9}}, {0x0, 0x5, {0x0, 0x2}}, {0x4, 0x3f, {0x1, 0x5b}}, {0x5, 0x0, {0x3}}, {0x6, 0x1, {0x1, 0xcf}}, {0x3, 0x5, {0x3, 0x6}}, {0x6, 0xffff, {0x3, 0x80000000}}, {0x9, 0x8, {0x1, 0x2}}, {0x3d, 0x9, {0x804d862fb2c0be85, 0x9}}, {0x3f, 0x7ff, {0x2, 0x6cf9}}, {0x3ff, 0x0, {0x1, 0x7}}, {0x1a8, 0x1000, {0x2, 0x2}}, {0x9, 0x8, {0x0, 0x4}}, {0x0, 0x3, {0x3, 0x5}}, {0x3, 0x3, {0x2}}, {0x100, 0x2, {0x3, 0x8}}]}}}, {{0x254, 0x1, {{0x3, 0x1f}, 0x9, 0x2, 0x81, 0x1f, 0x16, 'syz0\x00', "6018a7fc2fc0e622019b3c255db6dd5953884ff64061d265343c4bff0926fff5", "3341a11aab528e21a7791a5ded3a6104e06cb1050dfdd553955c0eddb43f28a1", [{0x1, 0x1, {0x1, 0x5}}, {0xe8, 0x4, {0x3, 0x2}}, {0x800, 0x7, {0x0, 0x917}}, {0x8, 0xfdd0, {0x3, 0x9}}, {0xc50, 0x3, {0x1, 0x6}}, {0x1000, 0x3, {0x1, 0x8}}, {0xfff7, 0x0, {0x3, 0x8001}}, {0x6, 0x9, {0x2, 0x200}}, {0x101, 0x3, {0x6, 0x6}}, {0x3f, 0x0, {0x2}}, {0xfff9, 0x3, {0x0, 0x5}}, {0x1, 0x9, {0x3, 0x3}}, {0x1, 0xcad, {0x3, 0x4}}, {0x1, 0xffff, {0x2, 0x1}}, {0x0, 0x1, {0x2, 0x8000}}, {0x8, 0x4, {0x3, 0x9}}, {0x4, 0x5, {0x3, 0x4a5}}, {0x1000, 0x8, {0x2, 0x80}}, {0x34, 0xff, {0x1, 0xe7c0000}}, {0x7337, 0x3, {0x1, 0x7}}, {0x7f, 0x7f, {0x3, 0x8}}, {0x1, 0x5, {0x3, 0x8}}, {0x4, 0x40, {0x1, 0x9}}, {0x970e, 0x40, {0x1, 0x7f}}, {0x5, 0x1, {0x2, 0x88}}, {0x1, 0xffff, {0x0, 0x1}}, {0x3, 0x4, {0x1}}, {0x1, 0x5, {0x0, 0x7}}, {0xb7, 0x8001, {0x0, 0x1d}}, {0x1f, 0x1f, {0x0, 0x7}}, {0xfff7, 0x7f, {0x0, 0xfffffffc}}, {0x2, 0x2, {0x3, 0xb7c}}, {0xfff, 0x2, {0x0, 0x100}}, {0x8, 0x6, {0x3}}, {0xd03, 0x2, {0x2, 0x4c4}}, {0x992, 0x9, {0x3, 0x40}}, {0xfff7, 0x1000}, {0x40, 0x100, {0x3, 0x5}}, {0x9, 0x2, {0x3, 0xfffffe01}}, {0x4, 0x81, {0x0, 0x2}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x20044010}, 0x100000d0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r11, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r11, 0x20d, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4005000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r11, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9c}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x311d86bcd6ac44e7) 8m4.784755511s ago: executing program 3 (id=760): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = syz_io_uring_setup(0x6d0c, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000000c0), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1866, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184d, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r5}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r6, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) shutdown(r0, 0x2) 7m35.675634536s ago: executing program 3 (id=762): futex_waitv(&(0x7f0000002940)=[{0x0, &(0x7f0000001000), 0x82}, {0x0, &(0x7f0000001040), 0x82}, {0x0, &(0x7f0000001080), 0x82}, {0x0, &(0x7f00000010c0), 0x82}, {0x0, &(0x7f0000001100), 0x82}, {0x0, &(0x7f0000001140), 0x82}, {0x0, &(0x7f0000001180)}, {0x0, &(0x7f00000011c0)}, {0x0, &(0x7f0000001200)}, {0x0, &(0x7f0000001240)}, {0x0, &(0x7f0000001280)}, {0x0, &(0x7f00000012c0)}, {0x0, &(0x7f0000001300)}, {0x0, &(0x7f0000001340)}, {0x0, &(0x7f00000013c0)}, {0x0, &(0x7f0000001400)}, {0x0, &(0x7f0000001440)}, {0x0, &(0x7f0000001480)}, {0x0, &(0x7f00000014c0)}, {0x0, &(0x7f0000001500)}, {0x0, &(0x7f0000001540)}, {0x0, &(0x7f0000001580)}, {0x0, &(0x7f00000015c0)}, {0x0, &(0x7f0000001600)}, {0x0, &(0x7f0000001640)}, {0x0, &(0x7f0000001680)}, {0x0, &(0x7f00000016c0)}, {0x0, &(0x7f0000001700)}, {0x0, &(0x7f0000001740)}, {0x0, &(0x7f0000001780)}, {0x0, &(0x7f00000017c0)}, {0x0, &(0x7f0000001800)}, {0x0, &(0x7f0000001840)}, {0x0, &(0x7f0000001880)}, {0x0, &(0x7f00000018c0)}, {0x0, &(0x7f0000001900)}, {0x0, &(0x7f0000001940)}, {0x0, &(0x7f0000001980)}, {0x0, &(0x7f00000019c0)}, {0x0, &(0x7f0000001a00)}, {0x0, &(0x7f0000001a40)}, {0x0, &(0x7f0000001a80)}, {0x0, &(0x7f0000001ac0)}, {0x0, &(0x7f0000001b00)}, {0x0, &(0x7f0000001b40)}, {0x0, &(0x7f0000001b80)}, {0x0, &(0x7f0000001bc0)}, {0x0, &(0x7f0000001c00)}, {0x0, &(0x7f0000001c40)}, {0x0, &(0x7f0000001c80)}, {0x0, &(0x7f0000001cc0)}, {0x0, &(0x7f0000001d00)}, {0x0, &(0x7f0000001d40)}, {0x0, &(0x7f0000001d80)}, {0x0, &(0x7f0000001dc0)}, {0x0, &(0x7f0000001e00)}, {0x0, &(0x7f0000001e40)}, {0x0, &(0x7f0000001e80)}, {0x0, &(0x7f0000001ec0)}, {0x0, &(0x7f0000001f00)}, {0x0, &(0x7f0000001f40)}, {0x0, &(0x7f0000001f80)}, {0x0, &(0x7f0000001fc0)}, {0x0, &(0x7f0000002000)}, {0x0, &(0x7f0000002040)}, {0x0, &(0x7f0000002080)}, {0x0, &(0x7f00000020c0)}, {0x0, &(0x7f0000002100)}, {0x0, &(0x7f0000002140)}, {0x0, &(0x7f0000002180)}, {0x0, &(0x7f00000021c0)}, {0x0, &(0x7f0000002200)}, {0x0, &(0x7f0000002240)}, {0x0, &(0x7f0000002280)}, {0x0, &(0x7f00000022c0)}, {0x0, &(0x7f0000002300)}, {0x0, &(0x7f0000002340)}, {0x0, &(0x7f0000002380)}, {0x0, &(0x7f00000023c0)}, {0x0, &(0x7f0000002400)}, {0x0, &(0x7f0000002440)}, {0x0, &(0x7f0000002480)}, {0x0, &(0x7f00000024c0)}, {0x0, &(0x7f0000002500)}, {0x0, &(0x7f0000002540)}, {0x0, &(0x7f0000002580)}, {0x0, &(0x7f00000025c0)}, {0x0, &(0x7f0000002600)}, {0x0, &(0x7f0000002640)}, {0x0, &(0x7f0000002680)}, {0x0, &(0x7f00000026c0)}, {0x0, &(0x7f0000002700)}, {0x0, &(0x7f0000002740)}, {0x0, &(0x7f0000002780)}, {0x0, &(0x7f00000027c0)}, {0x0, &(0x7f0000002800)}, {0x0, &(0x7f0000002840)}, {0x0, &(0x7f0000002880)}, {0x0, &(0x7f0000003380)}, {0x0, &(0x7f0000002900)}], 0x64, 0x0, &(0x7f0000003300), 0x1) 7m19.420952232s ago: executing program 3 (id=765): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) getpgid(0x0) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x8, 0x0, &(0x7f0000000180)='GPL\x00', 0x636, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, 0x0) getrlimit(0xb, 0x0) bpf$PROG_LOAD(0xf, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000001811000040350e8692edeee440573154a8f425fdffb7498b65bc74f05b2e96084fcb7273d9e2f394926247510a886e8f9e246d242f897faa90e3bfb3", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090500000300006e00000000000000b702000000000000739af0ff00000000b509000000000000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000066080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x505, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}]}]}, 0x7c}}, 0x0) 6m30.76603367s ago: executing program 43 (id=765): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) getpgid(0x0) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x8, 0x0, &(0x7f0000000180)='GPL\x00', 0x636, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, 0x0) getrlimit(0xb, 0x0) bpf$PROG_LOAD(0xf, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000001811000040350e8692edeee440573154a8f425fdffb7498b65bc74f05b2e96084fcb7273d9e2f394926247510a886e8f9e246d242f897faa90e3bfb3", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090500000300006e00000000000000b702000000000000739af0ff00000000b509000000000000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000066080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x505, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}]}]}, 0x7c}}, 0x0) 2m25.682246666s ago: executing program 2 (id=778): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000e40)=ANY=[@ANYBLOB="640300001000090500000000"], 0x364}], 0x1}, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) r7 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000080), 0x12) 2m1.017004876s ago: executing program 2 (id=779): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002040)={0x8, 0x0, &(0x7f0000002540)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)) r3 = syz_io_uring_setup(0x19d3, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}) io_uring_enter(r3, 0xa3d, 0x0, 0x0, 0x0, 0xff39) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000280)=[@register_looper], 0x1, 0x900, &(0x7f00000006c0)='u'}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1m53.27550823s ago: executing program 2 (id=780): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004280)={0x2020}, 0x927) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000062c0)={0x2020}, 0x2020) 1m41.690708603s ago: executing program 2 (id=781): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet(0xa, 0x801, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000100), 0x4) accept4(r0, 0x0, 0x0, 0xc0800) socket$kcm(0x2, 0xa, 0x2) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto(r1, &(0x7f00000001c0)="25ff8571999e1f778f0350a97e44f1b970763fa07dc8b9fe0b9017ffc8854e8baaf1413c31b7dba484267bac5aae083558afab07716cf0ad72832b1320411e32c81cd67fabb0652f0b850dfaf75004cfc278cdee43f3810d6f2d643c16f679b7", 0x60, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x0, [0x8, 0x40, 0x7ff]}, &(0x7f0000000240)=0x44) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r2, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) 1m13.937393936s ago: executing program 2 (id=782): connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x80}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x20000000000003b0, 0x0, 0xd) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0x2a) 48.085459365s ago: executing program 2 (id=783): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004042, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 0s ago: executing program 44 (id=783): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004042, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) kernel console output (not intermixed with test programs): bond_slave_1): Enslaving as an active interface with an up link [ 483.110141][ T3179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.368175][ T3179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.081928][ T3177] hsr_slave_0: entered promiscuous mode [ 492.130104][ T3177] hsr_slave_1: entered promiscuous mode [ 496.279359][ T3179] hsr_slave_0: entered promiscuous mode [ 496.331218][ T3179] hsr_slave_1: entered promiscuous mode [ 496.368115][ T3179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 496.371241][ T3179] Cannot create hsr debugfs directory [ 498.098132][ T3177] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 498.263036][ T3177] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 498.383464][ T3177] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 498.493686][ T3177] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 505.401025][ T3179] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 505.471475][ T3179] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 505.540092][ T3179] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 505.609689][ T3179] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 511.360924][ T3177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.235483][ T3179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.332513][ T3177] veth0_vlan: entered promiscuous mode [ 548.777038][ T3177] veth1_vlan: entered promiscuous mode [ 550.702680][ T3177] veth0_macvtap: entered promiscuous mode [ 550.861746][ T3177] veth1_macvtap: entered promiscuous mode [ 552.357470][ T3177] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.360919][ T3177] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.363049][ T3177] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.383796][ T3177] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.101358][ T3179] veth0_vlan: entered promiscuous mode [ 554.864782][ T3179] veth1_vlan: entered promiscuous mode [ 555.825472][ T3177] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 557.319734][ T3179] veth0_macvtap: entered promiscuous mode [ 557.874909][ T3179] veth1_macvtap: entered promiscuous mode [ 558.952122][ T3179] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.968972][ T3179] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.970968][ T3179] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.972677][ T3179] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.556323][ T3864] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 561.376665][ T3865] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 569.743512][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 570.006327][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 570.055339][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.063212][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.069043][ T25] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 570.071354][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.228359][ T25] usb 2-1: config 0 descriptor?? [ 571.823820][ T25] apple 0003:05AC:0247.0001: unknown main item tag 0x0 [ 571.831011][ T25] apple 0003:05AC:0247.0001: unknown main item tag 0x0 [ 571.833329][ T25] apple 0003:05AC:0247.0001: item fetching failed at offset 2/160 [ 571.871233][ T25] apple 0003:05AC:0247.0001: parse failed [ 571.882895][ T25] apple 0003:05AC:0247.0001: probe with driver apple failed with error -22 [ 572.180284][ T25] usb 2-1: USB disconnect, device number 2 [ 584.290332][ T3895] syz.1.5 uses obsolete (PF_INET,SOCK_PACKET) [ 595.653692][ T3917] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 595.656411][ T3917] IPv6: NLM_F_CREATE should be set when creating new route [ 595.748820][ T3917] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 598.881781][ T3920] syzkaller0: entered allmulticast mode [ 602.898070][ T3930] netlink: 'syz.1.14': attribute type 12 has an invalid length. [ 610.338632][ T3934] capability: warning: `syz.0.16' uses deprecated v2 capabilities in a way that may be insecure [ 695.799033][ T4111] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 742.497696][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 742.962481][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 742.968547][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 742.970678][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 742.973191][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 742.989833][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 742.992077][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.087888][ T9] usb 1-1: config 0 descriptor?? [ 745.361412][ T9] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 745.671600][ T9] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 750.533680][ T25] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 754.838613][ T3701] usb 1-1: USB disconnect, device number 2 [ 795.298224][ C1] vkms_vblank_simulate: vblank timer overrun [ 797.901343][ T3701] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 798.205751][ T3701] usb 1-1: Using ep0 maxpacket: 32 [ 798.371230][ T3701] usb 1-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=40.72 [ 798.372871][ T3701] usb 1-1: New USB device strings: Mfr=1, Product=129, SerialNumber=0 [ 798.379231][ T3701] usb 1-1: Product: syz [ 798.382047][ T3701] usb 1-1: Manufacturer: syz [ 798.428522][ T3701] usb 1-1: config 0 descriptor?? [ 799.383167][ T3701] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 799.517265][ T3701] usb 1-1: USB disconnect, device number 3 [ 833.666924][ T900] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 834.246867][ T900] usb 1-1: Using ep0 maxpacket: 8 [ 834.411497][ T900] usb 1-1: unable to get BOS descriptor or descriptor too short [ 834.457834][ T900] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 834.459981][ T900] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 834.465301][ T900] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 834.467499][ T900] usb 1-1: config 0 has no interface number 0 [ 834.469171][ T900] usb 1-1: config 0 has no interface number 1 [ 834.471067][ T900] usb 1-1: too many endpoints for config 0 interface 122 altsetting 238: 219, using maximum allowed: 30 [ 834.473263][ T900] usb 1-1: config 0 interface 122 altsetting 238 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 834.478879][ T900] usb 1-1: config 0 interface 4 has no altsetting 0 [ 834.480622][ T900] usb 1-1: config 0 interface 122 has no altsetting 0 [ 834.728446][ T900] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1010, bcdDevice=62.8c [ 834.730913][ T900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.732918][ T900] usb 1-1: Product: syz [ 834.735609][ T900] usb 1-1: Manufacturer: syz [ 834.737270][ T900] usb 1-1: SerialNumber: syz [ 834.878279][ T900] usb 1-1: config 0 descriptor?? [ 836.520213][ T900] option 1-1:0.4: GSM modem (1-port) converter detected [ 836.707502][ T900] usb 1-1: USB disconnect, device number 4 [ 836.758843][ T900] option 1-1:0.4: device disconnected [ 837.682505][ T4403] input: syz0 as /devices/virtual/input/input0 [ 838.167294][ T900] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 838.539193][ T900] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 838.541444][ T900] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 838.543712][ T900] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 838.552251][ T900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 838.715757][ T900] usb 2-1: string descriptor 0 read error: -22 [ 838.719689][ T900] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 838.721825][ T900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.827546][ T900] usb 2-1: config 0 descriptor?? [ 838.873036][ T4403] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 839.020652][ T900] hub 2-1:0.0: bad descriptor, ignoring hub [ 839.023195][ T900] hub 2-1:0.0: probe with driver hub failed with error -5 [ 839.158633][ T900] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input1 [ 839.532874][ T900] usb 2-1: USB disconnect, device number 3 [ 860.072385][ T35] audit: type=1326 audit(859.070:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4447 comm="syz.0.78" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 862.341728][ T4452] netlink: 28 bytes leftover after parsing attributes in process `syz.0.78'. [ 862.659006][ T4452] netlink: 'syz.0.78': attribute type 4 has an invalid length. [ 874.417841][ T4465] process 'syz.1.82' launched './file2' with NULL argv: empty string added [ 906.036937][ T33] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 906.362008][ T33] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 906.371994][ T33] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 906.379757][ T33] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 906.387230][ T33] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.578268][ T33] usb 1-1: config 0 descriptor?? [ 908.302726][ T33] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 908.428684][ T33] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 908.620521][ T33] cp2112 0003:10C4:EA90.0003: Part Number: 0x82 Device Version: 0xFE [ 910.158540][ T33] cp2112 0003:10C4:EA90.0003: error reading lock byte: -71 [ 910.519219][ T33] usb 1-1: USB disconnect, device number 5 [ 917.719127][ T3701] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 917.989294][ T3701] usb 2-1: Using ep0 maxpacket: 32 [ 918.253744][ T3701] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 918.258793][ T3701] usb 2-1: config 0 has no interface number 0 [ 918.372567][ T3701] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 918.381828][ T3701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.387397][ T3701] usb 2-1: Product: syz [ 918.389060][ T3701] usb 2-1: Manufacturer: syz [ 918.400572][ T3701] usb 2-1: SerialNumber: syz [ 918.490374][ T3701] usb 2-1: config 0 descriptor?? [ 918.647247][ T3701] smsc95xx v2.0.0 [ 918.895757][ T35] audit: type=1326 audit(917.880:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4598 comm="syz.0.97" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 919.820428][ T3701] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 919.823385][ T3701] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 921.186989][ T3701] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 921.219202][ T3701] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 921.427550][ T3701] usb 2-1: USB disconnect, device number 4 [ 921.951445][ T4609] netlink: 28 bytes leftover after parsing attributes in process `syz.0.97'. [ 922.231331][ T4609] netlink: 'syz.0.97': attribute type 4 has an invalid length. [ 933.435953][ T3812] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 933.808005][ T3812] usb 2-1: config 1 has an invalid descriptor of length 95, skipping remainder of the config [ 933.810008][ T3812] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 933.896172][ T3812] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 933.898838][ T3812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 933.901071][ T3812] usb 2-1: SerialNumber: syz [ 934.983292][ T3812] usb 2-1: 0:2 : does not exist [ 936.123639][ T3812] usb 2-1: USB disconnect, device number 5 [ 944.468518][ T35] audit: type=1326 audit(943.490:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4660 comm="syz.1.102" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 947.043579][ T4667] netlink: 28 bytes leftover after parsing attributes in process `syz.1.102'. [ 947.413188][ T4667] netlink: 'syz.1.102': attribute type 4 has an invalid length. [ 959.781802][ T4692] block device autoloading is deprecated and will be removed. [ 968.721431][ T35] audit: type=1326 audit(967.750:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4708 comm="syz.0.109" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7fc00000 [ 969.061714][ T35] audit: type=1326 audit(968.070:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4708 comm="syz.0.109" exe="/syz-executor" sig=0 arch=c00000f3 syscall=20 compat=0 ip=0xdabc6 code=0x7fc00000 [ 970.777276][ T35] audit: type=1326 audit(969.800:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4708 comm="syz.0.109" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7fc00000 [ 973.288586][ T33] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 973.498156][ T33] usb 1-1: Using ep0 maxpacket: 32 [ 973.759685][ T33] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 973.762191][ T33] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 973.776805][ T33] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 973.849416][ T33] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 973.851980][ T33] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.856233][ T33] usb 1-1: Product: syz [ 973.858545][ T33] usb 1-1: Manufacturer: syz [ 973.860281][ T33] usb 1-1: SerialNumber: syz [ 975.337301][ T33] usb 1-1: 0:2 : does not exist [ 975.617100][ T33] usb 1-1: USB disconnect, device number 6 [ 994.713360][ T3812] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 995.898390][ T3812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 995.900535][ T3812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 995.903204][ T3812] usb 1-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 995.906353][ T3812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.980655][ T3812] usb 1-1: config 0 descriptor?? [ 998.833225][ T3812] samsung 0003:0419:0600.0004: item fetching failed at offset 3/5 [ 998.877340][ T3812] samsung 0003:0419:0600.0004: parse failed [ 998.880634][ T3812] samsung 0003:0419:0600.0004: probe with driver samsung failed with error -22 [ 999.679228][ T3812] usb 1-1: USB disconnect, device number 7 [ 1024.025038][ C0] hrtimer: interrupt took 1997200 ns [ 1029.443083][ T4830] block device autoloading is deprecated and will be removed. [ 1039.377106][ T3168] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1039.907608][ T3168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1039.909697][ T3168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1039.911151][ T3168] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1039.912347][ T3168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.123331][ T3168] usb 1-1: config 0 descriptor?? [ 1042.967712][ T3168] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0005/input/input2 [ 1043.187856][ T3168] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0005/input/input3 [ 1043.422312][ T3168] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0005/input/input4 [ 1043.531220][ T3168] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0005/input/input5 [ 1043.662993][ T3168] uclogic 0003:256C:006D.0005: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 1043.739534][ T3168] usb 1-1: USB disconnect, device number 8 [ 1058.068471][ T35] audit: type=1326 audit(1057.050:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4923 comm="syz.1.138" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 1060.379574][ T4933] netlink: 28 bytes leftover after parsing attributes in process `syz.1.138'. [ 1060.620579][ T4933] netlink: 'syz.1.138': attribute type 4 has an invalid length. [ 1071.615571][ T35] audit: type=1326 audit(1070.640:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4955 comm="syz.0.143" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7fc00000 [ 1071.803888][ T35] audit: type=1326 audit(1070.820:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4955 comm="syz.0.143" exe="/syz-executor" sig=0 arch=c00000f3 syscall=20 compat=0 ip=0xdabc6 code=0x7fc00000 [ 1073.518664][ T35] audit: type=1326 audit(1072.520:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4955 comm="syz.0.143" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7fc00000 [ 1089.090695][ T35] audit: type=1326 audit(1088.120:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4999 comm="syz.0.149" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7fc00000 [ 1089.282008][ T35] audit: type=1326 audit(1088.310:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4999 comm="syz.0.149" exe="/syz-executor" sig=0 arch=c00000f3 syscall=20 compat=0 ip=0xdabc6 code=0x7fc00000 [ 1089.385883][ T35] audit: type=1326 audit(1088.410:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4999 comm="syz.0.149" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7fc00000 [ 1116.727663][ T900] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 1117.215931][ T900] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 1117.227317][ T900] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 1117.229787][ T900] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1117.232264][ T900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1118.850938][ T900] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 1118.853232][ T900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.863416][ T900] usb 1-1: Product: И [ 1118.869945][ T900] usb 1-1: Manufacturer: à “ [ 1118.995998][ T900] usb 1-1: config 0 descriptor?? [ 1119.127625][ T5040] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1119.166996][ T900] hub 1-1:0.0: bad descriptor, ignoring hub [ 1119.169592][ T900] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1119.301772][ T900] input: à “ И as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6 [ 1120.410220][ T900] usb 1-1: USB disconnect, device number 9 [ 1183.298950][ T5177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.166'. [ 1199.836071][ T5101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1200.141286][ T5101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1215.117349][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.087294][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.317336][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.540531][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.041526][ T5101] hsr_slave_0: entered promiscuous mode [ 1219.113441][ T5101] hsr_slave_1: entered promiscuous mode [ 1219.149760][ T5101] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1219.152111][ T5101] Cannot create hsr debugfs directory [ 1225.032478][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1225.210668][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1225.367389][ T12] bond0 (unregistering): Released all slaves [ 1227.068080][ T12] hsr_slave_0: left promiscuous mode [ 1227.120476][ T12] hsr_slave_1: left promiscuous mode [ 1227.357740][ T12] veth1_macvtap: left promiscuous mode [ 1227.360504][ T12] veth0_macvtap: left promiscuous mode [ 1227.363906][ T12] veth1_vlan: left promiscuous mode [ 1227.370994][ T12] veth0_vlan: left promiscuous mode [ 1244.810632][ T5101] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1245.498708][ T5101] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1245.681265][ T5101] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1245.870026][ T5101] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1258.061135][ T5101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1285.355991][ T35] audit: type=1326 audit(1284.370:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5562 comm="syz.0.180" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 1287.486968][ T5565] netlink: 28 bytes leftover after parsing attributes in process `syz.0.180'. [ 1287.779674][ T5565] netlink: 'syz.0.180': attribute type 4 has an invalid length. [ 1304.185782][ T5101] veth0_vlan: entered promiscuous mode [ 1305.092291][ T5101] veth1_vlan: entered promiscuous mode [ 1308.062867][ T5101] veth0_macvtap: entered promiscuous mode [ 1309.031439][ T5101] veth1_macvtap: entered promiscuous mode [ 1309.790673][ T5101] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.793423][ T5101] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.797386][ T5101] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.799438][ T5101] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.198697][ T5657] netlink: 28 bytes leftover after parsing attributes in process `syz.0.187'. [ 1333.719955][ T5657] ip6tnl1: entered promiscuous mode [ 1333.723339][ T5657] ip6tnl1: entered allmulticast mode [ 1338.632186][ T35] audit: type=1326 audit(1337.640:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5666 comm="syz.0.189" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 1339.640599][ T5669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1339.696006][ T5669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1341.883767][ T5677] netlink: 28 bytes leftover after parsing attributes in process `syz.0.189'. [ 1342.462713][ T5673] netlink: 'syz.0.189': attribute type 4 has an invalid length. [ 1354.752051][ T35] audit: type=1326 audit(1353.770:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5705 comm="syz.0.195" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 1358.777754][ T5716] netlink: 28 bytes leftover after parsing attributes in process `syz.0.195'. [ 1359.852638][ T5716] netlink: 'syz.0.195': attribute type 4 has an invalid length. [ 1379.108872][ T5752] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 1381.165995][ T35] audit: type=1326 audit(1380.190:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5757 comm="syz.3.205" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 1387.559306][ T5766] block nbd3: NBD_DISCONNECT [ 1387.591367][ T5766] block nbd3: Disconnected due to user request. [ 1387.637780][ T5766] block nbd3: shutting down sockets [ 1391.661328][ T5769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1391.697483][ T5769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1399.849595][ T3831] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1400.047437][ T3831] usb 1-1: Using ep0 maxpacket: 32 [ 1400.136035][ T3831] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1400.138698][ T3831] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1400.277079][ T3831] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1400.279486][ T3831] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1400.281378][ T3831] usb 1-1: Product: syz [ 1400.282977][ T3831] usb 1-1: Manufacturer: syz [ 1400.560826][ T3831] hub 1-1:4.0: USB hub found [ 1401.407857][ T3831] hub 1-1:4.0: 2 ports detected [ 1404.117592][ T3831] hub 1-1:4.0: activate --> -90 [ 1404.673487][ T3831] usb 1-1-port2: config error [ 1404.676066][ T33] usb 1-1: USB disconnect, device number 10 [ 1414.307276][ T3701] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1414.516550][ T3701] usb 1-1: Using ep0 maxpacket: 8 [ 1414.586981][ T3701] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1414.589003][ T3701] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.702812][ T3701] usb 1-1: config 0 descriptor?? [ 1418.451150][ T3701] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1418.452715][ T3701] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1418.457107][ T3701] asix 1-1:0.0: probe with driver asix failed with error -71 [ 1418.532555][ T3701] usb 1-1: USB disconnect, device number 11 [ 1430.851096][ T5841] syzkaller1: entered promiscuous mode [ 1430.852579][ T5841] syzkaller1: entered allmulticast mode [ 1446.559303][ T5881] netlink: 'syz.3.223': attribute type 10 has an invalid length. [ 1447.049404][ T5881] netlink: 'syz.3.223': attribute type 10 has an invalid length. [ 1447.051790][ T5881] netlink: 2 bytes leftover after parsing attributes in process `syz.3.223'. [ 1447.076516][ T5881] nlmon0: entered promiscuous mode [ 1447.760948][ T5609] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1448.092334][ T5609] usb 1-1: Using ep0 maxpacket: 16 [ 1448.213735][ T5609] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1448.217422][ T5609] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1448.219252][ T5609] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1448.348407][ T5609] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1448.350707][ T5609] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.352523][ T5609] usb 1-1: Product: syz [ 1448.366708][ T5609] usb 1-1: Manufacturer: syz [ 1448.371278][ T5609] usb 1-1: SerialNumber: syz [ 1450.032055][ T5609] usb 1-1: 0:2 : does not exist [ 1452.167307][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 1452.179492][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 1452.182818][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 1452.311456][ T5609] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 1452.767689][ T5609] usb 1-1: USB disconnect, device number 12 [ 1465.198604][ T5922] Zero length message leads to an empty skb [ 1473.282746][ T5926] syz.3.232 (5926): drop_caches: 2 [ 1476.932484][ T5929] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1495.688696][ T5939] syzkaller0: entered allmulticast mode [ 1499.429389][ T35] audit: type=1326 audit(1498.460:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5945 comm="syz.0.239" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 1508.270203][ T5950] netlink: 'syz.0.239': attribute type 4 has an invalid length. [ 1510.228449][ T5956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1510.291039][ T5956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1517.411293][ T5964] binder_alloc: 5963: binder_alloc_buf size -592 failed, no address space [ 1517.417926][ T5964] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1519.948984][ T35] audit: type=1326 audit(1518.980:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5967 comm="syz.0.245" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 1522.590260][ T5973] netlink: 'syz.0.245': attribute type 4 has an invalid length. [ 1527.307030][ T35] audit: type=1326 audit(1526.330:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.3.247" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7fc00000 [ 1527.995514][ T35] audit: type=1326 audit(1527.020:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.3.247" exe="/syz-executor" sig=0 arch=c00000f3 syscall=20 compat=0 ip=0xdabc6 code=0x7fc00000 [ 1528.332323][ T35] audit: type=1326 audit(1527.360:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz.3.247" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7fc00000 [ 1529.711714][ T5981] Process accounting resumed [ 1532.019665][ T5987] Driver unsupported XDP return value 0 on prog (id 62) dev N/A, expect packet loss! [ 1539.562899][ T35] audit: type=1326 audit(1538.590:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5995 comm="syz.3.254" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7fc00000 [ 1539.808052][ T35] audit: type=1326 audit(1538.830:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5995 comm="syz.3.254" exe="/syz-executor" sig=0 arch=c00000f3 syscall=20 compat=0 ip=0xdabc6 code=0x7fc00000 [ 1541.512322][ T35] audit: type=1326 audit(1540.500:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5995 comm="syz.3.254" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7fc00000 [ 1541.537282][ T35] audit: type=1326 audit(1540.560:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5995 comm="syz.3.254" exe="/syz-executor" sig=0 arch=c00000f3 syscall=64 compat=0 ip=0xd9b60 code=0x7fc00000 [ 1545.900293][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.255'. [ 1549.708639][ T6004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1549.748379][ T6004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1557.698793][ T6016] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1561.059451][ T6019] binder: BINDER_SET_CONTEXT_MGR already set [ 1561.062422][ T6019] binder: 6018:6019 ioctl 4018620d 20000040 returned -16 [ 1572.306514][ T3831] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1572.556916][ T3831] usb 1-1: Using ep0 maxpacket: 8 [ 1572.691231][ T3831] usb 1-1: config 1 has an invalid descriptor of length 175, skipping remainder of the config [ 1572.693598][ T3831] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1572.763343][ T3831] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1572.768157][ T3831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.770086][ T3831] usb 1-1: Product: syz [ 1572.771587][ T3831] usb 1-1: Manufacturer: syz [ 1572.773116][ T3831] usb 1-1: SerialNumber: syz [ 1578.536910][ T3831] usb 1-1: 0:2 : does not exist [ 1579.232998][ T3168] usb 1-1: USB disconnect, device number 13 [ 1591.188354][ T6071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1591.258424][ T6071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1615.907800][ T6094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1615.955820][ T6094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1623.799681][ T35] audit: type=1326 audit(1622.820:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.3.277" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 1625.709987][ T6106] netlink: 28 bytes leftover after parsing attributes in process `syz.3.277'. [ 1625.857475][ T6106] netlink: 'syz.3.277': attribute type 4 has an invalid length. [ 1646.264821][ T35] audit: type=1326 audit(1645.290:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6140 comm="syz.3.282" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 1648.143159][ T6145] netlink: 28 bytes leftover after parsing attributes in process `syz.3.282'. [ 1648.619003][ T6145] netlink: 'syz.3.282': attribute type 4 has an invalid length. [ 1652.782150][ T6153] netlink: 'syz.3.285': attribute type 27 has an invalid length. [ 1656.795381][ T6153] nlmon0: left promiscuous mode [ 1659.888051][ T35] audit: type=1326 audit(1658.910:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6159 comm="syz.0.288" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 1665.033266][ T6153] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1665.036419][ T6153] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1665.038246][ T6153] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1665.039985][ T6153] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.965697][ T6165] netlink: 'syz.0.288': attribute type 4 has an invalid length. [ 1680.468200][ T5611] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1680.767125][ T5611] usb 1-1: Using ep0 maxpacket: 16 [ 1680.879147][ T5611] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1680.996681][ T5611] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1680.998298][ T5611] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.999678][ T5611] usb 1-1: Product: syz [ 1681.001034][ T5611] usb 1-1: Manufacturer: syz [ 1681.002574][ T5611] usb 1-1: SerialNumber: syz [ 1681.103518][ T5611] usb 1-1: config 0 descriptor?? [ 1681.220119][ T5611] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1681.270134][ T5611] usb 1-1: Detected FT232R [ 1682.313512][ T6181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1682.621817][ T6181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1683.037653][ T5611] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1683.046740][ T5611] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1683.055569][ T5611] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 1683.115421][ T5611] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1683.203525][ T5611] usb 1-1: USB disconnect, device number 14 [ 1683.390857][ T5611] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1683.428161][ T5611] ftdi_sio 1-1:0.0: device disconnected [ 1686.207523][ T6207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.295'. [ 1686.333282][ T6207] macvtap1: entered promiscuous mode [ 1686.337145][ T6207] syz_tun: entered promiscuous mode [ 1686.340700][ T6207] macvtap1: entered allmulticast mode [ 1686.341945][ T6207] syz_tun: entered allmulticast mode [ 1686.476849][ T6207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.295'. [ 1686.490954][ T6207] syz_tun: left allmulticast mode [ 1686.492665][ T6207] syz_tun: left promiscuous mode [ 1686.516732][ T6207] macvtap1: left promiscuous mode [ 1686.518156][ T6207] macvtap1: left allmulticast mode [ 1688.315290][ T6211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1688.329277][ T6211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1688.459239][ T6211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1688.488265][ T6211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1702.108312][ T6230] ======================================================= [ 1702.108312][ T6230] WARNING: The mand mount option has been deprecated and [ 1702.108312][ T6230] and is ignored by this kernel. Remove the mand [ 1702.108312][ T6230] option from the mount to silence this warning. [ 1702.108312][ T6230] ======================================================= [ 1716.476041][ T3599] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1716.542642][ T3599] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1716.583798][ T3599] bond0 (unregistering): Released all slaves [ 1718.242882][ T3599] hsr_slave_0: left promiscuous mode [ 1718.328211][ T3599] hsr_slave_1: left promiscuous mode [ 1719.625541][ T6272] input: syz0 as /devices/virtual/input/input7 [ 1741.774636][ C1] vkms_vblank_simulate: vblank timer overrun [ 1768.310517][ T6267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1768.529825][ T6267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1770.593746][ T35] audit: type=1326 audit(1769.620:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.0.313" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7fc00000 [ 1771.090264][ T35] audit: type=1326 audit(1770.110:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.0.313" exe="/syz-executor" sig=0 arch=c00000f3 syscall=20 compat=0 ip=0xdabc6 code=0x7fc00000 [ 1771.225419][ T35] audit: type=1326 audit(1770.250:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.0.313" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7fc00000 [ 1782.963412][ T6267] hsr_slave_0: entered promiscuous mode [ 1782.990582][ T6267] hsr_slave_1: entered promiscuous mode [ 1783.025118][ T6267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1783.026687][ T6267] Cannot create hsr debugfs directory [ 1791.569915][ T6267] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1795.303300][ T6267] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1795.721897][ T6267] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1796.023008][ T6267] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1800.041337][ T3831] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1800.317075][ T3831] usb 1-1: Using ep0 maxpacket: 16 [ 1800.416816][ T3831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1800.429399][ T3831] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1800.432476][ T3831] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1800.447493][ T3831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1800.611443][ T3831] usb 1-1: config 0 descriptor?? [ 1801.678875][ T3831] microsoft 0003:045E:07DA.0006: No inputs registered, leaving [ 1801.721456][ T3831] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1801.723100][ T3831] microsoft 0003:045E:07DA.0006: no inputs found [ 1801.740219][ T3831] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 1803.068639][ T5609] usb 1-1: USB disconnect, device number 15 [ 1814.239351][ T6267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1849.882636][ T6788] syzkaller0: entered promiscuous mode [ 1849.923605][ T6788] syzkaller0: entered allmulticast mode [ 1875.245582][ T6267] veth0_vlan: entered promiscuous mode [ 1875.977852][ T6267] veth1_vlan: entered promiscuous mode [ 1877.661361][ T6267] veth0_macvtap: entered promiscuous mode [ 1877.837059][ T6267] veth1_macvtap: entered promiscuous mode [ 1878.929610][ T6267] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1878.932213][ T6267] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1878.949216][ T6267] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1878.951792][ T6267] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1879.231421][ T6686] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1879.497242][ T6686] usb 1-1: Using ep0 maxpacket: 8 [ 1879.579249][ T6686] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1879.580645][ T6686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1879.672384][ T6686] usb 1-1: config 0 descriptor?? [ 1884.959954][ T6686] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1884.962075][ T6686] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 1884.973937][ T6686] asix 1-1:0.0: probe with driver asix failed with error -71 [ 1885.151462][ T6686] usb 1-1: USB disconnect, device number 16 [ 1898.736758][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1904.083446][ T6865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1904.149162][ T6865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1908.770559][ T6869] netlink: 'syz.0.332': attribute type 2 has an invalid length. [ 1922.873580][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 1923.680584][ T6885] netlink: 36 bytes leftover after parsing attributes in process `syz.4.336'. [ 1923.695985][ T6885] netlink: 16 bytes leftover after parsing attributes in process `syz.4.336'. [ 1923.698665][ T6885] netlink: 36 bytes leftover after parsing attributes in process `syz.4.336'. [ 1923.701476][ T6885] netlink: 36 bytes leftover after parsing attributes in process `syz.4.336'. [ 1928.161015][ T6887] xt_hashlimit: overflow, try lower: 0/0 [ 1928.492966][ T6887] IPv6: syztnl2: Disabled Multicast RS [ 1929.831939][ T6891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1929.856937][ T6891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1936.440881][ T6675] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1936.768931][ T6675] usb 1-1: Using ep0 maxpacket: 8 [ 1936.827135][ T6675] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1936.829661][ T6675] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1936.912969][ T6675] usb 1-1: config 0 descriptor?? [ 1943.352799][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1943.378118][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading Medium Status register: ffffffb9 [ 1943.678004][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1943.682492][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1943.732186][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1943.761947][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1943.771911][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1943.811911][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1943.841204][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1943.843508][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1943.870848][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1943.900839][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1943.903376][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1943.929069][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1943.942944][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1943.950324][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1943.979032][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1944.006820][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1944.009262][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1944.042927][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1944.071948][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1944.075341][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1944.098268][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1944.103648][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1944.121172][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1944.153067][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1944.179883][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1944.182257][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1944.213209][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1944.228065][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1944.238499][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1944.261358][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1944.296165][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1944.299549][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1944.309542][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1944.337650][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1944.340415][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1944.510235][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1944.527612][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1944.530273][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1944.570746][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1944.601491][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1944.607146][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1944.619082][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1944.628328][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1944.631021][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1944.639237][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1944.647259][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1944.649909][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1944.661965][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1944.676344][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1944.678833][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1944.691332][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1944.700696][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1944.703129][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1944.718191][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1944.724007][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1944.738958][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1944.770336][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1944.795100][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1944.797641][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1944.809742][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1944.833475][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1944.847650][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1944.860097][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1944.879523][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1944.882088][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1945.006179][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1945.011259][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1945.012815][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1945.030440][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1945.048494][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1945.050137][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1945.058270][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1945.063093][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1945.077851][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1945.103547][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1945.121461][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1945.140162][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1945.167151][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1945.172264][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1945.174723][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1945.193586][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1945.211014][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1945.212972][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1945.239669][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1945.259133][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1945.261050][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1945.293101][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1945.319192][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1945.320996][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1945.335793][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1945.567519][ T6675] asix 1-1:0.0 (unnamed net_device) (uninitialized): Could not register MDIO bus (err -5) [ 1945.592415][ T6675] asix 1-1:0.0: probe with driver asix failed with error -5 [ 1945.792220][ T6675] usb 1-1: USB disconnect, device number 17 [ 1952.607431][ T6675] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1953.167292][ T6675] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1953.169750][ T6675] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1953.308799][ T6675] usb 1-1: config 0 descriptor?? [ 1954.453612][ T6675] pegasus 1-1:0.0: probe with driver pegasus failed with error -32 [ 1969.522697][ T900] usb 1-1: USB disconnect, device number 18 [ 1975.802416][ T6938] bond_slave_0: entered promiscuous mode [ 1975.805878][ T6938] bond_slave_1: entered promiscuous mode [ 1975.853007][ T6938] macsec1: entered promiscuous mode [ 1975.880064][ T6938] bond0: entered promiscuous mode [ 1975.970296][ T6938] macsec1: entered allmulticast mode [ 1975.986422][ T6938] bond0: entered allmulticast mode [ 1975.989140][ T6938] bond_slave_0: entered allmulticast mode [ 1975.990807][ T6938] bond_slave_1: entered allmulticast mode [ 1981.001136][ T6945] lo speed is unknown, defaulting to 1000 [ 1981.160173][ T6945] lo speed is unknown, defaulting to 1000 [ 1981.342355][ T6945] lo speed is unknown, defaulting to 1000 [ 1983.459374][ T6946] netlink: 'syz.4.345': attribute type 10 has an invalid length. [ 1983.460899][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.345'. [ 1983.538607][ T6946] lo: entered promiscuous mode [ 1983.540092][ T6946] lo: entered allmulticast mode [ 1984.056084][ T6948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.346'. [ 1988.219411][ T900] lo speed is unknown, defaulting to 1000 [ 1988.236103][ T6945] infiniband syz0: set down [ 1988.239895][ T6945] infiniband syz0: added lo [ 1988.352806][ T6945] syz0: rxe_create_cq: returned err = -12 [ 1988.361624][ T6945] infiniband syz0: Couldn't create ib_mad CQ [ 1988.388426][ T6945] infiniband syz0: Couldn't open port 1 [ 1988.848961][ T6945] RDS/IB: syz0: added [ 1988.853202][ T6945] smc: adding ib device syz0 with port count 1 [ 1988.871128][ T6945] smc: ib device syz0 port 1 has pnetid [ 1988.886279][ T6686] lo speed is unknown, defaulting to 1000 [ 1988.912110][ T6945] lo speed is unknown, defaulting to 1000 [ 1990.530383][ T6945] lo speed is unknown, defaulting to 1000 [ 2024.478795][ C1] vkms_vblank_simulate: vblank timer overrun [ 2062.619621][ T7141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2064.482130][ T7141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2064.835778][ T7141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2064.859242][ T7141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2102.925696][ T7195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2103.137230][ T7195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2107.113795][ T7197] lo speed is unknown, defaulting to 1000 [ 2113.496127][ T7193] lo speed is unknown, defaulting to 1000 [ 2137.655638][ T35] audit: type=1326 audit(2136.660:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7268 comm="syz.4.375" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 2148.320991][ T7271] netlink: 200 bytes leftover after parsing attributes in process `syz.4.375'. [ 2162.456805][ T35] audit: type=1326 audit(2160.900:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7280 comm="syz.0.378" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 2164.572530][ T7285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.379'. [ 2174.182541][ T35] audit: type=1326 audit(2173.210:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.4.383" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 2177.292505][ T6686] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 2177.746269][ T6686] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2177.748042][ T6686] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2177.749742][ T6686] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x65, changing to 0x5 [ 2177.751694][ T6686] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 4 [ 2177.753670][ T6686] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2177.768377][ T6686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2177.990063][ T6686] hub 1-1:1.0: bad descriptor, ignoring hub [ 2177.991805][ T6686] hub 1-1:1.0: probe with driver hub failed with error -5 [ 2178.037949][ T6686] cdc_wdm 1-1:1.0: skipping garbage [ 2178.045956][ T6686] cdc_wdm 1-1:1.0: skipping garbage [ 2178.057172][ T6686] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2178.801647][ T3831] usb 1-1: USB disconnect, device number 19 [ 2182.545314][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.386'. [ 2182.645891][ T7315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2182.665939][ T7315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2183.101477][ T7315] veth0_vlan: entered allmulticast mode [ 2200.347276][ T7328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2200.418407][ T7328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2201.621262][ T35] audit: type=1326 audit(2200.650:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.4.389" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2201.641780][ T35] audit: type=1326 audit(2200.660:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.4.389" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2201.682337][ T35] audit: type=1326 audit(2200.670:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7331 comm="syz.0.390" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2201.693505][ T35] audit: type=1326 audit(2200.680:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7331 comm="syz.0.390" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2201.713355][ T35] audit: type=1326 audit(2200.700:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7331 comm="syz.0.390" exe="/syz-executor" sig=0 arch=c00000f3 syscall=35 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2201.737795][ T35] audit: type=1326 audit(2200.740:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7331 comm="syz.0.390" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2201.741451][ T35] audit: type=1326 audit(2200.760:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7331 comm="syz.0.390" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2201.767585][ T35] audit: type=1326 audit(2200.780:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7331 comm="syz.0.390" exe="/syz-executor" sig=0 arch=c00000f3 syscall=35 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2201.771254][ T35] audit: type=1326 audit(2200.790:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7331 comm="syz.0.390" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2201.801405][ T35] audit: type=1326 audit(2200.800:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7331 comm="syz.0.390" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2202.641619][ T7333] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 2202.641619][ T7333] The task syz.0.390 (7333) triggered the difference, watch for misbehavior. [ 2202.925864][ T7328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2202.974173][ T7328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2203.391487][ T7328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2203.481153][ T7328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2212.088279][ T35] kauditd_printk_skb: 57 callbacks suppressed [ 2212.088859][ T35] audit: type=1326 audit(2211.110:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7340 comm="syz.0.392" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 2268.378778][ T7406] netlink: 288 bytes leftover after parsing attributes in process `syz.0.413'. [ 2294.387034][ T7440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2294.578311][ T7440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2296.845911][ T3831] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 2297.043441][ T3831] usb 1-1: Using ep0 maxpacket: 16 [ 2297.130957][ T3831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2297.146667][ T3831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2297.150064][ T3831] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2297.152827][ T3831] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2297.158536][ T3831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2297.252816][ T3831] usb 1-1: config 0 descriptor?? [ 2299.758480][ T3831] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 2299.760846][ T3831] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 2299.762789][ T3831] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 2299.767684][ T3831] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 2299.769726][ T3831] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 2299.772299][ T3831] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 2299.776394][ T3831] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 2299.778266][ T3831] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 2299.780094][ T3831] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 2299.781987][ T3831] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 2299.876063][ T3831] HID 045e:07da: Invalid code 65791 type 1 [ 2299.878320][ T3831] HID 045e:07da: Invalid code 65791 type 1 [ 2299.880096][ T3831] HID 045e:07da: Invalid code 65791 type 1 [ 2299.882588][ T3831] HID 045e:07da: Invalid code 65791 type 1 [ 2299.886442][ T3831] HID 045e:07da: Invalid code 65791 type 1 [ 2299.888217][ T3831] HID 045e:07da: Invalid code 65791 type 1 [ 2299.889835][ T3831] HID 045e:07da: Invalid code 65791 type 1 [ 2299.891494][ T3831] HID 045e:07da: Invalid code 65791 type 1 [ 2299.893185][ T3831] HID 045e:07da: Invalid code 65791 type 1 [ 2299.895797][ T3831] HID 045e:07da: Invalid code 65791 type 1 [ 2300.450565][ T3831] microsoft 0003:045E:07DA.0007: No inputs registered, leaving [ 2300.802495][ T3831] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 2300.806975][ T3831] microsoft 0003:045E:07DA.0007: no inputs found [ 2300.808603][ T3831] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway [ 2300.976178][ T3831] usb 1-1: USB disconnect, device number 20 [ 2304.839620][ T35] audit: type=1326 audit(2303.850:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.4.430" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 2314.958184][ T6675] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 2315.417605][ T6675] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2315.420260][ T6675] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2315.422331][ T6675] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2315.438551][ T6675] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 2315.440826][ T6675] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2315.536694][ T6675] usb 1-1: config 0 descriptor?? [ 2318.411404][ T6675] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0008/input/input10 [ 2318.767728][ T6675] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0008/input/input11 [ 2319.153945][ T6675] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0008/input/input12 [ 2319.387736][ T6675] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0008/input/input13 [ 2319.559045][ T6675] hid-udraw 0003:20D6:CB17.0008: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.0-1/input0 [ 2319.723184][ T6675] usb 1-1: USB disconnect, device number 21 [ 2326.262733][ T7529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2326.379789][ T7529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2334.112340][ T7537] dlm: no locking on control device [ 2373.231102][ T7575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2373.299238][ T7575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2383.886874][ C1] vkms_vblank_simulate: vblank timer overrun [ 2387.735945][ T6675] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 2387.993236][ T6675] usb 1-1: Using ep0 maxpacket: 8 [ 2388.110711][ T6675] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2388.120612][ T6675] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2388.133774][ T6675] usb 1-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 2388.149955][ T6675] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2388.269488][ T6675] usb 1-1: config 0 descriptor?? [ 2391.041507][ T6675] kye 0003:0458:0153.0009: hidraw0: USB HID v0.00 Device [HID 0458:0153] on usb-dummy_hcd.0-1/input0 [ 2391.246929][ T6675] usb 1-1: USB disconnect, device number 22 [ 2417.230763][ T7487] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 2417.999298][ T35] audit: type=1326 audit(2416.970:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.4.465" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7fc00000 [ 2418.110625][ T7487] usb 1-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=55.ba [ 2418.113034][ T7487] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2418.135213][ T7487] usb 1-1: Product: syz [ 2418.137371][ T7487] usb 1-1: Manufacturer: syz [ 2418.139367][ T7487] usb 1-1: SerialNumber: syz [ 2418.572009][ T7487] usb 1-1: config 0 descriptor?? [ 2419.056849][ T35] audit: type=1326 audit(2417.960:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.4.465" exe="/syz-executor" sig=0 arch=c00000f3 syscall=20 compat=0 ip=0xdabc6 code=0x7fc00000 [ 2419.602553][ T35] audit: type=1326 audit(2418.630:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.4.465" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7fc00000 [ 2419.952828][ T7487] kaweth 1-1:0.0: Firmware present in device. [ 2420.479497][ T7487] kaweth 1-1:0.0: Statistics collection: 0 [ 2420.481648][ T7487] kaweth 1-1:0.0: Multicast filter limit: 0 [ 2420.483317][ T7487] kaweth 1-1:0.0: MTU: 0 [ 2420.501379][ T7487] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00 [ 2420.809754][ T7487] kaweth 1-1:0.0: probe with driver kaweth failed with error -5 [ 2421.149091][ T7487] usb 1-1: USB disconnect, device number 23 [ 2430.027644][ T35] audit: type=1326 audit(2429.060:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7688 comm="syz.0.470" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2430.033064][ T35] audit: type=1326 audit(2429.060:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7688 comm="syz.0.470" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2430.381424][ T35] audit: type=1326 audit(2429.390:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7688 comm="syz.0.470" exe="/syz-executor" sig=0 arch=c00000f3 syscall=447 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2430.569758][ T35] audit: type=1326 audit(2429.590:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7688 comm="syz.0.470" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2430.573214][ T35] audit: type=1326 audit(2429.590:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7688 comm="syz.0.470" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2430.717855][ T35] audit: type=1326 audit(2429.740:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7688 comm="syz.0.470" exe="/syz-executor" sig=0 arch=c00000f3 syscall=88 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2430.763303][ T35] audit: type=1326 audit(2429.780:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7688 comm="syz.0.470" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2430.836089][ T35] audit: type=1326 audit(2429.860:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7688 comm="syz.0.470" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 2435.041437][ T35] audit: type=1326 audit(2434.060:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7691 comm="syz.4.471" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7fc00000 [ 2435.329905][ T35] audit: type=1326 audit(2434.340:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7691 comm="syz.4.471" exe="/syz-executor" sig=0 arch=c00000f3 syscall=20 compat=0 ip=0xdabc6 code=0x7fc00000 [ 2437.031620][ T35] audit: type=1326 audit(2436.060:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7691 comm="syz.4.471" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7fc00000 [ 2439.636738][ T6686] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 2440.010700][ T6686] usb 1-1: Using ep0 maxpacket: 16 [ 2440.140827][ T6686] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2440.143583][ T6686] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2440.160367][ T6686] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2440.163554][ T6686] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2440.178063][ T6686] usb 1-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 2440.180503][ T6686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2440.317798][ T6686] usb 1-1: config 0 descriptor?? [ 2442.183534][ T6686] hid-generic 0003:045E:05DA.000A: unknown main item tag 0x0 [ 2442.221045][ T6686] hid-generic 0003:045E:05DA.000A: ignoring exceeding usage max [ 2442.676653][ T6686] hid-generic 0003:045E:05DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:05da] on usb-dummy_hcd.0-1/input0 [ 2442.808520][ T6686] usb 1-1: USB disconnect, device number 24 [ 2443.659964][ T7727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2443.698380][ T7727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2455.015109][ T35] audit: type=1326 audit(2454.040:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz.0.479" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7fc00000 [ 2456.319781][ T35] audit: type=1326 audit(2455.350:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz.0.479" exe="/syz-executor" sig=0 arch=c00000f3 syscall=20 compat=0 ip=0xdabc6 code=0x7fc00000 [ 2457.966906][ T35] audit: type=1326 audit(2456.990:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz.0.479" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7fc00000 [ 2472.566396][ T6675] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 2472.838049][ T6675] usb 1-1: Using ep0 maxpacket: 8 [ 2473.175410][ T6675] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 2473.176937][ T6675] usb 1-1: config 179 has no interface number 0 [ 2473.178225][ T6675] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2473.180162][ T6675] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2473.181954][ T6675] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2473.183441][ T6675] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2473.186772][ T6675] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2473.188047][ T6675] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2473.578669][ T7763] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2477.556507][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2477.556563][ T900] usb 1-1: USB disconnect, device number 25 [ 2477.558532][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2489.046930][ T6675] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 2489.539182][ T6675] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2489.542188][ T6675] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2489.607265][ T6675] usb 1-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 2489.610073][ T6675] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2489.776825][ T6675] usb 1-1: config 0 descriptor?? [ 2492.870135][ T6675] apple 0003:05AC:027C.000B: unknown main item tag 0x3 [ 2492.872153][ T6675] apple 0003:05AC:027C.000B: unknown main item tag 0x0 [ 2493.105688][ T6675] apple 0003:05AC:027C.000B: hidraw0: USB HID v0.00 Device [HID 05ac:027c] on usb-dummy_hcd.0-1/input0 [ 2493.193677][ T6675] usb 1-1: USB disconnect, device number 26 [ 2528.457393][ T6686] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 2528.686850][ T6686] usb 1-1: Using ep0 maxpacket: 16 [ 2528.907842][ T6686] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 2529.015807][ T6686] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 2529.018044][ T6686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2529.019718][ T6686] usb 1-1: Product: syz [ 2529.021119][ T6686] usb 1-1: Manufacturer: syz [ 2529.022578][ T6686] usb 1-1: SerialNumber: syz [ 2529.249489][ T6686] usb 1-1: config 0 descriptor?? [ 2529.368258][ T6686] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 2529.431607][ T6686] usb 1-1: Detected FT232R [ 2533.768275][ T6686] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2533.773209][ T6686] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 2534.257078][ T6686] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2534.988590][ T6686] usb 1-1: USB disconnect, device number 27 [ 2535.640502][ T6686] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2535.742011][ T6686] ftdi_sio 1-1:0.0: device disconnected [ 2554.729119][ T7861] lo speed is unknown, defaulting to 1000 [ 2559.198042][ T6686] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 2559.407427][ T6686] usb 1-1: Using ep0 maxpacket: 32 [ 2561.462090][ T6686] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2561.481724][ T6686] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2561.489470][ T6686] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 2561.491563][ T6686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2561.790389][ T6686] usb 1-1: config 0 descriptor?? [ 2564.888337][ T6686] lua 0003:1E7D:2C2E.000C: item fetching failed at offset 5/7 [ 2564.913029][ T6686] lua 0003:1E7D:2C2E.000C: parse failed [ 2564.919410][ T6686] lua 0003:1E7D:2C2E.000C: probe with driver lua failed with error -22 [ 2566.010549][ T6686] usb 1-1: USB disconnect, device number 28 [ 2583.837019][ T7861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2583.902039][ T7861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2590.848124][ T6675] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 2592.446253][ T6675] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2592.449659][ T6675] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2592.478241][ T6675] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 2592.501929][ T6675] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2592.627069][ T6675] usb 1-1: config 0 descriptor?? [ 2594.760964][ T6675] sony 0003:054C:024B.000D: unexpected long global item [ 2594.797306][ T6675] sony 0003:054C:024B.000D: parse failed [ 2594.799075][ T6675] sony 0003:054C:024B.000D: probe with driver sony failed with error -22 [ 2595.087055][ T6675] usb 1-1: USB disconnect, device number 29 [ 2611.193837][ T7861] hsr_slave_0: entered promiscuous mode [ 2611.283365][ T7861] hsr_slave_1: entered promiscuous mode [ 2611.342820][ T7861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2611.347245][ T7861] Cannot create hsr debugfs directory [ 2618.958065][ T7861] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2619.350252][ T7861] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2619.634021][ T7861] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2619.866698][ T7861] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2626.075266][ T6675] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 2626.683763][ T6675] usb 1-1: config 246 has an invalid interface number: 166 but max is 0 [ 2626.691236][ T6675] usb 1-1: config 246 has no interface number 0 [ 2626.692735][ T6675] usb 1-1: config 246 interface 166 altsetting 118 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 2626.695313][ T6675] usb 1-1: config 246 interface 166 altsetting 118 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2626.696869][ T6675] usb 1-1: config 246 interface 166 has no altsetting 0 [ 2627.347827][ T6675] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 2627.350522][ T6675] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2627.352596][ T6675] usb 1-1: Product: syz [ 2627.395803][ T6675] usb 1-1: Manufacturer: syz [ 2627.398220][ T6675] usb 1-1: SerialNumber: syz [ 2629.058363][ T6675] usb 1-1: Limiting number of CPorts to U8_MAX [ 2629.149720][ T6675] usb 1-1: Unknown endpoint type found, address 0x0b [ 2629.152101][ T6675] usb 1-1: Not enough endpoints found in device, aborting! [ 2629.848259][ T900] usb 1-1: USB disconnect, device number 30 [ 2644.791579][ T7861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2662.378290][ T7487] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 2663.168479][ T7487] usb 1-1: Using ep0 maxpacket: 16 [ 2663.360060][ T7487] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2663.362555][ T7487] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2663.367229][ T7487] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2663.369256][ T7487] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2663.462865][ T7487] usb 1-1: config 0 descriptor?? [ 2664.836486][ T7487] usbhid 1-1:0.0: can't add hid device: -71 [ 2664.840667][ T7487] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2665.153725][ T7487] usb 1-1: USB disconnect, device number 31 [ 2738.278157][ T7861] veth0_vlan: entered promiscuous mode [ 2739.959888][ T7861] veth1_vlan: entered promiscuous mode [ 2741.460252][ T7861] veth0_macvtap: entered promiscuous mode [ 2742.197500][ T7861] veth1_macvtap: entered promiscuous mode [ 2744.011773][ T7861] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2744.091930][ T7861] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2744.130653][ T7861] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2744.132243][ T7861] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2766.150154][ T7842] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 2766.372747][ T7842] usb 1-1: Using ep0 maxpacket: 16 [ 2767.022797][ T7842] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2767.036713][ T7842] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 2767.039174][ T7842] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 2767.041280][ T7842] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 2767.105720][ T8348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2767.213724][ T8348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2767.917788][ T7842] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2767.920686][ T7842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2767.922769][ T7842] usb 1-1: SerialNumber: syz [ 2768.387192][ T8343] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2768.428673][ T8343] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2768.508473][ T7842] hub 1-1:1.0: bad descriptor, ignoring hub [ 2768.510953][ T7842] hub 1-1:1.0: probe with driver hub failed with error -5 [ 2771.803776][ T8343] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2771.868277][ T8343] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2775.848509][ T7842] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 2781.346288][ T8333] usb 1-1: USB disconnect, device number 32 [ 2781.721885][ T8333] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 2782.793278][ T8363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2782.863530][ T8363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2801.027982][ T8383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2801.085891][ T8383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2810.552046][ T8394] trusted_key: syz.0.530 sent an empty control message without MSG_MORE. [ 2868.710715][ T35] audit: type=1326 audit(2867.720:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8432 comm="syz.5.541" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7fc00000 [ 2870.258532][ T35] audit: type=1326 audit(2869.240:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8432 comm="syz.5.541" exe="/syz-executor" sig=0 arch=c00000f3 syscall=20 compat=0 ip=0xdabc6 code=0x7fc00000 [ 2873.652642][ T35] audit: type=1326 audit(2872.660:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8432 comm="syz.5.541" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7fc00000 [ 2896.157070][ T8448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2896.178238][ T8448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2914.023946][ T6675] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 2914.448378][ T6675] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2914.449859][ T6675] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2914.609582][ T6675] usb 1-1: config 0 descriptor?? [ 2916.681962][ T6675] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 2916.687666][ T6675] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 2917.022263][ T6675] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 2917.030424][ T6675] [drm] Initialized udl on minor 2 [ 2918.720246][ T6675] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 2918.938829][ T6675] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 2919.359114][ T6675] usb 1-1: USB disconnect, device number 33 [ 2927.375607][ T8485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2927.422113][ T8485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2936.017795][ T35] audit: type=1326 audit(2935.040:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8491 comm="syz.0.554" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7fc00000 [ 2939.501277][ T35] audit: type=1326 audit(2938.510:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8491 comm="syz.0.554" exe="/syz-executor" sig=0 arch=c00000f3 syscall=20 compat=0 ip=0xdabc6 code=0x7fc00000 [ 2941.567371][ T35] audit: type=1326 audit(2940.600:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8491 comm="syz.0.554" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7fc00000 [ 2993.917976][ T8535] lo speed is unknown, defaulting to 1000 [ 2995.679945][ T8333] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 2995.896429][ T8333] usb 1-1: Using ep0 maxpacket: 16 [ 2996.509282][ T8333] usb 1-1: config 0 has no interfaces? [ 2996.803520][ T8333] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2996.810955][ T8333] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2996.812773][ T8333] usb 1-1: Product: syz [ 2996.837060][ T8333] usb 1-1: Manufacturer: syz [ 2996.839189][ T8333] usb 1-1: SerialNumber: syz [ 2997.253741][ T8333] usb 1-1: config 0 descriptor?? [ 3008.256381][ T5611] usb 1-1: USB disconnect, device number 34 [ 3021.677595][ T5611] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 3022.863195][ T5611] usb 1-1: Using ep0 maxpacket: 16 [ 3023.767907][ T5611] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3023.771196][ T5611] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3023.773802][ T5611] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3023.780315][ T5611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3024.091522][ T5611] usb 1-1: config 0 descriptor?? [ 3028.241913][ T5611] usbhid 1-1:0.0: can't add hid device: -71 [ 3028.260237][ T5611] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 3028.593603][ T5611] usb 1-1: USB disconnect, device number 35 [ 3043.518480][ T8603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.573'. [ 3051.449648][ T8605] block nbd5: NBD_DISCONNECT [ 3051.453918][ T8605] block nbd5: Send disconnect failed -32 [ 3051.701891][ T8604] block nbd5: Disconnected due to user request. [ 3051.739373][ T8604] block nbd5: shutting down sockets [ 3061.263130][ T8614] macvtap0: entered promiscuous mode [ 3061.303341][ T8614] macvtap0: left promiscuous mode [ 3105.513423][ T35] audit: type=1326 audit(3104.500:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8648 comm="syz.0.590" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 3105.551386][ T35] audit: type=1326 audit(3104.580:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8648 comm="syz.0.590" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 3105.647269][ T35] audit: type=1326 audit(3104.650:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8648 comm="syz.0.590" exe="/syz-executor" sig=0 arch=c00000f3 syscall=116 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 3105.687881][ T35] audit: type=1326 audit(3104.700:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8648 comm="syz.0.590" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 3105.732500][ T35] audit: type=1326 audit(3104.760:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8648 comm="syz.0.590" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 3124.133669][ T8667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.596'. [ 3129.239214][ T8333] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 3129.848652][ T8333] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3129.851698][ T8333] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3129.853747][ T8333] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 3129.867520][ T8333] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3136.603118][ T8333] usbhid 1-1:17.0: can't add hid device: -32 [ 3136.617887][ T8333] usbhid 1-1:17.0: probe with driver usbhid failed with error -32 [ 3145.466941][ T6675] usb 1-1: USB disconnect, device number 36 [ 3183.829366][ T35] audit: type=1326 audit(3182.780:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.0.610" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7fc00000 [ 3185.267505][ T35] audit: type=1326 audit(3184.220:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.0.610" exe="/syz-executor" sig=0 arch=c00000f3 syscall=20 compat=0 ip=0xdabc6 code=0x7fc00000 [ 3185.510663][ T35] audit: type=1326 audit(3184.520:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.0.610" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7fc00000 [ 3187.948404][ T8742] netlink: 12 bytes leftover after parsing attributes in process `syz.5.611'. [ 3191.239212][ T8742] bond1: entered promiscuous mode [ 3191.670986][ T8745] team_slave_1: entered promiscuous mode [ 3191.871479][ T8745] bond1: (slave team_slave_1): Enslaving as an active interface with an up link [ 3201.388433][ T8784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.615'. [ 3297.107808][ T7887] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3299.421132][ T7887] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3301.083601][ T7887] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3302.882456][ T7887] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3319.108295][ T7887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3319.461358][ T7887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3320.378246][ T7887] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 3320.839478][ T7887] bond0 (unregistering): Released all slaves [ 3328.444720][ T8909] lo speed is unknown, defaulting to 1000 [ 3334.588881][ T7887] hsr_slave_0: left promiscuous mode [ 3334.877785][ T7887] hsr_slave_1: left promiscuous mode [ 3335.423804][ T7887] veth1_macvtap: left promiscuous mode [ 3335.597816][ T7887] veth0_macvtap: left promiscuous mode [ 3335.602457][ T7887] veth1_vlan: left promiscuous mode [ 3335.608773][ T7887] veth0_vlan: left promiscuous mode [ 3367.131242][ T8915] lo speed is unknown, defaulting to 1000 [ 3416.868818][ T8909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3417.596733][ T8909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3427.090086][ T8915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3427.749599][ T8915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3456.048355][ T8909] hsr_slave_0: entered promiscuous mode [ 3456.230376][ T8909] hsr_slave_1: entered promiscuous mode [ 3470.296927][ T8915] hsr_slave_0: entered promiscuous mode [ 3470.369212][ T8915] hsr_slave_1: entered promiscuous mode [ 3470.456648][ T8915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3470.458775][ T8915] Cannot create hsr debugfs directory [ 3481.977292][ T8909] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 3482.931223][ T8909] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 3483.711663][ T8909] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 3484.101506][ T8909] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 3493.423309][ T8915] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 3494.282681][ T8915] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 3495.122477][ T8915] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 3496.423198][ T8915] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 3523.766472][ T8909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3538.033437][ T8915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3573.571483][ T8915] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3573.607954][ T8915] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3658.871156][ T8909] veth0_vlan: entered promiscuous mode [ 3660.709655][ T8909] veth1_vlan: entered promiscuous mode [ 3666.587261][ T8909] veth0_macvtap: entered promiscuous mode [ 3668.003296][ T8909] veth1_macvtap: entered promiscuous mode [ 3672.440250][ T8909] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3672.441897][ T8909] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3672.443101][ T8909] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3672.475216][ T8909] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3686.262679][ T8915] veth0_vlan: entered promiscuous mode [ 3686.741937][ T8915] veth1_vlan: entered promiscuous mode [ 3688.263315][ T8915] veth0_macvtap: entered promiscuous mode [ 3688.771840][ T8915] veth1_macvtap: entered promiscuous mode [ 3695.160553][ T8915] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3695.177541][ T8915] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3695.179028][ T8915] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3695.180174][ T8915] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3706.206511][ T9702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3706.300958][ T9702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3717.719748][ T9708] netlink: 4 bytes leftover after parsing attributes in process `syz.7.622'. [ 3752.206293][ T9721] binder_alloc: 9720: binder_alloc_buf, no vma [ 3774.329313][ T9731] netlink: 8 bytes leftover after parsing attributes in process `syz.6.630'. [ 3862.859726][ T9785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3863.167965][ T9785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3865.280557][ T9785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3865.601159][ T9785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3873.231151][ T9792] binder_alloc: 9790: binder_alloc_buf, no vma [ 3883.827251][ T9795] netlink: 36 bytes leftover after parsing attributes in process `syz.6.647'. [ 3883.829425][ T9795] netlink: 16 bytes leftover after parsing attributes in process `syz.6.647'. [ 3883.831617][ T9795] netlink: 36 bytes leftover after parsing attributes in process `syz.6.647'. [ 3883.886674][ T9795] netlink: 36 bytes leftover after parsing attributes in process `syz.6.647'. [ 3918.157187][ T9807] syzkaller0: entered promiscuous mode [ 3918.159856][ T9807] syzkaller0: entered allmulticast mode [ 3963.589528][ T9839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3963.928204][ T9839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3977.978511][ T9846] binder: BINDER_SET_CONTEXT_MGR already set [ 3977.986938][ T9846] binder: 9845:9846 ioctl 4018620d 200002c0 returned -16 [ 3986.956800][ T9850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3987.061029][ T9850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3993.323890][ T9691] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3997.129711][ T9691] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4000.270437][ T9691] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4002.437120][ T9691] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4003.002071][ T9835] lo speed is unknown, defaulting to 1000 [ 4020.909131][ T9878] binder: BINDER_SET_CONTEXT_MGR already set [ 4020.911040][ T9878] binder: 9877:9878 ioctl 4018620d 200002c0 returned -16 [ 4030.183575][ T9691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4030.381483][ T9691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4030.763803][ T9691] bond0 (unregistering): Released all slaves [ 4046.538884][ T9691] hsr_slave_0: left promiscuous mode [ 4046.650183][ T9691] hsr_slave_1: left promiscuous mode [ 4047.811084][ T9691] veth1_macvtap: left promiscuous mode [ 4047.830243][ T9691] veth0_macvtap: left promiscuous mode [ 4047.838279][ T9691] veth1_vlan: left promiscuous mode [ 4047.842653][ T9691] veth0_vlan: left promiscuous mode [ 4120.052730][ T9691] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4121.601982][ T9691] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4123.507511][ T9691] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4126.081181][ T9691] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4147.066908][ T9691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4147.252248][ T9691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4148.980672][ T9691] bond0 (unregistering): Released all slaves [ 4160.032810][ T9691] hsr_slave_0: left promiscuous mode [ 4160.437203][ T9691] hsr_slave_1: left promiscuous mode [ 4161.178015][ T9691] veth1_macvtap: left promiscuous mode [ 4161.181205][ T9691] veth0_macvtap: left promiscuous mode [ 4161.186859][ T9691] veth1_vlan: left promiscuous mode [ 4161.190545][ T9691] veth0_vlan: left promiscuous mode [ 4192.733071][ T9918] lo speed is unknown, defaulting to 1000 [ 4217.466514][ T9835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4217.941239][ T9835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4256.546257][ T9918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4256.948607][ T9918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4266.531808][ T9835] hsr_slave_0: entered promiscuous mode [ 4266.678924][ T9835] hsr_slave_1: entered promiscuous mode [ 4284.757584][ T9835] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 4285.268617][ T9835] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 4285.776412][ T9835] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 4285.888368][ T9835] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 4296.529637][ T9918] hsr_slave_0: entered promiscuous mode [ 4296.933423][ T9918] hsr_slave_1: entered promiscuous mode [ 4297.140174][ T9918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 4297.142546][ T9918] Cannot create hsr debugfs directory [ 4324.663201][ T9918] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 4325.842070][ T9918] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 4326.182911][ T9918] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 4326.978291][ T9918] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 4329.693606][ T9835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4365.859138][ T9918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4501.539877][ T9835] veth0_vlan: entered promiscuous mode [ 4504.762175][ T9835] veth1_vlan: entered promiscuous mode [ 4510.361604][ T9835] veth0_macvtap: entered promiscuous mode [ 4511.921844][ T9835] veth1_macvtap: entered promiscuous mode [ 4518.172798][ T9835] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4518.226961][ T9835] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4518.229390][ T9835] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4518.231448][ T9835] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4535.951841][T10664] @ÿ: renamed from veth0_vlan (while UP) [ 4542.120114][ T9918] veth0_vlan: entered promiscuous mode [ 4544.431310][ T9918] veth1_vlan: entered promiscuous mode [ 4550.240267][ T9918] veth0_macvtap: entered promiscuous mode [ 4553.214714][ T9918] veth1_macvtap: entered promiscuous mode [ 4560.438085][ T9918] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4560.440672][ T9918] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4560.442850][ T9918] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4560.661851][ T9918] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4563.440395][T10678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4563.593834][T10678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4628.146145][T10711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4628.193068][T10711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4681.172262][T10733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4682.212050][T10733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4719.863023][T10723] lo speed is unknown, defaulting to 1000 [ 4720.849959][T10750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4720.892425][T10750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4785.696282][T10868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4786.383533][T10868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4822.403778][T10723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4822.756189][T10723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4825.693334][T10947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4825.960466][T10947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4887.358141][T10723] hsr_slave_0: entered promiscuous mode [ 4888.050668][T10723] hsr_slave_1: entered promiscuous mode [ 4890.751076][T10723] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 4890.967707][T10723] Cannot create hsr debugfs directory [ 4902.151728][T11066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4902.371819][T11066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4940.431199][T11130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4940.528065][T11130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4946.513879][T10723] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 4947.348891][T10723] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 4949.042406][T10723] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 4949.274938][T10723] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 4992.798903][T10723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5016.506447][T11190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5017.762091][T11190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5041.979201][T11201] netlink: 12 bytes leftover after parsing attributes in process `syz.8.700'. [ 5042.253468][T11201] netlink: 12 bytes leftover after parsing attributes in process `syz.8.700'. [ 5042.358866][T11201] netlink: 12 bytes leftover after parsing attributes in process `syz.8.700'. [ 5042.421963][T11201] netlink: 12 bytes leftover after parsing attributes in process `syz.8.700'. [ 5042.489679][T11201] netlink: 12 bytes leftover after parsing attributes in process `syz.8.700'. [ 5042.493792][T11201] netlink: 12 bytes leftover after parsing attributes in process `syz.8.700'. [ 5042.636853][T11201] netlink: 12 bytes leftover after parsing attributes in process `syz.8.700'. [ 5042.641439][T11201] netlink: 12 bytes leftover after parsing attributes in process `syz.8.700'. [ 5042.703219][T11201] netlink: 12 bytes leftover after parsing attributes in process `syz.8.700'. [ 5042.751982][T11201] netlink: 12 bytes leftover after parsing attributes in process `syz.8.700'. [ 5048.988981][T11209] __nla_validate_parse: 7 callbacks suppressed [ 5048.989367][T11209] netlink: 24 bytes leftover after parsing attributes in process `syz.8.700'. [ 5122.118372][T11255] netlink: 4 bytes leftover after parsing attributes in process `syz.8.706'. [ 5138.979202][T10723] veth0_vlan: entered promiscuous mode [ 5141.469407][T10723] veth1_vlan: entered promiscuous mode [ 5146.939844][T10723] veth0_macvtap: entered promiscuous mode [ 5152.640101][T10723] veth1_macvtap: entered promiscuous mode [ 5157.911007][T10723] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5157.912915][T10723] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5157.988855][T10723] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5157.990584][T10723] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5247.594737][ T9691] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5250.110717][ T9691] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5252.442934][ T9691] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5255.431415][ T9691] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5284.496566][ T9691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 5284.752133][ T9691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 5285.179189][ T9691] bond0 (unregistering): Released all slaves [ 5301.202248][ T9691] hsr_slave_0: left promiscuous mode [ 5301.488573][ T9691] hsr_slave_1: left promiscuous mode [ 5302.336395][ T9691] veth1_macvtap: left promiscuous mode [ 5302.338506][ T9691] veth0_macvtap: left promiscuous mode [ 5302.341472][ T9691] veth1_vlan: left promiscuous mode [ 5302.344751][ T9691] @ÿ: left promiscuous mode [ 5364.716588][T11296] lo speed is unknown, defaulting to 1000 [ 5384.031384][T11304] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5386.022734][T11304] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5393.786939][T11304] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5395.666653][T11304] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5398.193508][T11355] lo speed is unknown, defaulting to 1000 [ 5420.800985][T11304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 5421.071488][T11304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 5421.443777][T11304] bond0 (unregistering): Released all slaves [ 5434.916161][T11304] hsr_slave_0: left promiscuous mode [ 5434.960268][T11304] hsr_slave_1: left promiscuous mode [ 5435.498626][T11304] veth1_macvtap: left promiscuous mode [ 5435.501624][T11304] veth0_macvtap: left promiscuous mode [ 5435.528517][T11304] veth1_vlan: left promiscuous mode [ 5435.530983][T11304] veth0_vlan: left promiscuous mode [ 5528.390279][T11296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5530.683018][T11296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5555.681900][T11355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5557.132403][T11355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5565.790104][T11296] hsr_slave_0: entered promiscuous mode [ 5566.036784][T11296] hsr_slave_1: entered promiscuous mode [ 5589.776144][T11296] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 5589.988433][T11296] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 5590.290193][T11296] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 5590.571094][T11296] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 5595.998753][T11355] hsr_slave_0: entered promiscuous mode [ 5596.149640][T11355] hsr_slave_1: entered promiscuous mode [ 5596.456272][T11355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 5596.458580][T11355] Cannot create hsr debugfs directory [ 5636.867513][T11355] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 5637.061047][T11355] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 5638.043249][T11355] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 5638.536821][T11355] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 5643.306572][T11296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5691.773524][T11355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5790.243354][T11296] veth0_vlan: entered promiscuous mode [ 5791.581474][T11296] veth1_vlan: entered promiscuous mode [ 5796.727872][T11296] veth0_macvtap: entered promiscuous mode [ 5797.377522][T11296] veth1_macvtap: entered promiscuous mode [ 5798.108776][T11296] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5798.111212][T11296] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5798.113210][T11296] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5798.118350][T11296] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5847.202134][T11355] veth0_vlan: entered promiscuous mode [ 5849.113762][T11355] veth1_vlan: entered promiscuous mode [ 5855.596997][T11355] veth0_macvtap: entered promiscuous mode [ 5855.687407][T11355] veth1_macvtap: entered promiscuous mode [ 5855.987031][T11355] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5855.988749][T11355] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5855.990198][T11355] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5855.991323][T11355] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5892.208956][T12159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5892.680954][T12159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5998.893229][T12220] binder_alloc: 12219: binder_alloc_buf size 4088 failed, no address space [ 5998.897881][T12220] binder_alloc: allocated: 48 (num: 1 largest: 48), free: 4048 (num: 1 largest: 4048) [ 6042.586098][T12245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.738'. [ 6042.851700][T12243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.738'. [ 6042.909615][T12243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.738'. [ 6042.913632][T12243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.738'. [ 6042.972537][T12243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.738'. [ 6042.989769][T12243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.738'. [ 6043.032064][T12243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.738'. [ 6043.108043][T12243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.738'. [ 6043.113087][T12243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.738'. [ 6043.212930][T12243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.738'. [ 6087.319350][T12265] __nla_validate_parse: 7 callbacks suppressed [ 6087.319832][T12265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.743'. [ 6087.336745][T12265] veth1_to_hsr: entered promiscuous mode [ 6087.338858][T12265] veth1_to_hsr: entered allmulticast mode [ 6087.393705][T12265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.743'. [ 6087.435379][T12265] veth1_to_hsr: left promiscuous mode [ 6087.436637][T12265] veth1_to_hsr: left allmulticast mode [ 6094.356886][T12271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.744'. [ 6094.416285][T12271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.744'. [ 6094.442043][T12271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.744'. [ 6094.461810][T12271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.744'. [ 6094.478988][T12271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.744'. [ 6094.500636][T12271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.744'. [ 6094.521428][T12271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.744'. [ 6094.540740][T12271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.744'. [ 6094.577499][T12271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.744'. [ 6094.605670][T12271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.744'. [ 6100.860357][T12278] __nla_validate_parse: 7 callbacks suppressed [ 6100.860871][T12278] netlink: 24 bytes leftover after parsing attributes in process `syz.2.744'. [ 6161.269257][ T35] audit: type=1326 audit(6159.270:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.2.752" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x0 [ 6165.240777][T12311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.751'. [ 6165.940824][T12307] netlink: 12 bytes leftover after parsing attributes in process `syz.3.751'. [ 6166.028975][T12307] netlink: 12 bytes leftover after parsing attributes in process `syz.3.751'. [ 6166.032940][T12307] netlink: 12 bytes leftover after parsing attributes in process `syz.3.751'. [ 6166.079270][T12307] netlink: 12 bytes leftover after parsing attributes in process `syz.3.751'. [ 6166.118861][T12307] netlink: 12 bytes leftover after parsing attributes in process `syz.3.751'. [ 6166.137626][T12307] netlink: 12 bytes leftover after parsing attributes in process `syz.3.751'. [ 6166.167783][T12307] netlink: 12 bytes leftover after parsing attributes in process `syz.3.751'. [ 6166.220741][T12307] netlink: 12 bytes leftover after parsing attributes in process `syz.3.751'. [ 6166.258996][T12307] netlink: 12 bytes leftover after parsing attributes in process `syz.3.751'. [ 6237.185920][T12339] __nla_validate_parse: 7 callbacks suppressed [ 6237.186267][T12339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.758'. [ 6237.207539][T12339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.758'. [ 6237.215564][T12339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.758'. [ 6237.220382][T12339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.758'. [ 6237.227946][T12339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.758'. [ 6237.232291][T12339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.758'. [ 6237.238834][T12339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.758'. [ 6237.243065][T12339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.758'. [ 6237.250186][T12339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.758'. [ 6237.256208][T12339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.758'. [ 6289.091902][T12368] binder: BINDER_SET_CONTEXT_MGR already set [ 6289.093296][T12368] binder: 12367:12368 ioctl 4018620d 200002c0 returned -16 [ 6372.471284][ T9691] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6375.418152][ T9691] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6378.361268][ T9691] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6382.097353][ T9691] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6419.883865][ T9691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 6421.587978][ T9691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 6422.099281][ T9691] bond0 (unregistering): Released all slaves [ 6438.185855][T12421] __nla_validate_parse: 8 callbacks suppressed [ 6438.186376][T12421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.771'. [ 6446.736210][ T9691] hsr_slave_0: left promiscuous mode [ 6446.802371][ T9691] hsr_slave_1: left promiscuous mode [ 6447.367646][ T9691] veth1_macvtap: left promiscuous mode [ 6447.369649][ T9691] veth0_macvtap: left promiscuous mode [ 6447.372469][ T9691] veth1_vlan: left promiscuous mode [ 6447.436535][ T9691] veth0_vlan: left promiscuous mode [ 6491.967204][T12448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6491.988369][T12448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6492.906919][T12448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6492.988709][T12448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6574.723877][ T35] audit: type=1326 audit(6573.720:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12469 comm="syz.2.777" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 6574.828373][ T35] audit: type=1326 audit(6573.830:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12469 comm="syz.2.777" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 6574.867089][ T35] audit: type=1326 audit(6573.860:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12469 comm="syz.2.777" exe="/syz-executor" sig=0 arch=c00000f3 syscall=56 compat=0 ip=0xd9a4e code=0x7ffc0000 [ 6574.870776][ T35] audit: type=1326 audit(6573.890:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12469 comm="syz.2.777" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 6574.919904][ T35] audit: type=1326 audit(6573.950:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12469 comm="syz.2.777" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 6575.107244][ T35] audit: type=1326 audit(6574.130:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12469 comm="syz.2.777" exe="/syz-executor" sig=0 arch=c00000f3 syscall=29 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 6575.127905][ T35] audit: type=1326 audit(6574.150:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12469 comm="syz.2.777" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 6575.195869][ T35] audit: type=1326 audit(6574.220:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12469 comm="syz.2.777" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 6575.387691][ T35] audit: type=1326 audit(6574.320:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12469 comm="syz.2.777" exe="/syz-executor" sig=0 arch=c00000f3 syscall=66 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 6575.418230][ T35] audit: type=1326 audit(6574.430:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12469 comm="syz.2.777" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 6576.761157][T12395] lo speed is unknown, defaulting to 1000 [ 6580.203659][ T35] kauditd_printk_skb: 18 callbacks suppressed [ 6580.222893][ T35] audit: type=1326 audit(6579.230:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12469 comm="syz.2.777" exe="/syz-executor" sig=0 arch=c00000f3 syscall=198 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 6580.258142][ T35] audit: type=1326 audit(6579.260:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12469 comm="syz.2.777" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 6580.261626][ T35] audit: type=1326 audit(6579.260:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12469 comm="syz.2.777" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 6580.328724][ T35] audit: type=1326 audit(6579.350:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12469 comm="syz.2.777" exe="/syz-executor" sig=0 arch=c00000f3 syscall=198 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 6580.479227][ T35] audit: type=1326 audit(6579.480:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12469 comm="syz.2.777" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 6580.600166][ T35] audit: type=1326 audit(6579.610:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12469 comm="syz.2.777" exe="/syz-executor" sig=0 arch=c00000f3 syscall=206 compat=0 ip=0xdc3ea code=0x7ffc0000 [ 6580.697362][ T35] audit: type=1326 audit(6579.610:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12469 comm="syz.2.777" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 6581.299885][ T35] audit: type=1326 audit(6580.330:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12469 comm="syz.2.777" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 6581.550053][ T35] audit: type=1326 audit(6580.330:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12469 comm="syz.2.777" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 6583.379481][ T35] audit: type=1326 audit(6582.360:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12469 comm="syz.2.777" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdabc6 code=0x7ffc0000 [ 6601.773480][T12506] netlink: 644 bytes leftover after parsing attributes in process `syz.2.778'. [ 6665.012782][T12395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6665.565777][T12395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6727.911430][T12395] hsr_slave_0: entered promiscuous mode [ 6729.307485][T12395] hsr_slave_1: entered promiscuous mode [ 6729.460933][T12395] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 6729.463396][T12395] Cannot create hsr debugfs directory [ 6749.680420][T12395] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6751.733891][T12395] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6753.591568][T12395] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6756.842777][T12395] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6762.203478][T12395] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 6763.219623][T12395] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 6763.727015][T12395] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 6764.393007][T12395] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 6805.733975][T12821] lo speed is unknown, defaulting to 1000 [ 6809.827471][T12395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6853.632665][T12395] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 6853.643624][T12395] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 6908.169786][T12821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6908.731518][T12821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6983.307252][T12821] hsr_slave_0: entered promiscuous mode [ 6983.810535][T12821] hsr_slave_1: entered promiscuous mode [ 6983.828785][T12821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 6983.830430][T12821] Cannot create hsr debugfs directory [ 7017.997150][T12924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 7019.076041][T12924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 7019.418167][T12924] bond0 (unregistering): Released all slaves [ 7037.722967][T12924] hsr_slave_0: left promiscuous mode [ 7037.897729][T12924] hsr_slave_1: left promiscuous mode [ 7103.340213][T12821] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7106.091857][T12821] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7108.676955][T12821] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7109.805955][T13117] lo speed is unknown, defaulting to 1000 [ 7111.073928][T12821] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7118.503235][T12821] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 7119.107866][T12821] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 7119.487486][T12821] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 7121.203122][T12821] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 7140.027066][ T36] INFO: task syz.2.783:12692 blocked for more than 430 seconds. [ 7140.028932][ T36] Not tainted 6.12.0-rc1-syzkaller-00012-g5f153a692bac #0 [ 7140.030107][ T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 7140.031118][ T36] task:syz.2.783 state:D stack:0 pid:12692 tgid:12681 ppid:11296 flags:0x00000004 [ 7140.088879][ T36] Call Trace: [ 7140.089979][ T36] [] __schedule+0xd5a/0x3886 [ 7140.092547][ T36] [] schedule+0xc4/0x324 [ 7140.093731][ T36] [] schedule_preempt_disabled+0x16/0x28 [ 7140.166619][ T36] [] rwsem_down_read_slowpath+0x56a/0x91e [ 7140.168355][ T36] [] down_read+0xe4/0x460 [ 7140.169508][ T36] [] page_cache_ra_unbounded+0xe8/0x528 [ 7140.170773][ T36] [] do_page_cache_ra+0xf0/0x134 [ 7140.171941][ T36] [] page_cache_ra_order+0xea/0x17c [ 7140.173126][ T36] [] filemap_fault+0x167e/0x2b60 [ 7140.248318][ T36] [] __do_fault+0xf4/0x4dc [ 7140.250188][ T36] [] __handle_mm_fault+0x16fc/0x43cc [ 7140.251395][ T36] [] handle_mm_fault+0x48a/0x884 [ 7140.252423][ T36] [] handle_page_fault+0x434/0x1588 [ 7140.253487][ T36] [] do_page_fault+0x20/0x56 [ 7140.316516][ T36] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 7140.318997][ T36] [] _copy_to_iter+0x23e/0x16f4 [ 7140.387058][ T36] [ 7140.387058][ T36] Showing all locks held in the system: [ 7140.388456][ T36] 1 lock held by khungtaskd/36: [ 7140.389302][ T36] #0: ffffffff87fcc100 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x68/0x2d6 [ 7140.392768][ T36] 2 locks held by syslogd/2965: [ 7140.393693][ T36] 1 lock held by klogd/2969: [ 7140.477469][ T36] 2 locks held by getty/3135: [ 7140.478598][ T36] #0: ff6000001857e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3a/0x46 [ 7140.481200][ T36] #1: ff2000000008b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xd7c/0x129a [ 7140.483565][ T36] 1 lock held by sshd/3164: [ 7140.529997][ T36] 1 lock held by syz.4.488/7798: [ 7140.531216][ T36] #0: ff600000154df0c8 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1ac/0x30a [ 7140.595822][ T36] 2 locks held by kworker/u10:1/8794: [ 7140.597018][ T36] #0: ff60000011071148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x848/0x1dae [ 7140.599797][ T36] #1: ff2000000c3b7c90 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x870/0x1dae [ 7140.602431][ T36] 2 locks held by kworker/u10:6/8807: [ 7140.603301][ T36] #0: ff60000011071148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x848/0x1dae [ 7140.697818][ T36] #1: ff2000000c2b7c90 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x870/0x1dae [ 7140.700762][ T36] 2 locks held by kworker/0:2/11185: [ 7140.701855][ T36] 1 lock held by syz.2.783/12692: [ 7140.702845][ T36] #0: ff600000154df0c8 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xe8/0x528 [ 7140.797775][ T36] 1 lock held by rm/13295: [ 7140.798773][ T36] 1 lock held by modprobe/13301: [ 7140.799864][ T36] 3 locks held by modprobe/13332: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 7140.865911][ T36] [ 7140.867097][ T36] ============================================= [ 7140.867097][ T36] [ 7140.868712][ T36] NMI backtrace for cpu 1 [ 7140.869845][ T36] CPU: 1 UID: 0 PID: 36 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00012-g5f153a692bac #0 [ 7140.871090][ T36] Hardware name: riscv-virtio,qemu (DT) [ 7140.871902][ T36] Call Trace: [ 7140.872546][ T36] [] dump_backtrace+0x2e/0x3c [ 7140.873653][ T36] [] show_stack+0x34/0x40 [ 7140.875503][ T36] [] dump_stack_lvl+0x122/0x196 [ 7140.876642][ T36] [] dump_stack+0x1c/0x24 [ 7140.877781][ T36] [] nmi_cpu_backtrace+0x39c/0x39e [ 7140.878853][ T36] [] nmi_trigger_cpumask_backtrace+0x2b6/0x456 [ 7140.880086][ T36] [] arch_trigger_cpumask_backtrace+0x2c/0x3c [ 7140.881282][ T36] [] watchdog+0xcfa/0x1178 [ 7140.882313][ T36] [] kthread+0x28c/0x3a6 [ 7140.883343][ T36] [] ret_from_fork+0xe/0x18 [ 7140.886590][ T36] Sending NMI from CPU 1 to CPUs 0: [ 7140.888648][ C0] NMI backtrace for cpu 0 [ 7140.890067][ C0] CPU: 0 UID: 0 PID: 11185 Comm: kworker/0:2 Not tainted 6.12.0-rc1-syzkaller-00012-g5f153a692bac #0 [ 7140.891680][ C0] Hardware name: riscv-virtio,qemu (DT) [ 7140.893204][ C0] Workqueue: events nsim_dev_trap_report_work [ 7140.895329][ C0] epc : __sanitizer_cov_trace_const_cmp1+0x0/0x1c [ 7140.896921][ C0] ra : in_aton+0x13a/0x1b8 [ 7140.898328][ C0] epc : ffffffff80430a8e ra : ffffffff84d846c2 sp : ff20000003c279f0 [ 7140.899718][ C0] gp : ffffffff897bea80 tp : ff6000001a644ec0 t0 : ff20000003c27920 [ 7140.901154][ C0] t1 : ffffffffd5c603a1 t2 : fffffffffad2a022 s0 : ff20000003c27a40 [ 7140.902606][ C0] s1 : 0000000000000001 a0 : 0000000000000000 a1 : 0000000000000039 [ 7140.904086][ C0] a2 : 0000000000000002 a3 : ffffffff84d8467c a4 : 0000000000000000 [ 7140.905616][ C0] a5 : 0000000000000001 a6 : 0000000000000003 a7 : 1fec0000034c8b4f [ 7140.907074][ C0] s2 : 0000000000000039 s3 : ffffffff86c3ce01 s4 : dfffffff00000000 [ 7140.908575][ C0] s5 : 0000000000000000 s6 : 0000000000000000 s7 : 0000000000000001 [ 7140.910025][ C0] s8 : ff600000292bc280 s9 : ff60000018205400 s10: dfffffff00000000 [ 7140.911589][ C0] s11: ffffffff86c3c9bc t3 : 0000000000000017 t4 : ff20000003c27640 [ 7140.913209][ C0] t5 : 0000000065ea44a7 t6 : ff60000039ef200c [ 7140.915124][ C0] status: 0000000200000120 badaddr: 0000000000000000 cause: 8000000000000001 [ 7140.916643][ C0] [] __sanitizer_cov_trace_const_cmp1+0x0/0x1c [ 7140.918597][ C0] [] nsim_dev_trap_report_work+0x4ba/0xbfa [ 7140.920119][ C0] [] process_one_work+0x956/0x1dae [ 7140.921694][ C0] [] worker_thread+0x5be/0xdc6 [ 7140.923238][ C0] [] kthread+0x28c/0x3a6 [ 7140.925880][ C0] [] ret_from_fork+0xe/0x18 [ 7141.493435][ T36] Kernel panic - not syncing: hung_task: blocked tasks [ 7141.498115][ T36] CPU: 1 UID: 0 PID: 36 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00012-g5f153a692bac #0 [ 7141.499867][ T36] Hardware name: riscv-virtio,qemu (DT) [ 7141.501044][ T36] Call Trace: [ 7141.502034][ T36] [] dump_backtrace+0x2e/0x3c [ 7141.503548][ T36] [] show_stack+0x34/0x40 [ 7141.504996][ T36] [] dump_stack_lvl+0x108/0x196 [ 7141.506578][ T36] [] dump_stack+0x1c/0x24 [ 7141.509409][ T36] [] panic+0x388/0x86c [ 7141.510794][ T36] [] watchdog+0x78a/0x1178 [ 7141.512246][ T36] [] kthread+0x28c/0x3a6 [ 7141.513751][ T36] [] ret_from_fork+0xe/0x18 [ 7141.517009][ T36] SMP: stopping secondary CPUs [ 7141.520589][ T36] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:35:52 Registers: info registers vcpu 0 CPU#0 V = 0 pc ffffffff80430ae2 mhartid 0000000000000000 mstatus 0000000a000001a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 0000000080000428 stvec ffffffff85ffc980 vstvec 0000000000000000 mepc ffffffff8001fb16 sepc ffffffff85ffb7aa vsepc 0000000000000000 mcause 0000000000000009 scause 8000000000000009 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080029000 sscratch 0000000000000000 satp a0d4a0000009cafc x0/zero 0000000000000000 x1/ra ffffffff800104e4 x2/sp ff200000000065f0 x3/gp ffffffff897bea80 x4/tp ff6000001a644ec0 x5/t0 ff6000001a6459e0 x6/t1 ff6000001a645af8 x7/t2 000000000000001b x8/s0 ff20000000006670 x9/s1 ff200000000068e0 x10/a0 0000000000000001 x11/a1 0000000000000000 x12/a2 0000000000f00000 x13/a3 1ffffffff13174d8 x14/a4 0000000000000000 x15/a5 ff6000001a644ec0 x16/a6 0000000000f00000 x17/a7 ffffffff8ccf4ed1 x18/s2 0000000000000000 x19/s3 ffffffffffffffff x20/s4 0000000000000001 x21/s5 0000000000000000 x22/s6 ffffffff85fd9d70 x23/s7 dfffffff00000000 x24/s8 dfffffff00000000 x25/s9 ffffffff85ffc980 x26/s10 0000000000007fff x27/s11 ff20000000006730 x28/t3 1fec0000034c8b3b x29/t4 0000000000000004 x30/t5 879cab75269d482d x31/t6 1fec0000034c8b63 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 CPU#1 V = 0 pc ffffffff80430902 mhartid 0000000000000001 mstatus 0000000a000001a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 0000000080000428 stvec ffffffff85ffc980 vstvec 0000000000000000 mepc ffffffff80430a8e sepc ffffffff80261b70 vsepc 0000000000000000 mcause 8000000000000003 scause 8000000000000001 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080027000 sscratch 0000000000000000 satp a0988000000ad7f4 x0/zero 0000000000000000 x1/ra ffffffff80137522 x2/sp ff20000003777d70 x3/gp ffffffff897bea80 x4/tp ff6000001ba83480 x5/t0 ff6000001ba83fa0 x6/t1 ffebffff02219c00 x7/t2 000000000000002f x8/s0 ff20000003777d70 x9/s1 ff60000018496800 x10/a0 0000000000000007 x11/a1 0000000000000000 x12/a2 0000000000000002 x13/a3 ffffffff8013545c x14/a4 fffffffff3f3f3f3 x15/a5 0000000000003524 x16/a6 0000000000000003 x17/a7 ff6000002ddb6a8f x18/s2 0000000000000001 x19/s3 0000000000000000 x20/s4 0000000000000000 x21/s5 0000000000000001 x22/s6 ffffffff897f7f20 x23/s7 ff6000001ba83f84 x24/s8 0000000000000000 x25/s9 1ffffffff19782f1 x26/s10 000000006cd90852 x27/s11 1fec000002219c0c x28/t3 1fec0000037507f3 x29/t4 fffffffef215fe39 x30/t5 fffffffef215fe3a x31/t6 1fec0000037507fd f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000