last executing test programs: 5m43.850686719s ago: executing program 1 (id=3892): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x103000) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, '\x00', @raw_data=[0xb, 0x337, 0xfffffff5, 0x200, 0x7, 0x800001, 0x4, 0xff, 0xfffffeff, 0x80000001, 0x101, 0xac, 0xb076, 0x4, 0x9, 0x7, 0x3, 0x2, 0x81, 0x4, 0xde, 0x0, 0x9, 0x7e5f, 0x0, 0x903, 0x40, 0x401, 0xc, 0x8, 0x6, 0xfffffe00]}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = io_uring_setup(0x496d, &(0x7f0000000240)={0x0, 0xe510, 0x80, 0x1, 0x2e5}) r7 = syz_io_uring_setup(0xbde, &(0x7f0000000640)={0x0, 0xec35, 0x400, 0x1, 0x40000333, 0x0, r6}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x104, 0xfffffffffffffffd, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x0, 0x1}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) close(r2) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_usb_connect(0x5, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d22a6640da0320283c520000000109022f0001000000000904000000ef040100052406000105240000000d240f010051"], 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r11 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r11, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r11, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r11}) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[], 0x24}], 0x1}, 0x28000080) recvfrom(r0, &(0x7f00000000c0)=""/158, 0x9e, 0x1, 0x0, 0x0) 5m41.095382919s ago: executing program 0 (id=3909): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="a2", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108) 5m40.767737854s ago: executing program 1 (id=3912): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000c7008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000495"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000000), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000002000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5m40.557419097s ago: executing program 1 (id=3914): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000340)={'vlan0\x00', @ifru_ivalue=0x5}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x4002}, 0x14000004) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000440)=[{}, {}, {}], 0x3, &(0x7f0000000480)={0x0, 0x3938700}, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x400) ioctl$SG_IO(r3, 0x2285, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) syz_open_dev$vim2m(0x0, 0x4, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65}], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, '\x00', 0xf08, 0x11, 0xb9e02c7ea3376920, @mcast2, @dev={0xfe, 0x80, '\x00', 0x12}, [@hopopts={0x4fb560df2bad385d, 0x2, '\x00', [@generic={0x7, 0xf, "55b5d747d5ce5853e308cdbcf10ddd"}]}, @dstopts={0x4, 0x1e3, '\x00', [@jumbo, @ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0x40}, @calipso={0x7, 0x10, {0x4, 0x2, 0x4, 0x6c8, [0x0]}}, @generic={0x2, 0xef5, "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"}]}], "d53354e0f167b1d8f8ed2a0790c6f7186919d562ebcbf5ab"}}}}}}, 0xfce) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000001c0), &(0x7f0000000500), 0x2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000280)={0x1, r8, 0x1, 0x1, 0xa, 0x1ff, 0x1}) 5m40.29757219s ago: executing program 0 (id=3916): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@gettaction={0x3c, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'skbedit\x00'}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4040440}, 0x4) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) read(r1, 0x0, 0x58) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x5000, 0x6, 0x3, 0x8, 0x0, [{0x4, 0x3, 0xbc, '\x00', 0x32}, {0x3, 0xa, 0x6, '\x00', 0xfa}, {0x2, 0x0, 0x1}, {0x7c, 0x7, 0x0, '\x00', 0x4}, {0x8, 0x4, 0x81, '\x00', 0x4}, {0xc, 0xb4, 0x4, '\x00', 0x9}, {0x1, 0xb4, 0x1, '\x00', 0x6}, {0x4, 0xe, 0x4, '\x00', 0xfd}, {0x8, 0x0, 0x1, '\x00', 0x4}, {0x81, 0x4, 0x0, '\x00', 0x6}, {0x3, 0x40, 0x0, '\x00', 0x67}, {0x4, 0x8, 0x4, '\x00', 0x6}, {0x3, 0x0, 0x3a, '\x00', 0x7}, {0xd8, 0x3, 0x2, '\x00', 0x6}, {0x7, 0xe, 0x4e}, {0x0, 0x9, 0x8, '\x00', 0x5}, {0x6, 0x5, 0x2, '\x00', 0xc2}, {0x8, 0x1, 0x0, '\x00', 0xff}, {0x2, 0x6, 0x5, '\x00', 0xe1}, {0xc4, 0x7, 0x7, '\x00', 0x7}, {0x36, 0x33, 0x8, '\x00', 0xc}, {0x5, 0x11, 0x5, '\x00', 0xae}, {0xe6, 0x9, 0xb3, '\x00', 0x1}, {0x6, 0x5, 0xb, '\x00', 0xff}]}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0x2}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m37.20634094s ago: executing program 0 (id=3918): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x1}, 0xffffff) 5m34.544671153s ago: executing program 0 (id=3920): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x1902, &(0x7f0000000640)={0x0, 0xec26, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0xa5, &(0x7f0000006900)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x1, 0x8, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5d7, 0x4}, [@processing_unit={0xc, 0x24, 0x7, 0x1, 0x5, 0x2, "10d15ad4a4"}, @processing_unit={0xc, 0x24, 0x7, 0x2, 0x0, 0x60, "00f3da2360"}, @feature_unit={0xd, 0x24, 0x6, 0x6, 0x2, 0x3, [0x6, 0x5, 0xa], 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x4, 0xcb, {0x7, 0x25, 0x1, 0x0, 0x5, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x7, 0x2, 0xcd, 0x40}, @as_header={0x7, 0x24, 0x1, 0xb4, 0x30}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0x2, 0x8, {0x7, 0x25, 0x1, 0x81, 0x6, 0x3}}}}}}}]}}, 0x0) 5m31.81854611s ago: executing program 1 (id=3925): r0 = mq_open(&(0x7f0000000000)='$\x00', 0x40, 0x84, &(0x7f0000000040)={0x6, 0x4, 0x1, 0x40}) clock_gettime(0x0, &(0x7f0000000140)) mq_timedreceive(r0, &(0x7f0000000080)=""/174, 0xae, 0x5, 0x0) 5m30.607835935s ago: executing program 1 (id=3928): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}}) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000004, 0x1, 0x2, '\x00', 0x8}}, 0x2a) r3 = socket(0x2b, 0x80801, 0x1) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r5}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, r5}}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7fff, 0x9, 0x7, 'syz0\x00', {0x719}}}}, {{@ipv6={@private0, @private2, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x9456fff08070a538, 0x70}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x82b, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x8000800000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000570000/0x4000)=nil, 0x4000, 0x9) 5m29.977904415s ago: executing program 3 (id=3930): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x6, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) write$FUSE_IOCTL(r6, &(0x7f0000000000)={0x20, 0x0, r5, {0x7, 0x4, 0x6, 0x8}}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0x0, 0x0, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r6, r4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r3, 0x1, 0x0, 0x0, {0x54}, [{{@nsim={{0xe, 0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x3000000000000, 0x8001}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", 0xffffffffffffffff, 0xffffffffffffffff}) close_range(r2, r9, 0x0) 5m20.934100488s ago: executing program 0 (id=3933): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xf) socket$netlink(0x10, 0x3, 0xf) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000070a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 5m20.446850837s ago: executing program 1 (id=3934): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10b, &(0x7f0000000240)={0x0, 0x334e, 0x8, 0x3, 0x800}, &(0x7f0000000140)=0x0, &(0x7f0000000300)=0x0) r5 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f00000001c0)=0xc796, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x301000, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x16, &(0x7f0000000000)=0x5, 0x4) setsockopt$packet_int(r7, 0x107, 0x16, 0x0, 0x0) r9 = syz_open_procfs(0x0, 0x0) preadv(r9, &(0x7f0000000300)=[{&(0x7f0000000040)=""/3, 0x3}, {0x0, 0x3}], 0x2, 0x0, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r10, 0x5420, 0x0) ioctl$TIOCSSOFTCAR(r10, 0x541a, &(0x7f0000000080)=0x3) ioctl$SNDCTL_TMR_SELECT(0xffffffffffffffff, 0x40045408) io_uring_enter(r2, 0x2db0, 0x0, 0x1, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) 5m19.906180644s ago: executing program 0 (id=3936): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e20, @empty}, 0x269, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4004}) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, 0x0, 0x8040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x280, 0x55a6}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r5, 0x40046103, &(0x7f0000000300)={0x0, 0x6, 0xfffffff9, 0x9, 0x5, 0x1, 0xf7, 0x7f, 0x3, 0x1, 0x5, "f7d9d17d2756a832754d2db7a81004bd6b122e1a46766bc2f771d8be1f6c41e1"}) r6 = syz_open_dev$vim2m(&(0x7f0000000380), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') read$FUSE(r7, &(0x7f0000007100)={0x2020}, 0x941f) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000002500)={{0x12, 0x1, 0x0, 0xeb, 0xe4, 0x45, 0x20, 0x93a, 0x2603, 0x5301, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x96, 0xf3, 0x0, 0xd, 0x80, 0xde}}]}}]}}, 0x0) 5m19.813256562s ago: executing program 3 (id=3937): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000848}, 0x60885) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'sit0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x7, 0x0, 0x8, 0x9, {{0x7, 0x4, 0x2, 0x6, 0x1c, 0x68, 0x0, 0xc, 0x29, 0x0, @multicast1, @broadcast, {[@generic={0x83, 0x6, "ae408ce2"}]}}}}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r6 = creat(&(0x7f0000000340)='.\x00', 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x804) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WDS_PEER(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, r2, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0xa}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="9c10747cb83f"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2727fbe81867"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x8080) connect$unix(r6, &(0x7f0000000600)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r9 = dup(r0) setsockopt$inet6_udp_int(r9, 0x11, 0x1, &(0x7f0000000680)=0x7, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000940)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f0000000700)={0x1f8, 0x14, 0x100, 0x70bd2c, 0x25dfdbfb, {0x6, 0xcb}, [@INET_DIAG_REQ_BYTECODE={0x14, 0x1, "03dea2891e7f332178a85711c47bc83a"}, @INET_DIAG_REQ_BYTECODE={0xa7, 0x1, "bdb29e8555685ff090a533a64e7d0d079bb61152283db93a7a6848906417948924c14cc1595e5b22557f5c6df0c85997e254029778a55a386e524aab341b1051304676c54c5bab897e550fb718ec9c025989ca2b10e6e364172d533fd8cd474b010a3e08ae8bab298d401a7e4d611f2f2a0b4c4cde7a02863924e7d389fd53aa55bd66122ffbc4defedfdd733fb022ee79f692e477346d74ae4b552d1b2ce685c8212e"}, @INET_DIAG_REQ_BYTECODE={0xe5, 0x1, "f8f5f753aa7c51a0e39f14acc4258380368e8881a7ba70de88085eec11d19be6f1127ae08a1c8ff0bfa1123f76b2257f3cd644a5777ccbe9a70b2031bff4457e9e87d03827fd96ec9df023b1cc14ba413db28b361c696827f99cbbdc5b99ffe118679065b514159f980e8956ac1b1be3e53db507620b1abca0eed16097b6c4787b14908cc2a9f1af8f5e92c089be8471eee2b48104074194b6d057f561ffdd9a547f845145d524bddf73ed30ff2f5df722db2b3e2ace97ea04d1119093721c10e5ed4ed615ea23d2e571fd2b50779ac8080fde0ee8032de6fc12446ac154f1dbd9"}, @INET_DIAG_REQ_BYTECODE={0x3e, 0x1, "d88145aa100d851cc89bef51f0f8f015dd735194d1eedbb400faed47e1aec53b24978c2b89bd39eb86081ff0df6b128996cc69454528cdcffbb1"}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050880) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x58, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xb}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x58}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x1) r10 = dup3(r1, r9, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r3) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r10, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x5c, r11, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x4f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4080}, 0x48010) socketpair(0x27, 0x1, 0x10000, &(0x7f0000000c40)={0xffffffffffffffff}) r13 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r10, 0x5) r14 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0xb5) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000d40)={0x44, 0x0, &(0x7f0000000c80)=[@enter_looper, @increfs_done={0x40106308, 0x2}, @free_buffer={0x40086303, r13}, @dead_binder_done, @free_buffer={0x40086303, r14}, @exit_looper, @register_looper], 0x5, 0x0, &(0x7f0000000d00)="0e466999e8"}) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r15, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x28, r11, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008004}, 0x4020) r16 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ec0), r12) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000001000)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x9c, r16, 0x207, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xeb}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x2c}}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1a}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6a}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f0}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40480) 5m18.443802896s ago: executing program 3 (id=3938): r0 = mq_open(&(0x7f0000000000)='$\x00', 0x40, 0x84, &(0x7f0000000040)={0x6, 0x4, 0x1, 0x40}) clock_gettime(0x0, &(0x7f0000000140)) mq_timedreceive(r0, &(0x7f0000000080)=""/174, 0xae, 0x5, 0x0) 5m16.763636561s ago: executing program 3 (id=3941): socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8010) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000040000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a19020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001400000000514000000110001"], 0xe8}}, 0x0) 5m9.242747088s ago: executing program 3 (id=3942): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000dc0), 0x0, 0xc0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) pipe2$watch_queue(&(0x7f00000002c0), 0x80) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000090601020000000000000000020000000900021073797a310000000005000100070000000400078077a67925c8577682a76d6acb2ec406601c8780f4aba6f7be969969591942151408eef5495d7248da64c82216153e08792a92f6ba68fd6213c12b32a1a6774ab061542f104dbba1c2e6d81ef35c97a24e427f131671"], 0x2c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) socket(0xb, 0x2, 0x7) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a0006ff80000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) 5m7.614197323s ago: executing program 3 (id=3944): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = add_key$user(&(0x7f00000003c0), 0x0, &(0x7f0000000340), 0x0, 0xfffffffffffffffd) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) pipe2(&(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) keyctl$invalidate(0x15, r1) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r6 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="fe"]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) request_key(&(0x7f0000000140)='id_resolver\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000380)='/dev/kvm\x00', 0xfffffffffffffffc) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$KVM_GET_CPUID2(r8, 0xc008ae91, &(0x7f0000000000)) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0xbe) 5m5.139367812s ago: executing program 32 (id=3934): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10b, &(0x7f0000000240)={0x0, 0x334e, 0x8, 0x3, 0x800}, &(0x7f0000000140)=0x0, &(0x7f0000000300)=0x0) r5 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f00000001c0)=0xc796, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x301000, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x16, &(0x7f0000000000)=0x5, 0x4) setsockopt$packet_int(r7, 0x107, 0x16, 0x0, 0x0) r9 = syz_open_procfs(0x0, 0x0) preadv(r9, &(0x7f0000000300)=[{&(0x7f0000000040)=""/3, 0x3}, {0x0, 0x3}], 0x2, 0x0, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r10, 0x5420, 0x0) ioctl$TIOCSSOFTCAR(r10, 0x541a, &(0x7f0000000080)=0x3) ioctl$SNDCTL_TMR_SELECT(0xffffffffffffffff, 0x40045408) io_uring_enter(r2, 0x2db0, 0x0, 0x1, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) 5m4.615428192s ago: executing program 33 (id=3936): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e20, @empty}, 0x269, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4004}) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, 0x0, 0x8040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x280, 0x55a6}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r5, 0x40046103, &(0x7f0000000300)={0x0, 0x6, 0xfffffff9, 0x9, 0x5, 0x1, 0xf7, 0x7f, 0x3, 0x1, 0x5, "f7d9d17d2756a832754d2db7a81004bd6b122e1a46766bc2f771d8be1f6c41e1"}) r6 = syz_open_dev$vim2m(&(0x7f0000000380), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') read$FUSE(r7, &(0x7f0000007100)={0x2020}, 0x941f) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000002500)={{0x12, 0x1, 0x0, 0xeb, 0xe4, 0x45, 0x20, 0x93a, 0x2603, 0x5301, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x96, 0xf3, 0x0, 0xd, 0x80, 0xde}}]}}]}}, 0x0) 4m52.209196405s ago: executing program 34 (id=3944): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = add_key$user(&(0x7f00000003c0), 0x0, &(0x7f0000000340), 0x0, 0xfffffffffffffffd) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) pipe2(&(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) keyctl$invalidate(0x15, r1) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r6 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="fe"]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) request_key(&(0x7f0000000140)='id_resolver\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000380)='/dev/kvm\x00', 0xfffffffffffffffc) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$KVM_GET_CPUID2(r8, 0xc008ae91, &(0x7f0000000000)) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0xbe) 30.651142543s ago: executing program 4 (id=4147): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000340)={'vlan0\x00', @ifru_ivalue=0x5}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x4002}, 0x14000004) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000440)=[{}, {}, {}], 0x3, &(0x7f0000000480)={0x0, 0x3938700}, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x400) ioctl$SG_IO(r3, 0x2285, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) syz_open_dev$vim2m(0x0, 0x4, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65}], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, '\x00', 0xf08, 0x11, 0xb9e02c7ea3376920, @mcast2, @dev={0xfe, 0x80, '\x00', 0x12}, [@hopopts={0x4fb560df2bad385d, 0x2, '\x00', [@generic={0x7, 0xf, "55b5d747d5ce5853e308cdbcf10ddd"}]}, @dstopts={0x4, 0x1e3, '\x00', [@jumbo, @ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0x40}, @calipso={0x7, 0x10, {0x4, 0x2, 0x4, 0x6c8, [0x0]}}, @generic={0x2, 0xef5, "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"}]}], "d53354e0f167b1d8f8ed2a0790c6f7186919d562ebcbf5ab"}}}}}}, 0xfce) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000001c0), &(0x7f0000000500), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000280)={0x1, r8, 0x1, 0x1, 0xa, 0x1ff, 0x1}) 30.101527692s ago: executing program 2 (id=4148): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x32, 0xf7, 0x3, 0x80, 0x7, 0xc3, 0xc, 0x66, 0x4, [0x20040, 0x9, 0x10, 0x40, 0x44b4eba3, 0x8, 0xfffffeff, 0x2174]}}) r1 = socket$kcm(0x21, 0x2, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x100000008, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r7, 0x5414, &(0x7f0000000040)={0x9, 0x0, 0x9, 0x5}) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) pread64(r4, 0x0, 0x0, 0x9) dup(0xffffffffffffffff) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000d00000051d83348"], 0x10b8}, 0x0) 28.862366476s ago: executing program 2 (id=4149): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69000000001406fffe800080000000000000000000000039fe8000000000000000000000000000aa4e204e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96550100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 28.756148603s ago: executing program 2 (id=4150): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_open_dev$sndpcmp(0x0, 0x0, 0x40000) ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0xc0844123, 0x0) r2 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000700", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 28.640846732s ago: executing program 2 (id=4151): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0xf) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f000000a8c0)={0x0, 0x0, &(0x7f000000a880)={&(0x7f000000a7c0)=ANY=[@ANYBLOB="20ec0000", @ANYRES16=r6, @ANYBLOB="010229bd7000fedbdf25060000000c00018008000100", @ANYRES32=r8, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x24048091}, 0x80) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 28.018206478s ago: executing program 4 (id=4152): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x238d, 0x0, 0x8, 0x0, 0x0) socket(0x2, 0x805, 0x0) syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x3eac, 0x400, 0x2, 0x105}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2200, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000efffff", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 25.895572032s ago: executing program 4 (id=4153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a20020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a300000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 25.851507358s ago: executing program 2 (id=4154): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x9) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) pipe2(&(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) keyctl$invalidate(0x15, r1) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x8000000}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@broadcast, 0x0, 0x6c}, 0xa, @in6=@private0, 0x3505, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0xb}, 0x1c) r6 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="fe"]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$KVM_GET_CPUID2(r8, 0xc008ae91, &(0x7f0000000000)) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000f01f00e6000000f2ffffff00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0xbe) 25.758220492s ago: executing program 4 (id=4155): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000004, 0x1, 0x2, '\x00', 0x8}}, 0x2a) r1 = socket(0x2b, 0x80801, 0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r3}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, r3}}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7fff, 0x9, 0x7, 'syz0\x00', {0x719}}}}, {{@ipv6={@private0, @private2, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x9456fff08070a538, 0x70}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x82b, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x8000800000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000140)="0000000000000004ff6943b80000000800000014f200000000861f4104bfeacd", 0x20, 0xfffffffffffffffb) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000570000/0x4000)=nil, 0x4000, 0x9) 23.375258283s ago: executing program 4 (id=4156): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x6f, 0x48014) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000ff000003bfa30000000000000703000000feffff620af0fff8ffffff71a4f0ff0000000015040200000000001d400200000000004704000001ed000062030000000000001d440000000000007a0a00fe00ffffffdb03000040000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa5b4e377184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7592566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6cb5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendto$inet6(r4, &(0x7f0000000340)="d4d7efad020efa27e4b5b271825ef53d030f992ff58468566c6fc090ac508f876b89a6004f4d6aa59f13c8afda4bfc2137c8a1d584595b77c2a5f6a72a6d627f3408143aae7315bb608e1557b707b38c30f447a288036c", 0x57, 0x10, 0x0, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r5, 0x2285, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r6, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x1]}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c20053"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r6, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {0x0, 0x4}, {}, @time=@time}], 0xc4) write$sndseq(r6, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r6, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) 20.577530515s ago: executing program 2 (id=4157): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x690, 0x1000, 0xbb3a, 0x2, 0x4, 0x100, {0x0, 0x40002000}, {0x5, 0x2, 0x1}, {0x4000000, 0x7}, {0x0, 0x8, 0x40000}, 0x0, 0x100, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ffffcff, 0x0, 0x0, 0x2}) 20.534743171s ago: executing program 4 (id=4158): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', './file0', [{0x20, 'blkio.throttle.io_service_bytes_recursive\x00'}, {0x20, '.'}], 0xa, "dd3a23deea6b780221d4dee20546de2f7e3d13b977dce49209270f2bef86050960afa052a5f9484cd3cfa2836acaab8855b071a24dfd0b6fd1f0c905350c872d64fd9b6993820397d37336c74a2689c5c5b5cbfc506e82d168278762abc8b0c341cfb9a56e"}, 0x9d) sendfile(r0, r1, 0x0, 0x8000002b) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="89ab3ac0ad1ad8d42c8a7db6b6ae98fbe0ac161bfc0328a8daa46a9c0c880fa83f189afa21c2e286651fb286f61ea12bcbb0edb7dfe9e28eb3e622e0e0ff39bc7d881f565700aa0de71d9785beac20d13e62a0ab8e17ab147650bd48b95fb808fb24ccf3be6a7d9ccf5b0241ab1efa34ac9c83aa1497632e6928eded09516ab6d2c852b2ac16dc607d6a2992988821c3205bb22f15e4b96177376eed35b0273e71a74de68ad4946d827c3c4cca84d39ed6c61a3c84479f7c14bde4d63d4479477cd9f6befbc0d949ea9938f86ee4228e529faede20bbced4a5bf8d5d2e0376739ea1777e1a0b9fc4e4f96b99e51d134763b4d205", 0xf4) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x5, 0x4) socket$kcm(0x10, 0x2, 0x0) 0s ago: executing program 35 (id=4157): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x690, 0x1000, 0xbb3a, 0x2, 0x4, 0x100, {0x0, 0x40002000}, {0x5, 0x2, 0x1}, {0x4000000, 0x7}, {0x0, 0x8, 0x40000}, 0x0, 0x100, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ffffcff, 0x0, 0x0, 0x2}) kernel console output (not intermixed with test programs): 967295 subj=unconfined pid=20009 comm="syz.1.3830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bad98eec9 code=0x7ffc0000 [ 920.079129][ T30] audit: type=1326 audit(1760100777.289:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20009 comm="syz.1.3830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f5bad98eec9 code=0x7ffc0000 [ 920.135140][T19999] syz.3.3826: vmalloc error: size 31752192, failed to allocated page array size 62016, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 920.181598][T19999] CPU: 0 UID: 0 PID: 19999 Comm: syz.3.3826 Not tainted syzkaller #0 PREEMPT(full) [ 920.181623][T19999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 920.181637][T19999] Call Trace: [ 920.181645][T19999] [ 920.181654][T19999] dump_stack_lvl+0x189/0x250 [ 920.181682][T19999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 920.181704][T19999] ? __pfx__printk+0x10/0x10 [ 920.181726][T19999] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 920.181754][T19999] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 920.181785][T19999] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 920.181814][T19999] warn_alloc+0x214/0x310 [ 920.181851][T19999] ? __pfx_warn_alloc+0x10/0x10 [ 920.181891][T19999] ? __get_vm_area_node+0x28f/0x300 [ 920.181919][T19999] ? vb2_vmalloc_alloc+0xef/0x340 [ 920.181950][T19999] __vmalloc_node_range_noprof+0x690/0x12d0 [ 920.182007][T19999] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 920.182039][T19999] ? __kasan_kmalloc+0x93/0xb0 [ 920.182075][T19999] vmalloc_user_noprof+0xad/0xf0 [ 920.182105][T19999] ? vb2_vmalloc_alloc+0xef/0x340 [ 920.182133][T19999] vb2_vmalloc_alloc+0xef/0x340 [ 920.182159][T19999] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 920.182187][T19999] __vb2_queue_alloc+0x9bf/0x15a0 [ 920.182238][T19999] vb2_core_reqbufs+0xc31/0x1420 [ 920.182283][T19999] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 920.182313][T19999] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 920.182341][T19999] ? trace_contention_end+0x39/0x120 [ 920.182374][T19999] __vb2_init_fileio+0x318/0xff0 [ 920.182408][T19999] ? vb2_fop_read+0x101/0x360 [ 920.182437][T19999] ? __pfx___mutex_lock+0x10/0x10 [ 920.182468][T19999] __vb2_perform_fileio+0x284/0x1600 [ 920.182513][T19999] vb2_fop_read+0x273/0x360 [ 920.182545][T19999] v4l2_read+0x199/0x2c0 [ 920.182583][T19999] vfs_readv+0x5aa/0x850 [ 920.182602][T19999] ? __pfx_v4l2_read+0x10/0x10 [ 920.182626][T19999] ? __pfx_vfs_readv+0x10/0x10 [ 920.182659][T19999] ? __fget_files+0x2a/0x420 [ 920.182682][T19999] ? __fget_files+0x3a0/0x420 [ 920.182699][T19999] ? __fget_files+0x2a/0x420 [ 920.182725][T19999] do_readv+0x14d/0x2d0 [ 920.182746][T19999] ? __pfx_do_readv+0x10/0x10 [ 920.182769][T19999] ? do_syscall_64+0xbe/0xfa0 [ 920.182798][T19999] do_syscall_64+0xfa/0xfa0 [ 920.182821][T19999] ? lockdep_hardirqs_on+0x9c/0x150 [ 920.182844][T19999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.182863][T19999] ? clear_bhb_loop+0x60/0xb0 [ 920.182888][T19999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.182907][T19999] RIP: 0033:0x7f980bf8eec9 [ 920.182924][T19999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 920.182943][T19999] RSP: 002b:00007f980ce7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 920.182964][T19999] RAX: ffffffffffffffda RBX: 00007f980c1e5fa0 RCX: 00007f980bf8eec9 [ 920.182979][T19999] RDX: 0000000000000001 RSI: 00002000000006c0 RDI: 0000000000000004 [ 920.182992][T19999] RBP: 00007f980c011f91 R08: 0000000000000000 R09: 0000000000000000 [ 920.183005][T19999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 920.183017][T19999] R13: 00007f980c1e6038 R14: 00007f980c1e5fa0 R15: 00007f980c30fa28 [ 920.183052][T19999] [ 920.183062][T19999] Mem-Info: [ 920.190134][ T30] audit: type=1326 audit(1760100777.289:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20009 comm="syz.1.3830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bad98eec9 code=0x7ffc0000 [ 920.204579][T19999] active_anon:5878 inactive_anon:4 isolated_anon:0 [ 920.204579][T19999] active_file:19200 inactive_file:40292 isolated_file:0 [ 920.204579][T19999] unevictable:755 dirty:100 writeback:0 [ 920.204579][T19999] slab_reclaimable:11435 slab_unreclaimable:118253 [ 920.204579][T19999] mapped:31494 shmem:1355 pagetables:1283 [ 920.204579][T19999] sec_pagetables:0 bounce:0 [ 920.204579][T19999] kernel_misc_reclaimable:0 [ 920.204579][T19999] free:1263968 free_pcp:19663 free_cma:0 [ 920.363597][ T30] audit: type=1326 audit(1760100777.289:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20009 comm="syz.1.3830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bad98eec9 code=0x7ffc0000 [ 920.369104][ T9665] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 920.410644][T19999] Node 0 active_anon:23512kB inactive_anon:16kB active_file:76600kB inactive_file:160964kB unevictable:1484kB isolated(anon):0kB isolated(file):0kB mapped:125836kB dirty:400kB writeback:0kB shmem:3884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13008kB pagetables:4980kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 920.648927][T20014] pim6reg: entered allmulticast mode [ 920.659772][ T30] audit: type=1326 audit(1760100777.289:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20009 comm="syz.1.3830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f5bad98eec9 code=0x7ffc0000 [ 920.774730][T19999] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:152kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 920.776204][ T30] audit: type=1326 audit(1760100777.289:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20009 comm="syz.1.3830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bad98eec9 code=0x7ffc0000 [ 920.828099][ T30] audit: type=1326 audit(1760100777.289:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20009 comm="syz.1.3830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bad98eec9 code=0x7ffc0000 [ 920.850701][ T30] audit: type=1326 audit(1760100777.289:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20009 comm="syz.1.3830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f5bad98eec9 code=0x7ffc0000 [ 920.881007][ T30] audit: type=1326 audit(1760100777.289:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20009 comm="syz.1.3830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bad98eec9 code=0x7ffc0000 [ 920.919639][T19999] Node 0 [ 920.924187][ T9665] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 920.943871][T19999] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 920.951394][ T9665] usb 1-1: config 0 has no interface number 0 [ 921.005495][ T9665] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 921.017528][ T9665] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 921.022737][T19999] lowmem_reserve[]: [ 921.031239][ T9665] usb 1-1: config 0 interface 255 has no altsetting 0 [ 921.031284][ T9665] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 921.031310][ T9665] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.040371][ T9665] usb 1-1: config 0 descriptor?? [ 921.060994][T19999] 0 2501 2503 2503 2503 [ 921.069445][T19999] Node 0 DMA32 free:1152988kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23532kB inactive_anon:16kB active_file:76600kB inactive_file:160964kB unevictable:1536kB writepending:496kB zspages:0kB present:3129332kB managed:2561668kB mlocked:0kB bounce:0kB free_pcp:50880kB local_pcp:19200kB free_cma:0kB [ 921.106965][T19999] lowmem_reserve[]: 0 0 1 1 1 [ 921.112526][T19999] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 921.114409][ T9665] ums-realtek 1-1:0.255: USB Mass Storage device detected [ 921.147261][T19999] lowmem_reserve[]: 0 0 0 0 0 [ 921.157756][T19999] Node 1 Normal free:3887308kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:27216kB local_pcp:15340kB free_cma:0kB [ 921.261202][T20030] PKCS7: Unknown OID: [5] (bad) [ 921.266076][T20030] PKCS7: Only support pkcs7_signedData type [ 921.419087][T19999] lowmem_reserve[]: 0 0 0 0 0 [ 921.452000][T19999] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 921.480560][T19999] Node 0 DMA32: 1465*4kB (ME) 574*8kB (ME) 306*16kB (UM) 601*32kB (ME) 337*64kB (ME) 295*128kB (ME) 173*256kB (M) 71*512kB (ME) 38*1024kB (ME) 2*2048kB (UE) 228*4096kB (UM) = 1151444kB [ 921.545517][T19999] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 921.564171][ T9665] usb 1-1: USB disconnect, device number 107 [ 921.570278][T19999] Node 1 Normal: 223*4kB (UME) 48*8kB (UME) 51*16kB (UME) 189*32kB (UME) 76*64kB (UME) 16*128kB (UME) 8*256kB (UM) 5*512kB (UM) 3*1024kB (ME) 3*2048kB (UME) 942*4096kB (UM) = 3887308kB [ 921.608107][T19999] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 921.619204][T19999] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 921.630015][T19999] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 921.649413][T19999] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 921.662069][T19999] 60848 total pagecache pages [ 921.667982][T19999] 4 pages in swap cache [ 921.673950][T19999] Free swap = 124980kB [ 921.678253][T19999] Total swap = 124996kB [ 921.684513][T19999] 2097051 pages RAM [ 921.688637][T19999] 0 pages HighMem/MovableOnly [ 921.694858][T19999] 424544 pages reserved [ 921.701416][T19999] 0 pages cma reserved [ 922.409188][T20045] kAFS: unable to lookup cell '' [ 922.669845][ T9652] usb 1-1: new full-speed USB device number 108 using dummy_hcd [ 922.830612][ T9652] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 922.859812][ T9652] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 23453, setting to 64 [ 922.934421][ T9652] usb 1-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 922.943832][ T9652] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.956164][ T9652] usb 1-1: Product: syz [ 923.056263][ T9652] usb 1-1: Manufacturer: syz [ 923.063160][ T9652] usb 1-1: SerialNumber: syz [ 923.106901][ T9652] usb 1-1: config 0 descriptor?? [ 923.124267][T20045] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 923.728089][T20045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 923.751218][T20045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 923.809509][T20045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 923.859109][T20045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 923.944745][T20060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.040669][T20060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.210857][ T9652] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 924.253797][ T9652] input: Griffin PowerMate as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input53 [ 924.345693][ C0] powermate: config urb returned -71 [ 924.351509][ C0] powermate: config urb returned -71 [ 924.357011][ C0] powermate: config urb returned -71 [ 924.362670][ C0] powermate: config urb returned -71 [ 924.410036][ T9652] usb 1-1: USB disconnect, device number 108 [ 924.416134][ C0] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 924.594390][T20066] vlan2: entered promiscuous mode [ 924.863585][T20083] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3851'. [ 924.880330][T20083] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3851'. [ 925.116606][T20087] fuse: Unknown parameter '00000000000000000000007 [ 925.116606][T20087] ' [ 925.130505][ T5919] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 925.396509][ T5919] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 925.406480][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.428441][ T5919] usb 3-1: Product: syz [ 925.433270][ T5919] usb 3-1: Manufacturer: syz [ 925.437851][ T5919] usb 3-1: SerialNumber: syz [ 925.722650][ T5969] usb 5-1: new full-speed USB device number 113 using dummy_hcd [ 926.198880][ T5969] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 926.781951][ T5969] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 926.806817][ T5969] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 926.988245][ T5969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.235802][ T5969] usb 5-1: GET_CAPABILITIES returned 0 [ 927.385526][ T5969] usbtmc 5-1:16.0: can't read capabilities [ 927.446579][ T5969] usb 5-1: USB disconnect, device number 113 [ 928.183142][ T5919] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 928.240655][ T5919] usb 3-1: 2:1 : sample bitwidth 205 in over sample bytes 2 [ 928.248005][ T5919] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 928.318363][T20123] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3861'. [ 928.361438][T20125] binder: 20124:20125 ioctl 4020ae46 7f17b8406be0 returned -22 [ 928.369140][T20125] binder: 20124:20125 ioctl 4020ae46 7f17b8406be0 returned -22 [ 928.418624][ T5919] usb 3-1: USB disconnect, device number 104 [ 928.448935][T20125] binder: 20124:20125 ioctl 4020ae46 7f17b8406be0 returned -22 [ 928.482389][T20125] binder: 20124:20125 ioctl 4020ae46 7f17b8406be0 returned -22 [ 928.490958][T20125] binder: 20124:20125 ioctl 4020ae46 7f17b8406be0 returned -22 [ 928.500257][T20125] binder: 20124:20125 ioctl 4020ae46 7f17b8406be0 returned -22 [ 928.508675][T20125] binder: 20124:20125 ioctl 4020ae46 7f17b8406be0 returned -22 [ 928.571623][T20125] binder: 20124:20125 ioctl 4020ae46 7f17b8406be0 returned -22 [ 928.605859][T20131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3863'. [ 928.617201][T18625] udevd[18625]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 928.636677][T20125] binder: 20124:20125 ioctl 4020ae46 7f17b8406be0 returned -22 [ 928.719843][T20125] binder: 20124:20125 ioctl 4020ae46 7f17b8406be0 returned -22 [ 928.894793][T20125] binder: 20124:20125 ioctl 4020ae46 7f17b8406be0 returned -22 [ 928.932786][T20125] binder: 20124:20125 ioctl 4020ae46 7f17b8406be0 returned -22 [ 928.962706][T20125] binder: 20124:20125 ioctl 4020ae46 7f17b8406be0 returned -22 [ 929.011667][T20125] binder: 20124:20125 ioctl 4020ae46 7f17b8406be0 returned -22 [ 929.023593][T20125] binder: 20124:20125 ioctl 4020ae46 7f17b8406be0 returned -22 [ 929.065366][T20125] binder: 20124:20125 ioctl 4020ae46 7f17b8406be0 returned -22 [ 929.116440][T20125] binder: 20124:20125 ioctl 4020ae46 7f17b8406be0 returned -22 [ 929.528643][T20139] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 929.528981][T20140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3865'. [ 929.535292][T20139] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 929.554555][T20139] vhci_hcd vhci_hcd.0: Device attached [ 929.809936][ T9652] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 930.121596][T20151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3866'. [ 930.395364][T20156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 930.423866][T20156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 930.869948][T20141] vhci_hcd: connection reset by peer [ 930.910037][T16515] vhci_hcd: stop threads [ 930.915728][T16515] vhci_hcd: release socket [ 930.945539][T16515] vhci_hcd: disconnect device [ 931.381164][T20164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.440544][T20164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.663369][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.669932][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.881914][T20166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3871'. [ 932.261115][T20179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 932.280196][T20179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.301803][T20180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3875'. [ 934.247256][T20202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3880'. [ 935.299871][ T9652] vhci_hcd: vhci_device speed not set [ 936.820635][ T5969] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 936.853774][T20228] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3887'. [ 936.896947][T20225] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 936.902841][T20228] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3887'. [ 936.991835][ T5969] usb 1-1: Using ep0 maxpacket: 32 [ 937.002771][ T5969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 937.018750][ T5969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 937.054716][ T5969] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 937.090437][ T5969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.141335][ T5969] usb 1-1: config 0 descriptor?? [ 937.640118][ T5969] ft260 0003:0403:6030.002F: unknown main item tag 0x7 [ 937.734970][T20244] tipc: Enabling of bearer rejected, already enabled [ 937.837567][ T5969] ft260 0003:0403:6030.002F: chip code: 6424 8183 [ 937.933415][ T5978] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 938.035207][ T5969] ft260 0003:0403:6030.002F: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 938.071443][T13140] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 938.089792][ T5978] usb 3-1: Using ep0 maxpacket: 8 [ 938.101697][ T5978] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 938.116481][ T5978] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 938.126747][ T5978] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 938.137049][ T5978] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 938.150540][ T5978] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 938.159615][ T5978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.247471][ T5969] ft260 0003:0403:6030.002F: failed to retrieve status: -32, no wakeup [ 938.268327][T13140] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 938.287613][T13140] usb 2-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 938.320444][T13140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.333160][T13140] usb 2-1: config 0 descriptor?? [ 938.342265][T13140] usb 2-1: bad CDC descriptors [ 938.463862][ T5978] usb 3-1: GET_CAPABILITIES returned 0 [ 938.473848][ T5978] usbtmc 3-1:16.0: can't read capabilities [ 938.533810][ T5969] ft260 0003:0403:6030.002F: failed to reset I2C controller: -71 [ 938.584582][ T5969] usb 1-1: USB disconnect, device number 109 [ 938.668374][T20242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.681576][T20242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 938.705069][ T5919] usb 3-1: USB disconnect, device number 105 [ 938.848302][T20261] sock: sock_timestamping_bind_phc: sock not bind to device [ 939.342045][T20264] ip6gretap0: entered promiscuous mode [ 939.557023][T20264] ip6gretap0: left promiscuous mode [ 939.931138][T20277] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3903'. [ 939.940887][T20277] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3903'. [ 940.283945][T20284] vlan2: entered promiscuous mode [ 940.599809][ T5978] usb 2-1: USB disconnect, device number 116 [ 941.202491][T20303] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3913'. [ 941.458164][T20303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3913'. [ 941.541679][T20310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3916'. [ 941.731792][T20310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3916'. [ 942.052530][T20310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3916'. [ 942.350594][T20310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3916'. [ 942.395014][T20298] IPv6: NLM_F_CREATE should be specified when creating new route [ 947.970614][T13140] usb 1-1: new full-speed USB device number 110 using dummy_hcd [ 949.617900][T13140] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 949.695377][T13140] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.846871][T13140] usb 1-1: Product: syz [ 949.858401][T13140] usb 1-1: Manufacturer: syz [ 950.611796][T13140] usb 1-1: SerialNumber: syz [ 955.840899][T13140] usb 1-1: can't set config #1, error -110 [ 960.120571][T13140] usb 1-1: USB disconnect, device number 110 [ 961.704038][T20384] support for cryptoloop has been removed. Use dm-crypt instead. [ 962.017261][T20386] sock: sock_timestamping_bind_phc: sock not bind to device [ 962.233109][T20384] PKCS7: Unknown OID: [5] (bad) [ 962.238001][T20384] PKCS7: Only support pkcs7_signedData type [ 965.105511][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 965.376188][T16246] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 965.512159][T20405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3940'. [ 965.762430][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 965.900544][T16246] usb 1-1: device descriptor read/64, error -71 [ 966.836096][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 966.980498][T16246] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 967.028209][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 967.037992][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 967.048174][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 967.561942][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 968.974484][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 969.354004][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 970.843880][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 971.447498][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 971.558989][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 971.682812][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 971.987408][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 972.204234][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 972.260393][T16246] usb 1-1: device descriptor read/64, error -110 [ 972.386663][T16246] usb usb1-port1: attempt power cycle [ 972.411834][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 973.173176][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 973.264786][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 973.493517][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 973.501839][T16246] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 973.571909][T16246] usb 1-1: device descriptor read/8, error -32 [ 974.320263][T16246] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 974.720147][T16246] usb 1-1: device descriptor read/8, error -32 [ 974.933414][T16246] usb usb1-port1: unable to enumerate USB device [ 976.051016][T20386] tty_init_dev: 34 callbacks suppressed [ 976.051037][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 976.517315][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 976.963768][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 978.713626][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 978.775929][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 979.674917][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 979.880601][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 980.047397][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 980.196456][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 980.553103][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 981.065395][T20386] tty_init_dev: 9 callbacks suppressed [ 981.065407][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 981.352257][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 981.408882][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 983.601989][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 983.799359][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 983.924780][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 983.938515][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 983.951880][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 983.991483][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 984.033715][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 984.072024][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 984.128976][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 984.347871][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 985.869069][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 986.379850][ T5838] Bluetooth: hci1: command tx timeout [ 986.469480][ T5838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 986.481597][ T5838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 986.489762][ T5838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 986.501635][ T5838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 986.511114][ T5838] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 986.904397][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 987.376615][ T5978] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 987.666450][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 987.737893][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 987.838054][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 987.915903][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 988.064248][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 988.113230][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 988.275082][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 988.323046][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 988.427260][T20386] ptm ptm117: ldisc open failed (-12), clearing slot 117 [ 988.450322][ T5838] Bluetooth: hci1: command tx timeout [ 988.599705][ T5969] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 988.610556][ T5838] Bluetooth: hci6: command tx timeout [ 989.102519][ T5969] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 989.143543][ T5969] usb 5-1: config 0 has no interface number 0 [ 989.344847][ T5969] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 989.403947][ T5969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.467734][ T5969] usb 5-1: Product: syz [ 989.507779][ T5969] usb 5-1: Manufacturer: syz [ 989.543816][ T5969] usb 5-1: SerialNumber: syz [ 989.608476][ T5969] usb 5-1: config 0 descriptor?? [ 990.094092][T20461] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 990.363063][T20458] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3950'. [ 990.597906][T20448] chnl_net:caif_netlink_parms(): no params data found [ 990.762858][ T5838] Bluetooth: hci1: command tx timeout [ 990.771362][ T5838] Bluetooth: hci6: command tx timeout [ 991.665183][T20458] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3950'. [ 992.861218][ T5838] Bluetooth: hci6: command tx timeout [ 992.867036][ T5838] Bluetooth: hci1: command tx timeout [ 993.170436][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.177159][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.918557][ T5969] uvcvideo 5-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 993.997595][ T5969] uvcvideo 5-1:0.64: No valid video chain found. [ 994.120705][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 994.134378][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 994.168233][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 994.176473][ T5969] usb 5-1: USB disconnect, device number 114 [ 994.275080][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 994.283487][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 994.686975][T16520] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.266901][ T5834] Bluetooth: hci6: command tx timeout [ 995.308875][T20453] chnl_net:caif_netlink_parms(): no params data found [ 996.371211][ T5834] Bluetooth: hci4: command tx timeout [ 996.638644][T16520] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.720271][ T5969] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 996.808253][T18448] raw-gadget.0 gadget.3: failed to queue disconnect event [ 996.970344][ T5969] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 997.021381][ T5969] usb 3-1: config 0 has no interface number 0 [ 997.048833][ T5969] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 997.090207][ T5969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.118732][ T5969] usb 3-1: Product: syz [ 997.130294][ T5969] usb 3-1: Manufacturer: syz [ 997.134971][ T5969] usb 3-1: SerialNumber: syz [ 997.201609][ T5969] usb 3-1: config 0 descriptor?? [ 997.545125][ T5969] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 997.860653][ T5969] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 997.891927][T20484] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3955'. [ 997.960873][ T5969] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 997.997669][ T5969] usb 3-1: media controller created [ 998.078151][T16520] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.114687][ T5969] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 998.161976][T20448] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.169316][T20448] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.189238][ T5969] i2c i2c-3: ec100: i2c rd failed=-71 reg=33 [ 998.197643][T20448] bridge_slave_0: entered allmulticast mode [ 998.211586][T20448] bridge_slave_0: entered promiscuous mode [ 998.782307][ T5834] Bluetooth: hci4: command tx timeout [ 999.374170][T20448] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.399914][T20448] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.180555][ T5969] usb 3-1: USB disconnect, device number 107 [ 1000.216757][T20448] bridge_slave_1: entered allmulticast mode [ 1000.502738][T20448] bridge_slave_1: entered promiscuous mode [ 1000.652917][T16520] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.850318][ T5834] Bluetooth: hci4: command tx timeout [ 1002.050449][T20453] bridge0: port 1(bridge_slave_0) entered blocking state [ 1002.057605][T20453] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.482183][T20453] bridge_slave_0: entered allmulticast mode [ 1002.523567][T20453] bridge_slave_0: entered promiscuous mode [ 1002.693526][T20453] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.768515][T20453] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.817504][T20453] bridge_slave_1: entered allmulticast mode [ 1002.849530][T20453] bridge_slave_1: entered promiscuous mode [ 1002.930614][ T5834] Bluetooth: hci4: command tx timeout [ 1003.352915][T20448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1003.474955][T20448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1003.632189][T20453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1005.496090][T20453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1005.635550][T20448] team0: Port device team_slave_0 added [ 1005.658594][T20448] team0: Port device team_slave_1 added [ 1005.806302][T16520] bridge_slave_1: left allmulticast mode [ 1005.817449][T16520] bridge_slave_1: left promiscuous mode [ 1005.830830][T16520] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.908623][T16520] bridge_slave_0: left allmulticast mode [ 1005.925436][T16520] bridge_slave_0: left promiscuous mode [ 1005.940435][T16520] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.362539][T20518] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3961'. [ 1006.375056][T20518] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3961'. [ 1007.187588][T16520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1007.197878][T16520] bond_slave_0: left promiscuous mode [ 1007.289400][T16520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1007.316610][T16520] bond_slave_1: left promiscuous mode [ 1007.325453][T16520] bond0 (unregistering): Released all slaves [ 1007.498445][T16520] tipc: Disabling bearer [ 1007.531639][T16520] tipc: Left network mode [ 1007.585476][T20448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1007.593211][T20448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1007.624426][T20448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1007.649296][T20448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1007.658213][T20448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1007.685563][T20448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1007.953966][T20453] team0: Port device team_slave_0 added [ 1007.983776][T20453] team0: Port device team_slave_1 added [ 1009.648133][T20448] hsr_slave_0: entered promiscuous mode [ 1009.699212][T20448] hsr_slave_1: entered promiscuous mode [ 1010.070794][T20540] vlan2: entered promiscuous mode [ 1010.332834][T20453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1010.354183][T20453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.386178][T16246] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1010.435879][T20453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1010.580242][T16246] usb 3-1: Using ep0 maxpacket: 32 [ 1010.598268][T16246] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1010.608790][T16246] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1010.686392][T16246] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.947062][T16246] usb 3-1: config 0 descriptor?? [ 1011.045792][T20453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1011.094752][T20453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1011.252101][T20453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1011.270629][T20474] chnl_net:caif_netlink_parms(): no params data found [ 1011.563523][T16520] hsr_slave_0: left promiscuous mode [ 1012.607078][T16520] hsr_slave_1: left promiscuous mode [ 1012.918790][T16520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1019.514025][T16520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1019.544862][T16246] usbhid 3-1:0.0: can't add hid device: -71 [ 1019.560323][T16246] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1020.038178][T16246] usb 3-1: USB disconnect, device number 108 [ 1020.093772][T16520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1020.131875][T16520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1020.268395][T16520] veth1_macvtap: left promiscuous mode [ 1020.285939][T16520] veth0_macvtap: left promiscuous mode [ 1020.301349][T16520] veth1_vlan: left promiscuous mode [ 1020.306711][T16520] veth0_vlan: left promiscuous mode [ 1020.314545][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 1020.314562][ T30] audit: type=1326 audit(1760100877.709:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20565 comm="syz.4.3967" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5397d8eec9 code=0x0 [ 1021.428240][T16520] team0 (unregistering): Port device team_slave_1 removed [ 1021.552328][T16520] team0 (unregistering): Port device team_slave_0 removed [ 1022.643806][T20558] 0{X功: left allmulticast mode [ 1022.839133][T20558] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1024.366040][T20453] hsr_slave_0: entered promiscuous mode [ 1024.373529][T20453] hsr_slave_1: entered promiscuous mode [ 1024.382134][T20453] debugfs: 'hsr0' already exists in 'hsr' [ 1024.387902][T20453] Cannot create hsr debugfs directory [ 1024.856781][T20474] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.887028][T20474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.917655][T20474] bridge_slave_0: entered allmulticast mode [ 1024.935202][T20474] bridge_slave_0: entered promiscuous mode [ 1024.973619][T20474] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.001386][T20474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.008735][T20474] bridge_slave_1: entered allmulticast mode [ 1025.066087][T20474] bridge_slave_1: entered promiscuous mode [ 1025.377846][T20474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1025.426866][T20474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1025.788498][T20582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3969'. [ 1025.798625][T20582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3969'. [ 1025.840378][T20474] team0: Port device team_slave_0 added [ 1025.923874][T20474] team0: Port device team_slave_1 added [ 1026.206142][T20474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1026.229048][T20474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1026.355866][T20474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1026.371920][T20600] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3970'. [ 1026.403538][T20600] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3970'. [ 1026.461261][T20474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1026.492908][T20474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1026.546849][T20474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1026.613788][T20448] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1026.653925][T20448] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1027.006318][T20448] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1027.233144][T20448] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1027.400216][T20474] hsr_slave_0: entered promiscuous mode [ 1027.407012][T20474] hsr_slave_1: entered promiscuous mode [ 1027.451948][T20474] debugfs: 'hsr0' already exists in 'hsr' [ 1027.457723][T20474] Cannot create hsr debugfs directory [ 1030.292145][T20453] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1030.352332][T20453] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1030.996984][T20453] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1031.107933][T20453] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1031.957812][T20474] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1032.032328][T20448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1032.550967][T20474] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1032.605859][T20474] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1033.139521][T20474] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1033.504771][T20648] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3978'. [ 1033.600937][T20648] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3978'. [ 1033.615343][T16520] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.806334][T20448] 8021q: adding VLAN 0 to HW filter on device team0 [ 1034.632886][T16523] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.640088][T16523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1035.239326][T16520] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.461972][T16508] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.469185][T16508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1035.784547][ T5893] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1035.811594][T16520] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.286848][ T5893] usb 5-1: no configurations [ 1036.391959][ T5893] usb 5-1: can't read configurations, error -22 [ 1036.445021][T20453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1036.608585][T16520] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.627042][ T5893] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1036.945700][T20453] 8021q: adding VLAN 0 to HW filter on device team0 [ 1036.959894][ T5893] usb 5-1: no configurations [ 1036.964530][ T5893] usb 5-1: can't read configurations, error -22 [ 1037.028065][ T5893] usb usb5-port1: attempt power cycle [ 1037.611932][ T5893] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1038.183666][ T5893] usb 5-1: device descriptor read/8, error -71 [ 1040.377417][T16520] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.801103][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1040.831169][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1040.851275][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1040.881314][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1040.892736][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1041.925404][T20474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1042.086866][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1042.113702][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1042.123684][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1042.134564][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1042.142980][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1042.952982][T20707] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3985'. [ 1043.434590][ T5834] Bluetooth: hci2: command tx timeout [ 1043.968639][T20474] 8021q: adding VLAN 0 to HW filter on device team0 [ 1044.144603][T16246] usb 5-1: new full-speed USB device number 119 using dummy_hcd [ 1044.216037][ T5834] Bluetooth: hci5: command tx timeout [ 1044.330058][T16246] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1044.341035][T16246] usb 5-1: not running at top speed; connect to a high speed hub [ 1044.371019][T16246] usb 5-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.391258][T16246] usb 5-1: config 253 interface 0 altsetting 57 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1044.456363][T16246] usb 5-1: config 253 interface 0 has no altsetting 0 [ 1044.478665][T16246] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1044.488222][T16246] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.505316][T16246] usb 5-1: Product: syz [ 1044.523842][T16246] usb 5-1: Manufacturer: syz [ 1044.554521][T16246] usb 5-1: SerialNumber: syz [ 1044.593975][T16520] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.690460][T20707] 1{X功: renamed from 30{X功 (while UP) [ 1044.803210][T20707] 1{X功: entered allmulticast mode [ 1044.812502][T20707] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 1044.848494][T16506] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.855826][T16506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1045.095755][T16506] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.102991][T16506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1045.245083][T16246] cdc_ether 5-1:253.0: skipping garbage [ 1045.393440][T16246] usb 5-1: bad CDC descriptors [ 1045.469096][T16246] usb 5-1: USB disconnect, device number 119 [ 1045.492157][ T5834] Bluetooth: hci2: command tx timeout [ 1045.583367][T16520] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.969238][T16520] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.296723][ T5834] Bluetooth: hci5: command tx timeout [ 1046.774253][T20474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1047.184487][T20474] veth0_vlan: entered promiscuous mode [ 1047.898430][ T5834] Bluetooth: hci2: command tx timeout [ 1048.389067][ T5834] Bluetooth: hci5: command tx timeout [ 1049.145067][T20474] veth1_vlan: entered promiscuous mode [ 1049.581013][T20715] chnl_net:caif_netlink_parms(): no params data found [ 1049.972150][ T5834] Bluetooth: hci2: command tx timeout [ 1050.450597][ T5834] Bluetooth: hci5: command tx timeout [ 1053.034906][T16520] bridge_slave_1: left allmulticast mode [ 1053.060909][T16520] bridge_slave_1: left promiscuous mode [ 1053.066725][T16520] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.550777][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.557114][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.613405][T16520] bridge_slave_0: left allmulticast mode [ 1054.619277][T16520] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.266414][T20764] ALSA: mixer_oss: invalid OSS volume '' [ 1056.247567][T16520] bridge_slave_1: left allmulticast mode [ 1056.300421][T16520] bridge_slave_1: left promiscuous mode [ 1056.306222][T16520] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.466520][T16520] bridge_slave_0: left allmulticast mode [ 1056.520545][T16520] bridge_slave_0: left promiscuous mode [ 1056.526344][T16520] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.474363][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1058.500438][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1058.515312][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1058.524076][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1058.534561][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1058.700650][T20784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3991'. [ 1058.779772][T20784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3991'. [ 1061.082958][ T5834] Bluetooth: hci1: command tx timeout [ 1063.173228][ T5838] Bluetooth: hci1: command tx timeout [ 1064.858459][T16520] team0: Port device bridge2 removed [ 1065.257931][ T5838] Bluetooth: hci1: command tx timeout [ 1065.278808][T16520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1065.292368][T16520] bond_slave_0: left promiscuous mode [ 1065.304941][T16520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1065.315354][T16520] bond_slave_1: left promiscuous mode [ 1065.325648][T16520] bond0 (unregistering): Released all slaves [ 1065.351766][T16520] bond1 (unregistering): Released all slaves [ 1066.011781][T16520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1066.024200][T16520] bond_slave_0: left promiscuous mode [ 1066.034821][T16520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1066.047614][T16520] bond_slave_1: left promiscuous mode [ 1066.057594][T16520] bond0 (unregistering): Released all slaves [ 1066.590960][T20720] chnl_net:caif_netlink_parms(): no params data found [ 1067.360374][ T5838] Bluetooth: hci1: command tx timeout [ 1067.371582][ T5943] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1069.008662][T20715] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.016629][T20715] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.038874][T20715] bridge_slave_0: entered allmulticast mode [ 1069.078762][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1069.096640][T20715] bridge_slave_0: entered promiscuous mode [ 1069.114171][ T5943] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1069.131220][T16520] tipc: Disabling bearer [ 1069.140832][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.149136][T16520] tipc: Left network mode [ 1069.197114][ T5943] usb 3-1: Product: syz [ 1069.220476][ T5943] usb 3-1: Manufacturer: syz [ 1069.239775][ T5943] usb 3-1: SerialNumber: syz [ 1069.259056][ T5943] usb 3-1: config 0 descriptor?? [ 1069.343838][T20715] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.359353][T20715] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.386508][T20715] bridge_slave_1: entered allmulticast mode [ 1069.413868][T20715] bridge_slave_1: entered promiscuous mode [ 1069.445298][T16520] tipc: Disabling bearer [ 1069.478753][T16520] tipc: Left network mode [ 1069.678844][T20715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1070.466482][T20715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1070.560879][ T5943] usb 3-1: USB disconnect, device number 109 [ 1070.670603][T20814] udevd[20814]: setting mode of /dev/dsp3 to 020660 failed: No such file or directory [ 1070.710749][T20814] udevd[20814]: setting owner of /dev/dsp3 to uid=0, gid=29 failed: No such file or directory [ 1070.761045][T20811] udevd[20811]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1071.404338][T20715] team0: Port device team_slave_0 added [ 1071.439174][T20720] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.457886][T20720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.468115][T20720] bridge_slave_0: entered allmulticast mode [ 1071.484153][ T30] audit: type=1804 audit(1760100928.889:944): pid=20851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4005" name="/newroot/175/file1" dev="fuse" ino=1 res=1 errno=0 [ 1071.523374][T20720] bridge_slave_0: entered promiscuous mode [ 1071.561761][T20720] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.568927][T20720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.588603][T20720] bridge_slave_1: entered allmulticast mode [ 1071.643175][T20720] bridge_slave_1: entered promiscuous mode [ 1072.160139][T20849] tipc: Enabling of bearer rejected, already enabled [ 1072.171919][T20715] team0: Port device team_slave_1 added [ 1072.475808][T20720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1072.814857][T20720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1072.990241][ T5919] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1073.004103][T20715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1073.018844][T20715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1073.053956][T20715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1073.122620][T20720] team0: Port device team_slave_0 added [ 1073.160245][ T5919] usb 3-1: Using ep0 maxpacket: 8 [ 1073.168404][ T5919] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.185113][ T5919] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1073.197839][ T5919] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1073.208032][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.217440][ T5919] usb 3-1: Product: syz [ 1073.222692][ T5919] usb 3-1: Manufacturer: syz [ 1073.227305][ T5919] usb 3-1: SerialNumber: syz [ 1073.236898][ T5919] usb 3-1: config 0 descriptor?? [ 1073.257398][ T5919] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 1073.393082][T20715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1073.419083][T20715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1073.448233][T20715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1073.466019][ T5919] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 1073.479549][ T5919] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 1073.498165][ T5919] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1073.514954][T20720] team0: Port device team_slave_1 added [ 1073.687427][T20868] netlink: 'syz.2.4009': attribute type 10 has an invalid length. [ 1073.862607][T20868] mac80211_hwsim hwsim54 wlan1: entered promiscuous mode [ 1073.874966][T20868] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1073.892765][ T5919] usb 3-1: USB disconnect, device number 110 [ 1073.960583][T20872] bond1: option lacp_rate: invalid value (108) [ 1073.976763][T20872] bond1 (unregistering): Released all slaves [ 1074.098421][T20783] chnl_net:caif_netlink_parms(): no params data found [ 1074.147874][T20715] hsr_slave_0: entered promiscuous mode [ 1074.165077][T20715] hsr_slave_1: entered promiscuous mode [ 1074.179126][T20715] debugfs: 'hsr0' already exists in 'hsr' [ 1074.210659][T20715] Cannot create hsr debugfs directory [ 1074.217369][T20720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1074.226530][T20720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1074.253682][T20720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1074.724863][T20720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1074.735922][T20720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1078.027046][T20720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1079.105472][T20879] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4012'. [ 1079.118531][T20878] delete_channel: no stack [ 1081.275282][T20720] hsr_slave_0: entered promiscuous mode [ 1081.291448][T20720] hsr_slave_1: entered promiscuous mode [ 1081.304624][T20720] debugfs: 'hsr0' already exists in 'hsr' [ 1081.326057][T20720] Cannot create hsr debugfs directory [ 1081.434877][T20783] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.449857][T20783] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.467396][T20783] bridge_slave_0: entered allmulticast mode [ 1081.487589][T20783] bridge_slave_0: entered promiscuous mode [ 1081.684750][T20783] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.710359][T20783] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.717660][T20783] bridge_slave_1: entered allmulticast mode [ 1081.742283][T20783] bridge_slave_1: entered promiscuous mode [ 1081.939526][T20783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1082.045378][T20783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1082.261617][T20783] team0: Port device team_slave_0 added [ 1082.283047][T20783] team0: Port device team_slave_1 added [ 1082.429987][T20783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1082.437177][T20783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1082.496543][T20783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1082.980384][T20783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1082.987429][T20783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1083.035564][T20783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1083.484368][T20783] hsr_slave_0: entered promiscuous mode [ 1083.503508][T20783] hsr_slave_1: entered promiscuous mode [ 1083.523472][T20783] debugfs: 'hsr0' already exists in 'hsr' [ 1083.529247][T20783] Cannot create hsr debugfs directory [ 1087.594445][T16520] hsr_slave_0: left promiscuous mode [ 1087.620004][T16520] hsr_slave_1: left promiscuous mode [ 1087.626043][T16520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1087.695466][T16520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1087.799439][T16520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1087.893323][T16520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1087.945077][T16520] hsr_slave_0: left promiscuous mode [ 1087.962883][T16520] hsr_slave_1: left promiscuous mode [ 1087.997309][T16520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1088.031557][T16520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1088.112757][T16520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1088.126104][T16520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1088.470455][T16520] veth1_macvtap: left promiscuous mode [ 1088.750648][T16520] veth0_macvtap: left promiscuous mode [ 1088.849842][T16520] veth1_vlan: left promiscuous mode [ 1088.855241][T16520] veth0_vlan: left promiscuous mode [ 1088.919484][T16520] veth1_macvtap: left promiscuous mode [ 1088.925683][T16520] veth0_macvtap: left promiscuous mode [ 1088.946439][T16520] veth1_vlan: left promiscuous mode [ 1089.231351][T16520] veth0_vlan: left promiscuous mode [ 1091.358798][T16520] pim6reg (unregistering): left allmulticast mode [ 1095.243008][T16520] team0 (unregistering): Port device team_slave_1 removed [ 1095.674217][T16520] team0 (unregistering): Port device team_slave_0 removed [ 1098.098126][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1098.113107][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1098.122623][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1098.132097][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1098.141426][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1099.105305][T16520] team0 (unregistering): Port device dummy0 removed [ 1099.182568][ T5834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1099.228945][ T5834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1099.239522][ T5834] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1099.248722][ T5834] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1099.265979][ T5834] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1099.622822][T16520] pim6reg (unregistering): left allmulticast mode [ 1100.213905][ T5834] Bluetooth: hci4: command tx timeout [ 1100.675005][T16520] team0 (unregistering): Port device team_slave_1 removed [ 1100.763921][T16520] team0 (unregistering): Port device team_slave_0 removed [ 1101.333317][ T5834] Bluetooth: hci6: command tx timeout [ 1102.297352][ T5834] Bluetooth: hci4: command tx timeout [ 1103.411800][ T5834] Bluetooth: hci6: command tx timeout [ 1103.580357][T16246] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1103.731945][T16246] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1103.750247][T16246] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1103.780454][T16246] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1103.847712][T16246] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.882467][T16246] usb 3-1: config 0 descriptor?? [ 1104.065737][T21031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4031'. [ 1104.374430][ T5834] Bluetooth: hci4: command tx timeout [ 1105.276323][T21031] bridge3: entered promiscuous mode [ 1105.500583][ T5834] Bluetooth: hci6: command tx timeout [ 1105.787992][T20999] chnl_net:caif_netlink_parms(): no params data found [ 1106.449875][ T5834] Bluetooth: hci4: command tx timeout [ 1107.024915][T20999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.138423][T20999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.231448][T20999] bridge_slave_0: entered allmulticast mode [ 1107.373650][T20999] bridge_slave_0: entered promiscuous mode [ 1107.553571][T20999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.590967][ T5834] Bluetooth: hci6: command tx timeout [ 1107.596615][T20999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.679926][T20999] bridge_slave_1: entered allmulticast mode [ 1107.688191][T20999] bridge_slave_1: entered promiscuous mode [ 1107.749446][T21001] chnl_net:caif_netlink_parms(): no params data found [ 1110.082314][T20718] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1110.422165][T16246] usbhid 3-1:0.0: can't add hid device: -71 [ 1110.428206][T16246] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1110.500204][T20718] usb 5-1: Using ep0 maxpacket: 32 [ 1111.510449][T16246] usb 3-1: USB disconnect, device number 111 [ 1111.520589][T20718] usb 5-1: device descriptor read/all, error -71 [ 1112.638693][T20999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1112.993741][T20999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1113.866383][T16520] IPVS: stop unused estimator thread 0... [ 1113.905596][T16520] IPVS: stop unused estimator thread 0... [ 1114.135157][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1114.146170][T21098] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1114.177600][T20999] team0: Port device team_slave_0 added [ 1114.216892][T21098] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1114.238226][T20999] team0: Port device team_slave_1 added [ 1114.471220][T21098] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1114.521680][T21098] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1114.996783][T21001] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.019789][T21001] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.031362][T21001] bridge_slave_0: entered allmulticast mode [ 1115.039497][T21001] bridge_slave_0: entered promiscuous mode [ 1115.068268][T20999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1115.078703][T20999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1115.110681][T20999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1115.216340][T21001] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.235751][T21001] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.255727][T21001] bridge_slave_1: entered allmulticast mode [ 1115.283036][T21001] bridge_slave_1: entered promiscuous mode [ 1115.399359][T20999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1115.421608][T20999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1115.469437][T20999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1115.887457][T21001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1115.985781][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.998817][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.063952][T21123] netlink: 'syz.4.4045': attribute type 3 has an invalid length. [ 1116.089390][T21001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1116.262769][T16520] bridge_slave_1: left allmulticast mode [ 1116.268455][T16520] bridge_slave_1: left promiscuous mode [ 1116.320558][T16520] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.371317][T16520] bridge_slave_0: left allmulticast mode [ 1116.377005][T16520] bridge_slave_0: left promiscuous mode [ 1116.404789][T16520] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.509527][T16520] bridge_slave_1: left allmulticast mode [ 1116.517839][T16520] bridge_slave_1: left promiscuous mode [ 1116.551007][T16520] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.586241][T16520] bridge_slave_0: left allmulticast mode [ 1116.607088][T16520] bridge_slave_0: left promiscuous mode [ 1116.625890][T21098] Bluetooth: hci2: command tx timeout [ 1116.667922][T16520] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.727758][T16520] bridge_slave_1: left allmulticast mode [ 1116.759044][T16520] bridge_slave_1: left promiscuous mode [ 1116.772854][T16520] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.845420][T16520] bridge_slave_0: left allmulticast mode [ 1116.884443][T16520] bridge_slave_0: left promiscuous mode [ 1116.902177][T16520] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.998783][T16520] bridge_slave_1: left allmulticast mode [ 1117.010719][T16520] bridge_slave_1: left promiscuous mode [ 1117.035226][T16520] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.511205][T16520] bridge_slave_0: left allmulticast mode [ 1117.516898][T16520] bridge_slave_0: left promiscuous mode [ 1117.523581][T16520] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.019523][T16520] bridge_slave_1: left allmulticast mode [ 1118.028090][T16520] bridge_slave_1: left promiscuous mode [ 1118.035311][T16520] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.116871][T16520] bridge_slave_0: left allmulticast mode [ 1118.123245][T16520] bridge_slave_0: left promiscuous mode [ 1118.140394][T16520] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.617371][T16520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1118.645682][T16520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1118.666956][T16520] bond0 (unregistering): Released all slaves [ 1118.690655][T21098] Bluetooth: hci2: command tx timeout [ 1118.867319][T16520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1118.895809][T16520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1118.909114][T16520] bond0 (unregistering): Released all slaves [ 1119.488115][T16520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1119.509374][T16520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1119.522185][T16520] bond0 (unregistering): Released all slaves [ 1120.144239][T16520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1120.167378][T16520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1120.183563][T16520] bond0 (unregistering): Released all slaves [ 1120.756183][T16520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1120.770706][T21098] Bluetooth: hci2: command tx timeout [ 1120.800942][T16520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1120.818135][T16520] bond0 (unregistering): Released all slaves [ 1120.968536][T21133] mac80211_hwsim hwsim52 wlan1: entered promiscuous mode [ 1120.996562][T21133] macsec1: entered promiscuous mode [ 1121.037940][T21133] mac80211_hwsim hwsim52 wlan1: left promiscuous mode [ 1121.637311][T21001] team0: Port device team_slave_0 added [ 1121.673320][T21001] team0: Port device team_slave_1 added [ 1121.930307][T16520] hsr_slave_0: left promiscuous mode [ 1121.969889][T16520] hsr_slave_1: left promiscuous mode [ 1121.976061][T16520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1122.010696][ T30] audit: type=1326 audit(1760100979.419:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21147 comm="syz.4.4050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5397d8eec9 code=0x7ffc0000 [ 1122.038537][T16520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1122.057587][ T30] audit: type=1326 audit(1760100979.439:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21145 comm="syz.2.4049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b758eec9 code=0x7ffc0000 [ 1122.081899][ T30] audit: type=1326 audit(1760100979.439:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21145 comm="syz.2.4049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b758eec9 code=0x7ffc0000 [ 1122.111624][ T30] audit: type=1326 audit(1760100979.449:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21147 comm="syz.4.4050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5397d8eec9 code=0x7ffc0000 [ 1122.144191][ T30] audit: type=1326 audit(1760100979.459:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21147 comm="syz.4.4050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5397d8eec9 code=0x7ffc0000 [ 1122.168996][ T30] audit: type=1326 audit(1760100979.459:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21147 comm="syz.4.4050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5397d8eec9 code=0x7ffc0000 [ 1122.192833][ T30] audit: type=1326 audit(1760100979.459:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21147 comm="syz.4.4050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5397d8eec9 code=0x7ffc0000 [ 1122.228405][ T30] audit: type=1326 audit(1760100979.459:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21147 comm="syz.4.4050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f5397d8eec9 code=0x7ffc0000 [ 1122.257891][ T30] audit: type=1326 audit(1760100979.459:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21147 comm="syz.4.4050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5397d8eec9 code=0x7ffc0000 [ 1122.281089][T16520] hsr_slave_0: left promiscuous mode [ 1122.444087][ T30] audit: type=1326 audit(1760100979.459:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21147 comm="syz.4.4050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5397d8eec9 code=0x7ffc0000 [ 1122.474197][T16520] hsr_slave_1: left promiscuous mode [ 1122.481389][T16520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1122.526506][T16520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1122.801931][T16520] hsr_slave_0: left promiscuous mode [ 1122.835207][T16520] hsr_slave_1: left promiscuous mode [ 1122.850622][T21098] Bluetooth: hci2: command tx timeout [ 1122.894711][T16520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1122.904583][T16520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1122.952395][T16520] hsr_slave_0: left promiscuous mode [ 1122.996737][T16520] hsr_slave_1: left promiscuous mode [ 1123.004711][T16520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1123.034130][T16520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1123.097194][T16520] hsr_slave_0: left promiscuous mode [ 1123.106624][T16520] hsr_slave_1: left promiscuous mode [ 1123.120630][T16520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1123.130700][T16520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1123.217244][T16520] veth1_vlan: left promiscuous mode [ 1123.224587][T16520] veth0_vlan: left promiscuous mode [ 1124.367827][T16520] team0 (unregistering): Port device team_slave_1 removed [ 1124.668545][T16520] team0 (unregistering): Port device team_slave_0 removed [ 1125.774777][T21156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4051'. [ 1125.921638][T16520] team0 (unregistering): Port device team_slave_1 removed [ 1125.983498][T16520] team0 (unregistering): Port device team_slave_0 removed [ 1126.824451][T16520] team0 (unregistering): Port device team_slave_1 removed [ 1126.922808][T16520] team0 (unregistering): Port device team_slave_0 removed [ 1128.146427][T16520] team0 (unregistering): Port device team_slave_1 removed [ 1128.228303][T16520] team0 (unregistering): Port device team_slave_0 removed [ 1129.314378][T16520] team0 (unregistering): Port device team_slave_1 removed [ 1129.359063][T16520] team0 (unregistering): Port device team_slave_0 removed [ 1130.013862][T20999] hsr_slave_0: entered promiscuous mode [ 1130.022486][T20999] hsr_slave_1: entered promiscuous mode [ 1130.062121][T21156] bridge1: entered promiscuous mode [ 1130.300578][T21001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1130.319356][T21001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1130.399186][T21001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1131.133775][T21001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1131.174748][T21001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1131.270189][T21001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1132.162394][T21001] hsr_slave_0: entered promiscuous mode [ 1132.213874][T21001] hsr_slave_1: entered promiscuous mode [ 1132.290653][T21001] debugfs: 'hsr0' already exists in 'hsr' [ 1132.319645][T21001] Cannot create hsr debugfs directory [ 1133.200842][T20718] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1133.287975][T21195] bond1: option lacp_rate: invalid value (108) [ 1133.351139][T21195] bond1 (unregistering): Released all slaves [ 1133.366099][T20718] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1133.380226][T20718] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1133.404836][T20718] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1133.416335][T20718] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1133.424771][T20718] usb 3-1: Manufacturer: syz [ 1133.456538][T20718] usb 3-1: config 0 descriptor?? [ 1133.658505][T20718] rc_core: IR keymap rc-hauppauge not found [ 1133.726269][T20718] Registered IR keymap rc-empty [ 1133.750742][T20718] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1133.804051][T20718] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input54 [ 1133.832018][ C1] igorplugusb 3-1:0.0: Error: urb status = -32 [ 1135.172209][T21107] chnl_net:caif_netlink_parms(): no params data found [ 1135.638451][ T9652] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1136.473313][ T9652] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1136.500570][ T9652] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1136.507230][ T9652] usb 5-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 1136.580218][T21107] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.588099][T21107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.607154][T21107] bridge_slave_0: entered allmulticast mode [ 1136.626805][ T9652] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.642932][T21107] bridge_slave_0: entered promiscuous mode [ 1136.678655][T21107] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.707019][T21107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.736223][ T9652] usb 5-1: config 0 descriptor?? [ 1136.765535][T21107] bridge_slave_1: entered allmulticast mode [ 1136.821624][T21107] bridge_slave_1: entered promiscuous mode [ 1136.864734][ T5943] usb 3-1: USB disconnect, device number 112 [ 1137.341515][T20999] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1137.495461][ T9652] usbhid 5-1:0.0: can't add hid device: -71 [ 1137.521248][T20999] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1137.589731][ T9652] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1137.884567][ T9652] usb 5-1: USB disconnect, device number 122 [ 1138.690665][T21231] binder: BINDER_SET_CONTEXT_MGR already set [ 1138.724048][T20999] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1138.809058][T20999] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1143.293388][T21231] binder: 21227:21231 ioctl 4018620d 200000000040 returned -16 [ 1143.572765][T21107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1143.677501][T21107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1144.626486][T21107] team0: Port device team_slave_0 added [ 1144.691413][T21107] team0: Port device team_slave_1 added [ 1145.220758][T21107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1145.227741][T21107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1145.397771][T21107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1145.578830][T21107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1145.619975][T21107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1145.760237][T21107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1145.888298][T21001] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1146.012516][T21257] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1146.707564][T21259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4062'. [ 1146.820263][T21001] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1146.872434][T21001] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1147.110696][T21259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4062'. [ 1147.415302][T21001] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1147.453943][T16525] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1147.468907][T16525] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1149.997417][T16525] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1150.015010][T21107] hsr_slave_0: entered promiscuous mode [ 1150.023189][T21107] hsr_slave_1: entered promiscuous mode [ 1150.030633][T21107] debugfs: 'hsr0' already exists in 'hsr' [ 1150.036487][T21107] Cannot create hsr debugfs directory [ 1150.115415][T16512] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1150.312843][T21277] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4065'. [ 1150.634268][T20999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1152.103639][T20999] 8021q: adding VLAN 0 to HW filter on device team0 [ 1152.415545][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1152.422750][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1152.631520][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1152.638748][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1153.238278][T21001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1154.611085][T21107] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1154.720771][T21107] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1154.764290][T21107] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1155.101447][T21107] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1155.259252][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 1155.259280][ T30] audit: type=1326 audit(1760101012.659:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21306 comm="syz.4.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5397d8eec9 code=0x7ffc0000 [ 1155.506818][T21001] 8021q: adding VLAN 0 to HW filter on device team0 [ 1155.614426][ T30] audit: type=1326 audit(1760101012.659:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21306 comm="syz.4.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5397d8eec9 code=0x7ffc0000 [ 1155.636790][ C1] vkms_vblank_simulate: vblank timer overrun [ 1156.163194][T16512] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.170431][T16512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1156.211051][ T30] audit: type=1326 audit(1760101012.759:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21306 comm="syz.4.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5397d8eec9 code=0x7ffc0000 [ 1156.233410][ C1] vkms_vblank_simulate: vblank timer overrun [ 1156.254726][T16512] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.261934][T16512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1157.110012][ T30] audit: type=1326 audit(1760101012.759:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21306 comm="syz.4.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5397d8eec9 code=0x7ffc0000 [ 1157.132389][ C1] vkms_vblank_simulate: vblank timer overrun [ 1157.289070][ T30] audit: type=1326 audit(1760101012.759:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21306 comm="syz.4.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5397d8eec9 code=0x7ffc0000 [ 1157.602469][ T30] audit: type=1326 audit(1760101012.759:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21306 comm="syz.4.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f5397d8eec9 code=0x7ffc0000 [ 1157.683053][T20999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1157.705911][ T30] audit: type=1326 audit(1760101012.759:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21306 comm="syz.4.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5397d8eec9 code=0x7ffc0000 [ 1157.773204][T16506] bridge_slave_1: left allmulticast mode [ 1157.798046][T16506] bridge_slave_1: left promiscuous mode [ 1157.830843][T16506] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.883386][ T30] audit: type=1326 audit(1760101012.759:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21306 comm="syz.4.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5397d8eec9 code=0x7ffc0000 [ 1157.918051][T16506] bridge_slave_0: left allmulticast mode [ 1157.930217][T16506] bridge_slave_0: left promiscuous mode [ 1157.936035][T16506] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.945815][ T30] audit: type=1326 audit(1760101012.759:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21306 comm="syz.4.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f5397d8eec9 code=0x7ffc0000 [ 1158.030288][ T30] audit: type=1326 audit(1760101012.759:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21306 comm="syz.4.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5397d8eec9 code=0x7ffc0000 [ 1159.235726][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1159.248837][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1159.269006][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1159.277871][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1159.286510][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1159.389331][T21350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4075'. [ 1159.959274][T16506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1160.045578][T16506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1160.095511][T16506] bond0 (unregistering): Released all slaves [ 1160.220162][T21098] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1160.250229][T21098] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1160.308048][T21098] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1160.361161][T21098] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1160.368997][T21098] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1161.360187][T21098] Bluetooth: hci1: command tx timeout [ 1161.942717][T16506] hsr_slave_0: left promiscuous mode [ 1162.124247][T16506] hsr_slave_1: left promiscuous mode [ 1162.144170][T16506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1162.259279][T16506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1162.461308][T21098] Bluetooth: hci5: command tx timeout [ 1163.410619][T21098] Bluetooth: hci1: command tx timeout [ 1164.263774][T16506] team0 (unregistering): Port device team_slave_1 removed [ 1164.530480][T21098] Bluetooth: hci5: command tx timeout [ 1164.661169][T16506] team0 (unregistering): Port device team_slave_0 removed [ 1165.388459][ T5969] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1165.490585][T21098] Bluetooth: hci1: command tx timeout [ 1165.557882][ T5969] usb 3-1: Using ep0 maxpacket: 8 [ 1165.591926][ T5969] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1165.607110][T21107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1165.619286][ T5969] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 1165.637704][ T5969] usb 3-1: config 4 has no interface number 0 [ 1165.655035][ T5969] usb 3-1: config 4 interface 30 has no altsetting 0 [ 1165.675115][ T5969] usb 3-1: string descriptor 0 read error: -22 [ 1165.691116][ T5969] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 1165.710485][ T5969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.746719][T21107] 8021q: adding VLAN 0 to HW filter on device team0 [ 1165.774968][ T5969] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 1166.152772][ T5969] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1166.159296][ T5969] dvb-usb: bulk message failed: -22 (2/0) [ 1166.187454][T16523] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.194665][T16523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1166.254694][ T5969] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1166.339402][ T5969] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 1166.383646][ T5969] usb 3-1: media controller created [ 1166.423504][ T5969] dvb-usb: bulk message failed: -22 (6/0) [ 1166.477149][ T5969] dw2102: i2c transfer failed. [ 1166.514499][ T5969] dvb-usb: bulk message failed: -22 (6/0) [ 1166.537184][ T5969] dw2102: i2c transfer failed. [ 1166.555875][T16508] bridge0: port 2(bridge_slave_1) entered blocking state [ 1166.563116][T16508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1166.572475][ T5969] dvb-usb: bulk message failed: -22 (6/0) [ 1166.583654][ T5969] dw2102: i2c transfer failed. [ 1166.594037][ T5969] dvb-usb: bulk message failed: -22 (6/0) [ 1166.615565][T21098] Bluetooth: hci5: command tx timeout [ 1166.644583][ T5969] dw2102: i2c transfer failed. [ 1166.649406][ T5969] dvb-usb: bulk message failed: -22 (6/0) [ 1166.683877][ T5969] dw2102: i2c transfer failed. [ 1166.717248][ T5969] dvb-usb: bulk message failed: -22 (6/0) [ 1166.752776][ T5969] dw2102: i2c transfer failed. [ 1166.785438][ T5969] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1166.927052][ T5969] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1167.028032][ T5969] dvb-usb: bulk message failed: -22 (3/0) [ 1167.034428][ T5969] dw2102: command 0x0e transfer failed. [ 1167.044690][ T5969] dvb-usb: bulk message failed: -22 (3/0) [ 1167.057386][ T5969] dw2102: command 0x0e transfer failed. [ 1167.168413][T21346] chnl_net:caif_netlink_parms(): no params data found [ 1167.454693][ T5969] dvb-usb: bulk message failed: -22 (3/0) [ 1167.469617][ T5969] dw2102: command 0x0e transfer failed. [ 1167.475206][ T5969] dvb-usb: bulk message failed: -22 (3/0) [ 1167.552721][T21364] chnl_net:caif_netlink_parms(): no params data found [ 1167.566327][ T5969] dw2102: command 0x0e transfer failed. [ 1167.580907][T21098] Bluetooth: hci1: command tx timeout [ 1167.612390][ T5969] dvb-usb: bulk message failed: -22 (1/0) [ 1167.618171][ T5969] dw2102: command 0x51 transfer failed. [ 1167.660242][ T5969] dvb-usb: bulk message failed: -22 (5/0) [ 1167.666011][ T5969] dw2102: i2c probe for address 0x68 failed. [ 1167.682569][ T5969] dvb-usb: bulk message failed: -22 (5/0) [ 1167.688332][ T5969] dw2102: i2c probe for address 0x69 failed. [ 1167.713998][T21413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1167.735108][ T5969] dvb-usb: bulk message failed: -22 (5/0) [ 1167.770757][ T5969] dw2102: i2c probe for address 0x6a failed. [ 1167.776780][ T5969] dw2102: probing for demodulator failed. Is the external power switched on? [ 1167.788979][T21413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1167.822922][ T5969] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 1167.941085][ T5919] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1168.010119][ T5969] rc_core: IR keymap rc-tt-1500 not found [ 1168.049445][ T5969] Registered IR keymap rc-empty [ 1168.086541][T21346] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.102464][ T5969] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 1168.127804][T21346] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.162798][ T5969] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input55 [ 1168.176318][T21346] bridge_slave_0: entered allmulticast mode [ 1168.223486][T21346] bridge_slave_0: entered promiscuous mode [ 1168.245557][ T5969] dvb-usb: schedule remote query interval to 250 msecs. [ 1168.281918][T21346] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.289083][T21346] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.297469][ T5969] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1168.320836][ T5969] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 1168.342257][T21346] bridge_slave_1: entered allmulticast mode [ 1168.355323][ T5969] usb 3-1: USB disconnect, device number 113 [ 1168.366484][T21346] bridge_slave_1: entered promiscuous mode [ 1168.646137][ T5969] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 1168.690573][T21098] Bluetooth: hci5: command tx timeout [ 1168.704233][T21107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1169.066612][T21433] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1169.077507][T21432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4088'. [ 1169.234226][T21346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1169.363828][T21346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1170.844381][T21346] team0: Port device team_slave_0 added [ 1170.876153][T21346] team0: Port device team_slave_1 added [ 1176.143335][ C0] sched: DL replenish lagged too much [ 1177.419359][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.426125][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.526685][T21364] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.836198][T21364] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.855419][T21364] bridge_slave_0: entered allmulticast mode [ 1179.592229][T21364] bridge_slave_0: entered promiscuous mode [ 1179.643832][T21364] bridge0: port 2(bridge_slave_1) entered blocking state [ 1179.739172][T21364] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.777357][T21364] bridge_slave_1: entered allmulticast mode [ 1179.843853][T21364] bridge_slave_1: entered promiscuous mode [ 1179.901179][T21346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1179.983459][T21346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1180.120550][ T5919] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1180.192182][T21346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1180.321817][ T5919] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1180.360333][T21346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1180.418049][T21346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1180.419382][ T5919] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1180.540216][ T5919] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 1180.560633][T21346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1180.616459][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1180.643500][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1180.652911][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1180.662468][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1180.671429][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1180.681862][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.723261][ T5919] usb 3-1: config 0 descriptor?? [ 1181.582602][T21471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1181.611853][T21470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4090'. [ 1181.703283][T21471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1182.115323][T21471] fuse: Unknown parameter '' [ 1182.429502][T21364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1182.573143][T21364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1183.025242][ T5838] Bluetooth: hci4: command tx timeout [ 1185.096212][ T5838] Bluetooth: hci4: command tx timeout [ 1185.493563][ T5919] usbhid 3-1:0.0: can't add hid device: -71 [ 1185.560365][ T5919] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1186.095096][ T5919] usb 3-1: USB disconnect, device number 114 [ 1186.171392][T21364] team0: Port device team_slave_0 added [ 1186.208936][T21346] hsr_slave_0: entered promiscuous mode [ 1186.238844][T21346] hsr_slave_1: entered promiscuous mode [ 1186.255986][T21346] debugfs: 'hsr0' already exists in 'hsr' [ 1186.265132][T21346] Cannot create hsr debugfs directory [ 1186.334070][T21364] team0: Port device team_slave_1 added [ 1186.384871][T21488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4095'. [ 1186.401727][T16246] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1186.511152][T21490] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4096'. [ 1186.590939][T16246] usb 5-1: Using ep0 maxpacket: 8 [ 1186.613052][T16246] usb 5-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 1186.626774][T16246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.677607][T16246] usb 5-1: config 0 descriptor?? [ 1186.711010][T21364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1186.717985][T21364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1186.747432][T16246] pwc: Logitech QuickCam Zoom USB webcam detected. [ 1186.765840][T16246] pwc: Warning: more than 1 configuration available. [ 1186.785028][T21364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1186.817623][T21364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1186.835396][T21364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1186.940430][T21364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1186.977535][T21499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1187.008670][T21499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1187.144998][T21503] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4093'. [ 1187.170595][ T5838] Bluetooth: hci4: command tx timeout [ 1187.710198][T21502] syzkaller0: entered promiscuous mode [ 1187.715754][T21502] syzkaller0: entered allmulticast mode [ 1188.123650][T16246] pwc: Failed to set LED on/off time (-71) [ 1188.131916][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1188.131935][ T30] audit: type=1326 audit(1760101045.529:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21520 comm="syz.2.4099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b758eec9 code=0x7ffc0000 [ 1188.165762][T16246] pwc: send_video_command error -71 [ 1188.184290][T16246] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1188.202914][T16246] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1188.248981][T16246] usb 5-1: USB disconnect, device number 124 [ 1188.256581][ T30] audit: type=1326 audit(1760101045.529:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21520 comm="syz.2.4099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f17b758eec9 code=0x7ffc0000 [ 1188.504741][ T30] audit: type=1326 audit(1760101045.529:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21520 comm="syz.2.4099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b758eec9 code=0x7ffc0000 [ 1188.528334][ T30] audit: type=1326 audit(1760101045.529:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21520 comm="syz.2.4099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f17b758eec9 code=0x7ffc0000 [ 1188.553221][ T30] audit: type=1326 audit(1760101045.529:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21520 comm="syz.2.4099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b758eec9 code=0x7ffc0000 [ 1188.585300][ T30] audit: type=1326 audit(1760101045.529:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21520 comm="syz.2.4099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f17b758eec9 code=0x7ffc0000 [ 1188.778664][ T30] audit: type=1326 audit(1760101045.529:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21520 comm="syz.2.4099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b758eec9 code=0x7ffc0000 [ 1188.907259][T21364] hsr_slave_0: entered promiscuous mode [ 1188.939479][ T30] audit: type=1326 audit(1760101045.529:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21520 comm="syz.2.4099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f17b758eec9 code=0x7ffc0000 [ 1188.964802][T21364] hsr_slave_1: entered promiscuous mode [ 1189.028296][T21364] debugfs: 'hsr0' already exists in 'hsr' [ 1189.056808][T21364] Cannot create hsr debugfs directory [ 1189.094445][ T30] audit: type=1326 audit(1760101045.529:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21520 comm="syz.2.4099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b758eec9 code=0x7ffc0000 [ 1189.254506][ T5838] Bluetooth: hci4: command tx timeout [ 1189.310785][ T30] audit: type=1326 audit(1760101045.529:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21520 comm="syz.2.4099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f17b758eec9 code=0x7ffc0000 [ 1192.215977][T21545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4101'. [ 1192.637518][T21463] chnl_net:caif_netlink_parms(): no params data found [ 1193.511587][T21463] bridge0: port 1(bridge_slave_0) entered blocking state [ 1193.518760][T21463] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.590444][T21463] bridge_slave_0: entered allmulticast mode [ 1193.627094][T21463] bridge_slave_0: entered promiscuous mode [ 1193.654487][T21463] bridge0: port 2(bridge_slave_1) entered blocking state [ 1193.678395][T21463] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.696738][T21463] bridge_slave_1: entered allmulticast mode [ 1193.713894][T21463] bridge_slave_1: entered promiscuous mode [ 1193.840600][ T5969] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1193.902916][T16523] bridge_slave_1: left allmulticast mode [ 1193.908607][T16523] bridge_slave_1: left promiscuous mode [ 1193.978503][T16523] bridge0: port 2(bridge_slave_1) entered disabled state [ 1194.029671][ T5969] usb 3-1: device descriptor read/64, error -71 [ 1194.054553][T16523] bridge_slave_0: left allmulticast mode [ 1194.180306][T16523] bridge_slave_0: left promiscuous mode [ 1194.186139][T16523] bridge0: port 1(bridge_slave_0) entered disabled state [ 1194.280261][ T5969] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1194.361756][T16523] bridge_slave_1: left allmulticast mode [ 1194.426740][T16523] bridge_slave_1: left promiscuous mode [ 1194.442001][ T5969] usb 3-1: device descriptor read/64, error -71 [ 1194.448849][T16523] bridge0: port 2(bridge_slave_1) entered disabled state [ 1194.551250][ T5969] usb usb3-port1: attempt power cycle [ 1194.573734][T16523] bridge_slave_0: left allmulticast mode [ 1194.590653][T16523] bridge_slave_0: left promiscuous mode [ 1194.608572][T16523] bridge0: port 1(bridge_slave_0) entered disabled state [ 1194.950159][ T5969] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1195.012823][ T5969] usb 3-1: device descriptor read/8, error -71 [ 1195.318325][ T5969] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1195.750381][ T5969] usb 3-1: device descriptor read/8, error -71 [ 1195.880687][ T5969] usb usb3-port1: unable to enumerate USB device [ 1197.052641][T16523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1197.071007][T16523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1197.080270][ T5969] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1197.096391][T16523] bond0 (unregistering): Released all slaves [ 1197.244236][ T5969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1197.261153][ T5969] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1197.289365][ T5969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.317528][ T5969] usb 3-1: config 0 descriptor?? [ 1197.900587][T16523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1197.938564][T16523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1197.965006][T16523] bond0 (unregistering): Released all slaves [ 1198.056558][T21463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1198.114534][T21463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1198.195285][T21580] pim6reg: entered allmulticast mode [ 1198.710732][T16523] hsr_slave_0: left promiscuous mode [ 1198.725343][T16523] hsr_slave_1: left promiscuous mode [ 1198.738381][T16523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1198.750543][T16523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1198.890624][T16523] hsr_slave_0: left promiscuous mode [ 1198.947934][T16523] hsr_slave_1: left promiscuous mode [ 1199.016379][T16523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1199.037855][T16523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1201.832037][ T5969] usbhid 3-1:0.0: can't add hid device: -71 [ 1201.838103][ T5969] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1201.900416][ T5969] usb 3-1: USB disconnect, device number 119 [ 1203.238979][T16523] team0 (unregistering): Port device team_slave_1 removed [ 1205.239973][T16523] team0 (unregistering): Port device team_slave_0 removed [ 1205.561001][T21613] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4111'. [ 1205.720573][T21613] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4111'. [ 1207.016220][ T5969] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1207.880414][ T5969] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1207.935105][ T5969] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1208.073557][ T5969] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 1208.093668][ T5969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.300140][ T5969] usb 3-1: config 0 descriptor?? [ 1209.052985][T21640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4116'. [ 1210.451881][T16523] team0 (unregistering): Port device team_slave_1 removed [ 1211.798074][T16523] team0 (unregistering): Port device team_slave_0 removed [ 1211.838874][ T5969] usbhid 3-1:0.0: can't add hid device: -71 [ 1212.206205][ T5969] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1212.286140][ T5969] usb 3-1: USB disconnect, device number 120 [ 1212.930597][ T5969] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 1213.106354][ T5969] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1213.125216][ T5969] usb 3-1: not running at top speed; connect to a high speed hub [ 1213.154603][ T5969] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1213.172679][ T5969] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1213.215274][ T5969] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1213.260414][ T5969] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1213.273632][ T5969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.290430][ T5969] usb 3-1: Product: syz [ 1213.294739][ T5969] usb 3-1: Manufacturer: syz [ 1213.299342][ T5969] usb 3-1: SerialNumber: syz [ 1213.564565][T21654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1213.638023][T21656] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4119'. [ 1213.649850][T21656] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4119'. [ 1213.695274][T21654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1213.711589][T21654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1213.724106][T21654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1213.756351][T21654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1213.773095][T21654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1213.826255][T21654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1213.845853][T21654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1213.869320][T21654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1213.916914][T21654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1214.206182][T21463] team0: Port device team_slave_0 added [ 1214.313157][T21463] team0: Port device team_slave_1 added [ 1214.513166][T21463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1214.521224][T21463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1214.554206][T21463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1214.796876][T21666] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4120'. [ 1215.028642][T21463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1215.062219][T21463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1215.136413][T21463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1215.206236][T21670] tipc: Enabled bearer , priority 0 [ 1215.235742][T21666] tipc: Resetting bearer [ 1215.676852][T21463] hsr_slave_0: entered promiscuous mode [ 1215.699053][T21463] hsr_slave_1: entered promiscuous mode [ 1215.768149][ T5969] usb 3-1: 0:2 : does not exist [ 1215.844688][ T5969] usb 3-1: USB disconnect, device number 121 [ 1215.880353][T21662] tipc: Disabling bearer [ 1217.070191][T20718] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1218.412941][T20718] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1218.485903][T20718] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1218.567553][T20718] usb 5-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 1218.679398][T20718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.716770][T20718] usb 5-1: config 0 descriptor?? [ 1219.910565][T21707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1220.083332][T21707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1223.770942][T21098] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1223.841434][T21098] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1223.850377][T21098] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1223.860885][T21098] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1223.868821][T21098] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1224.174232][ T5834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1224.188006][ T5834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1224.198847][ T5834] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1224.208431][ T5834] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1224.217295][ T5834] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1224.300785][T20718] usbhid 5-1:0.0: can't add hid device: -71 [ 1224.307750][T20718] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1224.648413][T20718] usb 5-1: USB disconnect, device number 125 [ 1226.132807][ T5834] Bluetooth: hci2: command tx timeout [ 1226.221017][T21735] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4128'. [ 1226.290592][ T5834] Bluetooth: hci6: command tx timeout [ 1227.624003][T21735] 0{X功: renamed from 31{X功 (while UP) [ 1227.671604][T21735] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 1228.083560][T21743] input: syz0 as /devices/virtual/input/input56 [ 1228.211800][ T5834] Bluetooth: hci2: command tx timeout [ 1228.370497][ T5834] Bluetooth: hci6: command tx timeout [ 1228.990202][T20718] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1229.851092][T21765] RDS: rds_bind could not find a transport for fe80::33, load rds_tcp or rds_rdma? [ 1230.367531][ T5834] Bluetooth: hci2: command tx timeout [ 1230.367628][T16523] bridge_slave_1: left allmulticast mode [ 1230.457206][ T5834] Bluetooth: hci6: command tx timeout [ 1230.599734][T20718] usb 3-1: Using ep0 maxpacket: 32 [ 1230.673419][T16523] bridge_slave_1: left promiscuous mode [ 1230.723357][T16523] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.788858][T16523] bridge_slave_0: left allmulticast mode [ 1230.795640][T20718] usb 3-1: config 0 has an invalid descriptor of length 78, skipping remainder of the config [ 1230.809870][T16523] bridge_slave_0: left promiscuous mode [ 1230.815655][T16523] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.845747][T20718] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1230.859470][T20718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.874566][T20718] usb 3-1: Product: syz [ 1230.880345][T20718] usb 3-1: Manufacturer: syz [ 1230.898876][T20718] usb 3-1: SerialNumber: syz [ 1230.922266][T20718] usb 3-1: config 0 descriptor?? [ 1230.939281][T20718] usb 3-1: bad CDC descriptors [ 1230.953995][T20718] usb 3-1: unsupported MDLM descriptors [ 1232.535750][ T5834] Bluetooth: hci2: command tx timeout [ 1232.617762][ T5834] Bluetooth: hci6: command tx timeout [ 1232.911730][T16523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1232.945013][T16523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1232.957811][T16523] bond0 (unregistering): Released all slaves [ 1233.699088][T16523] hsr_slave_0: left promiscuous mode [ 1233.714217][T16523] hsr_slave_1: left promiscuous mode [ 1233.727505][T16523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1233.741205][T16523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1234.240216][T16246] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1234.348194][T16523] team0 (unregistering): Port device team_slave_1 removed [ 1234.414199][T16246] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1234.439439][T16246] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1234.449487][T16246] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 1234.466010][T16523] team0 (unregistering): Port device team_slave_0 removed [ 1234.489076][T16246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.501464][T16246] usb 5-1: config 0 descriptor?? [ 1235.110881][T21783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4134'. [ 1237.012914][T21724] chnl_net:caif_netlink_parms(): no params data found [ 1237.591981][T16246] usbhid 5-1:0.0: can't add hid device: -71 [ 1237.598021][T16246] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1237.761972][T16246] usb 5-1: USB disconnect, device number 126 [ 1238.145780][T21725] chnl_net:caif_netlink_parms(): no params data found [ 1238.920669][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.927011][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.491802][T21724] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.640614][T21724] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.830987][T21724] bridge_slave_0: entered allmulticast mode [ 1239.880521][T21724] bridge_slave_0: entered promiscuous mode [ 1239.917080][T21724] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.007587][T21724] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.039693][T21724] bridge_slave_1: entered allmulticast mode [ 1240.170286][T21724] bridge_slave_1: entered promiscuous mode [ 1240.284508][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1240.297865][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1240.307561][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1240.316209][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1240.324846][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1241.131597][T21822] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4137'. [ 1241.355909][T21724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1241.393392][T21724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1241.448234][T21822] 1{X功: renamed from 30{X功 (while UP) [ 1241.594325][T21822] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 1242.114960][T21724] team0: Port device team_slave_0 added [ 1242.262999][T21725] bridge0: port 1(bridge_slave_0) entered blocking state [ 1242.270897][T21725] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.278237][T21725] bridge_slave_0: entered allmulticast mode [ 1242.300815][T21725] bridge_slave_0: entered promiscuous mode [ 1242.338031][T21724] team0: Port device team_slave_1 added [ 1242.369128][T21725] bridge0: port 2(bridge_slave_1) entered blocking state [ 1242.382003][ T5838] Bluetooth: hci1: command tx timeout [ 1242.391229][T21725] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.398734][T21725] bridge_slave_1: entered allmulticast mode [ 1242.407123][T21725] bridge_slave_1: entered promiscuous mode [ 1242.508254][T20454] usb 3-1: USB disconnect, device number 122 [ 1242.692668][T21724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1242.707340][T21724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1242.780149][T21724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1242.816367][T21828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4138'. [ 1243.197433][T21724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1243.244775][T21724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1243.368185][T21724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1243.500530][T21725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1243.545039][T21725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1246.033410][ T5838] Bluetooth: hci1: command tx timeout [ 1246.877363][T21725] team0: Port device team_slave_0 added [ 1247.184138][T21724] hsr_slave_0: entered promiscuous mode [ 1247.213316][T21724] hsr_slave_1: entered promiscuous mode [ 1247.261416][T21839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4140'. [ 1247.271411][T21724] debugfs: 'hsr0' already exists in 'hsr' [ 1247.277162][T21724] Cannot create hsr debugfs directory [ 1247.302917][T21725] team0: Port device team_slave_1 added [ 1248.050218][ T5834] Bluetooth: hci1: command tx timeout [ 1248.230956][T21725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1248.238144][T21725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1248.367762][T21725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1248.438349][T21725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1248.458634][T21725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1248.796883][T21725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1250.130128][ T5834] Bluetooth: hci1: command tx timeout [ 1250.497259][T21852] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4145'. [ 1250.506931][T21852] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4145'. [ 1250.557806][T21725] hsr_slave_0: entered promiscuous mode [ 1250.592224][T21725] hsr_slave_1: entered promiscuous mode [ 1250.609013][T21725] debugfs: 'hsr0' already exists in 'hsr' [ 1250.642685][T21725] Cannot create hsr debugfs directory [ 1251.135434][T21809] chnl_net:caif_netlink_parms(): no params data found [ 1253.176198][T21879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4151'. [ 1254.389271][T21879] bridge_slave_1: left allmulticast mode [ 1254.490754][T21879] bridge_slave_1: left promiscuous mode [ 1254.581615][T21879] bridge0: port 2(bridge_slave_1) entered disabled state [ 1254.639013][T21879] bridge_slave_0: left allmulticast mode [ 1254.681750][T21879] bridge_slave_0: left promiscuous mode [ 1254.819320][T21879] bridge0: port 1(bridge_slave_0) entered disabled state [ 1255.145527][T21887] vlan2: entered promiscuous mode [ 1255.616391][T21809] bridge0: port 1(bridge_slave_0) entered blocking state [ 1255.635728][T21809] bridge0: port 1(bridge_slave_0) entered disabled state [ 1255.644872][T21809] bridge_slave_0: entered allmulticast mode [ 1255.653913][T21809] bridge_slave_0: entered promiscuous mode [ 1257.407815][T21809] bridge0: port 2(bridge_slave_1) entered blocking state [ 1257.477625][T21809] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.492209][T21809] bridge_slave_1: entered allmulticast mode [ 1257.505722][T21809] bridge_slave_1: entered promiscuous mode [ 1259.936181][T21809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1260.547333][T21809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1260.886235][T21809] team0: Port device team_slave_0 added [ 1260.905775][T21809] team0: Port device team_slave_1 added [ 1300.669808][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.685547][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.466085][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.588889][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1386.285992][ T5834] Bluetooth: hci2: command tx timeout [ 1386.286059][ T5834] Bluetooth: hci6: command tx timeout [ 1388.386585][ T5838] Bluetooth: hci1: command tx timeout [ 1408.531997][ T31] INFO: task kworker/u8:0:12 blocked for more than 143 seconds. [ 1408.532033][ T31] Not tainted syzkaller #0 [ 1408.532046][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1408.532058][ T31] task:kworker/u8:0 state:D stack:18392 pid:12 tgid:12 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1408.532116][ T31] Workqueue: events_unbound linkwatch_event [ 1408.532152][ T31] Call Trace: [ 1408.532162][ T31] [ 1408.532179][ T31] __schedule+0x1798/0x4cc0 [ 1408.532221][ T31] ? __lock_acquire+0xab9/0xd20 [ 1408.532251][ T31] ? __lock_acquire+0xab9/0xd20 [ 1408.532274][ T31] ? __pfx___schedule+0x10/0x10 [ 1408.532317][ T31] ? schedule+0x91/0x360 [ 1408.532345][ T31] schedule+0x165/0x360 [ 1408.532373][ T31] schedule_preempt_disabled+0x13/0x30 [ 1408.532395][ T31] __mutex_lock+0x7e6/0x1350 [ 1408.532420][ T31] ? look_up_lock_class+0x74/0x170 [ 1408.532450][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1408.532489][ T31] ? linkwatch_event+0xe/0x60 [ 1408.532519][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1408.532559][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1408.532583][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1408.532606][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1408.532631][ T31] linkwatch_event+0xe/0x60 [ 1408.532656][ T31] process_scheduled_works+0xae1/0x17b0 [ 1408.532709][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1408.532750][ T31] worker_thread+0x8a0/0xda0 [ 1408.532801][ T31] kthread+0x711/0x8a0 [ 1408.532833][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1408.532856][ T31] ? __pfx_kthread+0x10/0x10 [ 1408.532886][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1408.532910][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1408.532934][ T31] ? __pfx_kthread+0x10/0x10 [ 1408.532963][ T31] ret_from_fork+0x4bc/0x870 [ 1408.532989][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1408.533020][ T31] ? __switch_to_asm+0x39/0x70 [ 1408.533044][ T31] ? __switch_to_asm+0x33/0x70 [ 1408.533066][ T31] ? __pfx_kthread+0x10/0x10 [ 1408.533096][ T31] ret_from_fork_asm+0x1a/0x30 [ 1408.533138][ T31] [ 1408.533273][ T31] INFO: task kworker/u8:15:16523 blocked for more than 143 seconds. [ 1408.533290][ T31] Not tainted syzkaller #0 [ 1408.533302][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1408.533313][ T31] task:kworker/u8:15 state:D stack:21960 pid:16523 tgid:16523 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1408.533370][ T31] Workqueue: netns cleanup_net [ 1408.533392][ T31] Call Trace: [ 1408.533402][ T31] [ 1408.533416][ T31] __schedule+0x1798/0x4cc0 [ 1408.533467][ T31] ? __pfx___schedule+0x10/0x10 [ 1408.533516][ T31] ? schedule+0x91/0x360 [ 1408.533543][ T31] schedule+0x165/0x360 [ 1408.533570][ T31] schedule_preempt_disabled+0x13/0x30 [ 1408.533595][ T31] __mutex_lock+0x7e6/0x1350 [ 1408.533627][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1408.533659][ T31] ? devlink_pernet_pre_exit+0x10a/0x3d0 [ 1408.533697][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1408.533731][ T31] ? devlinks_xa_find_get+0x2b/0x310 [ 1408.533759][ T31] ? devlinks_xa_find_get+0x2b/0x310 [ 1408.533790][ T31] ? devlinks_xa_find_get+0x2eb/0x310 [ 1408.533818][ T31] ? devlinks_xa_find_get+0x2b/0x310 [ 1408.533852][ T31] devlink_pernet_pre_exit+0x10a/0x3d0 [ 1408.533887][ T31] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 1408.533928][ T31] ? class_remove_file_ns+0x121/0x160 [ 1408.533957][ T31] ops_undo_list+0x184/0x990 [ 1408.533987][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 1408.534013][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1408.534047][ T31] cleanup_net+0x4d8/0x820 [ 1408.534072][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 1408.534097][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1408.534120][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1408.534142][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1408.534168][ T31] process_scheduled_works+0xae1/0x17b0 [ 1408.534222][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1408.534263][ T31] worker_thread+0x8a0/0xda0 [ 1408.534315][ T31] kthread+0x711/0x8a0 [ 1408.534346][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1408.534370][ T31] ? __pfx_kthread+0x10/0x10 [ 1408.534400][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1408.534424][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1408.534448][ T31] ? __pfx_kthread+0x10/0x10 [ 1408.534483][ T31] ret_from_fork+0x4bc/0x870 [ 1408.534509][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1408.534539][ T31] ? __switch_to_asm+0x39/0x70 [ 1408.534562][ T31] ? __switch_to_asm+0x33/0x70 [ 1408.534586][ T31] ? __pfx_kthread+0x10/0x10 [ 1408.534620][ T31] ret_from_fork_asm+0x1a/0x30 [ 1408.534663][ T31] [ 1408.534705][ T31] INFO: task syz-executor:21725 blocked for more than 143 seconds. [ 1408.534721][ T31] Not tainted syzkaller #0 [ 1408.534732][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1408.534744][ T31] task:syz-executor state:D stack:22568 pid:21725 tgid:21725 ppid:21708 task_flags:0x400140 flags:0x00080000 [ 1408.534801][ T31] Call Trace: [ 1408.534809][ T31] [ 1408.534823][ T31] __schedule+0x1798/0x4cc0 [ 1408.534852][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 1408.534896][ T31] ? __pfx___schedule+0x10/0x10 [ 1408.534937][ T31] ? schedule+0x91/0x360 [ 1408.534965][ T31] schedule+0x165/0x360 [ 1408.534992][ T31] schedule_preempt_disabled+0x13/0x30 [ 1408.535016][ T31] __mutex_lock+0x7e6/0x1350 [ 1408.535048][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1408.535081][ T31] ? del_device_store+0xd1/0x360 [ 1408.535109][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1408.535134][ T31] ? __lock_acquire+0xab9/0xd20 [ 1408.535156][ T31] ? sysfs_file_kobj+0x1a/0x230 [ 1408.535197][ T31] del_device_store+0xd1/0x360 [ 1408.535219][ T31] ? sysfs_file_kobj+0x1a/0x230 [ 1408.535243][ T31] ? __pfx_del_device_store+0x10/0x10 [ 1408.535267][ T31] ? sysfs_file_kobj+0x1e4/0x230 [ 1408.535290][ T31] ? sysfs_kf_write+0x166/0x260 [ 1408.535317][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1408.535339][ T31] kernfs_fop_write_iter+0x3ac/0x540 [ 1408.535384][ T31] vfs_write+0x5c9/0xb30 [ 1408.535419][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1408.535452][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1408.535497][ T31] ? do_sys_openat2+0x154/0x1c0 [ 1408.535532][ T31] ksys_write+0x145/0x250 [ 1408.535564][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1408.535597][ T31] ? do_syscall_64+0xbe/0xfa0 [ 1408.535627][ T31] do_syscall_64+0xfa/0xfa0 [ 1408.535652][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1408.535678][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.535700][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1408.535725][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.535748][ T31] RIP: 0033:0x7f4f93d8d97f [ 1408.535767][ T31] RSP: 002b:00007f4f9410f220 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1408.535790][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f4f93d8d97f [ 1408.535807][ T31] RDX: 0000000000000001 RSI: 00007f4f9410f270 RDI: 0000000000000005 [ 1408.535822][ T31] RBP: 00007f4f93e13239 R08: 0000000000000000 R09: 00007f4f9410f077 [ 1408.535837][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1408.535851][ T31] R13: 00007f4f9410f270 R14: 00007f4f94b14620 R15: 0000000000000003 [ 1408.535886][ T31] [ 1408.535917][ T31] [ 1408.535917][ T31] Showing all locks held in the system: [ 1408.535927][ T31] 1 lock held by kthreadd/2: [ 1408.535942][ T31] 1 lock held by kworker/R-kvfre/6: [ 1408.535954][ T31] #0: ffffffff8dfe3c28 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 [ 1408.536015][ T31] 3 locks held by kworker/u8:0/12: [ 1408.536028][ T31] #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1408.536091][ T31] #1: ffffc90000117ba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1408.536148][ T31] #2: ffffffff8f4dfbc8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1408.536208][ T31] 1 lock held by kworker/R-mm_pe/14: [ 1408.536221][ T31] #0: ffffffff8dfe3c28 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x88b/0xdd0 [ 1408.536299][ T31] 1 lock held by khungtaskd/31: [ 1408.536312][ T31] #0: ffffffff8e13d320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1408.536378][ T31] 4 locks held by kworker/1:1/43: [ 1408.536393][ T31] 4 locks held by kworker/u8:4/60: [ 1408.536415][ T31] 3 locks held by kworker/0:2/875: [ 1408.536442][ T31] 1 lock held by kworker/R-krxrp/3390: [ 1408.536456][ T31] #0: ffffffff8dfe3c28 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 [ 1408.536519][ T31] 1 lock held by kworker/R-bat_e/3408: [ 1408.536533][ T31] #0: ffffffff8dfe3c28 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 [ 1408.536591][ T31] 3 locks held by udevd/5196: [ 1408.536605][ T31] 2 locks held by crond/5571: [ 1408.536618][ T31] 2 locks held by getty/5587: [ 1408.536630][ T31] #0: ffff8880301da0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1408.536687][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1408.536750][ T31] 1 lock held by kworker/R-wg-cr/5876: [ 1408.536765][ T31] 3 locks held by kworker/0:4/5893: [ 1408.536777][ T31] #0: ffff8880574e3548 ((wq_completion)wg-kex-wg1#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1408.536841][ T31] #1: ffffc9000430fba0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1408.536915][ T31] #2: ffff88807ec334c0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbd0 [ 1408.536976][ T31] 3 locks held by kworker/1:4/5905: [ 1408.536989][ T31] 3 locks held by kworker/1:5/5919: [ 1408.537003][ T31] 4 locks held by kworker/1:7/5943: [ 1408.537016][ T31] 4 locks held by kworker/1:8/5969: [ 1408.537030][ T31] 2 locks held by kworker/0:6/5978: [ 1408.537043][ T31] 3 locks held by kworker/0:7/9652: [ 1408.537057][ T31] 3 locks held by kworker/0:8/9665: [ 1408.537070][ T31] 1 lock held by kworker/R-bond1/10025: [ 1408.537084][ T31] #0: ffffffff8dfe3c28 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 [ 1408.537143][ T31] 3 locks held by kworker/1:2/16246: [ 1408.537156][ T31] #0: ffff8880574e3548 ((wq_completion)wg-kex-wg1#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1408.537217][ T31] #1: ffffc9001af5fba0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1408.537291][ T31] #2: ffff88807ec334c0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbd0 [ 1408.537350][ T31] 3 locks held by kworker/u8:8/16506: [ 1408.537364][ T31] #0: ffff88802f703148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1408.537421][ T31] #1: ffffc9001adefba0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1408.537485][ T31] #2: ffffffff8f4dfbc8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1408.537546][ T31] 4 locks held by kworker/u8:9/16508: [ 1408.537560][ T31] 4 locks held by kworker/u8:11/16512: [ 1408.537574][ T31] 4 locks held by kworker/u8:12/16515: [ 1408.537587][ T31] 3 locks held by kworker/u8:13/16518: [ 1408.537601][ T31] 3 locks held by kworker/u8:14/16520: [ 1408.537615][ T31] 4 locks held by kworker/u8:15/16523: [ 1408.537628][ T31] #0: ffff88801aa9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1408.537685][ T31] #1: ffffc9001ac17ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1408.537740][ T31] #2: ffffffff8f4d2d30 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 1408.537794][ T31] #3: ffff8880266fd0e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 1408.537861][ T31] 2 locks held by kworker/u8:16/16525: [ 1408.537874][ T31] 2 locks held by syz-executor/17070: [ 1408.537888][ T31] 3 locks held by syz-executor/17096: [ 1408.537902][ T31] 1 lock held by kworker/R-wg-cr/17114: [ 1408.537916][ T31] #0: ffffffff8dfe3c28 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x88b/0xdd0 [ 1408.537975][ T31] 1 lock held by kworker/R-wg-cr/17116: [ 1408.537989][ T31] #0: ffffffff8dfe3c28 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x88b/0xdd0 [ 1408.538049][ T31] 1 lock held by kworker/R-wg-cr/17503: [ 1408.538063][ T31] #0: ffffffff8dfe3c28 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x88b/0xdd0 [ 1408.538121][ T31] 1 lock held by kworker/R-wg-cr/17504: [ 1408.538134][ T31] #0: ffffffff8dfe3c28 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x88b/0xdd0 [ 1408.538193][ T31] 1 lock held by kworker/R-wg-cr/17505: [ 1408.538206][ T31] #0: ffffffff8dfe3c28 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 [ 1408.538266][ T31] 3 locks held by kworker/0:1/20454: [ 1408.538278][ T31] #0: ffff88805c7d0948 ((wq_completion)wg-kex-wg1#20){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1408.538343][ T31] #1: ffffc9000452fba0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1408.538417][ T31] #2: ffff88802fa5b4c0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbd0 [ 1408.538482][ T31] 4 locks held by kworker/1:3/20718: [ 1408.538495][ T31] #0: ffff88805c7d0948 ((wq_completion)wg-kex-wg1#20){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1408.538558][ T31] #1: ffffc9000b9f7ba0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1408.538630][ T31] #2: ffff88806a731308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 1408.538684][ T31] #3: ffff88802fa5b4c0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4bf/0x900 [ 1408.538743][ T31] 1 lock held by kworker/u9:0/21098: [ 1408.538756][ T31] #0: ffffffff8dfe3c28 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 [ 1408.538817][ T31] 7 locks held by syz-executor/21724: [ 1408.538830][ T31] #0: ffff88802fba2420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xb30 [ 1408.538896][ T31] #1: ffff888031e96088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 1408.538959][ T31] #2: ffff888140f55008 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 1408.539030][ T31] #3: ffffffff8ed78828 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1408.539087][ T31] #4: ffff8880266fd0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 1408.539142][ T31] #5: ffff8880266ff250 (&devlink->lock_key#15){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1408.539207][ T31] #6: ffffffff8f4dfbc8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_notifier_net+0x8d/0x2a0 [ 1408.539264][ T31] 4 locks held by syz-executor/21725: [ 1408.539277][ T31] #0: ffff88802fba2420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xb30 [ 1408.539342][ T31] #1: ffff888054d71c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 1408.539406][ T31] #2: ffff888140f55008 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 1408.556965][ T31] #3: ffffffff8ed78828 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1408.557027][ T31] 4 locks held by syz-executor/21809: [ 1408.557044][ T31] 2 locks held by syz.2.4157/21917: [ 1408.557057][ T31] 3 locks held by sed/21921: [ 1408.557070][ T31] 4 locks held by kworker/u8:2/21925: [ 1408.557084][ T31] 7 locks held by kworker/u8:3/21926: [ 1408.557097][ T31] 2 locks held by syz-executor/21927: [ 1408.557111][ T31] [ 1408.557118][ T31] ============================================= [ 1408.557118][ T31] [ 1408.557140][ T31] NMI backtrace for cpu 0 [ 1408.557157][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1408.557201][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1408.557223][ T31] Call Trace: [ 1408.557239][ T31] [ 1408.557256][ T31] dump_stack_lvl+0x189/0x250 [ 1408.557303][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1408.557344][ T31] ? __pfx__printk+0x10/0x10 [ 1408.557377][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1408.557411][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1408.557443][ T31] ? __pfx__printk+0x10/0x10 [ 1408.557474][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1408.557508][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1408.557540][ T31] watchdog+0xf60/0xfa0 [ 1408.557565][ T31] ? watchdog+0x1e2/0xfa0 [ 1408.557590][ T31] kthread+0x711/0x8a0 [ 1408.557620][ T31] ? __pfx_watchdog+0x10/0x10 [ 1408.557638][ T31] ? __pfx_kthread+0x10/0x10 [ 1408.557665][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1408.557687][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1408.557710][ T31] ? __pfx_kthread+0x10/0x10 [ 1408.557736][ T31] ret_from_fork+0x4bc/0x870 [ 1408.557758][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1408.557786][ T31] ? __switch_to_asm+0x39/0x70 [ 1408.557808][ T31] ? __switch_to_asm+0x33/0x70 [ 1408.557829][ T31] ? __pfx_kthread+0x10/0x10 [ 1408.557855][ T31] ret_from_fork_asm+0x1a/0x30 [ 1408.557894][ T31] [ 1408.557902][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1408.557935][ C1] NMI backtrace for cpu 1 [ 1408.557949][ C1] CPU: 1 UID: 0 PID: 21926 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 1408.557968][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1408.557981][ C1] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker [ 1408.558007][ C1] RIP: 0010:validate_chain+0x3/0x2140 [ 1408.558028][ C1] Code: 4c 89 ff 29 f5 0f 82 91 fe ff ff eb b3 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 <41> 56 41 55 41 54 53 48 81 ec e0 00 00 00 49 89 cf 65 48 8b 05 74 [ 1408.558043][ C1] RSP: 0018:ffffc90000a07af0 EFLAGS: 00000086 [ 1408.558057][ C1] RAX: ffffffff9339c8a8 RBX: 0000000000000007 RCX: 03813abc02fcf7df [ 1408.558070][ C1] RDX: 0000000000000000 RSI: ffff88802f740c48 RDI: ffff88802f740000 [ 1408.558082][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81731d25 [ 1408.558094][ C1] R10: ffffc90000a07d58 R11: ffffffff81abbce0 R12: 00000000c6ada59f [ 1408.558107][ C1] R13: ffff88802f740b30 R14: ffff88802f740c48 R15: 03813abc02fcf7df [ 1408.558121][ C1] FS: 0000000000000000(0000) GS:ffff888125e0f000(0000) knlGS:0000000000000000 [ 1408.558135][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1408.558147][ C1] CR2: 00007ff544e2f4e8 CR3: 0000000077498000 CR4: 00000000003526f0 [ 1408.558163][ C1] Call Trace: [ 1408.558170][ C1] [ 1408.558178][ C1] __lock_acquire+0xab9/0xd20 [ 1408.558197][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1408.558216][ C1] lock_acquire+0x120/0x360 [ 1408.558231][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1408.558253][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1408.558272][ C1] ? blake2s_compress+0xe9/0x1b80 [ 1408.558289][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1408.558307][ C1] unwind_next_frame+0xc2/0x2390 [ 1408.558325][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1408.558346][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1408.558365][ C1] ? kernel_fpu_end+0xd2/0x120 [ 1408.558388][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1408.558410][ C1] arch_stack_walk+0x11c/0x150 [ 1408.558432][ C1] ? blake2s_compress+0xe9/0x1b80 [ 1408.558449][ C1] stack_trace_save+0x9c/0xe0 [ 1408.558471][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1408.558494][ C1] ? trace_mm_page_alloc+0x3e/0x150 [ 1408.558513][ C1] kasan_save_track+0x3e/0x80 [ 1408.558535][ C1] ? kasan_save_track+0x3e/0x80 [ 1408.558556][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 1408.558580][ C1] ? kmem_cache_alloc_node_noprof+0x433/0x710 [ 1408.558601][ C1] ? __alloc_skb+0x112/0x2d0 [ 1408.558618][ C1] ? synproxy_send_client_synack_ipv6+0x169/0xca0 [ 1408.558639][ C1] ? nft_synproxy_eval_v6+0x36e/0x560 [ 1408.558660][ C1] ? nft_synproxy_do_eval+0x3d7/0x570 [ 1408.558682][ C1] ? nft_do_chain+0x409/0x1920 [ 1408.558701][ C1] ? nft_do_chain_inet+0x25d/0x340 [ 1408.558728][ C1] ? nf_hook_slow+0xc2/0x220 [ 1408.558746][ C1] ? NF_HOOK+0x206/0x3a0 [ 1408.558767][ C1] ? ip6_input+0x16a/0x270 [ 1408.558790][ C1] ? NF_HOOK+0x30c/0x3a0 [ 1408.558811][ C1] ? __netif_receive_skb+0xd3/0x380 [ 1408.558834][ C1] ? process_backlog+0x60e/0x14f0 [ 1408.558849][ C1] ? __napi_poll+0xc7/0x360 [ 1408.558872][ C1] ? net_rx_action+0x5f7/0xdf0 [ 1408.558886][ C1] ? handle_softirqs+0x283/0x870 [ 1408.558903][ C1] ? do_softirq+0xec/0x180 [ 1408.558919][ C1] ? __local_bh_enable_ip+0x17d/0x1c0 [ 1408.558935][ C1] ? kernel_fpu_end+0xd2/0x120 [ 1408.558955][ C1] ? blake2s_compress+0xe9/0x1b80 [ 1408.558982][ C1] ? __alloc_skb+0x112/0x2d0 [ 1408.559000][ C1] __kasan_slab_alloc+0x6c/0x80 [ 1408.559024][ C1] kmem_cache_alloc_node_noprof+0x433/0x710 [ 1408.559047][ C1] ? __alloc_skb+0x112/0x2d0 [ 1408.559065][ C1] __alloc_skb+0x112/0x2d0 [ 1408.559082][ C1] synproxy_send_client_synack_ipv6+0x169/0xca0 [ 1408.559104][ C1] ? synproxy_pernet+0x45/0x270 [ 1408.559129][ C1] ? __pfx_synproxy_send_client_synack_ipv6+0x10/0x10 [ 1408.559149][ C1] ? nft_symhash_dump+0x1f0/0x270 [ 1408.559168][ C1] ? synproxy_pernet+0x45/0x270 [ 1408.559192][ C1] nft_synproxy_eval_v6+0x36e/0x560 [ 1408.559217][ C1] ? __pfx_nft_synproxy_eval_v6+0x10/0x10 [ 1408.559241][ C1] ? nf_ip_checksum+0x13c/0x510 [ 1408.559264][ C1] nft_synproxy_do_eval+0x3d7/0x570 [ 1408.559289][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1408.559311][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1408.559333][ C1] nft_do_chain+0x409/0x1920 [ 1408.559356][ C1] ? ip6t_do_table+0x1376/0x1560 [ 1408.559378][ C1] ? nf_nat_inet_fn+0x924/0xba0 [ 1408.559402][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1408.559424][ C1] ? ipv6_find_hdr+0xc78/0x1050 [ 1408.559447][ C1] ? nf_nat_ipv6_fn+0x21d/0x2d0 [ 1408.559460][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 1408.559486][ C1] nft_do_chain_inet+0x25d/0x340 [ 1408.559504][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1408.559524][ C1] ? nf_nat_ipv6_local_in+0x14f/0x650 [ 1408.559550][ C1] ? __pfx_nf_nat_ipv6_local_in+0x10/0x10 [ 1408.559578][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1408.559601][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1408.559624][ C1] nf_hook_slow+0xc2/0x220 [ 1408.559645][ C1] NF_HOOK+0x206/0x3a0 [ 1408.559670][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 1408.559693][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1408.559714][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1408.559745][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 1408.559773][ C1] ip6_input+0x16a/0x270 [ 1408.559798][ C1] ? ip6_input+0x23/0x270 [ 1408.559824][ C1] NF_HOOK+0x30c/0x3a0 [ 1408.559846][ C1] ? skb_orphan+0xaf/0xd0 [ 1408.559872][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1408.559897][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1408.559920][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1408.559946][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1408.559975][ C1] __netif_receive_skb+0xd3/0x380 [ 1408.560002][ C1] ? process_backlog+0x2d5/0x14f0 [ 1408.560020][ C1] process_backlog+0x60e/0x14f0 [ 1408.560044][ C1] ? __pfx_process_backlog+0x10/0x10 [ 1408.560061][ C1] ? do_raw_spin_lock+0x121/0x290 [ 1408.560086][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1408.560111][ C1] __napi_poll+0xc7/0x360 [ 1408.560135][ C1] ? skb_defer_free_flush+0x229/0x250 [ 1408.560163][ C1] net_rx_action+0x5f7/0xdf0 [ 1408.560187][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1408.560218][ C1] handle_softirqs+0x283/0x870 [ 1408.560239][ C1] ? do_softirq+0xec/0x180 [ 1408.560260][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1408.560281][ C1] ? kernel_fpu_end+0xc8/0x120 [ 1408.560305][ C1] do_softirq+0xec/0x180 [ 1408.560322][ C1] [ 1408.560328][ C1] [ 1408.560336][ C1] ? __pfx_do_softirq+0x10/0x10 [ 1408.560354][ C1] ? __pfx_do_softirq+0x10/0x10 [ 1408.560375][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 1408.560392][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 1408.560412][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1408.560431][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1408.560451][ C1] ? kernel_fpu_begin_mask+0x2c8/0x3a0 [ 1408.560476][ C1] kernel_fpu_end+0xd2/0x120 [ 1408.560499][ C1] ? __pfx_kernel_fpu_end+0x10/0x10 [ 1408.560521][ C1] ? kernel_fpu_end+0xd2/0x120 [ 1408.560543][ C1] ? __pfx_kernel_fpu_end+0x10/0x10 [ 1408.560568][ C1] blake2s_compress+0xe9/0x1b80 [ 1408.560587][ C1] ? blake2s_compress+0x1b00/0x1b80 [ 1408.560605][ C1] ? chacha_block_generic+0x53/0xc80 [ 1408.560624][ C1] ? __crypto_xor+0x17fa/0x1850 [ 1408.560642][ C1] ? chacha_crypt+0xf31/0xf90 [ 1408.560665][ C1] ? __pfx_blake2s_compress+0x10/0x10 [ 1408.560683][ C1] ? __pfx_blake2s_compress+0x10/0x10 [ 1408.560700][ C1] ? __asan_memset+0x22/0x50 [ 1408.560729][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1408.560749][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1408.560771][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1408.560791][ C1] ? blake2s_update+0x134/0x450 [ 1408.560810][ C1] blake2s_update+0x14b/0x450 [ 1408.560830][ C1] hmac+0x288/0x330 [ 1408.560849][ C1] ? __pfx_hmac+0x10/0x10 [ 1408.560881][ C1] ? kdf+0x115/0x270 [ 1408.560900][ C1] kdf+0x182/0x270 [ 1408.560919][ C1] ? __pfx_kdf+0x10/0x10 [ 1408.560941][ C1] ? blake2s_update+0x255/0x450 [ 1408.560960][ C1] ? __asan_memset+0x22/0x50 [ 1408.560984][ C1] wg_noise_handshake_create_initiation+0x3f1/0x750 [ 1408.561009][ C1] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 1408.561032][ C1] ? __lock_acquire+0xab9/0xd20 [ 1408.561060][ C1] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 1408.561084][ C1] ? seqcount_lockdep_reader_access+0x174/0x1c0 [ 1408.561114][ C1] ? ktime_get_coarse_with_offset+0x102/0x150 [ 1408.561140][ C1] wg_packet_handshake_send_worker+0x163/0x320 [ 1408.561166][ C1] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 1408.561201][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1408.561221][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1408.561240][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1408.561260][ C1] process_scheduled_works+0xae1/0x17b0 [ 1408.561291][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1408.561317][ C1] worker_thread+0x8a0/0xda0 [ 1408.561338][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1408.561362][ C1] ? __kthread_parkme+0x7b/0x200 [ 1408.561386][ C1] kthread+0x711/0x8a0 [ 1408.561411][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1408.561430][ C1] ? __pfx_kthread+0x10/0x10 [ 1408.561454][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1408.561473][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1408.561494][ C1] ? __pfx_kthread+0x10/0x10 [ 1408.561517][ C1] ret_from_fork+0x4bc/0x870 [ 1408.561535][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1408.561557][ C1] ? __switch_to_asm+0x39/0x70 [ 1408.561578][ C1] ? __switch_to_asm+0x33/0x70 [ 1408.561598][ C1] ? __pfx_kthread+0x10/0x10 [ 1408.561621][ C1] ret_from_fork_asm+0x1a/0x30 [ 1408.561648][ C1] [ 1408.576428][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1408.576450][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1408.576480][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1408.576493][ T31] Call Trace: [ 1408.576503][ T31] [ 1408.576513][ T31] dump_stack_lvl+0x99/0x250 [ 1408.576539][ T31] ? __asan_memcpy+0x40/0x70 [ 1408.576566][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1408.576588][ T31] ? __pfx__printk+0x10/0x10 [ 1408.576621][ T31] vpanic+0x237/0x6d0 [ 1408.576649][ T31] ? __pfx_vpanic+0x10/0x10 [ 1408.576678][ T31] ? preempt_schedule_common+0x83/0xd0 [ 1408.576710][ T31] panic+0xb9/0xc0 [ 1408.576737][ T31] ? __pfx_panic+0x10/0x10 [ 1408.576766][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1408.576798][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1408.576832][ T31] watchdog+0xf9f/0xfa0 [ 1408.576857][ T31] ? watchdog+0x1e2/0xfa0 [ 1408.576883][ T31] kthread+0x711/0x8a0 [ 1408.576913][ T31] ? __pfx_watchdog+0x10/0x10 [ 1408.576933][ T31] ? __pfx_kthread+0x10/0x10 [ 1408.576960][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1408.576984][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1408.577007][ T31] ? __pfx_kthread+0x10/0x10 [ 1408.577034][ T31] ret_from_fork+0x4bc/0x870 [ 1408.577058][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1408.577086][ T31] ? __switch_to_asm+0x39/0x70 [ 1408.577109][ T31] ? __switch_to_asm+0x33/0x70 [ 1408.577131][ T31] ? __pfx_kthread+0x10/0x10 [ 1408.577157][ T31] ret_from_fork_asm+0x1a/0x30 [ 1408.577197][ T31] [ 1408.577484][ T31] Kernel Offset: disabled