last executing test programs: 12m14.4547879s ago: executing program 2 (id=310): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000000)={{0x0, 0x18}, {0xf, 0x3}, 0x1ff, 0x3, 0x5}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, 0xffffffffffffffff, 0x1, 0x2003) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x90, 0x30, 0x400, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_vlan={0x78, 0x18, 0x0, 0x0, {{0x9}, {0x4}, {0x4a, 0x6, "4d01a4d46bf86b70ec34b16f8c2a45f408cbdcd767165073a89c6dba2916d007b3575450663de8bbde9302ac7dc876adf5770e608666c1c6092d052f999730f666568da49f32"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7, 0x3}}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x2400c80c}, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) 12m13.245626736s ago: executing program 2 (id=313): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ptrace$ARCH_MAP_VDSO_X32(0x1e, r1, 0xffffffff80000001, 0x2001) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r5, 0x4, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x20004841) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0xd1, &(0x7f0000000040)=0x20f, 0x4) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1}, 0xc) close(r4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000003680)=@migrate={0xac, 0x21, 0x101, 0x0, 0x0, {{@in=@private=0x1, @in=@dev}}, [@migrate={0x50, 0x11, [{@in, @in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, @in6=@rand_addr=' \x01\x00'}]}, @policy_type={0xa, 0x10, {0x2}}]}, 0xac}}, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0xf, 0xb, 0x200, &(0x7f0000000880)="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"}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r9, 0x0, r0, 0x0, 0x6, 0x0) 12m3.670686702s ago: executing program 2 (id=339): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000540)=[{&(0x7f00000002c0)="b5640aae1e407af01eecff9e22e152a958b96c15ffd051d17c6c702f21a8abb26b561e7af56b164829c35642692c102092e1f43782559cb76acaa20f83d5e807ad43b3e153c8df10b894d755e849d01e91b7b49af88a501bc937c19203d32e33610f090c9d9e0d5972ac64142f8f4b71f2d3ce9c43c9bec897b53fee3e5f94497031ff2e460d2c011dfd60030db5a289bde09ac8326a85bc8791473d2828d1e28b5f20e286b061c4dadef878b72e6095841189db4da6e671677ca72a3c1b69c2ec25d3ce", 0xc4}, {&(0x7f0000003200)="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", 0x14e}, {&(0x7f0000000000)="9eb8a2c0e241fb0402ac8d04ecbc724648d79b443d283855fdba1e1dc6283591a8a07eb1436788b6b641ed5ea90be62fc7499c9b017d2e73973395411b7efb244a226ba0ae7657c57101711c5aa138abd03dec1e0899824e678aced03a92fec128f69d27d84ee2ff2e4ad7a3db73f4f12d0728bada715bf5abce312346bb7d7345e8df1fc10fa733c98030cb193341700961aa2ccb9f0f029190a1d34386c73e7017cf0fe0275d2d6f9531b12f12e29b903f30c3228aa9ab3a503e9512", 0xbd}, {&(0x7f00000007c0)="4f0461e980a3df614c952ba937542c3956c268ef9da7fc364c6d5c543c3bd84159a349884fb4df8936363169ce8541c090bb5871df329e56747592fa4d29a09dcb4c416503ec1113680af76cba6417576ac2c0d3570f91a9c661f10e9bdab3c038f68844db4a19a8a613d78adb2805e27a1dea217288306169ac437c2401514510725ff144e75b83b8c67735520151c1018c3542bdfa2cae78aeb5d03bf4018be0f581f55e82cc1e851b8585d48a881144bfd5e96b52b62e62abe7ace71093fe8779d41feea0eb401dc005f2e3fe47320e7f945fb04e06c713f062ca47794f9c0b7fa88ccfacc4a51a4e816e0cb8320000000000000000ff512190d1129892fd541a0fbc9a41d70cd0d4501fed5545cd04b7800814bcbf492339bbfe784baba895beda447447a447e088a8d7cb795b3543a8cd8d8efb830dabc88b5b6466cd1d903833fca0e1049480810da129e746e2c9726a846ce85003a6bb9949e5dd140ab97a001c91323d5cb6648d4f61d40d4951ae36a1a404ba3452ae9a969c16a0918b4afe0b7b6afe4d59d8abfed8da45e7b38ce7c6c4daf306d0136c353c109f0a63c26e763dc2fcd93b7c9b7143823cd8272533aa2eb47f873da2e1aeba66332990f5033c712108f71bc055f29317d8dd9b227b524d61381ed55fdb83ee0849699dae2e0bb675bf07392f4a0303f2498c892988420f1e144e73eb89146ccde129625478ae391d7ed1d6f5fc03c603c699250ff4801890eda63df41b0b9d619b2dad24798faf47863f79ee52ee40e8550c52c28a795377d934e9b3cb2f9f0ae973055288f5ebbb6a193e5cf89d3dfff60d4e545abda64b1c55d315931540117b96e72a5c99d165d19e12176acd226a9ec38d6889c913b8c98b3a1666ec9b378655838df06b8318691cded6314ce3", 0x28d}], 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="96f5", 0x578}], 0x1, 0x0, 0x0, 0x900}, 0x0) 12m3.397963921s ago: executing program 2 (id=343): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r0, r0, 0x0, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) ioctl$TUNGETVNETBE(r6, 0x800454df, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) bind$inet6(r5, 0x0, 0x0) sendmmsg$inet6(r5, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000200)) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) shutdown(r5, 0x2) 11m59.344314817s ago: executing program 2 (id=348): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x668, 0x0, 0xd0, 0x1c0, 0x1c0, 0x320, 0x598, 0x598, 0x598, 0x598, 0x598, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 'wg1\x00', {0x5}}}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2, [], [], [], 0x400}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [0x0, 0xff], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local, [], [0x0, 0x0, 0xffffff00]}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c8) 11m58.132275912s ago: executing program 2 (id=350): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ptrace$ARCH_MAP_VDSO_X32(0x1e, r1, 0xffffffff80000001, 0x2001) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r5, 0x4, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x20004841) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0xd1, &(0x7f0000000040)=0x20f, 0x4) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1}, 0xc) close(r4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000003680)=@migrate={0xac, 0x21, 0x101, 0x0, 0x0, {{@in=@private=0x1, @in=@dev}}, [@migrate={0x50, 0x11, [{@in, @in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, @in6=@rand_addr=' \x01\x00'}]}, @policy_type={0xa, 0x10, {0x2}}]}, 0xac}}, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0xf, 0xb, 0x200, &(0x7f0000000880)="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"}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r9, 0x0, r0, 0x0, 0x6, 0x0) 11m42.718214168s ago: executing program 32 (id=350): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ptrace$ARCH_MAP_VDSO_X32(0x1e, r1, 0xffffffff80000001, 0x2001) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r5, 0x4, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x20004841) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0xd1, &(0x7f0000000040)=0x20f, 0x4) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1}, 0xc) close(r4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000003680)=@migrate={0xac, 0x21, 0x101, 0x0, 0x0, {{@in=@private=0x1, @in=@dev}}, [@migrate={0x50, 0x11, [{@in, @in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, @in6=@rand_addr=' \x01\x00'}]}, @policy_type={0xa, 0x10, {0x2}}]}, 0xac}}, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0xf, 0xb, 0x200, &(0x7f0000000880)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309000000000000000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645093fcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31265aba9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff4175b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a2b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6d07002ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f63520cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc478a305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r9, 0x0, r0, 0x0, 0x6, 0x0) 13.231200835s ago: executing program 4 (id=3399): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/sockstat\x00') r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x115, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x1, 0x400}) close_range(r0, 0xffffffffffffffff, 0x0) 12.336476572s ago: executing program 4 (id=3401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000500)=""/194, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000000c0)={0xf7c8561671f7aa05, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x63b2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r3, 0x5421, &(0x7f0000001100)=0x2000000009) connect$bt_sco(r3, &(0x7f0000000040)={0x1f, @fixed}, 0x8) 11.333129619s ago: executing program 4 (id=3409): socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80800, 0x4) io_uring_setup(0x72e, &(0x7f0000000280)={0x0, 0x8c78, 0x0, 0x0, 0x2ee}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) eventfd2(0x2, 0x800) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0) 6.371816671s ago: executing program 4 (id=3427): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x25c3, 0x10000) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$inet6(0xa, 0x800, 0x4002008) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) syz_open_dev$dri(&(0x7f0000000080), 0x8, 0x1100) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) 6.037896751s ago: executing program 3 (id=3430): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r0, 0x10d, 0xfd, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0x2c) 6.00619012s ago: executing program 3 (id=3431): mkdir(&(0x7f0000000140)='./control\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = inotify_init1(0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000340)={0x0, 0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x80}, 0xe) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000040)={r4, @in={{0x2, 0x4e20, @empty}}, 0x16, 0x7, 0x6, 0x0, 0x30, 0xf72, 0x8}, &(0x7f0000000140)=0x9c) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa4000960) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000000)='./control\x00', 0x42000400) rmdir(&(0x7f0000000100)='./control\x00') 4.208018224s ago: executing program 0 (id=3437): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000080001"], 0x1c}}, 0x0) 3.494954482s ago: executing program 0 (id=3439): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x610, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_bpf={{0x8}, {0x4a8, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x4, 0x2, 0x2, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xa, 0x1}}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0x1}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff3, 0xfff3}}, @TCA_BPF_ACT={0x450, 0x1, [@m_skbedit={0x94, 0x2, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xbd}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0xb}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x6, 0x9}}]}, {0x47, 0x6, "ff98f8a247352d5d640305fc1c38d43ee762861ec8e69c92fa4e8a79c3b236b9485f2c4519084c29a1231e7f35441ad8f0f3ce2c9c7e4226dfa6bf807a8e2bb43e0f17"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0x138, 0x1d, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0xd, 0x8, 0x3, 0x7}, 0x7}}]}, {0xd9, 0x6, "802397e6dcb8c3cb6d5f04e555a772dc914b99729db1319db5cd1a0ca190a248935e25c5f06b562520857a2c35a8d4d10bab2599d7e03cb98581ce26a6d7fc8230ccf7f656d692b9da5f233e355ebda8004fd0cdc17bacde35bc98b59861f015ed82f2581fb41c14f735ceeda0bf4bbc5548b81ee1b3f4d0cdf8472d104de4e9f6a8abcc578b0a7a4fb82c497bcbd827e36d4de90a575e43dea40400ea8f2f9976fe973a2ff14d002a86b01df4a3a6c81193f162b549cd1eb38d2b02538ff2d3cf499e72571048079336b5ac19f7b87ca226e64dcc"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0xa0, 0xb, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xfffc}, @TCA_IFE_TYPE={0x6, 0x5, 0xfff7}, @TCA_IFE_TYPE={0x6, 0x5, 0xa}]}, {0x5d, 0x6, "cc4be6c6a104326842d18c8d6ccea2e56ba53f37611edeaa9d40ea81087b54a2a0a1e40636da2cfd865af8ccf46dedf09dc91261046745b56d8a7ca38d67dade250bfb20d91b1df74f78eda7e21a7590b1ae81ec074aafacf2"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_mpls={0x9c, 0x20, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xce4a, 0x4886, 0x2000000e, 0x9, 0x7fff}, 0x4}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8, 0x7, 0x20000000, 0x3, 0xffffffff}, 0x2}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88a8}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x25, 0x6, "c4af9d2908931087f9dc07ccfeb5f5d78b317229b0411c68ae30b2b8ff40058284"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x74, 0x6, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}]}, {0x39, 0x6, "ed2511adc95be372f22d545c2c4592ec6cd4ccd68f04461f25c35d6c4adf1ebd919e2c14afaef6238e3b06aa8eac5836901c121c49"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0xd0, 0x11, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x2, 0x4}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x9, 0x8, 0x3, 0x8}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc, 0xffff}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xbb4}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}]}, {0x61, 0x6, "0cfe66f7c763189e41cb95acc1a8e692d096a9de466d06b22077b0cd684faf273144014a8f712277ba4d0a4a2db9e08d1a106d0cdc5fe7aea0a3f33dca642cd14a3bd5e2f097fa846a0f357aae80f10eb6e7bc89e07eb87f00c8fa1159"}, {0xc}, {0xc, 0x8, {0x1}}}}]}, @TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0x0, 0xff, 0xff, 0xffffff00]}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e21}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0xcc, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x59}, @TCA_ROUTE4_ACT={0xb0, 0x6, [@m_nat={0x78, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x38}, @rand_addr, @loopback}}]}, {0x25, 0x6, "3eaed48f5023f5c36bc9d8619f3e2af20800000000000000a40bc384135c74eb81"}, {0xc}, {0xc}}}, @m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x610}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3.414151121s ago: executing program 3 (id=3441): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) socket$kcm(0x11, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fc000000080011000700000008000e008000000008", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.385579712s ago: executing program 5 (id=3442): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000fb007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e4845500a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491dc6aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de453f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5b5a182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cc09b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291beea56ed7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124e16b64a5d1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba515d4cc28d702287fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4d"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x3f, 0x29, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee", 0x0, 0x3}, 0x50) 3.384661361s ago: executing program 0 (id=3443): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xfffffe14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x13, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@random="cebf901584bc", @random="6a177a00", @val={@void, {0x8100, 0x0, 0x1, 0x3}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast}}}}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, 0x0) close(r7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) epoll_create(0x47f) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) 3.281759011s ago: executing program 5 (id=3444): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(0x0, 0x0, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) 3.209159421s ago: executing program 3 (id=3446): creat(&(0x7f0000000000)='./file0\x00', 0x2a) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000140)={0x28, 0x2, 0x0, {0x1, 0xe2}}, 0x28) 3.10177406s ago: executing program 1 (id=3447): syz_emit_ethernet(0x52, &(0x7f0000000780)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@rr={0x7, 0xb, 0x0, [@broadcast, @broadcast]}, @timestamp={0x44, 0x4}, @timestamp_addr={0x44, 0x4}]}}}}}}}, 0x0) 3.06754812s ago: executing program 3 (id=3448): iopl(0x3) r0 = socket$netlink(0x10, 0x3, 0x0) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) syslog(0x9, 0x0, 0x0) 2.92584135s ago: executing program 1 (id=3449): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @rand_addr=0x64010102}, 0x0, 0x2, 0x0, 0x2}}, 0x26) 2.87778858s ago: executing program 5 (id=3450): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[], 0x14}}, 0x8018) accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2.685088069s ago: executing program 4 (id=3451): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xfffffe14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x13, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@random="cebf901584bc", @random="6a177a00", @val={@void, {0x8100, 0x0, 0x1, 0x3}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast}}}}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, 0x0) close(r7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) epoll_create(0x47f) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) 2.409945828s ago: executing program 0 (id=3452): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x2000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {}, {0x0, 0xd}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0xc, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x40}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.409625248s ago: executing program 1 (id=3453): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) 2.408798088s ago: executing program 5 (id=3454): bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2d, 0x0, @broadcast}}, 0x24) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbbb08004a00003000000000ef029078e0000001ac1414aa44141c230a01010080008001ffffffffffffffff177c9078ac141424"], 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 2.345121668s ago: executing program 3 (id=3455): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000001914000000110001"], 0xd8}}, 0x80) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd0100000000001400000060"], 0xfdef) 1.007967933s ago: executing program 1 (id=3456): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0xfff, 0x0, 0xfffffffd, 0xfffffffc, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x20, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9eb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) r1 = dup(r0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r1, 0x5501) 833.750462ms ago: executing program 0 (id=3457): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) 343.647751ms ago: executing program 1 (id=3458): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x1f) 253.489981ms ago: executing program 5 (id=3459): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "0daf7461cfccf6ce"}, 0x28) 101.70331ms ago: executing program 1 (id=3460): unshare(0x400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) ptrace(0x421d, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) 101.47675ms ago: executing program 0 (id=3461): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x5b76c000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) unlinkat(0xffffffffffffff9c, 0x0, 0x0) 791.6µs ago: executing program 5 (id=3462): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xfffffe14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x13, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@random="cebf901584bc", @random="6a177a00", @val={@void, {0x8100, 0x0, 0x1, 0x3}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast}}}}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, 0x0) close(r7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) epoll_create(0x47f) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) 0s ago: executing program 4 (id=3463): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) kernel console output (not intermixed with test programs): ="syz.0.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80ee19d29 code=0x7fc00000 [ 745.344729][ T26] audit: type=1326 audit(1734600951.208:6605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12812 comm="syz.0.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80ee19d29 code=0x7fc00000 [ 745.357893][T12736] 8021q: adding VLAN 0 to HW filter on device team0 [ 745.391092][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 745.391764][ T26] audit: type=1326 audit(1734600951.208:6606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12812 comm="syz.0.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80ee19d29 code=0x7fc00000 [ 745.407813][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 745.430995][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 745.440477][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 745.450206][ T26] audit: type=1326 audit(1734600951.208:6607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12812 comm="syz.0.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80ee19d29 code=0x7fc00000 [ 745.474540][ T4437] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.481710][ T4437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.496312][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 745.621261][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 745.886107][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 746.341428][ T4437] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.348607][ T4437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 746.370690][ T1108] Bluetooth: hci2: command 0x0419 tx timeout [ 746.521523][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 746.562674][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 746.648595][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 746.683873][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 746.695448][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 746.708897][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 746.730801][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 746.751202][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 746.777435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 746.807412][T12736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 746.832098][T12736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 746.849912][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 746.867733][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 747.041680][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 747.049769][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 747.062381][T12736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.089458][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.095843][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.694469][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 747.704148][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 750.166349][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 750.246390][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 750.298362][ T7] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: 90 failed: -71 [ 750.309269][ T7] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 750.310227][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 750.327269][ T7] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 750.342293][ T7] f81534: probe of 2-1:0.12 failed with error -71 [ 750.369090][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 750.383923][ T7] usb 2-1: USB disconnect, device number 11 [ 750.407549][T12736] device veth0_vlan entered promiscuous mode [ 750.434715][T12736] device veth1_vlan entered promiscuous mode [ 750.492315][T12736] device veth0_macvtap entered promiscuous mode [ 750.579578][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 750.604330][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 750.635525][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 750.746557][T12736] device veth1_macvtap entered promiscuous mode [ 750.773201][ T26] kauditd_printk_skb: 981 callbacks suppressed [ 750.773219][ T26] audit: type=1326 audit(1734600956.918:7589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12868 comm="syz.0.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80ee19d29 code=0x7fc00000 [ 751.858877][T12736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.974369][T12736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.987400][T12736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.999958][T12736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.010333][T12736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.026847][T12736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.026975][ T26] audit: type=1326 audit(1734600956.918:7590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12868 comm="syz.0.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe80ee19d29 code=0x7fc00000 [ 752.037457][T12736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.079577][T12880] Cannot find set identified by id 0 to match [ 752.111580][T12736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.129213][T12736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 752.144386][ T26] audit: type=1326 audit(1734600956.918:7591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12868 comm="syz.0.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80ee19d29 code=0x7fc00000 [ 752.147136][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 752.193376][ T26] audit: type=1326 audit(1734600956.918:7592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12868 comm="syz.0.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80ee19d29 code=0x7fc00000 [ 752.223629][ T26] audit: type=1326 audit(1734600956.918:7593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12868 comm="syz.0.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80ee19d29 code=0x7fc00000 [ 752.254959][ T26] audit: type=1326 audit(1734600956.918:7594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12868 comm="syz.0.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80ee19d29 code=0x7fc00000 [ 752.257494][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 752.284324][ T26] audit: type=1326 audit(1734600956.918:7595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12868 comm="syz.0.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80ee19d29 code=0x7fc00000 [ 752.370136][ T26] audit: type=1326 audit(1734600956.918:7596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12868 comm="syz.0.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80ee19d29 code=0x7fc00000 [ 752.377957][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 752.416583][ T26] audit: type=1326 audit(1734600956.918:7597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12868 comm="syz.0.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80ee19d29 code=0x7fc00000 [ 752.443020][ T26] audit: type=1326 audit(1734600956.918:7598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12868 comm="syz.0.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80ee19d29 code=0x7fc00000 [ 752.545826][T12736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.596751][T12736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.643878][T12736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.684943][T12736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.713188][T12736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.738810][T12736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.768005][T12736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 752.809324][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 752.835850][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 753.017639][T12736] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.225472][T12736] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.253865][T12736] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.382819][T12736] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.378403][ T4413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.441103][ T4413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.299154][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 755.412459][ T5492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.462085][ T5492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.515805][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 756.040094][T12923] bridge0: port 3(syz_tun) entered blocking state [ 756.046565][T12923] bridge0: port 3(syz_tun) entered disabled state [ 756.054110][T12923] device syz_tun entered promiscuous mode [ 756.060138][T12923] bridge0: port 3(syz_tun) entered blocking state [ 756.066676][T12923] bridge0: port 3(syz_tun) entered forwarding state [ 756.183196][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 756.183214][ T26] audit: type=1326 audit(1734600962.318:7656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12920 comm="syz.4.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a24b4cd29 code=0x7fc00000 [ 756.306274][ T26] audit: type=1326 audit(1734600962.318:7657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12920 comm="syz.4.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a24b4cd29 code=0x7fc00000 [ 756.378354][ T26] audit: type=1326 audit(1734600962.318:7658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12920 comm="syz.4.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a24b4cd29 code=0x7fc00000 [ 756.408436][ T26] audit: type=1326 audit(1734600962.318:7659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12920 comm="syz.4.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a24b4cd29 code=0x7fc00000 [ 756.432329][ T26] audit: type=1326 audit(1734600962.318:7660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12920 comm="syz.4.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a24b4cd29 code=0x7fc00000 [ 756.457193][ T26] audit: type=1326 audit(1734600962.318:7661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12920 comm="syz.4.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a24b4cd29 code=0x7fc00000 [ 756.487083][ T26] audit: type=1326 audit(1734600962.318:7662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12920 comm="syz.4.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a24b4cd29 code=0x7fc00000 [ 756.563797][ T26] audit: type=1326 audit(1734600962.318:7663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12920 comm="syz.4.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a24b4cd29 code=0x7fc00000 [ 756.588739][ T26] audit: type=1326 audit(1734600962.318:7664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12920 comm="syz.4.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a24b4cd29 code=0x7fc00000 [ 756.612205][ T26] audit: type=1326 audit(1734600962.318:7665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12920 comm="syz.4.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a24b4cd29 code=0x7fc00000 [ 757.103845][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 758.859734][T12953] netlink: 'syz.0.2662': attribute type 1 has an invalid length. [ 758.868224][T12953] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.2662'. [ 758.883894][T12953] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2662'. [ 760.411677][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 760.807140][T12992] netlink: 'syz.3.2673': attribute type 1 has an invalid length. [ 760.815130][T12992] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.2673'. [ 760.831919][T12992] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2673'. [ 760.842223][ T7151] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 761.168436][ T7151] usb 2-1: Using ep0 maxpacket: 16 [ 761.328568][ T7151] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.382264][ T7151] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 761.448275][ T7151] usb 2-1: New USB device found, idVendor=04b3, idProduct=3105, bcdDevice= 0.00 [ 761.477043][ T7151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.520871][ T7151] usb 2-1: config 0 descriptor?? [ 762.389169][ T7151] hid (null): bogus close delimiter [ 762.396617][ T7151] lenovo 0003:04B3:3105.0004: collection stack underflow [ 762.424328][ T7151] lenovo 0003:04B3:3105.0004: item 0 4 0 12 parsing failed [ 762.438767][ T7151] lenovo 0003:04B3:3105.0004: hid_parse failed [ 762.457335][ T7151] lenovo: probe of 0003:04B3:3105.0004 failed with error -22 [ 762.710633][T11991] usb 2-1: USB disconnect, device number 12 [ 763.183897][ T26] kauditd_printk_skb: 8087 callbacks suppressed [ 763.183915][ T26] audit: type=1326 audit(1734600969.328:15753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13026 comm="syz.3.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72137b3d29 code=0x7fc00000 [ 763.219160][ T26] audit: type=1326 audit(1734600969.328:15754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13026 comm="syz.3.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f72137b3d29 code=0x7fc00000 [ 763.250612][ T26] audit: type=1326 audit(1734600969.328:15755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13026 comm="syz.3.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72137b3d29 code=0x7fc00000 [ 763.281136][ T26] audit: type=1326 audit(1734600969.328:15756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13026 comm="syz.3.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72137b3d29 code=0x7fc00000 [ 763.308267][ T13] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 763.308598][T13033] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2686'. [ 763.325380][ T26] audit: type=1326 audit(1734600969.328:15757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13026 comm="syz.3.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72137b3d29 code=0x7fc00000 [ 763.364413][ T26] audit: type=1326 audit(1734600969.328:15758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13026 comm="syz.3.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72137b3d29 code=0x7fc00000 [ 763.393845][ T26] audit: type=1326 audit(1734600969.328:15759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13026 comm="syz.3.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72137b3d29 code=0x7fc00000 [ 763.426550][ T26] audit: type=1326 audit(1734600969.328:15760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13026 comm="syz.3.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72137b3d29 code=0x7fc00000 [ 763.458551][ T26] audit: type=1326 audit(1734600969.328:15761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13026 comm="syz.3.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72137b3d29 code=0x7fc00000 [ 763.486049][ T26] audit: type=1326 audit(1734600969.328:15762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13026 comm="syz.3.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72137b3d29 code=0x7fc00000 [ 763.665194][T13036] netlink: 'syz.1.2687': attribute type 1 has an invalid length. [ 763.674066][T13036] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.2687'. [ 763.693729][T13036] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2687'. [ 763.989530][ T13] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 764.001916][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.018343][ T13] usb 1-1: config 0 descriptor?? [ 764.316001][T13040] ip6t_REJECT: ECHOREPLY is not supported [ 764.557326][ T13] playstation 0003:054C:0DF2.0005: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 765.488374][ T13] playstation 0003:054C:0DF2.0005: Invalid byte count transferred, expected 20 got 0 [ 765.497916][ T13] playstation 0003:054C:0DF2.0005: Failed to retrieve DualSense pairing info: -22 [ 765.508913][ T13] playstation 0003:054C:0DF2.0005: Failed to get MAC address from DualSense [ 765.517958][ T13] playstation 0003:054C:0DF2.0005: Failed to create dualsense. [ 765.530484][T13067] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2697'. [ 765.541129][ T13] playstation: probe of 0003:054C:0DF2.0005 failed with error -22 [ 765.767479][ T7151] usb 1-1: USB disconnect, device number 17 [ 766.011059][T13080] netlink: 'syz.3.2701': attribute type 1 has an invalid length. [ 766.018951][T13080] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.2701'. [ 766.045663][T13080] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2701'. [ 768.265285][T13116] netlink: 'syz.1.2713': attribute type 1 has an invalid length. [ 768.273231][T13116] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.2713'. [ 768.291772][T13116] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2713'. [ 769.380482][ T26] kauditd_printk_skb: 1750 callbacks suppressed [ 769.380500][ T26] audit: type=1326 audit(1734600975.528:17513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13123 comm="syz.1.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008732cd29 code=0x7fc00000 [ 770.264825][T13149] netlink: 'syz.0.2725': attribute type 1 has an invalid length. [ 770.272742][T13149] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.2725'. [ 770.291538][T13149] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2725'. [ 770.793292][T13148] ip6t_REJECT: ECHOREPLY is not supported [ 772.151584][ T26] audit: type=1326 audit(1734600978.088:17514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13168 comm="syz.0.2731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80ee19d29 code=0x7fc00000 [ 772.628920][ T7151] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 773.178260][ T7151] usb 5-1: Using ep0 maxpacket: 16 [ 773.728423][ T7151] usb 5-1: too many configurations: 60, using maximum allowed: 8 [ 773.914753][T13191] netlink: 'syz.0.2737': attribute type 1 has an invalid length. [ 773.922609][T13191] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.2737'. [ 773.943531][T13191] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2737'. [ 774.500161][ T26] audit: type=1326 audit(1734600980.648:17515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13192 comm="syz.0.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80ee19d29 code=0x7ffc0000 [ 774.642285][ T26] audit: type=1326 audit(1734600980.678:17516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13192 comm="syz.0.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7fe80ee19d29 code=0x7ffc0000 [ 774.793673][ T26] audit: type=1326 audit(1734600980.678:17517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13192 comm="syz.0.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80ee19d29 code=0x7ffc0000 [ 774.908322][ T7151] usb 5-1: unable to read config index 0 descriptor/all [ 774.916388][ T7151] usb 5-1: can't read configurations, error -71 [ 775.628171][ T26] audit: type=1326 audit(1734600981.768:17518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13207 comm="syz.3.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72137b3d29 code=0x7fc00000 [ 775.770222][T13218] Cannot find set identified by id 0 to match [ 777.114114][T13229] netlink: 'syz.5.2749': attribute type 1 has an invalid length. [ 777.122483][T13229] netlink: 1284 bytes leftover after parsing attributes in process `syz.5.2749'. [ 777.134038][T13229] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2749'. [ 777.471391][ T4300] device hsr_slave_0 left promiscuous mode [ 777.489641][ T4300] device hsr_slave_1 left promiscuous mode [ 777.525818][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 777.568369][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 777.594463][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 777.623869][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 777.654723][ T4300] device bridge_slave_1 left promiscuous mode [ 777.691431][ T4300] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.737732][ T4300] device bridge_slave_0 left promiscuous mode [ 777.766772][ T4300] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.796242][T13245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2753'. [ 777.866640][ T4300] device veth1_macvtap left promiscuous mode [ 777.894536][ T4300] device veth0_macvtap left promiscuous mode [ 777.924757][ T4300] device veth1_vlan left promiscuous mode [ 777.955976][ T4300] device veth0_vlan left promiscuous mode [ 778.657498][ T4300] bond1 (unregistering): Released all slaves [ 779.575683][ T4300] team0 (unregistering): Port device team_slave_1 removed [ 779.642782][ T4300] team0 (unregistering): Port device team_slave_0 removed [ 779.691963][ T4300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 780.108906][ T4300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 780.566426][ T4300] bond0 (unregistering): Released all slaves [ 780.677820][T13271] netlink: 'syz.3.2762': attribute type 1 has an invalid length. [ 780.688033][T13271] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.2762'. [ 780.794837][T13271] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2762'. [ 781.768266][ T1108] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 782.158337][ T1108] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 782.196952][ T1108] usb 2-1: config 0 has no interface number 0 [ 782.226512][ T1108] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 783.065255][ T1108] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 783.076173][ T1108] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 783.089372][ T1108] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 783.124980][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.315742][ T1108] usb 2-1: config 0 descriptor?? [ 783.348619][T13289] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 783.454194][ T1108] ldusb 2-1:0.55: Interrupt in endpoint not found [ 783.675385][ T26] audit: type=1326 audit(1734600989.818:17519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13304 comm="syz.0.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80ee19d29 code=0x7fc00000 [ 784.041635][T13315] netlink: 'syz.3.2775': attribute type 1 has an invalid length. [ 784.049510][T13315] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.2775'. [ 784.066569][T13315] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2775'. [ 784.116437][ T13] usb 2-1: USB disconnect, device number 13 [ 788.385827][T13343] tipc: Can't bind to reserved service type 1 [ 788.743270][T13352] netlink: 'syz.1.2787': attribute type 1 has an invalid length. [ 788.751148][T13352] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.2787'. [ 788.762484][T13352] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2787'. [ 789.193752][ T26] audit: type=1326 audit(1734600995.338:17520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13346 comm="syz.0.2786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80ee19d29 code=0x7fc00000 [ 789.673193][T13362] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2788'. [ 789.946945][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 790.167819][T13381] tipc: Started in network mode [ 790.194495][T13381] tipc: Node identity 7f000001, cluster identity 4711 [ 790.237179][T13381] tipc: Enabled bearer , priority 10 [ 790.425276][T13390] netlink: 'syz.3.2800': attribute type 1 has an invalid length. [ 790.433195][T13390] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.2800'. [ 790.452100][T13390] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2800'. [ 791.710039][ T5366] tipc: Node number set to 2130706433 [ 791.713035][ T26] audit: type=1326 audit(1734600997.638:17521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13391 comm="syz.4.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a24b4cd29 code=0x7fc00000 [ 792.511609][T13413] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2807'. [ 792.991067][T13427] virtio-fs: tag <(null)> not found [ 793.433966][T13429] netlink: 'syz.0.2812': attribute type 1 has an invalid length. [ 793.441883][T13429] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.2812'. [ 793.459282][T13429] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2812'. [ 794.150752][T13434] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2814'. [ 794.164993][T13434] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2814'. [ 794.528254][ T26] audit: type=1326 audit(1734601000.658:17522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13432 comm="syz.0.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80ee19d29 code=0x7fc00000 [ 794.881643][T13448] Cannot find set identified by id 0 to match [ 795.002985][T13450] device wlan0 entered promiscuous mode [ 795.457397][T13463] netlink: 'syz.1.2825': attribute type 1 has an invalid length. [ 795.465316][T13463] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.2825'. [ 795.481417][T13463] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2825'. [ 796.658246][ T26] audit: type=1326 audit(1734601002.758:17523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13468 comm="syz.1.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008732cd29 code=0x7fc00000 [ 797.220901][T13487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2834'. [ 798.791620][T13521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2846'. [ 798.910926][T13521] device wlan0 entered promiscuous mode [ 799.698343][T11991] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 800.108610][T11991] usb 2-1: config 0 has an invalid interface number: 210 but max is 0 [ 800.127145][T11991] usb 2-1: config 0 has no interface number 0 [ 800.313706][T11991] usb 2-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=c3.54 [ 800.340624][T11991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.664275][ T26] audit: type=1326 audit(1734601006.808:17524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13537 comm="syz.3.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72137b3d29 code=0x7fc00000 [ 800.993528][T11991] usb 2-1: Product: syz [ 800.997735][T11991] usb 2-1: Manufacturer: syz [ 801.002461][T11991] usb 2-1: SerialNumber: syz [ 801.017160][T11991] usb 2-1: config 0 descriptor?? [ 801.060701][T11991] gspca_main: kinect-2.14.0 probing 045e:02bf [ 801.151154][T13555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2859'. [ 801.178696][ T5366] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 801.219587][T13557] virtio-fs: tag <(null)> not found [ 801.508787][T11991] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 801.548544][ T5366] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 801.610095][ T5366] usb 5-1: config 0 has no interface number 0 [ 801.753544][ T5366] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 801.919103][T11991] usb 6-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 801.968720][T11991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.980115][ T5366] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 802.012548][T11991] usb 6-1: config 0 descriptor?? [ 802.017809][ T5366] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 802.038370][ T5366] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 802.066367][ T5366] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.111758][T11991] usb 6-1: selecting invalid altsetting 3 [ 802.131415][ T5366] usb 5-1: config 0 descriptor?? [ 802.148871][T13543] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 802.157222][T11991] comedi comedi0: could not set alternate setting 3 in high speed [ 802.178522][ T5366] ldusb 5-1:0.55: Interrupt in endpoint not found [ 802.185135][T11991] usbduxsigma 6-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 802.211428][ T5366] usb 2-1: USB disconnect, device number 14 [ 802.242680][T11991] usbduxsigma: probe of 6-1:0.0 failed with error -22 [ 802.424677][T11991] usb 5-1: USB disconnect, device number 6 [ 803.142722][T13578] ip6t_REJECT: ECHOREPLY is not supported [ 803.957329][T11991] usb 6-1: USB disconnect, device number 8 [ 804.463153][ T26] audit: type=1326 audit(1734601010.608:17525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13589 comm="syz.1.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008732cd29 code=0x7fc00000 [ 804.884992][ T26] audit: type=1326 audit(1734601011.028:17526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13604 comm="syz.0.2875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80ee19d29 code=0x7ffc0000 [ 804.933516][ T26] audit: type=1326 audit(1734601011.028:17527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13604 comm="syz.0.2875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fe80ee19d29 code=0x7ffc0000 [ 805.070624][ T26] audit: type=1326 audit(1734601011.028:17528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13604 comm="syz.0.2875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80ee19d29 code=0x7ffc0000 [ 805.269728][ T26] audit: type=1326 audit(1734601011.028:17529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13604 comm="syz.0.2875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80ee19d29 code=0x7ffc0000 [ 805.293754][ T26] audit: type=1326 audit(1734601011.028:17530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13604 comm="syz.0.2875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fe80ee19d29 code=0x7ffc0000 [ 805.818306][T13626] ip6t_REJECT: ECHOREPLY is not supported [ 805.825304][ T26] audit: type=1326 audit(1734601011.028:17531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13604 comm="syz.0.2875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80ee19d29 code=0x7ffc0000 [ 805.868242][ T26] audit: type=1326 audit(1734601011.028:17532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13604 comm="syz.0.2875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80ee19d29 code=0x7ffc0000 [ 806.187979][T13639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2887'. [ 806.233879][T13639] device wlan0 entered promiscuous mode [ 806.416818][T13650] device batadv_slave_1 entered promiscuous mode [ 806.454655][T13650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 806.588369][ T13] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 806.669953][T13650] device batadv_slave_1 left promiscuous mode [ 806.686644][T13650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 807.340240][T13671] ip6t_REJECT: ECHOREPLY is not supported [ 807.399786][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 807.962472][ T7151] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 808.008397][ T13] usb 5-1: config 1 has an invalid interface number: 6 but max is 0 [ 808.037042][ T13] usb 5-1: config 1 has no interface number 0 [ 808.182519][T13687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2902'. [ 808.208439][ T13] usb 5-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=c3.4b [ 808.234092][ T7151] usb 6-1: Using ep0 maxpacket: 8 [ 808.237848][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.248216][ T13] usb 5-1: Product: syz [ 808.252445][ T13] usb 5-1: Manufacturer: syz [ 808.257502][ T13] usb 5-1: SerialNumber: syz [ 808.368304][ T1108] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 808.388984][ T7151] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 808.414605][ T7151] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 808.439572][ T7151] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 808.454884][ T7151] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 808.470487][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.476801][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.495112][ T7151] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 808.526842][ T7151] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 808.544214][ T7151] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.568351][ T13] usb 5-1: palm_os_4_probe - error -71 getting connection info [ 808.586416][ T13] visor 5-1:1.6: Handspring Visor / Palm OS converter detected [ 808.639345][ T13] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 808.666316][ T13] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 808.704039][ T13] usb 5-1: USB disconnect, device number 7 [ 808.745113][ T13] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 808.775766][ T13] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 808.789252][ T13] visor 5-1:1.6: device disconnected [ 808.793213][ T1108] usb 2-1: config 0 interface 0 has no altsetting 0 [ 808.818326][ T7151] usb 6-1: usb_control_msg returned -32 [ 808.826896][ T7151] usbtmc 6-1:16.0: can't read capabilities [ 808.833797][ T1108] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 808.852222][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.068536][ T1108] usb 2-1: config 0 descriptor?? [ 809.442417][ T26] audit: type=1326 audit(1734601015.578:17533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13697 comm="syz.0.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe80ee19d29 code=0x7fc00000 [ 809.766817][T13711] device batadv_slave_1 entered promiscuous mode [ 809.774846][T13711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 809.891901][T13711] device batadv_slave_1 left promiscuous mode [ 809.907037][T13711] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 809.940367][T13716] ip6t_REJECT: ECHOREPLY is not supported [ 809.962435][ T23] usb 6-1: USB disconnect, device number 9 [ 810.283064][T12293] bridge0: port 3(syz_tun) entered disabled state [ 810.293709][T12293] device syz_tun left promiscuous mode [ 810.299487][T12293] bridge0: port 3(syz_tun) entered disabled state [ 810.469009][ T1108] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 810.629524][ T26] audit: type=1326 audit(1734601016.768:17534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13721 comm="syz.4.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a24b4cd29 code=0x7fc00000 [ 810.725044][ T1108] usb 2-1: USB disconnect, device number 15 [ 811.192121][ T4300] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.821432][ T4300] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.901734][ T4300] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.982379][ T4300] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.030580][T13720] chnl_net:caif_netlink_parms(): no params data found [ 812.229383][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 812.443627][T13720] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.494378][T13720] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.549632][T13720] device bridge_slave_0 entered promiscuous mode [ 812.658344][T13720] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.693834][T13720] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.821654][T13720] device bridge_slave_1 entered promiscuous mode [ 813.011546][T13720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 813.128913][T13720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 813.320336][T13720] team0: Port device team_slave_0 added [ 813.348978][T13773] device wlan0 entered promiscuous mode [ 813.359697][T13720] team0: Port device team_slave_1 added [ 813.431791][T13720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 813.463883][T13720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 813.524013][T13720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 813.588796][ T23] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 813.609468][T13720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 813.637067][T13720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 813.702743][T13720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 814.103316][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 814.239266][ T23] usb 2-1: config 253 has an invalid interface number: 252 but max is 0 [ 814.315991][ T23] usb 2-1: config 253 has no interface number 0 [ 814.322731][ T5366] Bluetooth: hci4: command 0x041b tx timeout [ 814.343331][ T23] usb 2-1: config 253 interface 252 has no altsetting 0 [ 814.551813][T13720] device hsr_slave_0 entered promiscuous mode [ 814.590024][T13720] device hsr_slave_1 entered promiscuous mode [ 814.599023][ T23] usb 2-1: New USB device found, idVendor=06cd, idProduct=0119, bcdDevice=e6.d0 [ 814.624694][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.641912][ T23] usb 2-1: Product: syz [ 814.650702][ T23] usb 2-1: Manufacturer: syz [ 814.661052][ T23] usb 2-1: SerialNumber: syz [ 814.688234][ T7151] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 814.958418][ T7151] usb 5-1: Using ep0 maxpacket: 8 [ 814.989327][ T23] keyspan 2-1:253.252: Keyspan 1 port adapter converter detected [ 814.999673][ T23] keyspan 2-1:253.252: found no endpoint descriptor for endpoint 87 [ 815.011100][ T23] keyspan 2-1:253.252: found no endpoint descriptor for endpoint 7 [ 815.022247][ T23] keyspan 2-1:253.252: found no endpoint descriptor for endpoint 81 [ 815.040695][ T23] keyspan 2-1:253.252: found no endpoint descriptor for endpoint 1 [ 815.052738][ T23] keyspan 2-1:253.252: found no endpoint descriptor for endpoint 2 [ 815.063133][ T23] keyspan 2-1:253.252: found no endpoint descriptor for endpoint 85 [ 815.074775][ T23] keyspan 2-1:253.252: found no endpoint descriptor for endpoint 5 [ 815.085184][ T23] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 815.098189][ T23] usb 2-1: USB disconnect, device number 16 [ 815.107354][ T23] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 815.120527][ T23] keyspan 2-1:253.252: device disconnected [ 815.145025][ T4300] device wlan0 left promiscuous mode [ 815.208415][ T7151] usb 5-1: unable to get BOS descriptor or descriptor too short [ 815.298796][ T7151] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 815.312286][ T7151] usb 5-1: can't read configurations, error -71 [ 815.484018][T13720] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 815.514485][ T4300] device hsr_slave_0 left promiscuous mode [ 815.529374][ T4300] device hsr_slave_1 left promiscuous mode [ 815.544590][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 815.562813][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 815.586743][ T4300] device bridge_slave_1 left promiscuous mode [ 815.595958][T13818] Cannot find set identified by id 0 to match [ 815.608451][ T4300] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.634423][ T4300] device bridge_slave_0 left promiscuous mode [ 815.650284][ T4300] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.724183][ T4300] device veth1_macvtap left promiscuous mode [ 815.749860][ T4300] device veth0_macvtap left promiscuous mode [ 815.776540][ T4300] device veth1_vlan left promiscuous mode [ 815.782987][ T4300] device veth0_vlan left promiscuous mode [ 816.388416][ T5366] Bluetooth: hci4: command 0x040f tx timeout [ 816.458759][ T4300] team0 (unregistering): Port device team_slave_1 removed [ 816.484661][ T4300] team0 (unregistering): Port device team_slave_0 removed [ 816.504449][ T4300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 816.564385][ T4300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 816.876836][ T26] audit: type=1326 audit(1734601023.018:17535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.4.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a24b4cd29 code=0x7ffc0000 [ 816.904710][ T26] audit: type=1326 audit(1734601023.048:17536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.4.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a24b4cd29 code=0x7ffc0000 [ 816.934518][ T26] audit: type=1326 audit(1734601023.068:17537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.4.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f6a24b4cd29 code=0x7ffc0000 [ 816.981180][ T26] audit: type=1326 audit(1734601023.078:17538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.4.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a24b4cd29 code=0x7ffc0000 [ 817.031871][ T26] audit: type=1326 audit(1734601023.078:17539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.4.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a24b4cd29 code=0x7ffc0000 [ 817.093715][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 817.139191][ T4300] bond0 (unregistering): Released all slaves [ 817.286309][T13720] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 817.331792][T13720] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 817.366916][T13720] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 817.714283][T13720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 817.799374][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 817.813249][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 817.844408][T13720] 8021q: adding VLAN 0 to HW filter on device team0 [ 817.892932][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 817.934738][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 817.984931][ T4477] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.992089][ T4477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 818.082323][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 818.105552][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 818.145948][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 818.194556][ T4477] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.201682][ T4477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 818.284353][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 818.325451][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 818.397128][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 818.427211][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 818.437884][ T7] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 818.459921][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 818.468609][ T4214] Bluetooth: hci4: command 0x0419 tx timeout [ 818.494289][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 818.519877][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 818.546308][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 818.576048][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 818.618344][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 818.630311][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 818.674814][T13720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 818.688318][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 818.808608][ T7] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 818.817000][ T7] usb 5-1: config 0 has no interface number 0 [ 818.877031][ T7] usb 5-1: config 0 interface 12 has no altsetting 0 [ 819.058611][ T7] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 819.165681][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.224975][ T7] usb 5-1: Product: syz [ 819.247763][ T7] usb 5-1: Manufacturer: syz [ 819.268582][ T7] usb 5-1: SerialNumber: syz [ 819.295173][ T7] usb 5-1: config 0 descriptor?? [ 819.361300][ T7] f81534 5-1:0.12: required endpoints missing [ 819.425303][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 819.438978][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 819.472615][T13720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 819.545404][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 819.553877][ T5366] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 819.591330][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 819.644008][ T13] usb 5-1: USB disconnect, device number 10 [ 819.674343][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 819.704570][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 819.763409][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 819.814450][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 819.851505][T13720] device veth0_vlan entered promiscuous mode [ 819.888578][T13720] device veth1_vlan entered promiscuous mode [ 819.928440][ T5366] usb 6-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 819.950073][ T5366] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.003017][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 820.003771][ T5366] usb 6-1: config 0 descriptor?? [ 820.013816][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 820.075254][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 820.101261][ T5366] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input34 [ 820.112138][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 820.143082][T13720] device veth0_macvtap entered promiscuous mode [ 820.183204][T13912] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2952'. [ 820.210716][T13720] device veth1_macvtap entered promiscuous mode [ 820.346119][T13720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 820.408230][T13720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.457110][T13720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 820.506967][T13720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.555246][T13720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 820.605559][T13720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.656496][T13720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 820.669533][ T23] usb 6-1: USB disconnect, device number 10 [ 820.712615][T13720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 820.723653][T13720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.736182][T13720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 820.792279][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 820.812596][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 820.829320][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 820.846720][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 820.869326][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 820.890560][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 820.907974][T13720] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.929692][T13720] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.959092][T13720] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.980359][T13720] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.996629][T13936] ALSA: seq fatal error: cannot create timer (-19) [ 821.236135][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 821.536221][ T4437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.568059][ T4437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.626577][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 822.457268][T13967] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2964'. [ 822.586896][ T4413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.637030][ T4413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.671371][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 822.698348][ T23] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 823.011520][ T26] audit: type=1326 audit(1734601029.158:17540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13965 comm="syz.3.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72137b3d29 code=0x7fc00000 [ 823.058283][ T23] usb 6-1: Using ep0 maxpacket: 8 [ 823.203586][ T23] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 823.219649][ T23] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 823.245929][ T23] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 823.274131][ T23] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 823.306526][ T5366] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 823.335081][ T23] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 823.377958][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.511113][ T26] audit: type=1326 audit(1734601029.658:17541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13989 comm="syz.1.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008732cd29 code=0x7ffc0000 [ 823.573132][ T26] audit: type=1326 audit(1734601029.668:17542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13989 comm="syz.1.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f008732cd29 code=0x7ffc0000 [ 823.614622][ T26] audit: type=1326 audit(1734601029.668:17543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13989 comm="syz.1.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008732cd29 code=0x7ffc0000 [ 823.678815][ T23] usb 6-1: GET_CAPABILITIES returned 0 [ 823.691333][ T23] usbtmc 6-1:16.0: can't read capabilities [ 823.698623][ T5366] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 823.714214][ T5366] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 823.724733][ T5366] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.761683][ T4282] bridge0: port 3(syz_tun) entered disabled state [ 823.797403][ T5366] usb 5-1: config 0 descriptor?? [ 823.825233][ T4282] device syz_tun left promiscuous mode [ 823.832413][T14000] ip6t_REJECT: ECHOREPLY is not supported [ 823.838965][ T4282] bridge0: port 3(syz_tun) entered disabled state [ 823.861362][ T5366] pwc: Askey VC010 type 2 USB webcam detected. [ 823.908255][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 823.937925][ T4250] usb 6-1: USB disconnect, device number 11 [ 823.944483][ T4176] syz-executor (4176) used greatest stack depth: 19128 bytes left [ 824.078240][ T5366] pwc: send_video_command error -71 [ 824.084424][ T5366] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 824.093795][ T5366] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 824.119045][ T5366] usb 5-1: USB disconnect, device number 11 [ 824.160520][T13993] chnl_net:caif_netlink_parms(): no params data found [ 824.209390][T13993] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.216592][T13993] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.218280][ T13] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 824.229531][T13993] device bridge_slave_0 entered promiscuous mode [ 824.241285][T13993] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.248603][T13993] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.256604][T13993] device bridge_slave_1 entered promiscuous mode [ 824.287589][T13993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 824.299604][T13993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 824.327827][T13993] team0: Port device team_slave_0 added [ 824.335833][T13993] team0: Port device team_slave_1 added [ 824.357275][T13993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 824.364383][T13993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 824.390766][T13993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 824.404652][T13993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 824.411901][T13993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 824.438775][T13993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 824.487586][T13993] device hsr_slave_0 entered promiscuous mode [ 824.494035][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 824.505167][T13993] device hsr_slave_1 entered promiscuous mode [ 824.512154][T13993] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 824.520252][T13993] Cannot create hsr debugfs directory [ 824.648859][ T5366] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 824.723443][T13993] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.309827][T13993] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.562997][ T13] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 825.576776][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.585342][ T13] usb 1-1: Product: syz [ 825.589856][ T13] usb 1-1: Manufacturer: syz [ 825.594474][ T13] usb 1-1: SerialNumber: syz [ 825.601479][ T13] usb 1-1: config 0 descriptor?? [ 825.630117][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 825.643796][ T13] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 825.654986][T13993] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.773154][T13993] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.827279][T14031] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2980'. [ 825.837420][T11991] Bluetooth: hci1: command 0x0409 tx timeout [ 825.933771][T14036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2982'. [ 825.968453][ T13] ssu100: probe of 1-1:0.0 failed with error -110 [ 826.069624][T13993] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 826.126412][T13993] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 826.167238][T13993] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 826.217426][T13993] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 827.425598][T13993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 827.459509][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 827.491740][ T1108] usb 1-1: USB disconnect, device number 18 [ 827.501554][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 827.515522][T13993] 8021q: adding VLAN 0 to HW filter on device team0 [ 827.545339][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 827.587438][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 827.601647][ T4437] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.608811][ T4437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 827.627206][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 827.637682][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 827.663061][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 827.687554][ T4437] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.694697][ T4437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 827.834784][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 827.843291][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 827.866112][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 827.910368][T11991] Bluetooth: hci1: command 0x041b tx timeout [ 827.929452][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 828.005969][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 828.031727][T14072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2992'. [ 828.046896][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 828.109174][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 828.147863][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 828.191163][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 828.211034][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 828.447517][T13993] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 828.465520][T13993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 828.474861][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 828.510187][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 828.597999][T14079] device batadv_slave_1 entered promiscuous mode [ 828.907191][T14078] device batadv_slave_1 left promiscuous mode [ 829.178441][T14087] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2998'. [ 829.193843][T14087] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2998'. [ 829.226855][T14087] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2998'. [ 829.560725][T13993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 829.568502][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 829.637790][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 829.988650][T11991] Bluetooth: hci1: command 0x040f tx timeout [ 830.403195][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 830.422045][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 830.492325][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 830.510171][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 830.546726][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 830.614180][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 830.669420][T13993] device veth0_vlan entered promiscuous mode [ 830.771413][T13993] device veth1_vlan entered promiscuous mode [ 830.904282][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 830.948020][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 830.966319][T13993] device veth0_macvtap entered promiscuous mode [ 831.002131][T13993] device veth1_macvtap entered promiscuous mode [ 831.051412][T13993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 831.088252][T13993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.110532][T13993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 831.134005][T13993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.145078][T13993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 831.156773][T13993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.167000][T13993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 831.203951][T13993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.226744][T13993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 831.245382][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 831.264133][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 831.332935][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 831.383477][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 831.401206][T13993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.415639][T13993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.431062][T14122] netlink: 'syz.1.3009': attribute type 1 has an invalid length. [ 831.437985][T13993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.439058][T14122] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.3009'. [ 831.455732][T13993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.501742][T13993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 831.517784][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 831.545953][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 831.614864][T14122] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3009'. [ 831.646537][T13993] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.657376][T13993] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.705998][T13993] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.735917][T13993] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.032775][T14136] capability: warning: `syz.1.3017' uses deprecated v2 capabilities in a way that may be insecure [ 832.135508][ T4413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.212058][ T4413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.260776][ T4477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.292836][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 832.323455][ T4477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.335350][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 832.390008][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 832.451244][T14146] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3019'. [ 832.785291][T14156] ip6t_REJECT: ECHOREPLY is not supported [ 833.190195][T14170] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.197605][T14170] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.548317][T11991] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 833.808240][T11991] usb 2-1: Using ep0 maxpacket: 8 [ 833.968432][T11991] usb 2-1: unable to get BOS descriptor or descriptor too short [ 834.019882][ T26] audit: type=1326 audit(1734601040.168:17544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14201 comm="syz.0.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda41217d29 code=0x7ffc0000 [ 834.076716][ T26] audit: type=1326 audit(1734601040.168:17545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14201 comm="syz.0.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda41217d29 code=0x7ffc0000 [ 834.101898][T11991] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.128395][T11991] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.153114][T11991] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 834.176653][ T26] audit: type=1326 audit(1734601040.168:17546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14201 comm="syz.0.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fda41217d29 code=0x7ffc0000 [ 834.248452][ T26] audit: type=1326 audit(1734601040.168:17547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14201 comm="syz.0.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda41217d29 code=0x7ffc0000 [ 834.334377][ T26] audit: type=1326 audit(1734601040.168:17548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14201 comm="syz.0.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda41217d29 code=0x7ffc0000 [ 834.368326][T11991] usb 2-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 2.40 [ 834.388716][T11991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.435112][T11991] usb 2-1: Product: syz [ 834.462773][T11991] usb 2-1: Manufacturer: syz [ 834.467414][T11991] usb 2-1: SerialNumber: syz [ 834.473880][ T26] audit: type=1326 audit(1734601040.168:17549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14201 comm="syz.0.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fda41217d29 code=0x7ffc0000 [ 834.575403][ T26] audit: type=1326 audit(1734601040.168:17550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14201 comm="syz.0.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda41217d29 code=0x7ffc0000 [ 834.583887][T11991] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input35 [ 834.614661][ T26] audit: type=1326 audit(1734601040.168:17551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14201 comm="syz.0.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda41217d29 code=0x7ffc0000 [ 834.637217][ C1] vkms_vblank_simulate: vblank timer overrun [ 834.999007][ T26] audit: type=1326 audit(1734601040.168:17552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14201 comm="syz.0.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda41217d29 code=0x7ffc0000 [ 835.021536][ C1] vkms_vblank_simulate: vblank timer overrun [ 835.109693][ T26] audit: type=1326 audit(1734601040.168:17553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14201 comm="syz.0.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda41217d29 code=0x7ffc0000 [ 835.429006][T14236] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3053'. [ 835.546295][ T4210] usb 2-1: USB disconnect, device number 17 [ 835.552564][ T3531] bcm5974 2-1:1.0: could not read from device [ 835.578893][ T3531] bcm5974 2-1:1.0: could not read from device [ 835.639097][ T4158] bcm5974 2-1:1.0: could not read from device [ 835.858471][T11991] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 836.095748][T14269] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3067'. [ 836.378563][T11991] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 836.387653][T11991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.446397][T11991] usb 4-1: config 0 descriptor?? [ 836.490483][T11991] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 836.921161][T14286] netlink: 'syz.0.3074': attribute type 1 has an invalid length. [ 836.929120][T14286] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.3074'. [ 836.996777][T14286] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3074'. [ 837.383379][ T5126] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 837.454008][ T5126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.487803][ T5126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.764984][T14302] ALSA: mixer_oss: invalid OSS volume '' [ 837.780636][T14302] ALSA: mixer_oss: invalid OSS volume '' [ 837.920248][T11991] usb 4-1: USB disconnect, device number 15 [ 838.558384][T11991] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 838.656196][T14322] netlink: 368 bytes leftover after parsing attributes in process `syz.4.3090'. [ 838.679679][T14322] tipc: Enabling of bearer rejected, already enabled [ 838.808351][T11991] usb 1-1: Using ep0 maxpacket: 32 [ 838.928443][T11991] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 838.954511][T11991] usb 1-1: config 0 has no interface number 0 [ 838.971059][T11991] usb 1-1: config 0 interface 12 has no altsetting 0 [ 839.000659][T14334] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3094'. [ 839.133048][T11991] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 839.193508][T11991] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.248274][T11991] usb 1-1: Product: syz [ 839.288021][T11991] usb 1-1: Manufacturer: syz [ 839.301489][T11991] usb 1-1: SerialNumber: syz [ 839.332544][T11991] usb 1-1: config 0 descriptor?? [ 839.426775][T14347] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3101'. [ 839.896281][T14366] device batadv_slave_1 entered promiscuous mode [ 839.917073][T14366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 840.057365][T14366] device batadv_slave_1 left promiscuous mode [ 840.066893][T14366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 840.586629][T14396] netlink: 476 bytes leftover after parsing attributes in process `syz.5.3120'. [ 840.763035][T14402] ip6t_REJECT: ECHOREPLY is not supported [ 841.029416][T14417] loop6: detected capacity change from 0 to 524287999 [ 841.047572][ C0] print_req_error: 24 callbacks suppressed [ 841.047591][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 841.065963][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 841.077008][ C0] buffer_io_error: 24 callbacks suppressed [ 841.077028][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 841.093781][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 841.104735][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 841.118960][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 841.143052][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 841.154028][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 841.163497][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 841.174457][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 841.249492][T14425] netlink: 476 bytes leftover after parsing attributes in process `syz.1.3131'. [ 841.641160][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 841.641177][ T26] audit: type=1326 audit(1734601047.788:17563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14438 comm="syz.5.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5400421d29 code=0x7ffc0000 [ 841.663122][T14441] ip6t_REJECT: ECHOREPLY is not supported [ 841.680528][ T26] audit: type=1326 audit(1734601047.788:17564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14438 comm="syz.5.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5400421d29 code=0x7ffc0000 [ 841.759443][ T26] audit: type=1326 audit(1734601047.828:17565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14438 comm="syz.5.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f5400421d29 code=0x7ffc0000 [ 841.867548][ T26] audit: type=1326 audit(1734601047.828:17566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14438 comm="syz.5.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5400421d29 code=0x7ffc0000 [ 841.892663][ T26] audit: type=1326 audit(1734601047.828:17567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14438 comm="syz.5.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5400421d29 code=0x7ffc0000 [ 841.960122][T14455] netlink: 476 bytes leftover after parsing attributes in process `syz.4.3142'. [ 842.212759][T14461] bridge0: port 3(syz_tun) entered blocking state [ 842.220179][T14461] bridge0: port 3(syz_tun) entered disabled state [ 842.235172][T14461] device syz_tun entered promiscuous mode [ 842.243207][T14461] bridge0: port 3(syz_tun) entered blocking state [ 842.249720][T14461] bridge0: port 3(syz_tun) entered forwarding state [ 842.973103][ T26] audit: type=1326 audit(1734601048.618:17568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14447 comm="syz.3.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26b8a8d29 code=0x7fc00000 [ 843.015327][ T26] audit: type=1326 audit(1734601048.618:17569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14447 comm="syz.3.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff26b8a8d29 code=0x7fc00000 [ 843.048866][T14467] input: syz0 as /devices/virtual/input/input36 [ 843.084034][ T26] audit: type=1326 audit(1734601048.618:17570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14447 comm="syz.3.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26b8a8d29 code=0x7fc00000 [ 843.106737][ T26] audit: type=1326 audit(1734601048.618:17571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14447 comm="syz.3.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26b8a8d29 code=0x7fc00000 [ 843.130165][ T26] audit: type=1326 audit(1734601048.618:17572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14447 comm="syz.3.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26b8a8d29 code=0x7fc00000 [ 843.328338][T11991] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 843.351778][T11991] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 843.405250][T11991] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 843.408165][ T4252] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 843.442200][T11991] f81534: probe of 1-1:0.12 failed with error -71 [ 843.778321][ T4252] usb 5-1: Using ep0 maxpacket: 32 [ 843.882437][T11991] usb 1-1: USB disconnect, device number 19 [ 843.934643][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 843.948648][ T4252] usb 5-1: unable to get BOS descriptor or descriptor too short [ 844.007149][T14500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3160'. [ 844.048359][ T4252] usb 5-1: config 7 has an invalid interface number: 187 but max is 0 [ 844.085316][ T4252] usb 5-1: config 7 has no interface number 0 [ 844.115075][ T4252] usb 5-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 844.171381][ T4252] usb 5-1: config 7 interface 187 has no altsetting 0 [ 844.378447][ T4252] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 844.392447][ T4252] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.411042][T14514] serio: Serial port pts0 [ 844.421143][ T4252] usb 5-1: Product: syz [ 844.429652][ T4252] usb 5-1: Manufacturer: syz [ 844.446512][ T4252] usb 5-1: SerialNumber: syz [ 844.488628][T14469] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 844.502631][ T5174] bridge0: port 3(syz_tun) entered disabled state [ 844.543182][ T5174] device syz_tun left promiscuous mode [ 844.549363][ T5174] bridge0: port 3(syz_tun) entered disabled state [ 844.738316][ T4252] usb 5-1: Limiting number of CPorts to U8_MAX [ 844.755713][ T4252] usb 5-1: Unknown endpoint type found, address 0x07 [ 844.771903][ T4252] usb 5-1: Not enough endpoints found in device, aborting! [ 844.900110][ T4300] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.980565][ T1108] usb 5-1: USB disconnect, device number 13 [ 845.004275][ T4300] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.142846][ T4300] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.205876][ T4300] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.281406][T14515] chnl_net:caif_netlink_parms(): no params data found [ 845.417420][T14515] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.425507][T14515] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.435306][T14515] device bridge_slave_0 entered promiscuous mode [ 845.444838][T14515] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.453054][T14515] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.461875][T14515] device bridge_slave_1 entered promiscuous mode [ 845.591480][T14515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 845.664237][T14515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 845.727431][ T4300] tipc: Left network mode [ 845.831346][T14515] team0: Port device team_slave_0 added [ 845.872149][T14515] team0: Port device team_slave_1 added [ 845.949235][T14515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 846.007470][T14515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.044161][T14515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 846.103685][T14515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 846.129617][T14515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.190835][T14515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 846.625194][T14515] device hsr_slave_0 entered promiscuous mode [ 846.631502][ T5366] Bluetooth: hci0: command 0x0409 tx timeout [ 846.660427][T14515] device hsr_slave_1 entered promiscuous mode [ 846.691982][T14515] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 846.718287][T14515] Cannot create hsr debugfs directory [ 847.822120][ T4300] device wlan0 left promiscuous mode [ 848.714731][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 850.266155][ T4300] device hsr_slave_0 left promiscuous mode [ 850.318285][ T4300] device hsr_slave_1 left promiscuous mode [ 850.347365][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 850.370384][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 850.419287][ T4300] device bridge_slave_1 left promiscuous mode [ 850.446630][ T4300] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.495862][ T4300] device bridge_slave_0 left promiscuous mode [ 850.505659][ T4300] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.527720][ T4300] device veth1_macvtap left promiscuous mode [ 850.534056][ T4300] device veth0_macvtap left promiscuous mode [ 850.540617][ T4300] device veth1_vlan left promiscuous mode [ 850.550640][ T4300] device veth0_vlan left promiscuous mode [ 850.847183][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 852.008006][ T4300] team0 (unregistering): Port device team_slave_1 removed [ 852.037484][ T4300] team0 (unregistering): Port device team_slave_0 removed [ 852.066077][ T4300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 852.092155][ T4300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 852.154533][ T4300] smc: removing net device wg0 with user defined pnetid SYZ0 [ 852.265215][ T4300] bond0 (unregistering): Released all slaves [ 852.339558][T14515] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 852.411857][T14515] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 852.454928][T14515] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 852.513341][T14515] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 852.836976][T14515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 852.869416][ T5366] Bluetooth: hci0: command 0x0419 tx timeout [ 852.907773][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 852.918646][ T23] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 852.918982][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 852.963483][T14515] 8021q: adding VLAN 0 to HW filter on device team0 [ 853.010160][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 853.022462][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 853.047029][ T4413] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.054236][ T4413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 853.091767][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 853.124257][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 853.144558][ T4413] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.151857][ T4413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 853.170088][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 853.202721][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 853.218000][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 853.244571][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 853.267494][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 853.298320][ T23] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 853.310243][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 853.327405][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 853.337291][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 853.368208][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 853.373917][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 853.406995][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 853.431561][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 853.455787][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 853.491363][T14515] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 853.509697][T14515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 853.527192][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 853.546700][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 853.578430][ T23] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 853.608204][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.616235][ T23] usb 4-1: Product: syz [ 853.658199][ T23] usb 4-1: Manufacturer: syz [ 853.662997][ T23] usb 4-1: SerialNumber: syz [ 853.696731][ T26] kauditd_printk_skb: 61 callbacks suppressed [ 853.696747][ T26] audit: type=1326 audit(1734601059.838:17634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz.4.3207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a24b4cd29 code=0x7ffc0000 [ 853.755923][ T26] audit: type=1326 audit(1734601059.878:17635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz.4.3207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f6a24b4cd29 code=0x7ffc0000 [ 853.823778][ T26] audit: type=1326 audit(1734601059.878:17636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz.4.3207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a24b4cd29 code=0x7ffc0000 [ 853.976289][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 853.996022][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 854.019206][T14515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 854.028619][ T23] usb 4-1: 0:2 : does not exist [ 854.100432][ T23] usb 4-1: USB disconnect, device number 16 [ 854.117834][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 854.144416][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 854.229311][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 854.244179][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 854.291163][T14515] device veth0_vlan entered promiscuous mode [ 854.318889][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 854.347897][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 854.373803][T14515] device veth1_vlan entered promiscuous mode [ 854.651786][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 854.729903][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 855.015514][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 855.044861][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 855.105565][T14515] device veth0_macvtap entered promiscuous mode [ 855.143498][T14515] device veth1_macvtap entered promiscuous mode [ 855.165157][T14515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.176296][T14515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.186286][T14515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.197654][T14515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.228128][T14515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.279373][T14515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.311720][T14515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.342933][T14515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.377063][T14515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 855.389910][ T5366] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 855.426693][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 855.438919][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 855.473899][ T5366] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 855.479406][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 855.522863][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 855.560449][T14515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 855.586134][T14515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.606195][T14515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 855.631935][T14515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.663468][T14515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 855.688353][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 855.697333][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 855.739757][T14515] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.778272][T14515] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.798961][T14515] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.820050][T14515] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.882488][T14724] ip6t_REJECT: ECHOREPLY is not supported [ 856.147043][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.228244][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 856.297237][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 856.306077][ T4437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.323201][ T4437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 856.410731][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 856.978244][T13997] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 857.305600][T14762] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3222'. [ 857.358507][T14762] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3222'. [ 857.378393][T13997] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.398660][T13997] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.438167][T13997] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 857.488687][T13997] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.500674][ T26] audit: type=1326 audit(1734601063.648:17637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14763 comm="syz.4.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a24b4cd29 code=0x7ffc0000 [ 857.526463][T13997] usb 2-1: config 0 descriptor?? [ 857.594483][ T26] audit: type=1326 audit(1734601063.678:17638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14763 comm="syz.4.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a24b4cd29 code=0x7ffc0000 [ 857.690181][ T26] audit: type=1326 audit(1734601063.678:17639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14763 comm="syz.4.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f6a24b4cd29 code=0x7ffc0000 [ 857.784035][ T26] audit: type=1326 audit(1734601063.688:17640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14763 comm="syz.4.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a24b4cd29 code=0x7ffc0000 [ 857.864299][ T26] audit: type=1326 audit(1734601063.688:17641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14763 comm="syz.4.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a24b4cd29 code=0x7ffc0000 [ 857.938250][ T26] audit: type=1326 audit(1734601063.688:17642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14763 comm="syz.4.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f6a24b4cd29 code=0x7ffc0000 [ 857.996982][ T26] audit: type=1326 audit(1734601063.688:17643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14763 comm="syz.4.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a24b4cd29 code=0x7ffc0000 [ 858.033618][T13997] dragonrise 0003:0079:0006.0007: item fetching failed at offset 2/5 [ 858.043107][ T13] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 858.055473][T13997] dragonrise 0003:0079:0006.0007: parse failed [ 858.078219][T13997] dragonrise: probe of 0003:0079:0006.0007 failed with error -22 [ 858.235261][T13997] usb 2-1: USB disconnect, device number 18 [ 858.424424][ T13] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA4, skipping [ 858.436994][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 858.452751][ T5366] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 858.618487][ T13] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 858.627589][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.636291][ T13] usb 1-1: Product: syz [ 858.640595][ T13] usb 1-1: Manufacturer: syz [ 858.645360][ T13] usb 1-1: SerialNumber: syz [ 858.652230][ T13] usb 1-1: config 0 descriptor?? [ 858.668532][T14768] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 858.689609][ T13] option 1-1:0.0: GSM modem (1-port) converter detected [ 858.698292][ T5366] usb 5-1: Using ep0 maxpacket: 16 [ 858.868471][ T4214] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 858.924312][ T1108] usb 1-1: USB disconnect, device number 20 [ 858.933000][ T1108] option 1-1:0.0: device disconnected [ 858.978536][ T5366] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 858.994426][ T5366] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 859.002937][ T5366] usb 5-1: Product: syz [ 859.007275][ T5366] usb 5-1: Manufacturer: syz [ 859.013524][ T5366] usb 5-1: SerialNumber: syz [ 859.021132][ T5366] usb 5-1: config 0 descriptor?? [ 859.110412][ T4214] usb 6-1: Using ep0 maxpacket: 8 [ 859.310229][ T1108] usb 5-1: USB disconnect, device number 14 [ 859.388488][ T4214] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 859.411481][ T4214] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.456639][ T4214] usb 6-1: Product: syz [ 859.488914][ T4214] usb 6-1: Manufacturer: syz [ 859.522465][ T4214] usb 6-1: SerialNumber: syz [ 859.548621][ T4214] usb 6-1: config 0 descriptor?? [ 859.574000][T14815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3246'. [ 859.838452][ T4214] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 859.858190][ T5366] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 860.272414][T14836] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3255'. [ 860.278591][ T5366] usb 1-1: unable to get BOS descriptor or descriptor too short [ 860.373120][ T5366] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 860.384562][ T5366] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 860.394504][ T5366] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 860.404894][ T5366] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 860.482673][T14843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3257'. [ 860.538357][ T4214] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 860.568408][ T5366] usb 1-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 860.587331][ T4214] usb 6-1: USB disconnect, device number 12 [ 860.595852][ T5366] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.622322][ T5366] usb 1-1: Product: syz [ 860.626755][ T5366] usb 1-1: Manufacturer: syz [ 860.631552][ T5366] usb 1-1: SerialNumber: syz [ 860.639788][ T5366] usb 1-1: config 0 descriptor?? [ 860.688612][T14813] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 860.728184][ C0] usb 1-1: NFC: Urb failure (status -71) [ 860.736138][ T5366] usb 1-1: NFC: Unable to get FW version [ 860.743240][ T5366] pn533_usb: probe of 1-1:0.0 failed with error -90 [ 860.954009][T14860] bridge0: port 3(syz_tun) entered blocking state [ 860.960738][T14860] bridge0: port 3(syz_tun) entered disabled state [ 860.974236][T14860] device syz_tun entered promiscuous mode [ 860.981885][T14860] bridge0: port 3(syz_tun) entered blocking state [ 860.988366][T14860] bridge0: port 3(syz_tun) entered forwarding state [ 861.267795][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 861.267860][ T26] audit: type=1326 audit(1734601067.358:17653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14847 comm="syz.1.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4f472d29 code=0x7fc00000 [ 861.648419][ T26] audit: type=1326 audit(1734601067.358:17654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14847 comm="syz.1.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2d4f472d29 code=0x7fc00000 [ 861.687633][ T5366] usb 1-1: USB disconnect, device number 21 [ 861.693065][ T26] audit: type=1326 audit(1734601067.358:17655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14847 comm="syz.1.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4f472d29 code=0x7fc00000 [ 861.730647][T14867] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3267'. [ 861.733070][ T26] audit: type=1326 audit(1734601067.358:17656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14847 comm="syz.1.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4f472d29 code=0x7fc00000 [ 861.771654][ T26] audit: type=1326 audit(1734601067.368:17657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14847 comm="syz.1.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4f472d29 code=0x7fc00000 [ 861.820703][ T26] audit: type=1326 audit(1734601067.368:17658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14847 comm="syz.1.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4f472d29 code=0x7fc00000 [ 861.851079][ T26] audit: type=1326 audit(1734601067.368:17659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14847 comm="syz.1.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4f472d29 code=0x7fc00000 [ 861.887299][ T26] audit: type=1326 audit(1734601067.368:17660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14847 comm="syz.1.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4f472d29 code=0x7fc00000 [ 861.940826][ T26] audit: type=1326 audit(1734601067.368:17661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14847 comm="syz.1.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4f472d29 code=0x7fc00000 [ 862.016720][ T26] audit: type=1326 audit(1734601067.368:17662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14847 comm="syz.1.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4f472d29 code=0x7fc00000 [ 863.409069][T14899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3278'. [ 863.569465][T14906] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3279'. [ 863.908579][ T4210] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 864.308362][ T4210] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 864.327662][ T4210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.385919][ T4210] usb 1-1: config 0 descriptor?? [ 864.440340][ T4210] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 864.648232][ T4214] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 864.758255][ T5366] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 864.904364][ T4214] usb 4-1: Using ep0 maxpacket: 8 [ 865.128515][ T5366] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 865.151210][ T5366] usb 2-1: config 0 has no interfaces? [ 865.171787][ T5366] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 865.188766][ T4214] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 865.197873][ T4214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.225593][ T5366] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.240361][ T4214] usb 4-1: Product: syz [ 865.244596][ T4214] usb 4-1: Manufacturer: syz [ 865.255182][ T4214] usb 4-1: SerialNumber: syz [ 865.260875][ T5366] usb 2-1: config 0 descriptor?? [ 865.302899][ T4214] usb 4-1: config 0 descriptor?? [ 865.592839][ T4214] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 866.128259][ T13] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 866.268292][ T4210] gspca_stv06xx: I2C: Read error writing address: -71 [ 866.277024][ T4210] usb 1-1: USB disconnect, device number 22 [ 866.368264][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 866.488344][ T13] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 866.497505][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.511639][ T13] usb 5-1: config 0 descriptor?? [ 866.550677][ T13] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 866.656200][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806194a000: rx timeout, send abort [ 866.666977][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061949000: rx timeout, send abort [ 866.675384][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806194a000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 866.690979][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888061949000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 867.268289][ T4210] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 867.514730][ T5366] usb 2-1: USB disconnect, device number 19 [ 867.659958][T14964] device batadv_slave_1 entered promiscuous mode [ 867.667587][T14963] device batadv_slave_1 left promiscuous mode [ 867.678756][ T4210] usb 1-1: config 0 has an invalid interface number: 218 but max is 0 [ 867.705773][ T4210] usb 1-1: config 0 has no interface number 0 [ 867.718970][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 867.730843][ T4210] usb 1-1: config 0 interface 218 has no altsetting 0 [ 867.751259][ T4210] usb 1-1: New USB device found, idVendor=2639, idProduct=0002, bcdDevice=b6.d6 [ 867.764001][ T4210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.811507][ T4210] usb 1-1: config 0 descriptor?? [ 868.088716][ T4210] usb 1-1: string descriptor 0 read error: -71 [ 868.135187][ T4210] usb 1-1: USB disconnect, device number 23 [ 868.528330][ T13] gspca_vc032x: reg_r err -32 [ 868.533862][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 868.539237][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 868.544531][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 868.569950][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 868.575256][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 868.617010][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 868.623431][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 868.630017][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 868.636901][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 868.657736][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 868.663192][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 868.678609][T14973] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3305'. [ 868.700027][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 868.729126][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 868.764767][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 868.817988][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 868.878826][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 868.923004][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 869.236987][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 869.243133][ T13] gspca_vc032x: Unknown sensor... [ 869.249559][ T4214] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 869.268779][ T4214] usb 4-1: USB disconnect, device number 17 [ 869.276064][ T13] vc032x: probe of 5-1:0.0 failed with error -22 [ 869.923947][ T4214] usb 5-1: USB disconnect, device number 15 [ 869.968773][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.975135][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.086087][T14993] device batadv_slave_1 entered promiscuous mode [ 870.090845][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 870.104078][T14998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3314'. [ 870.122922][T14992] device batadv_slave_1 left promiscuous mode [ 870.357395][T15006] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3317'. [ 870.659416][T15016] bridge0: port 3(syz_tun) entered blocking state [ 870.666193][T15016] bridge0: port 3(syz_tun) entered disabled state [ 870.679930][T15016] device syz_tun entered promiscuous mode [ 871.241411][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 871.241427][ T26] audit: type=1326 audit(1734601077.088:17722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15004 comm="syz.0.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda41217d29 code=0x7fc00000 [ 871.598436][ T4214] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 871.806991][T11991] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 871.958402][ T4214] usb 4-1: Using ep0 maxpacket: 32 [ 872.098906][ T4214] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 872.154850][ T4214] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.238676][T11991] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 872.358244][T11991] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 872.386970][ T4214] usb 4-1: config 0 descriptor?? [ 872.461150][ T4214] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 872.498545][T11991] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 872.517864][T11991] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 872.527735][ T4214] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input37 [ 872.560692][T11991] usb 6-1: Manufacturer: syz [ 873.164771][T11991] usb 6-1: config 0 descriptor?? [ 873.223320][ T7] usb 4-1: USB disconnect, device number 18 [ 873.256773][T15041] device batadv_slave_1 entered promiscuous mode [ 873.264412][T15040] device batadv_slave_1 left promiscuous mode [ 873.384087][T11991] rc_core: IR keymap rc-hauppauge not found [ 873.390204][T11991] Registered IR keymap rc-empty [ 873.396770][T11991] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 873.434876][T11991] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input38 [ 873.462268][T15048] netlink: 476 bytes leftover after parsing attributes in process `syz.4.3332'. [ 873.578003][T15052] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3333'. [ 873.735188][T13997] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 874.418511][T13997] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 232, changing to 11 [ 874.699356][ T26] audit: type=1326 audit(1734601080.828:17723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15054 comm="syz.4.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a24b4cd29 code=0x7fc00000 [ 874.821912][T15049] rc rc0: two consecutive events of type space [ 874.918387][T13997] usb 1-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 874.940008][T15061] tipc: Started in network mode [ 874.944920][T15061] tipc: Node identity 4, cluster identity 4711 [ 874.953930][T13997] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 874.978222][T13997] usb 1-1: Manufacturer: syz [ 874.995102][T15061] tipc: Node number set to 4 [ 875.014662][T13997] usb 1-1: config 0 descriptor?? [ 875.090156][ T4214] usb 6-1: USB disconnect, device number 13 [ 875.579445][ T5366] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 876.068451][ T5366] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 876.104614][ T5366] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 876.134626][T15078] device batadv_slave_1 entered promiscuous mode [ 876.148261][T13997] usbhid 1-1:0.0: can't add hid device: -71 [ 876.154363][T13997] usbhid: probe of 1-1:0.0 failed with error -71 [ 876.174695][T13997] usb 1-1: USB disconnect, device number 24 [ 876.178428][ T5366] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.207726][T15075] device batadv_slave_1 left promiscuous mode [ 876.244836][ T5366] usb 2-1: config 0 descriptor?? [ 876.279506][T15081] netlink: 476 bytes leftover after parsing attributes in process `syz.0.3343'. [ 876.293173][T15083] ip6t_REJECT: ECHOREPLY is not supported [ 876.330628][ T5366] pwc: Askey VC010 type 2 USB webcam detected. [ 876.789454][ T5366] pwc: recv_control_msg error -32 req 02 val 2b00 [ 876.844335][ T5366] pwc: recv_control_msg error -32 req 02 val 2700 [ 877.218042][ T26] audit: type=1326 audit(1734601083.358:17724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15097 comm="syz.3.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26b8a8d29 code=0x7fc00000 [ 877.506161][ T5366] pwc: recv_control_msg error -32 req 02 val 2c00 [ 877.558275][ T5366] pwc: recv_control_msg error -32 req 04 val 1000 [ 877.858532][ T5366] pwc: recv_control_msg error -71 req 04 val 1400 [ 877.888576][ T5366] pwc: recv_control_msg error -71 req 02 val 2000 [ 877.978596][ T5366] pwc: recv_control_msg error -71 req 02 val 2100 [ 878.091073][ T5366] pwc: recv_control_msg error -71 req 04 val 1500 [ 878.163005][ T5366] pwc: recv_control_msg error -71 req 02 val 2500 [ 878.229744][ T5366] pwc: recv_control_msg error -71 req 02 val 2400 [ 878.288747][ T5366] pwc: recv_control_msg error -71 req 02 val 2600 [ 878.348874][ T5366] pwc: recv_control_msg error -71 req 02 val 2900 [ 878.450253][ T5366] pwc: recv_control_msg error -71 req 02 val 2800 [ 878.469254][T13997] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 878.498196][ T5366] pwc: recv_control_msg error -71 req 04 val 1100 [ 878.528279][ T5366] pwc: recv_control_msg error -71 req 04 val 1200 [ 878.536609][ T5366] pwc: Registered as video103. [ 878.584918][ T5366] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input39 [ 878.639900][ T5366] usb 2-1: USB disconnect, device number 20 [ 878.691255][T15125] ip6t_REJECT: ECHOREPLY is not supported [ 878.695838][T15122] netlink: 476 bytes leftover after parsing attributes in process `syz.1.3356'. [ 878.710666][T13997] usb 5-1: Using ep0 maxpacket: 16 [ 878.828733][T13997] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 879.008461][T13997] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 879.027242][T13997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.067371][T13997] usb 5-1: Product: syz [ 879.131687][T13997] usb 5-1: Manufacturer: syz [ 879.136448][T13997] usb 5-1: SerialNumber: syz [ 879.146158][T13997] usb 5-1: config 0 descriptor?? [ 880.403110][T13997] usb 5-1: USB disconnect, device number 16 [ 880.526635][T15145] device hsr0 entered promiscuous mode [ 880.536143][T15145] device lo entered promiscuous mode [ 880.554331][T15143] device lo left promiscuous mode [ 880.569331][T15143] device hsr0 left promiscuous mode [ 881.718237][ T4210] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 882.099886][ T4210] usb 2-1: Using ep0 maxpacket: 16 [ 882.223790][ T4210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 882.248169][ T4210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 882.269893][ T4210] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 882.293492][ T4210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.313836][ T4210] usb 2-1: config 0 descriptor?? [ 882.571639][T15146] udc-core: couldn't find an available UDC or it's busy [ 882.585544][T15146] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 882.643540][T15146] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3365'. [ 882.671608][T15146] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3365'. [ 882.789459][ T4210] usbhid 2-1:0.0: can't add hid device: -71 [ 882.809365][ T4210] usbhid: probe of 2-1:0.0 failed with error -71 [ 882.818456][ T13] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 882.849734][ T4210] usb 2-1: USB disconnect, device number 21 [ 883.041796][T15195] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 883.409811][ T13] usb 6-1: Using ep0 maxpacket: 16 [ 883.454463][T15201] ip6t_REJECT: ECHOREPLY is not supported [ 883.558466][ T13] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 883.567224][ T13] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 883.623686][ T13] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 883.940502][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 883.999224][ T13] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 884.019977][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.069064][ T13] usb 6-1: Product: syz [ 884.087398][ T13] usb 6-1: Manufacturer: syz [ 884.106463][ T13] usb 6-1: SerialNumber: syz [ 884.179424][ T4210] kernel write not supported for file /cpu/0/msr (pid: 4210 comm: kworker/1:4) [ 884.481066][ T13] usb 6-1: 0:2 : does not exist [ 884.693052][ T13] usb 6-1: USB disconnect, device number 14 [ 884.960335][ T4845] udevd[4845]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 885.058280][T15248] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 886.509680][T15257] ip6t_REJECT: ECHOREPLY is not supported [ 886.878263][ T23] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 887.516487][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 887.788382][ T23] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 887.830531][ T23] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 888.074265][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 888.288582][ T23] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 888.315908][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.356001][ T23] usb 4-1: Product: syz [ 888.376182][ T23] usb 4-1: Manufacturer: syz [ 888.420365][ T23] usb 4-1: SerialNumber: syz [ 888.630019][ T4252] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 889.622601][ T1108] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 889.638705][ T23] usb 4-1: 0:2 : does not exist [ 889.659576][ T23] usb 4-1: USB disconnect, device number 19 [ 889.878349][ T4252] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 889.890773][ T4845] udevd[4845]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 890.062424][ T4252] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 890.072188][ T4252] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.082721][ T4252] usb 1-1: config 0 descriptor?? [ 890.120569][ T4252] pwc: Askey VC010 type 2 USB webcam detected. [ 890.138458][ T1108] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 890.209969][ T1108] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 890.418439][ T4252] pwc: send_video_command error -71 [ 890.423680][ T4252] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 890.488019][ T4252] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 890.509064][ T4252] usb 1-1: USB disconnect, device number 25 [ 890.618557][ T1108] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 890.648305][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.689991][ T1108] usb 5-1: Product: syz [ 890.694202][ T1108] usb 5-1: Manufacturer: syz [ 890.732521][ T1108] usb 5-1: SerialNumber: syz [ 891.016748][T15337] rtc_cmos 00:00: Alarms can be up to one day in the future [ 891.027344][ T4252] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 891.088497][ T1108] usb 5-1: 0:2 : does not exist [ 891.119220][ T1108] usb 5-1: USB disconnect, device number 17 [ 891.978558][T13997] Bluetooth: hci0: command 0x0c1a tx timeout [ 892.288567][ T4252] usb 1-1: device descriptor read/all, error -71 [ 893.243199][ T4845] udevd[4845]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 893.662439][ T4252] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 894.735220][ T23] Bluetooth: hci0: command 0x0406 tx timeout [ 894.858143][ T4252] usb 1-1: Using ep0 maxpacket: 8 [ 895.158764][ T4252] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 895.168266][ T4252] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.176469][ T4252] usb 1-1: Product: syz [ 895.187811][ T4252] usb 1-1: Manufacturer: syz [ 895.196170][ T4252] usb 1-1: SerialNumber: syz [ 895.222609][ T4252] usb 1-1: config 0 descriptor?? [ 895.286308][ T4252] gspca_main: sq930x-2.14.0 probing 2770:930c [ 895.418240][ T4252] gspca_sq930x: reg_r 001f failed -71 [ 895.423715][ T4252] sq930x: probe of 1-1:0.0 failed with error -71 [ 895.437965][ T4252] usb 1-1: USB disconnect, device number 27 [ 895.995736][ T26] audit: type=1326 audit(1734601102.138:17725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15394 comm="syz.1.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4f472d29 code=0x7fc00000 [ 896.376071][T15412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3441'. [ 896.552004][T15421] syz.5.3444[15421] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 896.552197][T15421] syz.5.3444[15421] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 896.605969][T15418] syz.5.3444[15418] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 896.618250][T15418] syz.5.3444[15418] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 897.027396][ T26] audit: type=1326 audit(1734601103.108:17726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15415 comm="syz.0.3443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda41217d29 code=0x7fc00000 [ 898.757409][ T26] audit: type=1326 audit(1734601104.888:17727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15434 comm="syz.4.3451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a24b4cd29 code=0x7fc00000 [ 898.834647][ T26] audit: type=1326 audit(1734601104.888:17728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15434 comm="syz.4.3451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a24b4cd29 code=0x7fc00000 [ 898.854590][T15449] input: syz1 as /devices/virtual/input/input40 [ 898.859246][ T26] audit: type=1326 audit(1734601104.888:17729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15434 comm="syz.4.3451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a24b4cd29 code=0x7fc00000 [ 899.148383][ T26] audit: type=1326 audit(1734601104.888:17730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15434 comm="syz.4.3451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a24b4cd29 code=0x7fc00000 [ 899.171105][ C0] vkms_vblank_simulate: vblank timer overrun [ 899.348119][ T26] audit: type=1326 audit(1734601104.888:17731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15434 comm="syz.4.3451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a24b4cd29 code=0x7fc00000 [ 899.370720][ C0] vkms_vblank_simulate: vblank timer overrun [ 899.466777][ T26] audit: type=1326 audit(1734601104.888:17732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15434 comm="syz.4.3451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a24b4cd29 code=0x7fc00000 [ 899.494959][ T26] audit: type=1326 audit(1734601104.888:17733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15434 comm="syz.4.3451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a24b4cd29 code=0x7fc00000 [ 899.540619][ T26] audit: type=1326 audit(1734601104.898:17734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15434 comm="syz.4.3451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a24b4cd29 code=0x7fc00000 [ 899.759460][ T4214] [ 899.761834][ T4214] ====================================================== [ 899.768850][ T4214] WARNING: possible circular locking dependency detected [ 899.775888][ T4214] 5.15.174-syzkaller #0 Not tainted [ 899.781087][ T4214] ------------------------------------------------------ [ 899.788100][ T4214] kworker/0:6/4214 is trying to acquire lock: [ 899.794164][ T4214] ffff88807cf4cc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xcf/0x1a0 [ 899.805248][ T4214] [ 899.805248][ T4214] but task is already holding lock: [ 899.812617][ T4214] ffffffff8decda68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x47/0x180 [ 899.821697][ T4214] [ 899.821697][ T4214] which lock already depends on the new lock. [ 899.821697][ T4214] [ 899.832094][ T4214] [ 899.832094][ T4214] the existing dependency chain (in reverse order) is: [ 899.841129][ T4214] [ 899.841129][ T4214] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 899.849134][ T4214] lock_acquire+0x1db/0x4f0 [ 899.854176][ T4214] __mutex_lock_common+0x1da/0x25a0 [ 899.859908][ T4214] mutex_lock_nested+0x17/0x20 [ 899.865204][ T4214] rfkill_register+0x30/0x880 [ 899.870419][ T4214] hci_register_dev+0x4dd/0xa50 [ 899.875800][ T4214] vhci_create_device+0x310/0x590 [ 899.881361][ T4214] vhci_write+0x382/0x430 [ 899.886218][ T4214] vfs_write+0xacd/0xe50 [ 899.891000][ T4214] ksys_write+0x1a2/0x2c0 [ 899.893688][T15479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3464'. [ 899.895869][ T4214] do_syscall_64+0x3b/0xb0 [ 899.895892][ T4214] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 899.916135][ T4214] [ 899.916135][ T4214] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 899.924057][ T4214] lock_acquire+0x1db/0x4f0 [ 899.929090][ T4214] __mutex_lock_common+0x1da/0x25a0 [ 899.934824][ T4214] mutex_lock_nested+0x17/0x20 [ 899.940117][ T4214] vhci_send_frame+0x8a/0xf0 [ 899.945238][ T4214] hci_send_frame+0x1af/0x2f0 [ 899.950449][ T4214] hci_tx_work+0xb2e/0x1a30 [ 899.955490][ T4214] process_one_work+0x8a1/0x10c0 [ 899.960955][ T4214] worker_thread+0xaca/0x1280 [ 899.966159][ T4214] kthread+0x3f6/0x4f0 [ 899.970751][ T4214] ret_from_fork+0x1f/0x30 [ 899.975697][ T4214] [ 899.975697][ T4214] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 899.984919][ T4214] lock_acquire+0x1db/0x4f0 [ 899.989952][ T4214] __flush_work+0xeb/0x1a0 [ 899.994895][ T4214] hci_dev_do_close+0x20a/0x1070 [ 900.000364][ T4214] hci_dev_close+0xe5/0x190 [ 900.005397][ T4214] sock_do_ioctl+0x11d/0x5a0 [ 900.010520][ T4214] sock_ioctl+0x47f/0x770 [ 900.015381][ T4214] __se_sys_ioctl+0xf1/0x160 [ 900.020513][ T4214] do_syscall_64+0x3b/0xb0 [ 900.025460][ T4214] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 900.031891][ T4214] [ 900.031891][ T4214] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 900.039547][ T4214] lock_acquire+0x1db/0x4f0 [ 900.044586][ T4214] __mutex_lock_common+0x1da/0x25a0 [ 900.050320][ T4214] mutex_lock_nested+0x17/0x20 [ 900.055619][ T4214] bg_scan_update+0xa1/0x4a0 [ 900.060745][ T4214] process_one_work+0x8a1/0x10c0 [ 900.066216][ T4214] worker_thread+0xaca/0x1280 [ 900.071422][ T4214] kthread+0x3f6/0x4f0 [ 900.076030][ T4214] ret_from_fork+0x1f/0x30 [ 900.080977][ T4214] [ 900.080977][ T4214] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 900.090799][ T4214] validate_chain+0x1649/0x5930 [ 900.096177][ T4214] __lock_acquire+0x1295/0x1ff0 [ 900.101555][ T4214] lock_acquire+0x1db/0x4f0 [ 900.106586][ T4214] __flush_work+0xeb/0x1a0 [ 900.111533][ T4214] __cancel_work_timer+0x519/0x6a0 [ 900.117167][ T4214] hci_request_cancel_all+0xcb/0x300 [ 900.123070][ T4214] hci_dev_do_close+0x51/0x1070 [ 900.128469][ T4214] hci_rfkill_set_block+0x114/0x1a0 [ 900.134203][ T4214] rfkill_set_block+0x1e7/0x430 [ 900.139587][ T4214] rfkill_epo+0x7c/0x180 [ 900.144360][ T4214] rfkill_op_handler+0x7e/0x260 [ 900.149739][ T4214] process_one_work+0x8a1/0x10c0 [ 900.155212][ T4214] worker_thread+0xaca/0x1280 [ 900.160419][ T4214] kthread+0x3f6/0x4f0 [ 900.165021][ T4214] ret_from_fork+0x1f/0x30 [ 900.169979][ T4214] [ 900.169979][ T4214] other info that might help us debug this: [ 900.169979][ T4214] [ 900.180211][ T4214] Chain exists of: [ 900.180211][ T4214] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 900.180211][ T4214] [ 900.195959][ T4214] Possible unsafe locking scenario: [ 900.195959][ T4214] [ 900.203417][ T4214] CPU0 CPU1 [ 900.208789][ T4214] ---- ---- [ 900.214159][ T4214] lock(rfkill_global_mutex); [ 900.218935][ T4214] lock(&data->open_mutex); [ 900.226057][ T4214] lock(rfkill_global_mutex); [ 900.233355][ T4214] lock((work_completion)(&hdev->bg_scan_update)); [ 900.239954][ T4214] [ 900.239954][ T4214] *** DEADLOCK *** [ 900.239954][ T4214] [ 900.248099][ T4214] 3 locks held by kworker/0:6/4214: [ 900.253296][ T4214] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 900.263682][ T4214] #1: ffffc900030ffd20 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 900.274072][ T4214] #2: ffffffff8decda68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x47/0x180 [ 900.283591][ T4214] [ 900.283591][ T4214] stack backtrace: [ 900.289482][ T4214] CPU: 0 PID: 4214 Comm: kworker/0:6 Not tainted 5.15.174-syzkaller #0 [ 900.297732][ T4214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 900.307790][ T4214] Workqueue: events rfkill_op_handler [ 900.313179][ T4214] Call Trace: [ 900.316470][ T4214] [ 900.319420][ T4214] dump_stack_lvl+0x1e3/0x2d0 [ 900.324120][ T4214] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 900.329780][ T4214] ? print_circular_bug+0x12b/0x1a0 [ 900.334999][ T4214] check_noncircular+0x2f8/0x3b0 [ 900.339949][ T4214] ? add_chain_block+0x850/0x850 [ 900.344902][ T4214] ? lockdep_lock+0x11f/0x2a0 [ 900.346301][T15493] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3465'. [ 900.349597][ T4214] validate_chain+0x1649/0x5930 [ 900.349633][ T4214] ? reacquire_held_locks+0x660/0x660 [ 900.349665][ T4214] ? validate_chain+0x112/0x5930 [ 900.349686][ T4214] ? validate_chain+0x112/0x5930 [ 900.349718][ T4214] ? look_up_lock_class+0x77/0x120 [ 900.383794][ T4214] ? register_lock_class+0x100/0x9a0 [ 900.389098][ T4214] ? mark_lock+0x98/0x340 [ 900.389229][T15493] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3465'. [ 900.393460][ T4214] ? is_dynamic_key+0x1f0/0x1f0 [ 900.393481][ T4214] ? __lock_acquire+0x1295/0x1ff0 [ 900.393501][ T4214] ? mark_lock+0x98/0x340 [ 900.416499][ T4214] __lock_acquire+0x1295/0x1ff0 [ 900.421370][ T4214] lock_acquire+0x1db/0x4f0 [ 900.425880][ T4214] ? __flush_work+0xcf/0x1a0 [ 900.430480][ T4214] ? rcu_lock_release+0x5/0x20 [ 900.435254][ T4214] ? read_lock_is_recursive+0x10/0x10 [ 900.440655][ T4214] ? start_flush_work+0x776/0x820 [ 900.445688][ T4214] ? stack_trace_snprint+0xe0/0xe0 [ 900.450812][ T4214] __flush_work+0xeb/0x1a0 [ 900.455319][ T4214] ? __flush_work+0xcf/0x1a0 [ 900.459916][ T4214] ? flush_work+0x20/0x20 [ 900.464254][ T4214] ? print_irqtrace_events+0x210/0x210 [ 900.469710][ T4214] ? lock_timer_base+0x260/0x260 [ 900.474647][ T4214] ? __cancel_work_timer+0x467/0x6a0 [ 900.479927][ T4214] __cancel_work_timer+0x519/0x6a0 [ 900.485042][ T4214] ? cancel_work_sync+0x20/0x20 [ 900.489898][ T4214] ? lockdep_hardirqs_on+0x94/0x130 [ 900.495105][ T4214] ? __cancel_work+0x2ef/0x380 [ 900.499868][ T4214] ? cancel_work+0x20/0x20 [ 900.504281][ T4214] ? print_irqtrace_events+0x210/0x210 [ 900.509736][ T4214] hci_request_cancel_all+0xcb/0x300 [ 900.515027][ T4214] hci_dev_do_close+0x51/0x1070 [ 900.519887][ T4214] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 900.525785][ T4214] ? _raw_spin_unlock+0x40/0x40 [ 900.530632][ T4214] hci_rfkill_set_block+0x114/0x1a0 [ 900.535831][ T4214] ? rcu_lock_release+0x20/0x20 [ 900.540675][ T4214] rfkill_set_block+0x1e7/0x430 [ 900.545533][ T4214] rfkill_epo+0x7c/0x180 [ 900.549773][ T4214] rfkill_op_handler+0x7e/0x260 [ 900.554621][ T4214] process_one_work+0x8a1/0x10c0 [ 900.559559][ T4214] ? worker_detach_from_pool+0x260/0x260 [ 900.565187][ T4214] ? _raw_spin_lock_irqsave+0x120/0x120 [ 900.570727][ T4214] ? kthread_data+0x4e/0xc0 [ 900.575225][ T4214] ? wq_worker_running+0x97/0x170 [ 900.580239][ T4214] worker_thread+0xaca/0x1280 [ 900.584915][ T4214] kthread+0x3f6/0x4f0 [ 900.588978][ T4214] ? rcu_lock_release+0x20/0x20 [ 900.593823][ T4214] ? kthread_blkcg+0xd0/0xd0 [ 900.598402][ T4214] ret_from_fork+0x1f/0x30 [ 900.602819][ T4214] [ 900.605940][ C0] vkms_vblank_simulate: vblank timer overrun