last executing test programs: 21.748327528s ago: executing program 4 (id=6127): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xd, 0xffff}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x21, {0x4, 0xfff3}}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20008800) 21.313938076s ago: executing program 4 (id=6131): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x2000000}, 0x0) 20.87350041s ago: executing program 4 (id=6135): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8103}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/180, 0xb4}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000580)=""/81, 0x51}, {&(0x7f0000004d80)=""/4125, 0x101d}, {&(0x7f00000006c0)=""/217, 0xd9}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)=""/134, 0x86}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000003d40)=""/4109, 0x100d}, {&(0x7f0000001ac0)=""/4108, 0x100c}, {&(0x7f0000000480)=""/90, 0x5a}], 0x5}, 0xb0}, {{0x0, 0x0, 0x0}, 0x4}], 0x8, 0x122, 0x0) 19.69777891s ago: executing program 4 (id=6140): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xd, 0xffff}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x21, {0x4, 0xfff3}}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20008800) 19.500911632s ago: executing program 4 (id=6142): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000080)="ea", 0x1}, {&(0x7f00000003c0)="8c", 0x1}], 0x2) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r4 = dup(r1) write$UHID_INPUT(r4, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0x2000) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x2, 0x68}, 0x8) 17.551692742s ago: executing program 4 (id=6148): socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0xffff, 0x2}, {0xffff, 0xffff}, {0xfff3, 0x7}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x809, '\x00\x00\x00\x00\x00\x00\b\x00'}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x400a0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x18}}, 0x800) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) connect$inet6(r9, &(0x7f0000000240)={0xa, 0x4e23, 0xa0002000, @private1={0xfc, 0x1, '\x00', 0x40}, 0x6a00000}, 0x1c) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r3, @ANYRES32, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x4000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0'}, 0xb) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff3}}}, 0x24}}, 0x0) munlockall() ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000100)={'ipvlan1\x00', {0x2, 0x4e21, @loopback}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0xc6, 0x0, 0x0, 'queue1\x00', 0x40}) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r10, &(0x7f0000000080)=[{0x23, 0x0, 0x0, 0xfd, @time, {}, {}, @result={0x0, 0x7a120}}], 0x1c) r11 = openat$pidfd(0xffffff9c, &(0x7f00000002c0), 0x48080, 0x0) pidfd_send_signal(r11, 0x2e, &(0x7f0000000440)={0x11, 0x100, 0x4}, 0x0) 8.510051636s ago: executing program 1 (id=6173): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="12412d59154ba09b7ea26776301c625f88a4f3f160bd973cd3395b234f5ba13a21f783256bf73213b7f78f79adb0bd03734a1d12e1730f4e19c0f6bb009f1cd3670f14a5de0ffa38498e916ba056fcc0cce2fd9a57013508ecc6fe3fb67341f08c5bef991f6cbfe367a494adecb906a78639386508da4c36b9326bbfe46942fd07a982ca55a5fd62a21af5da9c8aa9db15573af5d61c647b9f8c", 0x9a}, {&(0x7f0000000880)="f08b1ed667f7aa309a0f573a5eb5e4874e11228924f80419f27f00ced83b3e1913f72829f667eed5683fc7fa2dee4fa828d369d7b6adf28637b7592467be9cc39ab53115b756c77c63c7e697d2b40defcb0f67fb89ef", 0x56}, {&(0x7f0000000480)="7f877185958439f34a529d8c6f2dfc6df82b154cc3521411d3f3174cad226ee537974035c0c3bacb750bb2ab995e61eb8acd5ee475a53db8bcdcdd6be566f3a086cb18819a85bdb25e570bafc2a3e7cfb3a8dac249087c9fb640c4b0545cfa1a38594cffc3c7b947808bb55182c5d8dde3ded7c731dcd85e17ceb07e01bc5bba4bd060fc490c2e5185f2ee1cee669f613df8c1b6a4b3a31066c184bc886991c9b5aa9d06b2f95721e1d6aa0722da914b1a9518b262a4b2d1d365f6b654a4eeea972cc7aa2a38590b6317c3a1", 0xcc}, {&(0x7f0000000000)="1e2587622aad2fe71bfa20559c7145", 0xf}, {&(0x7f0000000300)="eebfb97f2f3bb109e4790214d299ce6abf0590b88dc85b3f23137a9cb1b7e34fe0c07b4e6ce699b7bce825f18f219635184d4d30ab1739731532f59ce8cffb0eab68b7760b4d9a6bd56a650a0080", 0x4e}], 0x5}, 0x12000000}], 0x1, 0x4048841) 8.10864197s ago: executing program 1 (id=6174): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGLCKTRMIOS(r0, 0x4b41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) brk(0x400000ffc000) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f000001f480), 0x2, 0x0) r4 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000021c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000002240)={0x2020, 0x0, 0x0}, 0x2020) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0xc090) write$FUSE_INIT(r3, &(0x7f0000002140)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10, 0xffffffffffffffda}, 0x10) syz_fuse_handle_req(r3, &(0x7f00000070c0)="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", 0x2000, &(0x7f0000006d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006d00)={0x20, 0x0, 0x4, {0x0, 0x4}}, 0x0}) ioctl$FS_IOC_RESVSP(r4, 0x80086601, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6.353453983s ago: executing program 0 (id=6180): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc04c560f, &(0x7f0000000300)=@userptr={0x0, 0xb, 0x4, 0x2000, 0xae99, {0x0, 0xea60}, {0x2, 0xe, 0xd, 0x5, 0x4, 0x7, "16a183ae"}, 0xabe1, 0x2, {0x0}, 0x9}) 6.323719099s ago: executing program 3 (id=6181): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x4000000, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) 6.06832928s ago: executing program 0 (id=6182): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) unshare(0x22020400) unshare(0x20020000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000007c0)=[{{&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f00000002c0)="4c40fc2d20cc55e29da3198c16be4214411941cee43baaa347c633858dce1149620d91d7aebf1bef3d046b891db62a4da7251197134c569db69187d059ea6f445940c566810a73e666e13c5abcfa3de80a8a5ab6bbe85304f78b3045451cce2be8b4e4c6cd4159da717d3d70cfe5dd7c9b87442c9d626146ece9158cd006ba38e87fd3564be4a33161e7cfd61bce48be4893e72c05a4be09d5c1ff7a2f502ca43a77e1538f9f457cd8b5f6cdc1a7b61dc8b8b259a31b69", 0xb7}, {&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f0000000400)="4bf99d49f2f6ba0a5cfb787ece7bb1710c28802003d5d9fb62e42b9c317ec4d48841a13752b99ee153faac101b3d799e6cd16a6578b5e4eebcbd615c858bdf4e54523daf73edeb12fa0f05ba33135183fb8cf293fb969bef6ad1bdd4140a9c51663e65d8eeb2e1c57c5f7123104d68dc011abee53d5404fe22815ca55256ba36ca2c118ca9b788ad971c60b991b218ddacc015e4deb0dbbe33c755d137c317fb54631849e25ceea95b5aaf3b6c8a6a6505827f55010bbfdfd19bf5506bd999dd98affcdd3862fb16881a6d5ba3720baeccb04dbd8a6c1c377a2c17", 0xdb}, {&(0x7f0000000500)="c042a832c931e5d8d808b048a392f88331ba8465a0d72691b8bf56376a5d896104db608ff27086861636b9a36a660e0933f07c24c68696ff0843f2ddb97179a225338274ad2f5da9fce075a54973ef920afd4ba0804713ee93727df0651485dbc55c7636eee1cb64043281a2d8e016580dad606305e63164b5eb7c718558de3850beee805d8afda60b46939dfc123eae7b25261e05b06ab9da9b7d5a959501bf8023d3cc3684c121bf220ddb3415dbe79b5a395d14023ef2f01fc906b80f76e11456dba441bdb8cbde88bbeea79f8ceabee6135537d1abd2", 0xd8}, {&(0x7f0000002040)="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", 0x1000}, {&(0x7f0000000600)="ee9923ee7aebc7338d597166cfd848008e760938aef4f911b144644cd7b88f4e1a5214ddb4561118bfb9888119798de8c776e8cef88c9a26b5fe9c6f6e5528f4b153b141c085ad5029066a8bb06ca60539f5ade1f8931fc4a3f8a0da62c49f7d594b08f713ddb9d4071f43df7ef1292cd8f48e6a76d680df80a6db06704f1fbccc68bc962914cbd3fe463a6820d693062e5edea8d3158d22f87aeb1b3491ecb07a0a7417c213", 0xa6}], 0x6, 0x0, 0x0, 0x8008801}}], 0x1, 0x0) 5.835167334s ago: executing program 3 (id=6183): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, &(0x7f00000004c0)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x360, 0x11, 0x148, 0x0, 0x10, 0x568, 0x2a8, 0x2a8, 0x568, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00', {}, {}, 0xa8}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x8, "602c4e1da4b651d69f61fd40e9985933ad459f3d59ccf16f0d0ef758ba42"}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x508) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1400000b8f00010000000000000000000000000a14000000000a010200000000000000000100000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30000000004cdc5aab350a010400000000000000000100000008000b40000000000900010073797a300000000024000480200001800e000100636f6e6e6c696d69740000000c00028008000140fffffffe14000000110001000000000000000000001c4afc0539bebf488d0500000a"], 0xc8}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r6 = socket$tipc(0x1e, 0x5, 0x0) fcntl$lock(r6, 0xb, &(0x7f0000000540)={0x0, 0x2, 0x44d, 0xfbfffffffffffffd}) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(0x0, &(0x7f00000001c0)='./file0\x00') fsopen(&(0x7f0000000580)='overlay\x00', 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000500)=0x4) 5.679870958s ago: executing program 1 (id=6184): socket$netlink(0x10, 0x3, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x21}, 0x0) 5.523148908s ago: executing program 0 (id=6185): socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0xffff, 0x2}, {0xffff, 0xffff}, {0xfff3, 0x7}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x809, '\x00\x00\x00\x00\x00\x00\b\x00'}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x400a0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x18}}, 0x800) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) connect$inet6(r9, &(0x7f0000000240)={0xa, 0x4e23, 0xa0002000, @private1={0xfc, 0x1, '\x00', 0x40}, 0x6a00000}, 0x1c) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r3, @ANYRES32, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x4000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0'}, 0xb) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff3}}}, 0x24}}, 0x0) munlockall() ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000100)={'ipvlan1\x00', {0x2, 0x4e21, @loopback}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0xc6, 0x0, 0x0, 'queue1\x00', 0x40}) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r10, &(0x7f0000000080)=[{0x23, 0x0, 0x0, 0xfd, @time, {}, {}, @result={0x0, 0x7a120}}], 0x1c) r11 = openat$pidfd(0xffffff9c, &(0x7f00000002c0), 0x48080, 0x0) pidfd_send_signal(r11, 0x2e, &(0x7f0000000440)={0x11, 0x100, 0x4}, 0x0) 5.155560847s ago: executing program 1 (id=6186): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfff0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001402040002800000121f", 0x2e}], 0x1}, 0x0) 4.407717792s ago: executing program 1 (id=6187): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100001f, 0x38011, r1, 0x0) syz_io_uring_setup(0x2fad, &(0x7f0000001fc0)={0x0, 0x860e06a, 0x1000, 0x1, 0xf}, &(0x7f0000000040), &(0x7f0000002080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f000000f000), 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) capset(0x0, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r5 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r5}, &(0x7f0000000080)) read$FUSE(r4, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r6 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400d1e040a4144c2e6b00010300edea2b68000009210000009f450500090581030000000000"], 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x8080000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f000062b000/0x1000)=nil, 0x1000, 0x3) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r8, &(0x7f0000000580)='1\x00', 0x2) mlock(&(0x7f000006f000/0x3000)=nil, 0x3000) write$sysctl(r8, &(0x7f0000000000)='2\x00', 0x2) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000280)={0x2c, &(0x7f0000001900)=ANY=[@ANYBLOB="40041f0000001f05"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.274862171s ago: executing program 2 (id=6188): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe80000000f5ffffffffffffff0000aaff02000000000000000000000000000121"], 0xffe) 3.05978696s ago: executing program 3 (id=6189): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc60", 0x8c0}], 0x1}, 0x0) syz_usb_connect$uac1(0x6, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b70800000000000003010902"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x2000) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffff9c, &(0x7f0000007500), 0x200000, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)) getresuid(&(0x7f0000007580)=0x0, &(0x7f00000075c0), &(0x7f0000007600)) r4 = getegid() getpgid(0x0) geteuid() getgroups(0x6, &(0x7f0000007e80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee01, 0xee00]) socket$nl_crypto(0x10, 0x3, 0x15) r5 = getpgid(0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0186405, &(0x7f0000000100)={0x0, 0x5762, {0xffffffffffffffff}, {r3}, 0x1c, 0xfffffffc}) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r6, &(0x7f0000000580)='1\x00', 0x2) write$sysctl(r6, &(0x7f0000000000)='0\x00', 0x2) gettid() r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01643d6439ebd6cbc1ccdf5f829fa03dc606b4e073fb71884e3c1267178307c0b9ecf64767116e5a2e60b378fccc31771e2ab6", @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) read$FUSE(r7, &(0x7f00000047c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="02000000010006000000000002000100", @ANYRES32=r8, @ANYBLOB="04684d00000000078f877784f6e5db1053e0920010ff01f6000000002000000002000000ee8041a2dd9ae773cdea2288e702ba9150154b387dd5c30e4518c2f166a6f4d26e"], 0x2c, 0x3) getgid() sendmmsg$unix(r2, &(0x7f0000000400), 0x0, 0x40810) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r5, @ANYRES16=r9, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="080001000000006b1bbfa7c2d0f0c5800800030001000000dfaed8fc196ef9eefe5cdc713d8607d38bd031ed5e934894c7a1ae30574186bc10443384a124b286dda1122a5a0271c3e12641664c3e956bda2375ee4dd44ce3a716c3b3867d9dd252ffb5e4efc03b44ab562b3e11323c4f8720e1452f"], 0x34}}, 0x0) 2.267914807s ago: executing program 2 (id=6190): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xd, 0xffff}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x4, 0xfff3}}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x40}, 0x1, 0x21, 0x0, 0x10}, 0x20008800) 1.744652017s ago: executing program 0 (id=6191): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x3, 0x4000000, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb0}}, 0x0) 1.675562905s ago: executing program 3 (id=6192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000001c0)={0x50, 0x0, r2, {0x7, 0x2b, 0x540b, 0x210005d, 0x401, 0xfff9, 0x2, 0x100, 0x0, 0x0, 0x4, 0x7}}, 0x50) (async) write$FUSE_INIT(r1, &(0x7f00000001c0)={0x50, 0x0, r2, {0x7, 0x2b, 0x540b, 0x210005d, 0x401, 0xfff9, 0x2, 0x100, 0x0, 0x0, 0x4, 0x7}}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9c0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff010000000000000000000000000001"], 0x9c}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x2, @local}}, 0x0, 0x8001}, &(0x7f00000003c0)=0x90) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) 1.487628805s ago: executing program 2 (id=6193): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="300100001500010028bd7008fddbdf25ff010000000000000000000000000001640101010000000000000000000000004e2100064e200009f477a0803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b76b6efaf8ff0000e0000600ac14142800000000000000e69f94309d4b1c06b836cb0cda0022c8f2d5d600000000fe80000000000000aa4e2100004e21fffd0200e08001000000af61e2d47ba5ce38dfa922f1a9632d0c91b1498b6d1f11f2b2151cca9f44f0e0ed4591cef75718bb5590447c01274f08d3ad9836aa7988d808e95c211c", @ANYRES64=r0, @ANYBLOB="ac1414bb000000000000000000000000000004d66c000000ac1e0001000000000000000000000000ff7fffffffffffff05800000000000000d00000000000000000000000000000004000000000000000700000000000000020000000000000005000000000000000400000000000000feffffffffffffff0800000000000000d61d0000"], 0x130}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$inet(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) pselect6(0x40, &(0x7f0000000340)={0x10000000000006, 0x38, 0x7, 0xfffffffffffffff9, 0x5, 0xd, 0xffffffffffffffc9, 0xd6}, 0xfffffffffffffffe, 0x0, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='1\x00\x00\x00 '], 0x20) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000002c0)={0x14, 0x49, 0x2, {0x2, 0x0, 0x3}}, 0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r12, @ANYBLOB="01"], 0x20}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000020002001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r13], 0x4c}}, 0x4000) socket$kcm(0x10, 0x2, 0x0) 1.297416487s ago: executing program 0 (id=6194): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) unshare(0x22020400) unshare(0x20020000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000007c0), 0x0, 0x0) 1.145815719s ago: executing program 3 (id=6195): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80017615, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 871.432202ms ago: executing program 0 (id=6196): unshare(0x7c060c00) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x64c842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x5, 0x8, 0x1, 0xb}, 0x0) epoll_create(0x101) sendto$inet6(0xffffffffffffffff, &(0x7f0000000380)="d4e7db1d52d52f023458b201056f6c20ef323f7cb87e94c96d4115eda7ae5939707ede9fc0c28be674f69794cbcb40bd541a97595ebc57bac9a886c3d7d560e48a9fc52bb566abbef7baa08cb7cce2650589657e2c17", 0x56, 0x8940, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000013000500000000000000000020000000", @ANYRES32=0x0, @ANYBLOB="000c00000000000014000300776c616e3100000000000000000000000a0001"], 0x40}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40000) ioctl$FIONCLEX(r0, 0x5450) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbffffffffffffffe, 0x35, 0xdfffffff}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) socket(0x2b, 0x80801, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601020000000000000000000000000900020073797a31000000005500010007000000280007801800018014000240fe8800000000000000000000000001010c00028008000140e0004001"], 0x50}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="280000000306050000000000000000000121000405000100070000000900020073797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) 869.381792ms ago: executing program 1 (id=6197): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001080000cd6c0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x34}}, 0x44000) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000022c0)="d8000000190081154e81f782db4cb904021d0800180318bad14d5ea917421a243ca941ce93fe02e8fe50a10a000100258848000c600e41b0200900ac00080325000000040015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee409", 0x69}], 0x1}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) syz_io_uring_setup(0x2705, &(0x7f0000000080)={0x0, 0x0, 0x4000, 0x0, 0x1fc}, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x60, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x16, 0xf}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}, 0x1, 0xc0}, 0x8000) 819.156584ms ago: executing program 2 (id=6198): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000300", [0x0, 0x2000000000001]}}) 637.321651ms ago: executing program 3 (id=6199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000000)=0xd, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000001400000060ec970012302c00fe80fffffffffffffff50000000000aaff0200000000000000000000000000013a"], 0xfdef) 630.025536ms ago: executing program 2 (id=6200): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x6, 0xce, 0x7, 0xffffff7c, 0x6, "78dd8785c6d9ae34d70c6d7acee05b47322d1e"}) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000020c0)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) write$FUSE_STATX(r0, &(0x7f0000002100)={0x130, 0x0, r1, {0x5, 0x6, 0x0, '\x00', {0x8000, 0x5, 0x5, 0x7, 0xee01, r3, 0x4000, '\x00', 0x0, 0x34a9, 0x40, 0x2, {0x401, 0x8f3}, {0x1, 0xfffff59a}, {0xfffffffffffff800, 0x7}, {0x80, 0x6}, 0xffffffc4, 0x6, 0x2, 0xcbc}}}, 0x130) io_setup(0x100, &(0x7f0000002240)) io_cancel(0x0, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x5, 0x400, r0, &(0x7f0000002280)="e3b7dccb3a649b61183b221f035cac71daecb9439215204083d6b718347009b86e439e8a6189981e84b6bda96320be43b06ea353b240f94bd625f1099f8be5ec4cea15b787d5f5d413f6bc4eed84c3b743185c2f73196abe76cab0607f991a5e4664ef96e3c5732cf6da841dbb8183f4daee8ca226cd23247f99762285993cd987d2a5641d0c9374aba264164a", 0x8d, 0x6, 0x0, 0xab2bbeb250b94786, r0}, &(0x7f0000002380)) move_mount(r2, &(0x7f00000023c0)='./file0\x00', r0, &(0x7f0000002400)='./file0\x00', 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000026c0)={r2, 0x58, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = openat$procfs(0xffffff9c, &(0x7f0000002700)='/proc/zoneinfo\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002a80)={r0, 0xe0, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000027c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000002800)=[0x0, 0x0, 0x0], &(0x7f0000002840)=[0x0, 0x0], 0x0, 0xaa, &(0x7f0000002880)=[{}], 0x8, 0x10, &(0x7f00000028c0), &(0x7f0000002900), 0x8, 0xc9, 0x8, 0x8, &(0x7f0000002940)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002b00)={0xb, 0x12, &(0x7f0000002440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x36e97373}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfb00}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000002500)='syzkaller\x00', 0x6, 0xf1, &(0x7f0000002540)=""/241, 0x41100, 0x40, '\x00', r4, @fallback=0xd, r5, 0x8, &(0x7f0000002740)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000002780)={0x2, 0xf, 0x2, 0x7}, 0x10, r6, r2, 0x0, &(0x7f0000002ac0)=[r2, r0, r0, r0], 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, &(0x7f0000002bc0), 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000002c00), 0x4) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r5, 0x80605414, &(0x7f0000002c40)) getpeername$packet(r0, &(0x7f0000002d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002d40)=0x14) sendmsg$nl_route_sched_retired(r2, &(0x7f0000004480)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000004440)={&(0x7f0000002d80)=@deltfilter={0x16ac, 0x2d, 0x800, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xf, 0x10}, {0xd, 0x1}, {0xffe0, 0x8}}, [@f_tcindex={{0xc}, {0x2c, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x9}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x4}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x616f}, @TCA_TCINDEX_MASK={0x6, 0x2, 0xebf8}, @TCA_TCINDEX_MASK={0x6}]}}, @f_tcindex={{0xc}, {0x744, 0x2, [@TCA_TCINDEX_ACT={0x178, 0x7, [@m_skbmod={0x8c, 0xa, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="c52aa2d7e026"}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}]}, {0x13, 0x6, "b80bb403654c8989a4b876ecc74b2a"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0xe8, 0x12, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0xff, 0x1, 0x8, 0x2}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x94, 0x6, "7753bfa416321e713f537da38a38dc45dd997c905130797193aa6d6e7a15a86876008e3e28225a545206523283bfdab49bc21f487d8a88860fb109aa35bcc5380c3f0fda7bddeacdfb1256d1d718f6a8d4d14b8c8cf1aeebe706b3b876e04a7729a06a8bd286a24522778709971b463ac877bb318f3eefd1aa54b532141859819a0715989caa233e9b49650047b53f15"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x3}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x7}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x400}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x80}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_ACT={0x4b0, 0x7, [@m_skbedit={0xcc, 0x11, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x3}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc, 0x8}}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xa, 0x3}}]}, {0x7f, 0x6, "d45939541c7beb049330d6ad442089319256b46cf22e38e57cfafe5ffdf3bafd88f178b37a9c4b8a8119f0a5b2a3dac812ddd5dc6c1d9d15b2918b3e0adadbe300de61e65e167d416a4866ca36e54be171a80da53d4524e6921c5b0af89ab23381282003418caed4894e77e7831ccb3884c6bfc714ebaf15c5d9e3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x174, 0x6, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x9f25, 0x20000000, 0x0, 0x5}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x80000000, 0x6, 0x2, 0x2}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x0, 0xeb1, 0x1}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x401, 0x4, 0x8, 0xfffff804, 0xffffffff}, 0x6}}]}, {0xd2, 0x6, "8e82f007394162bc9f8a2ff830476401ee22b376e9adef452c021ee9774956f8a946d8e7ec55a563c59db8d08817cea14b5ca9675d8ea1711aa26bbb0244e7f047602d4251662ab1741c72fadaeda3517a6f949860783b0673c4cba7b887c4e24fce3c15bfb6bd555a45a4beab7b70518fe20901d2a4484d1b5c85477e16fdaf28261a8334e44bab97f02bdee8132e336c6ecf2557fd27a0b229aff13096840a291ff4a7e99eb3c98381e2eb9fb1494ab6e556a605f1d95b692355e41ccc576a57c413aa2731fe4347ebf349eb20"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbmod={0xb4, 0x3ffc, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0x5f, 0x6, "f7d903c900b8839df21db032fd6354d2f0e9d63a72e1d95abaaa2556b84ed79f430a9c707aa05e7600ccd969fbdbca8edbe743a119cf15d4a2ff812657dbb136762acc92b2cea5839b88a344362c5392012006bb247b89098ded18"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0x1b8, 0x11, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x8, 0x3, 0x61, 0x80000000}, 0x3d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fffffff, 0x2, 0x1, 0x8}, 0x2}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x5, 0x5, 0x3, 0xffff}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x800, 0x2, 0xfffffffd, 0x3}, 0x76}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x7fff, 0x6, 0x1, 0x2}, 0x4e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x90000000, 0x8, 0xffffffffffffffff, 0xf, 0xc}, 0x1}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xe, 0x4, 0x3, 0xe40, 0x6}, 0x7f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8000, 0x2, 0x8, 0x3, 0xffffffff}, 0x7c}}]}, {0xa9, 0x6, "d43ba200bb56195e9cb95498993aaa325fae2df675ac9cfa7392e14eae07b4ab5f217e8422c67783c5171fa636e8d0a30933ba4dc2182be2ad4b6bf61979d8ad6156ac626d12c16eeb61fbf892cf9db83fcc6c5402d2b2be9f5a6190cdc9e7ebc1f3caf594fc0ef1520e417b8ce5720e872a37f6e60661cc48c0b7942d41402669384eef197b71b46786907561d5aeefe0a9a73376c1268447e027a73029bc392985578734"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_TCINDEX_ACT={0xe0, 0x7, [@m_mpls={0x8c, 0xe, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x60}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x1a}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}]}, {0x37, 0x6, "e3025b74b5df38d58f30566d40bf0b5ea9eb22d9e69c727450571c7096fded083f8fa8868fcbc6de961f4f5773a27c5e35331a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_tunnel_key={0x50, 0x19, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}]}, {0xb, 0x6, '4UpIUt+'}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x44cc}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x4948}]}}, @f_rsvp={{0x9}, {0x6c, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x8, 0x10}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x4, 0x3}}, @TCA_RSVP_DST={0x8, 0x2, @broadcast}, @TCA_RSVP_DST={0x8, 0x2, @loopback}, @TCA_RSVP_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffd, 0x5, 0x1, 0x4, 0x5, {0x1, 0x0, 0x5, 0x5, 0x26d, 0x7fff}, {0x5, 0x2, 0xb91c, 0xf49d, 0x81, 0x4}, 0x82f7, 0x1000, 0x8}}]}, @TCA_RSVP_SRC={0x8, 0x3, @rand_addr=0x64010101}]}}, @f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_SHIFT={0x8}]}}, @f_rsvp={{0x9}, {0x12c, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @remote}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x5, 0x800, 0xc}, {0xee3, 0x4, 0xbac4}, 0x5c, 0x4, 0x50}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xd, 0xa}}, @TCA_RSVP_ACT={0xf8, 0x6, [@m_csum={0xf4, 0x0, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x1, 0x2, 0x2, 0x1}, 0x24}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x1, 0x1, 0x8, 0x6}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x3, 0x4, 0xfff, 0x1}, 0x2f}}]}, {0x73, 0x6, "71177e55e73350a9b682a2dbbfbe03d14a46f17a752e483edeb9b64f4566ce689189c33453a5c78cde68b96c0c1803dcff0852591846318dc02f79bc2690e7f6daaea4670461bf86749625420fcbb4bdf53e29501ec04fc7f9ad6f16f2278b7eeb90c8b971cf4cebca74a4ecd6db59"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}, @f_rsvp6={{0xa}, {0xca8, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @mcast2}, @TCA_RSVP_POLICE={0xc64, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x400}, @TCA_POLICE_RESULT={0x8, 0x5, 0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x0, 0x7fffffff, 0x48bb, 0x2053, {0xe7, 0x2, 0xfffb, 0x3, 0x7}, {0x3a, 0x0, 0xe, 0x4, 0x8, 0xec2}, 0x5, 0x6de, 0xb799}}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000001, 0x2, 0x1, 0x1, 0x9, 0x7ff, 0x2, 0x7, 0x7ff, 0xfffffffb, 0x6, 0x3, 0x8, 0x80, 0x9, 0x9, 0x1, 0xe, 0x0, 0x9, 0xb673, 0x9, 0x401, 0x9, 0x5, 0x6, 0x6, 0x101, 0x8, 0x0, 0x8, 0x2, 0x1, 0x2, 0xf, 0x10001, 0xff, 0xa9f, 0x5, 0x100, 0x8, 0x10000, 0x9, 0x7, 0x1, 0xba7f, 0x7, 0x2, 0x9, 0x3ff, 0x5, 0xa3, 0x3, 0xb81, 0x0, 0x6, 0x5, 0xb0, 0x3, 0x6, 0x7, 0x80, 0x9, 0x7fff, 0x400, 0x2, 0x4, 0x3, 0xa, 0x2, 0x80, 0x1, 0x0, 0x1, 0x4, 0x8, 0x0, 0xffff7fff, 0x9, 0xdbd5, 0x5, 0x794, 0x2, 0x3, 0x5, 0x3, 0x8, 0xc, 0xd, 0x3, 0x1, 0x2, 0x7, 0x5, 0x5, 0x1, 0x627, 0x4, 0x800, 0x3c66, 0x100, 0x7, 0x3, 0x1, 0xf5, 0x83, 0x2, 0x549f, 0x7, 0x800, 0x91a2, 0x2, 0x6, 0x1, 0x9, 0x3, 0x5, 0x4, 0x7, 0x7ff, 0x3ff, 0x9, 0x3, 0x751, 0x80, 0x9df, 0x1, 0x8, 0xa, 0x8, 0x40, 0x1b5, 0x6, 0x3, 0x9, 0x7, 0x5, 0x6, 0x80000001, 0x7, 0x3, 0x4, 0x1, 0x8, 0x9, 0x8de3, 0x6, 0x4, 0xe8, 0x3, 0x79, 0x5, 0x2, 0x0, 0x80000000, 0x3, 0x7fffffff, 0x7ff, 0x1, 0x5, 0x1b, 0x3ff, 0xffffffff, 0x1, 0x6, 0x9, 0x5, 0x5, 0x2, 0x1, 0x8, 0x8, 0x3, 0x5, 0x7, 0x9, 0xcc, 0x6, 0x8, 0x402b, 0x7, 0x2, 0x3, 0xfffffffd, 0x10000, 0x400, 0xc08, 0x4, 0x2, 0x6, 0x6, 0x6, 0x1, 0x1, 0x3, 0xfffffabe, 0x0, 0x68aa, 0x800, 0xfe, 0x7, 0x3, 0x6, 0x7, 0x7f, 0x7f, 0x3, 0x7, 0xc5e, 0x0, 0x618, 0x5, 0x9, 0x5, 0x5, 0x380, 0x5, 0x9, 0x2, 0xff, 0x7, 0x800, 0x6, 0xfff, 0x9, 0x9, 0x80, 0x5, 0x9, 0x7, 0x5, 0xffff80cd, 0xb48f, 0xad0, 0x4dc, 0x6, 0x7, 0x2, 0x0, 0x7, 0xffffffff, 0x2000000, 0xfffffffb, 0x7ff, 0x7, 0x9c2, 0x3d71, 0xa0a, 0x0, 0x5, 0x8, 0x1, 0x0, 0x4, 0x1ff, 0x5fca]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x264, 0x2, 0x200, 0x3, 0xd, 0x0, 0x9, 0x8, 0x0, 0x7f, 0x6, 0x1, 0x260, 0x794, 0x2, 0x3, 0x5, 0x9, 0x7, 0x3, 0x1, 0x7, 0x4, 0x0, 0x5d, 0x1, 0x1, 0x8, 0x200, 0x1, 0x1000, 0x7, 0x4, 0xb, 0x8, 0x10, 0x4, 0x0, 0x6, 0x0, 0x8, 0x8, 0x222, 0x9, 0x8, 0x81, 0x5, 0x1, 0x0, 0x6, 0x9, 0x1, 0x1, 0x4, 0xd96, 0x468b, 0x9, 0xd, 0x6, 0x4, 0x5, 0x1ff, 0x10, 0x6, 0x5, 0x401, 0x1, 0x5, 0x5, 0x6, 0x7, 0x8, 0x9, 0x2e, 0xffffffff, 0x1, 0x19, 0xcc7, 0x7, 0x40, 0x28, 0x7, 0x4, 0x5, 0x1ff, 0xbf6a, 0x401, 0x6, 0x4, 0x7, 0x5, 0x5, 0x3, 0x2, 0x1, 0x30000, 0x7, 0x5, 0xf, 0x3ad5, 0x10, 0x7, 0xa, 0x0, 0x7, 0x3, 0x7, 0x1b, 0x98, 0x6, 0x30f, 0x4, 0x1000, 0x1, 0x9, 0x1ff, 0x9, 0x7f, 0x6, 0x5, 0x8, 0x3, 0x2, 0x8001, 0x7f, 0x2, 0x3662, 0x10000, 0x80000000, 0x80, 0x4d15, 0x7f, 0xf, 0x3, 0x6, 0x800, 0x8, 0x8, 0x80000001, 0x145, 0xc, 0x5, 0x7, 0x1, 0x10001, 0x5, 0x1, 0x0, 0x100000, 0x840, 0x7, 0x1, 0x4, 0x4, 0x6, 0x783, 0x9, 0x4, 0x1, 0xb, 0x80000001, 0x5, 0xa00, 0x6b0, 0x8, 0xc, 0xe, 0xffff2c09, 0x8001, 0x80, 0x1, 0x2, 0xc, 0x4e, 0x5, 0xffff, 0x2, 0x4, 0xfffffffb, 0x60b2, 0x4, 0x9, 0x1, 0x0, 0x1, 0x3ff, 0xfffffff7, 0xffffffff, 0x2, 0x101, 0xfffffffe, 0x3080, 0x100, 0xffff52b5, 0x4, 0x10001, 0xeb52, 0x0, 0x6, 0x7f, 0x8, 0x400, 0x8, 0x5, 0x2, 0x5, 0x7, 0x2, 0x80000000, 0x200, 0xa3, 0x9, 0x1, 0x6, 0x10, 0x5, 0x85, 0x101, 0x376, 0x7, 0x574a860, 0x3, 0x9, 0x1ff, 0x5, 0x8, 0x0, 0x3, 0x3ff, 0x8000, 0x800, 0x9, 0x0, 0x5, 0x400, 0x7f, 0x32e3, 0x45, 0x1008, 0x5, 0xfff, 0xfffffffd, 0xffff, 0x87c9, 0x1, 0x9, 0x9, 0x9, 0x4, 0x8, 0x4, 0x25, 0xc6, 0xffffff7f, 0x1, 0x7f]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x2, 0x7f, 0x6, 0x10000, 0xfffffff8, 0xc, 0x8001, 0x9, 0xfff, 0x1, 0x81, 0x6, 0x7fff, 0xfffffbff, 0x6, 0x2, 0xa8, 0x10001, 0x8988, 0x7, 0x4, 0x6, 0x9, 0x3, 0x9, 0x5, 0x569, 0x3, 0x5, 0x1706, 0x3d03, 0x80000001, 0x7fff, 0x2, 0x44, 0x8, 0x2a1, 0x5, 0x5, 0x2, 0xfffffffb, 0x7fffffff, 0x1ff, 0xf3, 0x101, 0x200, 0x1c000, 0x8, 0x7, 0x7, 0x100, 0x2, 0x4, 0xd876, 0xc, 0x2, 0x4, 0x2, 0xfffffff9, 0x7, 0x5, 0x770, 0x9, 0x4, 0x67, 0x5, 0xc, 0x7fffffff, 0x6, 0x8001, 0xfffffce2, 0x9c, 0x286, 0x1, 0x2, 0x78202511, 0xe4a4, 0x3, 0x10001, 0x1, 0x0, 0x7, 0x7, 0x80000000, 0xfffffff7, 0x7fff, 0x8, 0x6, 0x80000001, 0x81, 0x401, 0x2, 0x8, 0xffffffb1, 0x4, 0x3, 0x9, 0x7, 0x7, 0xf5, 0x80, 0x0, 0x9, 0x9, 0x2, 0xe8b, 0x4, 0xd, 0x43, 0x1, 0x43f, 0x4, 0x7, 0x4, 0x8001, 0xfffffffa, 0xfffeffff, 0x4, 0x5, 0x5, 0x10, 0x10, 0x1000, 0xffffff65, 0x4, 0x8, 0xbeb4, 0x8, 0x3, 0x0, 0x40, 0x3, 0xeb, 0x1, 0x9, 0x7, 0x7, 0x6, 0xff, 0x4, 0x40, 0x3, 0x80000001, 0x7, 0x6, 0x10, 0x20000, 0x70000000, 0x1000, 0x1, 0x6, 0x92da, 0x8, 0x6, 0x3, 0x4, 0x8, 0x6, 0x4, 0xffff, 0x5, 0x1, 0x10001, 0x1, 0x5d0f, 0x7, 0x8, 0x7, 0x2, 0x5, 0x2, 0x3, 0x2, 0x9, 0x83d5, 0x4, 0x2, 0x3, 0x2, 0xc, 0x2, 0x10000, 0xe2e, 0x0, 0x2, 0x2, 0xffffffff, 0x7, 0x9, 0x81, 0x2, 0x3, 0x9, 0x7, 0x1, 0x4, 0x7, 0xe97e, 0x4, 0x10001, 0x5, 0x9, 0x8001, 0x80, 0x1, 0xd, 0x7, 0x8, 0x7, 0x8, 0x555, 0x401, 0xfffffffb, 0x2, 0x7, 0x1, 0xc7, 0xe, 0x7, 0x433, 0x40, 0xab, 0x0, 0x9, 0x6, 0x9f2, 0x6b2a, 0x3, 0xa, 0x5, 0xffffffff, 0x3, 0x2, 0x21, 0x6, 0x8, 0x200, 0x7, 0x8, 0x3, 0xa, 0x10, 0x800, 0x4, 0x7e4, 0x1, 0x40, 0x2, 0x8, 0x5, 0xa8d, 0x6, 0xfffffe00, 0x80000001, 0x6]}]}, @TCA_RSVP_POLICE={0x24, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0xd}}]}}, @f_tcindex={{0xc}, {0x78, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_POLICE={0xc, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}]}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xfff4, 0x9}}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xc205}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x4ba4}, @TCA_TCINDEX_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0x40, 0x2, 0x6, {0x4, 0x0, 0x8, 0x7fff, 0x2fe, 0x40000000}, {0xa8, 0x0, 0x400, 0x4, 0x6, 0x5}, 0x8, 0x5, 0x6}}]}]}}]}, 0x16ac}, 0x1, 0x0, 0x0, 0x801}, 0x24040041) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f00000044c0)) write$UHID_INPUT(r2, &(0x7f00000046c0)={0x8, {"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", 0x1000}}, 0x1006) pwrite64(r0, &(0x7f0000005700)="ab33cf6fb17334374c416e3a1d454acc78e6fd9b80c9ba8049d33e4b626c17470888b963cd6d7448179bee02639c72bd21f7438c549341409f6edaf44f5276ccc540f7833a1433aaf88f93c92104f66d6072d4ebe456a5861aac76172120c9f1bf80ac5b81662d2ff9bf01688f", 0x6d, 0x1) connect$inet6(r5, &(0x7f0000005780)={0xa, 0x4e20, 0x7fffffff, @private2, 0xa}, 0x1c) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005800), r5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000005940)={&(0x7f00000057c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000005900)={&(0x7f0000005840)={0x98, r8, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3ff}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6b}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xae67be29e30f490}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x40) userfaultfd(0x800) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000005980)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) syz_open_dev$midi(&(0x7f00000059c0), 0x0, 0x80480) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000005ac0)={'tunl0\x00', &(0x7f0000005a00)={'tunl0\x00', r7, 0x7830, 0x8000, 0x2, 0x2, {{0x1f, 0x4, 0x2, 0x6, 0x7c, 0x65, 0x0, 0x8, 0x29, 0x0, @private=0xa010100, @multicast2, {[@rr={0x7, 0x1f, 0xc1, [@multicast2, @broadcast, @private=0xa010100, @loopback, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010102]}, @timestamp={0x44, 0x8, 0xaf, 0x0, 0x5, [0x26cd4590]}, @end, @rr={0x7, 0xf, 0x39, [@private=0xa010101, @multicast2, @multicast2]}, @cipso={0x86, 0x1f, 0x1, [{0x7, 0xd, "f95609ec4aaac94bf6c422"}, {0x7, 0x3, "93"}, {0x7, 0x9, "95330424bea1c9"}]}, @end, @end, @rr={0x7, 0x7, 0xf6, [@empty]}, @end, @generic={0x7ab06cb789397694, 0x5, 'EqE'}]}}}}}) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r2, 0x4068aea3, &(0x7f0000005b00)={0xc1, 0x0, 0x5}) setsockopt$inet6_buf(r0, 0x29, 0xcc, &(0x7f0000005b80)="51ffb23ab48a3af46b3214e3d272fafdcfcde82fce8001c8001a20f7759c54199c54de4ece56bc85968cc778566fedbdc2005b3d34040c03ef49a04e1509896ebc43a89e34987a7167a7cf97121e0be0d16efe3daa236fbf45b0a138fd138f45364022794f59e454daee36feff0acce132f8f569dacd7bc95f", 0x79) io_uring_setup(0xa26, &(0x7f0000005c00)={0x0, 0xc53a, 0x2, 0x3, 0x3d, 0x0, r5}) 0s ago: executing program 2 (id=6201): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000120001ff83bd9ee7e1ee07000000ffff", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x28}}, 0x802) kernel console output (not intermixed with test programs): 454.352143][T15984] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1454.367026][T15984] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1454.377688][T15984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1454.386214][T15984] usb 5-1: SerialNumber: syz [ 1454.391255][T21759] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1454.402954][T21752] usb 2-1: config index 0 descriptor too short (expected 797, got 739) [ 1454.417150][T15984] cdc_acm 5-1:1.0: skipping garbage [ 1454.430987][T21752] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 1454.439140][T21752] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1454.449498][T15984] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 1454.457388][T15984] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 1454.465344][T21752] usb 2-1: config 0 has no interface number 0 [ 1454.471917][T15984] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 1454.481970][T21752] usb 2-1: config 0 interface 16 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1454.496987][T21752] usb 2-1: config 0 interface 16 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1454.507399][T21752] usb 2-1: config 0 interface 16 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1454.521186][T21752] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice= 2.10 [ 1454.530582][T21752] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.541918][T21752] usb 2-1: config 0 descriptor?? [ 1454.565979][T21759] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1454.575396][T21759] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.588743][T21759] usb 1-1: config 0 descriptor?? [ 1454.597722][T21759] cp210x 1-1:0.0: cp210x converter detected [ 1454.658776][T24763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1454.667770][T24763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1455.026240][T24784] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5773'. [ 1455.096702][T21752] (null): keene_cmd_main failed (-110) [ 1455.805346][T21750] usb 5-1: USB disconnect, device number 105 [ 1455.854969][T21752] video4linux radio48: keene_cmd_main failed (-32) [ 1455.895111][T21752] radio-keene 2-1:0.16: V4L2 device registered as radio48 [ 1456.062480][T21752] usb 2-1: USB disconnect, device number 60 [ 1456.381944][T21750] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1456.519575][T21752] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1456.542155][T24797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5779'. [ 1456.542963][T21750] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1456.551541][T24797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5779'. [ 1456.577966][T24797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5779'. [ 1456.594407][T21750] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1456.613731][T21750] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1456.625165][T21750] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1456.645432][T21750] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1456.665646][T21750] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.680430][T21752] usb 2-1: Using ep0 maxpacket: 16 [ 1456.693059][T21752] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1456.720594][T21750] usb 5-1: config 0 descriptor?? [ 1456.726208][T21752] usb 2-1: config 2 has an invalid interface number: 22 but max is 0 [ 1456.734744][T21752] usb 2-1: config 2 has no interface number 0 [ 1456.748331][T21752] usb 2-1: config 2 interface 22 has no altsetting 0 [ 1456.764557][T21752] usb 2-1: New USB device found, idVendor=0451, idProduct=5416, bcdDevice= 1.00 [ 1456.774986][T21752] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.786716][T21752] usb 2-1: Product: syz [ 1456.793114][T21752] usb 2-1: Manufacturer: syz [ 1456.798062][T21752] usb 2-1: SerialNumber: syz [ 1457.065952][T21752] usb-storage 2-1:2.22: USB Mass Storage device detected [ 1457.081841][T21752] usb-storage 2-1:2.22: Quirks match for vid 0451 pid 5416: 2 [ 1457.162145][T21750] plantronics 0003:047F:FFFF.0053: No inputs registered, leaving [ 1457.177318][T21752] usb 2-1: USB disconnect, device number 61 [ 1457.241933][T21750] plantronics 0003:047F:FFFF.0053: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1457.536447][T24791] netlink: 'syz.4.5776': attribute type 13 has an invalid length. [ 1458.144164][T24791] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1458.166344][T24805] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5780'. [ 1458.317322][T21759] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1458.394585][T21759] cp210x 1-1:0.0: querying part number failed [ 1458.446442][T24819] batman_adv: batadv0: Removing interface: wlan0 [ 1458.471850][T21759] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1458.520871][T21759] usb 1-1: USB disconnect, device number 99 [ 1458.543881][T21759] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1458.556406][T24819] bond2: (slave macvlan2): Releasing backup interface [ 1458.635022][T21766] usb 5-1: reset high-speed USB device number 106 using dummy_hcd [ 1458.657640][T21759] cp210x 1-1:0.0: device disconnected [ 1459.099557][T21752] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1459.227978][T24830] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1459.275241][T21752] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1459.284668][T21752] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.325250][T21752] usb 4-1: Product: syz [ 1459.348348][T21752] usb 4-1: Manufacturer: syz [ 1459.368622][T21752] usb 4-1: SerialNumber: syz [ 1459.391687][T21752] usb 4-1: config 0 descriptor?? [ 1459.628821][ T30] audit: type=1326 audit(1746909803.529:6551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24823 comm="syz.3.5785" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 1459.777528][ T30] audit: type=1326 audit(1746909803.529:6552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24823 comm="syz.3.5785" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 1459.849413][ T30] audit: type=1326 audit(1746909803.529:6553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24823 comm="syz.3.5785" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 1459.909166][T21752] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1459.926765][ T30] audit: type=1326 audit(1746909803.529:6554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24823 comm="syz.3.5785" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 1459.959162][T21752] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1459.975964][T21752] usb 4-1: USB disconnect, device number 76 [ 1459.991227][T21765] usb 5-1: USB disconnect, device number 106 [ 1460.069523][ T30] audit: type=1326 audit(1746909803.529:6555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24823 comm="syz.3.5785" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 1460.313037][ T30] audit: type=1326 audit(1746909803.529:6556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24823 comm="syz.3.5785" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 1460.358053][ T30] audit: type=1326 audit(1746909803.569:6557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24823 comm="syz.3.5785" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 1460.382326][ T30] audit: type=1326 audit(1746909803.569:6558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24823 comm="syz.3.5785" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 1460.410865][ T30] audit: type=1326 audit(1746909803.569:6559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24823 comm="syz.3.5785" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 1460.439806][ T30] audit: type=1326 audit(1746909803.579:6560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24823 comm="syz.3.5785" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x7ffc0000 [ 1461.096291][T24858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5796'. [ 1461.111320][T24858] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5796'. [ 1461.174361][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1461.197951][T24862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5796'. [ 1461.220227][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1461.230560][T21766] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1461.258525][T24862] ip6gretap0: entered promiscuous mode [ 1461.278650][T24866] openvswitch: netlink: Message has 4 unknown bytes. [ 1461.279965][T24862] macvtap1: entered promiscuous mode [ 1461.298609][T24862] macvtap1: entered allmulticast mode [ 1461.304545][T24862] ip6gretap0: entered allmulticast mode [ 1461.859500][T21759] usb 5-1: new full-speed USB device number 107 using dummy_hcd [ 1461.859885][T21766] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1461.902204][T21766] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1462.035353][T21759] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 1462.051360][T21759] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.081612][T21759] usb 5-1: Product: syz [ 1462.094888][T21759] usb 5-1: Manufacturer: syz [ 1462.119260][T21759] usb 5-1: SerialNumber: syz [ 1462.186545][T21759] usb 5-1: config 0 descriptor?? [ 1462.343370][T21759] usb 5-1: selecting invalid altsetting 3 [ 1462.363868][T21759] comedi comedi0: could not set alternate setting 3 in high speed [ 1462.387978][T21759] usbdux 5-1:0.0: driver 'usbdux' failed to auto-configure device. [ 1462.409613][T21752] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1462.568310][T21759] usbdux 5-1:0.0: probe with driver usbdux failed with error -22 [ 1462.701663][T21752] usb 1-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 1462.712176][T21752] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.951674][T21752] usb 1-1: config 0 descriptor?? [ 1463.545994][T21752] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1463.579633][T21752] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1463.640752][T21752] asix 1-1:0.0: probe with driver asix failed with error -71 [ 1463.691181][T21752] usb 1-1: USB disconnect, device number 100 [ 1464.020380][T24905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5808'. [ 1464.359447][T21766] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1464.461710][T24916] fuse: Bad value for 'fd' [ 1464.509660][T21766] usb 4-1: Using ep0 maxpacket: 16 [ 1464.520466][T21766] usb 4-1: config 0 has no interfaces? [ 1464.528535][T21766] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1464.544485][T21766] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.558892][T21766] usb 4-1: Product: syz [ 1464.568134][T21766] usb 4-1: Manufacturer: syz [ 1464.574486][T21766] usb 4-1: SerialNumber: syz [ 1464.623379][T21766] usb 4-1: config 0 descriptor?? [ 1464.841089][T24907] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5809'. [ 1464.853554][T24907] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5809'. [ 1464.865069][T21766] usb 4-1: USB disconnect, device number 77 [ 1465.109545][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1465.226422][T24918] netlink: 'syz.0.5812': attribute type 1 has an invalid length. [ 1465.284434][T21752] usb 5-1: USB disconnect, device number 107 [ 1465.979607][T21766] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1466.255212][T21766] usb 4-1: config 0 has an invalid interface number: 162 but max is 0 [ 1466.265862][T21766] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1466.280821][T21766] usb 4-1: config 0 has no interface number 0 [ 1466.287488][T21766] usb 4-1: config 0 interface 162 altsetting 0 endpoint 0x7 has an invalid bInterval 32, changing to 9 [ 1466.302897][T21766] usb 4-1: config 0 interface 162 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1466.397857][T21766] usb 4-1: config 0 interface 162 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1466.548632][T21766] usb 4-1: config 0 interface 162 altsetting 0 has 7 endpoint descriptors, different from the interface descriptor's value: 11 [ 1466.575300][T21766] usb 4-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice=d4.45 [ 1466.592091][T21766] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.600452][T21766] usb 4-1: Product: syz [ 1466.604707][T21766] usb 4-1: Manufacturer: syz [ 1466.610602][T21766] usb 4-1: SerialNumber: syz [ 1466.632776][T21766] usb 4-1: config 0 descriptor?? [ 1466.817559][T21766] rtsx_usb 4-1:0.162: probe with driver rtsx_usb failed with error -8 [ 1466.926360][T24936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1466.959828][T24936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1467.006180][T21752] usb 4-1: USB disconnect, device number 78 [ 1467.382426][T24958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5824'. [ 1467.616232][T24970] Cannot find del_set index 16385 as target [ 1467.679469][T21766] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 1467.832671][T21766] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 1467.844520][T21766] usb 1-1: config 0 has no interface number 0 [ 1467.850976][T21765] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1467.863991][T21766] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1467.873427][T21766] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.892512][T21766] usb 1-1: Product: syz [ 1467.897005][T21766] usb 1-1: Manufacturer: syz [ 1467.907145][T21766] usb 1-1: SerialNumber: syz [ 1467.956135][T21766] usb 1-1: config 0 descriptor?? [ 1467.991056][T21765] usb 4-1: device descriptor read/64, error -71 [ 1468.178784][T21766] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 1468.236359][T21765] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1468.269046][T21766] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 1468.302784][T21766] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 1468.323534][T21766] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 1468.354459][T21766] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1468.379992][T21765] usb 4-1: device descriptor read/64, error -71 [ 1468.503839][T21765] usb usb4-port1: attempt power cycle [ 1468.634542][T24958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5824'. [ 1468.696864][T21766] usb 1-1: USB disconnect, device number 101 [ 1468.734066][T21766] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1468.746275][T21766] keyspan 1-1:0.133: device disconnected [ 1468.805476][T24989] SET target dimension over the limit! [ 1468.919458][T21765] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1468.948409][T21765] usb 4-1: device descriptor read/8, error -71 [ 1469.177567][T24991] program syz.2.5836 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1469.199565][T21765] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1469.333388][T21765] usb 4-1: device descriptor read/8, error -71 [ 1469.489733][T21765] usb usb4-port1: unable to enumerate USB device [ 1469.628738][T24999] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5840'. [ 1470.029882][T25005] bridge2: left promiscuous mode [ 1470.048239][T25005] bridge3: left promiscuous mode [ 1470.980302][T21766] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1471.243180][T21766] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1471.289570][T21766] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.345495][T21766] usb 1-1: Product: syz [ 1471.350526][T21766] usb 1-1: Manufacturer: syz [ 1471.355296][T21766] usb 1-1: SerialNumber: syz [ 1471.428163][T21766] usb 1-1: config 0 descriptor?? [ 1471.691239][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1471.691266][ T30] audit: type=1326 audit(1746909815.559:6567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25016 comm="syz.0.5846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 1471.719470][ C1] vkms_vblank_simulate: vblank timer overrun [ 1471.746787][ T30] audit: type=1326 audit(1746909815.559:6568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25016 comm="syz.0.5846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 1471.769290][ C1] vkms_vblank_simulate: vblank timer overrun [ 1471.820669][ T30] audit: type=1326 audit(1746909815.559:6569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25016 comm="syz.0.5846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 1471.852569][T21766] cx82310_eth 1-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1471.877422][ T30] audit: type=1326 audit(1746909815.559:6570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25016 comm="syz.0.5846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 1471.886121][T21766] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1471.924288][T21766] usb 1-1: USB disconnect, device number 102 [ 1471.962276][ T30] audit: type=1326 audit(1746909815.559:6571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25016 comm="syz.0.5846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 1472.024738][ T30] audit: type=1326 audit(1746909815.559:6572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25016 comm="syz.0.5846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 1472.048015][ T30] audit: type=1326 audit(1746909815.569:6573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25016 comm="syz.0.5846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 1472.071231][ T30] audit: type=1326 audit(1746909815.569:6574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25016 comm="syz.0.5846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 1472.133191][ T30] audit: type=1326 audit(1746909815.579:6575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25016 comm="syz.0.5846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 1472.156494][ T30] audit: type=1326 audit(1746909815.579:6576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25016 comm="syz.0.5846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 1472.239716][ T7567] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1472.409594][ T7567] usb 5-1: Using ep0 maxpacket: 8 [ 1472.421689][ T7567] usb 5-1: config 0 has an invalid interface number: 191 but max is 0 [ 1472.445404][ T7567] usb 5-1: config 0 has no interface number 0 [ 1472.453252][ T7567] usb 5-1: too many endpoints for config 0 interface 191 altsetting 46: 38, using maximum allowed: 30 [ 1472.509260][ T7567] usb 5-1: config 0 interface 191 altsetting 46 has 0 endpoint descriptors, different from the interface descriptor's value: 38 [ 1472.554127][ T7567] usb 5-1: config 0 interface 191 has no altsetting 0 [ 1472.585513][ T7567] usb 5-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 1472.611500][ T7567] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.626223][ T7567] usb 5-1: config 0 descriptor?? [ 1472.962131][T15984] usb 5-1: USB disconnect, device number 108 [ 1473.109541][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1473.731611][T25058] netlink: 'syz.3.5862': attribute type 11 has an invalid length. [ 1473.741894][T25058] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5862'. [ 1474.114273][T25069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5865'. [ 1474.120189][T15984] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 1474.296902][T15984] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1474.309564][T21766] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1474.314467][T15984] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1474.352792][T15984] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1474.379432][T15984] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1474.388647][T15984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.407252][T19922] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1474.428912][T19922] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1474.438894][T25058] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1474.459546][T21766] usb 2-1: Using ep0 maxpacket: 32 [ 1474.473608][T21766] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1474.485705][T19922] usb 3-1: USB disconnect, device number 76 [ 1474.492843][T21766] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.501297][ T7567] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1474.517181][T21766] usb 2-1: Product: syz [ 1474.522177][T21766] usb 2-1: Manufacturer: syz [ 1474.526985][T21766] usb 2-1: SerialNumber: syz [ 1474.536269][T21766] usb 2-1: config 0 descriptor?? [ 1474.546282][T21766] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1474.639565][ T7567] usb 1-1: device descriptor read/64, error -71 [ 1474.687188][T15984] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 1474.708422][T15984] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input89 [ 1474.760079][T21766] gspca_topro: reg_w err -71 [ 1474.803891][T21766] gspca_topro: Sensor soi763a [ 1474.808223][T15984] usb 4-1: USB disconnect, device number 83 [ 1474.808653][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1474.875376][T21766] usb 2-1: USB disconnect, device number 62 [ 1474.891091][ T7567] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1475.039840][ T7567] usb 1-1: device descriptor read/64, error -71 [ 1475.159994][ T7567] usb usb1-port1: attempt power cycle [ 1475.517067][ T7567] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1475.534120][T25092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5874'. [ 1475.575435][ T7567] usb 1-1: device descriptor read/8, error -71 [ 1475.869595][ T7567] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1475.925155][ T7567] usb 1-1: device descriptor read/8, error -71 [ 1476.064999][ T7567] usb usb1-port1: unable to enumerate USB device [ 1476.959151][T25105] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1476.980533][T23008] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.000575][T25105] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1477.009647][T25105] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1477.041513][T25105] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1477.050948][T25105] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1477.190081][T23008] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.421555][T23008] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.481546][T25111] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5880'. [ 1477.673878][T25118] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5880'. [ 1477.744415][T23008] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.095083][T25107] chnl_net:caif_netlink_parms(): no params data found [ 1479.121274][T15478] Bluetooth: hci1: command tx timeout [ 1479.492572][T25137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5886'. [ 1480.606827][T23008] dvmrp0 (unregistering): left allmulticast mode [ 1481.191389][T15478] Bluetooth: hci1: command tx timeout [ 1481.376198][T23008] bond0 (unregistering): Released all slaves [ 1481.619204][T23008] bond1 (unregistering): Released all slaves [ 1481.784825][T23008] bond2 (unregistering): Released all slaves [ 1481.948488][T23008] bond3 (unregistering): Released all slaves [ 1482.101599][T23008] bond4 (unregistering): Released all slaves [ 1482.252024][T23008] bond5 (unregistering): Released all slaves [ 1482.418587][T23008] bond6 (unregistering): Released all slaves [ 1482.747082][T25178] input: syz1 as /devices/virtual/input/input90 [ 1482.898813][T25184] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1482.913418][T25185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5894'. [ 1482.933021][T25185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5894'. [ 1482.967540][T25177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5892'. [ 1483.269632][T15478] Bluetooth: hci1: command tx timeout [ 1483.351884][ T7567] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1483.589775][ T7567] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1483.598734][ T7567] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1483.663742][ T7567] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1483.687335][ T7567] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1483.706500][T25107] bridge0: port 1(bridge_slave_0) entered blocking state [ 1483.748132][T25107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1483.771229][ T7567] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1483.799669][T25107] bridge_slave_0: entered allmulticast mode [ 1483.807521][T25107] bridge_slave_0: entered promiscuous mode [ 1483.813552][ T7567] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1483.837890][ T7567] usb 2-1: Product: syz [ 1483.850305][T15984] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 1483.868977][ T7567] usb 2-1: Manufacturer: syz [ 1483.916199][ T7567] cdc_wdm 2-1:1.0: skipping garbage [ 1483.929554][T25107] bridge0: port 2(bridge_slave_1) entered blocking state [ 1483.936752][T25107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1483.945940][ T7567] cdc_wdm 2-1:1.0: skipping garbage [ 1483.952214][ T7567] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1483.962996][T25107] bridge_slave_1: entered allmulticast mode [ 1483.994056][T25107] bridge_slave_1: entered promiscuous mode [ 1484.017390][T15984] usb 1-1: config 0 has an invalid interface number: 30 but max is 0 [ 1484.029624][T15984] usb 1-1: config 0 has no interface number 0 [ 1484.035795][T15984] usb 1-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=94.e2 [ 1484.076505][T15984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.116195][T25107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1484.133595][T25206] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5898'. [ 1484.147799][T15984] usb 1-1: config 0 descriptor?? [ 1484.164031][T15984] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state. [ 1484.187158][T15984] usb 1-1: setting power ON [ 1484.223140][T25107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1484.241182][T15984] dvb-usb: bulk message failed: -22 (2/0) [ 1484.420363][T15984] dvb-usb: bulk message failed: -22 (1/0) [ 1484.597848][T15984] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1484.618137][T25216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5899'. [ 1484.678690][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.685903][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.720840][T21765] usb 2-1: USB disconnect, device number 63 [ 1484.821880][T15984] dvb-usb: Mygica D689 DMB-TH error while loading driver (-19) [ 1484.849438][T15984] dvb_usb_cxusb 1-1:0.30: probe with driver dvb_usb_cxusb failed with error -22 [ 1485.225408][T15984] usb 1-1: USB disconnect, device number 107 [ 1485.354261][T15478] Bluetooth: hci1: command tx timeout [ 1485.458480][T25107] team0: Port device team_slave_0 added [ 1485.524416][T25107] team0: Port device team_slave_1 added [ 1485.714952][T25107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1485.754700][T25107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1485.821667][T25107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1485.877800][T23008] hsr_slave_0: left promiscuous mode [ 1485.912683][T23008] hsr_slave_1: left promiscuous mode [ 1485.987080][T23008] veth1_macvtap: left promiscuous mode [ 1486.018716][T23008] veth0_macvtap: left promiscuous mode [ 1486.109853][T25244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5905'. [ 1486.118811][T25244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5905'. [ 1486.181618][T25244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5905'. [ 1486.317498][T23008] pimreg3 (unregistering): left allmulticast mode [ 1486.540709][T15984] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1486.722289][T15984] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1486.731961][T15984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.767374][T15984] usb 1-1: Product: syz [ 1486.772069][T15984] usb 1-1: Manufacturer: syz [ 1486.776792][T15984] usb 1-1: SerialNumber: syz [ 1486.808062][T15984] usb 1-1: config 0 descriptor?? [ 1487.029194][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1487.029213][ T30] audit: type=1326 audit(1746909830.929:6585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25247 comm="syz.0.5906" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 1487.059522][ T7567] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1487.079600][ T30] audit: type=1326 audit(1746909830.929:6586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25247 comm="syz.0.5906" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 1487.104544][ T30] audit: type=1326 audit(1746909830.929:6587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25247 comm="syz.0.5906" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 1487.138094][ T30] audit: type=1326 audit(1746909830.929:6588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25247 comm="syz.0.5906" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 1487.170463][ T30] audit: type=1326 audit(1746909830.939:6589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25247 comm="syz.0.5906" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 1487.194823][ T30] audit: type=1326 audit(1746909830.939:6590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25247 comm="syz.0.5906" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 1487.224904][ T30] audit: type=1326 audit(1746909830.939:6591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25247 comm="syz.0.5906" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 1487.252576][ T7567] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1487.262814][ T30] audit: type=1326 audit(1746909830.969:6592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25247 comm="syz.0.5906" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 1487.265333][ T7567] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.293157][ T30] audit: type=1326 audit(1746909830.979:6593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25247 comm="syz.0.5906" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 1487.324251][ T30] audit: type=1326 audit(1746909830.979:6594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25247 comm="syz.0.5906" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 1487.334383][ T7567] usb 3-1: config 0 descriptor?? [ 1487.378805][T15984] cx82310_eth 1-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1487.412441][T15984] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1487.415362][ T7567] cp210x 3-1:0.0: cp210x converter detected [ 1487.435856][T15984] usb 1-1: USB disconnect, device number 108 [ 1487.895101][T25270] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5910'. [ 1488.462198][T25273] binder: 25272:25273 unknown command 0 [ 1488.477933][T25273] binder: 25272:25273 ioctl c0306201 800003c0 returned -22 [ 1488.672395][T25107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1488.688532][T25107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1488.725958][T25107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1488.996306][T25107] hsr_slave_0: entered promiscuous mode [ 1489.062053][T25107] hsr_slave_1: entered promiscuous mode [ 1489.116661][T25285] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1489.374670][T23008] IPVS: stop unused estimator thread 0... [ 1489.749935][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1489.801651][T25293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5919'. [ 1489.871751][T25293] bond1: (slave veth3): Releasing active interface [ 1489.939165][T25293] bond0: (slave ip6gretap1): Releasing backup interface [ 1489.989189][T25293] bond0: (slave ip6gretap1): the permanent HWaddr of slave - 1e:8f:cf:df:00:85 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1490.192708][T25302] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.5919'. [ 1490.248249][T25302] netlink: zone id is out of range [ 1490.257613][T25293] bond0: (slave veth5): Releasing backup interface [ 1490.356532][T25302] netlink: zone id is out of range [ 1490.447462][T25302] netlink: get zone limit has 8 unknown bytes [ 1490.462024][T19922] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1490.904653][ T7567] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1490.929693][ T7567] cp210x 3-1:0.0: querying part number failed [ 1490.970837][T19922] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1490.997255][ T7567] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1491.013084][T25315] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1491.171392][ T7567] usb 3-1: USB disconnect, device number 78 [ 1491.215821][ T7567] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1491.274558][ T7567] cp210x 3-1:0.0: device disconnected [ 1491.299672][T19922] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1491.485804][T25322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5923'. [ 1491.510332][T19922] usb 5-1: Using ep0 maxpacket: 8 [ 1491.518957][T19922] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1491.533743][T19922] usb 5-1: config 4 interface 0 has no altsetting 0 [ 1491.549086][T19922] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1491.563830][T25322] bond2: (slave batadv1): Releasing active interface [ 1491.576765][T19922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.605844][ T7567] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1491.658323][T19922] usb 5-1: Product: syz [ 1491.665730][T19922] usb 5-1: Manufacturer: syz [ 1491.690398][T19922] usb 5-1: SerialNumber: syz [ 1491.787602][T25324] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5923'. [ 1491.836097][T25324] netlink: zone id is out of range [ 1491.836733][ T7567] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1491.871236][ T7567] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1491.906123][T25324] netlink: zone id is out of range [ 1491.936573][ T7567] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1491.978832][ T7567] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1491.980364][T25324] netlink: get zone limit has 8 unknown bytes [ 1492.030672][T19922] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1492.041097][ T7567] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1492.073512][T25107] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1492.091209][T19922] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1492.113828][T25107] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1492.120407][T19922] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1492.128184][ T7567] usb 3-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 1492.137428][T21765] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1492.162903][T25107] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1492.171081][ T7567] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1492.180254][T19922] usb 5-1: media controller created [ 1492.190165][T25107] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1492.198523][ T7567] usb 3-1: SerialNumber: syz [ 1492.220473][ T7567] usb 3-1: config 0 descriptor?? [ 1492.240407][ T7567] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1492.251627][T19922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1492.303751][T19922] zl10353_read_register: readreg error (reg=127, ret==0) [ 1492.350474][T21765] usb 2-1: Using ep0 maxpacket: 8 [ 1492.363647][T21765] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1492.392989][T21765] usb 2-1: config 4 interface 0 has no altsetting 0 [ 1492.434904][T21765] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1492.468528][T19922] usb 5-1: USB disconnect, device number 109 [ 1492.478633][T21765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.480673][T21752] usb 3-1: USB disconnect, device number 79 [ 1492.545802][T21765] usb 2-1: Product: syz [ 1492.563506][T25107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1492.573477][T21765] usb 2-1: Manufacturer: syz [ 1492.578148][T21765] usb 2-1: SerialNumber: syz [ 1492.670551][T25107] 8021q: adding VLAN 0 to HW filter on device team0 [ 1492.730504][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 1492.737824][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1492.844029][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 1492.851283][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1492.951358][T21765] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1492.996944][T21765] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1493.017502][T25335] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5925'. [ 1493.036594][T21765] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1493.079995][T21765] usb 2-1: media controller created [ 1493.232980][T21765] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1493.238695][T25107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1493.314672][T21765] zl10353_read_register: readreg error (reg=127, ret==0) [ 1493.541418][T21765] usb 2-1: USB disconnect, device number 64 [ 1493.595065][T25107] veth0_vlan: entered promiscuous mode [ 1493.666260][T25107] veth1_vlan: entered promiscuous mode [ 1494.298048][T25107] veth0_macvtap: entered promiscuous mode [ 1494.384557][T25107] veth1_macvtap: entered promiscuous mode [ 1494.724295][T25107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1494.838543][T25107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1494.916709][T25107] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.925731][T25107] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.934559][T25107] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.944247][T25107] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.365453][T23008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1495.480927][T25366] --map-set only usable from mangle table [ 1495.560195][T23008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1495.746704][T23010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1495.749600][T25368] netlink: 'syz.2.5930': attribute type 1 has an invalid length. [ 1495.803095][T25368] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1495.893021][T23010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1497.378798][ T7567] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1497.516075][T25397] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5937'. [ 1497.549890][ T7567] usb 4-1: Using ep0 maxpacket: 32 [ 1497.620216][ T7567] usb 4-1: config 64 has an invalid interface number: 4 but max is 0 [ 1497.636368][ T7567] usb 4-1: config 64 has no interface number 0 [ 1497.695159][ T7567] usb 4-1: config 64 interface 4 has no altsetting 0 [ 1497.719733][ T7567] usb 4-1: New USB device found, idVendor=05c6, idProduct=9215, bcdDevice=28.46 [ 1497.742197][ T7567] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.778795][ T7567] usb 4-1: Product: syz [ 1497.788913][ T7567] usb 4-1: Manufacturer: syz [ 1497.804944][ T7567] usb 4-1: SerialNumber: syz [ 1497.930107][T21759] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1498.040932][T25405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1498.057478][T25405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1498.082150][T21759] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1498.101587][T25105] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1498.118108][ T7567] qmi_wwan 4-1:64.4: probe with driver qmi_wwan failed with error -22 [ 1498.130077][T25105] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1498.139608][T25105] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1498.148414][T25105] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1498.157460][T25105] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1498.193011][ T7567] usb 4-1: USB disconnect, device number 84 [ 1498.200974][T21759] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1498.270529][T21759] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.351238][T21759] usb 5-1: config 0 descriptor?? [ 1498.430795][T21759] pwc: Askey VC010 type 2 USB webcam detected. [ 1498.469989][T25410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5939'. [ 1498.509194][T25410] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5939'. [ 1498.519462][T25410] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5939'. [ 1498.918977][T21759] pwc: send_video_command error -71 [ 1498.928619][T21759] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1498.953782][T21759] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1499.036508][T21759] usb 5-1: USB disconnect, device number 110 [ 1499.101444][T25426] input: syz1 as /devices/virtual/input/input91 [ 1499.560481][T21759] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1499.784659][T25415] delete_channel: no stack [ 1499.886708][T21759] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1499.902729][T21759] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1499.940654][T21759] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1500.033146][T21759] usb 5-1: config 0 descriptor?? [ 1500.077796][T21759] pwc: Askey VC010 type 2 USB webcam detected. [ 1500.107094][T25441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5944'. [ 1500.170152][T25441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5944'. [ 1500.229595][T15478] Bluetooth: hci2: command tx timeout [ 1500.294756][T25408] chnl_net:caif_netlink_parms(): no params data found [ 1500.482820][T21759] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1500.503846][T21759] pwc: recv_control_msg error -32 req 02 val 2700 [ 1501.223516][T25408] bridge0: port 1(bridge_slave_0) entered blocking state [ 1501.238173][T25408] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.248497][T25408] bridge_slave_0: entered allmulticast mode [ 1501.268261][T25408] bridge_slave_0: entered promiscuous mode [ 1501.303905][T25408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1501.314957][T25408] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.326640][T25408] bridge_slave_1: entered allmulticast mode [ 1501.345187][T25408] bridge_slave_1: entered promiscuous mode [ 1501.715063][T21759] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1501.745427][T21759] pwc: recv_control_msg error -71 req 04 val 1000 [ 1501.752304][T25463] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5948'. [ 1501.795354][T25408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1501.811304][T21759] pwc: recv_control_msg error -71 req 04 val 1300 [ 1501.830204][T21759] pwc: recv_control_msg error -71 req 04 val 1400 [ 1501.851003][T21759] pwc: recv_control_msg error -71 req 02 val 2000 [ 1501.858391][T25408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1501.866887][T21759] pwc: recv_control_msg error -71 req 02 val 2100 [ 1501.878868][T25466] netlink: 'syz.4.5950': attribute type 1 has an invalid length. [ 1501.894895][T21759] pwc: recv_control_msg error -71 req 04 val 1500 [ 1501.911390][T21759] pwc: recv_control_msg error -71 req 02 val 2500 [ 1501.971846][T21759] pwc: recv_control_msg error -71 req 02 val 2400 [ 1501.994712][T21759] pwc: recv_control_msg error -71 req 02 val 2600 [ 1502.034444][T21759] pwc: recv_control_msg error -71 req 02 val 2900 [ 1502.080523][T21759] pwc: recv_control_msg error -71 req 02 val 2800 [ 1502.106466][T21759] pwc: recv_control_msg error -71 req 04 val 1100 [ 1502.133243][T21759] pwc: recv_control_msg error -71 req 04 val 1200 [ 1502.152592][T21759] pwc: Registered as video103. [ 1502.197780][T25471] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1502.253628][T21759] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input92 [ 1502.297806][T25474] bond0: entered promiscuous mode [ 1502.304141][T25474] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1502.319503][T15478] Bluetooth: hci2: command tx timeout [ 1502.346961][T25474] bond3: (slave macvlan0): Enslaving as a backup interface with a down link [ 1502.385914][T21759] usb 5-1: USB disconnect, device number 111 [ 1502.648346][T25408] team0: Port device team_slave_0 added [ 1502.742848][T25408] team0: Port device team_slave_1 added [ 1502.887179][T25496] program syz.2.5953 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1503.042818][T25408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1503.052195][T25408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1503.095481][T25408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1503.148024][T25408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1503.159816][T21765] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1503.165645][T25408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1503.224938][T25408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1503.322807][T21765] usb 5-1: device descriptor read/64, error -71 [ 1503.609448][T21765] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1503.749728][T21765] usb 5-1: device descriptor read/64, error -71 [ 1503.790461][ T7567] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1503.871555][T21765] usb usb5-port1: attempt power cycle [ 1503.941866][T25408] hsr_slave_0: entered promiscuous mode [ 1503.962459][ T7567] usb 2-1: Using ep0 maxpacket: 16 [ 1503.974890][T25408] hsr_slave_1: entered promiscuous mode [ 1504.001969][ T7567] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1504.016953][T25408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1504.059516][ T7567] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1504.089869][T25408] Cannot create hsr debugfs directory [ 1504.120456][ T7567] usb 2-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 1504.162829][ T7567] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1504.189569][T21759] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1504.234355][ T7567] usb 2-1: config 0 descriptor?? [ 1504.340484][T21765] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1504.353110][T21759] usb 4-1: Using ep0 maxpacket: 32 [ 1504.367020][T21759] usb 4-1: config 0 has an invalid interface number: 9 but max is 0 [ 1504.376057][T21759] usb 4-1: config 0 has no interface number 0 [ 1504.382198][T21765] usb 5-1: device descriptor read/8, error -71 [ 1504.389708][T15478] Bluetooth: hci2: command tx timeout [ 1504.516946][T21759] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1504.527278][T21759] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.544879][T21759] usb 4-1: Product: syz [ 1504.557270][T21759] usb 4-1: Manufacturer: syz [ 1504.573678][T21759] usb 4-1: SerialNumber: syz [ 1504.592092][T21759] usb 4-1: config 0 descriptor?? [ 1504.629213][T21759] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1504.639800][T21765] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1504.690321][T21765] usb 5-1: device descriptor read/8, error -71 [ 1504.810081][T21765] usb usb5-port1: unable to enumerate USB device [ 1505.716395][T25408] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1505.927843][T25408] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1505.982777][T25408] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1506.127024][T25408] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1506.299666][T21759] gspca_topro: Sensor cx0342 [ 1506.471177][T15478] Bluetooth: hci2: command tx timeout [ 1506.516286][T25408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1506.552266][T25408] 8021q: adding VLAN 0 to HW filter on device team0 [ 1506.563557][T25541] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5962'. [ 1506.587785][ T6702] bridge0: port 1(bridge_slave_0) entered blocking state [ 1506.595094][ T6702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1506.667585][ T6702] bridge0: port 2(bridge_slave_1) entered blocking state [ 1506.675192][ T6702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1506.779892][ T7567] usbhid 2-1:0.0: can't add hid device: -71 [ 1506.786120][ T7567] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1506.816127][ T7567] usb 2-1: USB disconnect, device number 65 [ 1506.849220][T25544] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5963'. [ 1506.994599][T25408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1507.036088][T25547] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1507.135213][T25408] veth0_vlan: entered promiscuous mode [ 1507.228639][T25408] veth1_vlan: entered promiscuous mode [ 1507.399228][T25408] veth0_macvtap: entered promiscuous mode [ 1507.425729][T25408] veth1_macvtap: entered promiscuous mode [ 1507.459728][T25408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1507.470751][T25408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.484680][T25408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1507.512240][T25408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1507.527406][T25408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.541215][T25408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1507.558878][T25408] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.568012][T25408] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.577530][T25408] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.601149][T25408] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.691471][T19922] usb 4-1: USB disconnect, device number 85 [ 1507.880154][T21759] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1507.916766][T23008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1507.951644][T23008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1508.039675][T21759] usb 5-1: Using ep0 maxpacket: 16 [ 1508.049501][T21759] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1508.067483][T23008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1508.084617][T21759] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1508.129247][T23008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1508.216952][T21759] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1508.238046][T21759] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.261293][T21759] usb 5-1: Product: syz [ 1508.269273][T21759] usb 5-1: Manufacturer: syz [ 1508.288508][T21759] usb 5-1: SerialNumber: syz [ 1508.805724][T21759] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 1509.121532][T21759] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1509.155636][T21759] usb 5-1: USB disconnect, device number 116 [ 1509.182895][T16362] udevd[16362]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1509.289988][T21752] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1509.459606][T21752] usb 1-1: Using ep0 maxpacket: 16 [ 1509.500924][T21752] usb 1-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 1509.510549][T21752] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.518853][T21752] usb 1-1: Product: syz [ 1509.834683][T21752] usb 1-1: Manufacturer: syz [ 1509.846217][T21752] usb 1-1: SerialNumber: syz [ 1509.864135][T21752] usb 1-1: config 0 descriptor?? [ 1509.941142][T21765] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1510.185433][T21765] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1510.204464][T21765] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 1510.228620][T21765] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1510.247678][T21765] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1510.258240][T21765] usb 5-1: Product: syz [ 1510.271874][T21765] usb 5-1: Manufacturer: syz [ 1510.277724][T21765] usb 5-1: SerialNumber: syz [ 1510.610817][T25576] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1510.874110][T25580] netlink: 'syz.3.5973': attribute type 10 has an invalid length. [ 1510.904615][T25580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1510.912605][T25580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1511.008328][T25581] netlink: 'syz.3.5973': attribute type 10 has an invalid length. [ 1511.026934][T25580] bridge0: port 2(bridge_slave_1) entered blocking state [ 1511.034190][T25580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1511.042141][T25580] bridge0: port 1(bridge_slave_0) entered blocking state [ 1511.049550][T25580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1511.076066][T25580] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1511.150444][T25581] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1511.224648][T25576] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1511.299573][T21754] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1511.452848][T21754] usb 3-1: config 0 has no interfaces? [ 1511.461204][T21765] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1511.486979][T25585] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5975'. [ 1511.498186][T21765] cdc_ncm 5-1:1.0: dwNtbInMaxSize=14 is too small. Using 2048 [ 1511.499277][T21754] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1511.516445][T21754] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.525736][T21754] usb 3-1: Product: syz [ 1511.535557][T25586] FAULT_INJECTION: forcing a failure. [ 1511.535557][T25586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1511.549739][T21754] usb 3-1: Manufacturer: syz [ 1511.554460][T21754] usb 3-1: SerialNumber: syz [ 1511.559433][T21765] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 1511.579842][T25586] CPU: 1 UID: 0 PID: 25586 Comm: syz.3.5974 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) [ 1511.579875][T25586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1511.579889][T25586] Call Trace: [ 1511.579899][T25586] [ 1511.579910][T25586] dump_stack_lvl+0x189/0x250 [ 1511.579943][T25586] ? __lock_acquire+0xaac/0xd20 [ 1511.579976][T25586] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1511.580005][T25586] ? __pfx__printk+0x10/0x10 [ 1511.580033][T25586] ? __might_fault+0xb0/0x130 [ 1511.580061][T25586] should_fail_ex+0x414/0x560 [ 1511.580090][T25586] _copy_from_user+0x2d/0xb0 [ 1511.580122][T25586] get_compat_msghdr+0xad/0x4a0 [ 1511.580154][T25586] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1511.580180][T25586] ? rcu_is_watching+0x15/0xb0 [ 1511.580205][T25586] ? ___sys_recvmsg+0x1c4/0x510 [ 1511.580230][T25586] ___sys_recvmsg+0x17f/0x510 [ 1511.580261][T25586] ? __pfx____sys_recvmsg+0x10/0x10 [ 1511.580316][T25586] ? __fget_files+0x3a0/0x420 [ 1511.580351][T25586] do_recvmmsg+0x36a/0x760 [ 1511.580378][T25586] ? __pfx_do_recvmmsg+0x10/0x10 [ 1511.580412][T25586] ? __pfx_vfs_write+0x10/0x10 [ 1511.580452][T25586] __sys_recvmmsg+0x19d/0x280 [ 1511.580481][T25586] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1511.580504][T25586] ? ksys_write+0x1f0/0x250 [ 1511.580536][T25586] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 1511.580569][T25586] __do_fast_syscall_32+0xb4/0x110 [ 1511.580596][T25586] ? lockdep_hardirqs_on+0x9c/0x150 [ 1511.580624][T25586] do_fast_syscall_32+0x34/0x80 [ 1511.580650][T25586] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1511.580675][T25586] RIP: 0023:0xf7f76539 [ 1511.580693][T25586] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1511.580712][T25586] RSP: 002b:00000000f507555c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 1511.580734][T25586] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080001440 [ 1511.580749][T25586] RDX: 0000000000000700 RSI: 0000000040002002 RDI: 0000000000000000 [ 1511.580763][T25586] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1511.580774][T25586] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1511.580786][T25586] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1511.580815][T25586] [ 1511.825867][T21754] usb 3-1: config 0 descriptor?? [ 1511.866406][T21765] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1512.026758][T21759] usb 5-1: USB disconnect, device number 117 [ 1512.034346][T21759] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 1512.112742][T21752] usb_8dev 1-1:0.0 can0: sending command message failed [ 1512.155791][T21752] usb_8dev 1-1:0.0 can0: can't get firmware version [ 1512.173344][T25593] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5977'. [ 1512.188899][T25590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5976'. [ 1512.238736][T25590] batadv0: Device is already in use. [ 1512.271317][T21752] usb_8dev 1-1:0.0: probe with driver usb_8dev failed with error -22 [ 1512.334375][T21752] usb 1-1: USB disconnect, device number 109 [ 1512.871180][T21765] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1513.034564][T21765] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1513.065133][T25614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1513.146680][T21765] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1513.212842][T21765] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1513.222280][T21765] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1513.328200][T21759] usb 3-1: USB disconnect, device number 80 [ 1513.363394][T21765] usb 4-1: Manufacturer: syz [ 1513.422893][T21765] usb 4-1: config 0 descriptor?? [ 1513.459672][ T7567] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1513.507794][T21765] igorplugusb 4-1:0.0: incorrect number of endpoints [ 1513.549196][T25624] ip6t_REJECT: ECHOREPLY is not supported [ 1513.616234][T25627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5984'. [ 1513.630983][T21765] usb 4-1: USB disconnect, device number 86 [ 1513.658614][T25627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5984'. [ 1513.694192][ T7567] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1513.734104][ T7567] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1513.810293][ T7567] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1513.826048][ T7567] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1513.844141][ T7567] usb 5-1: SerialNumber: syz [ 1513.936093][T19922] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 1514.099682][T19922] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1514.109033][T19922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.165240][T19922] usb 3-1: config 0 descriptor?? [ 1515.801805][T25667] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5992'. [ 1515.991349][T25624] ALSA: seq fatal error: cannot create timer (-22) [ 1516.013344][T19922] pegasus 3-1:0.0: setup Pegasus II specific registers [ 1516.123697][ T7567] usb 5-1: 0:2 : does not exist [ 1516.145929][T19922] pegasus 3-1:0.0: can't locate MII phy, using default [ 1516.159645][ T7567] usb 5-1: unit 5 not found! [ 1516.228226][T25656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1516.243543][T19922] pegasus 3-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, d6:d3:e7:cc:09:8b [ 1516.262301][ T7567] usb 5-1: USB disconnect, device number 118 [ 1516.301215][T19922] usb 3-1: USB disconnect, device number 81 [ 1516.333375][T16362] udevd[16362]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1516.764080][T25679] fuse: Bad value for 'rootmode' [ 1516.797953][T25683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1516.819982][T25685] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1516.824797][T25683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1516.827318][T25685] IPv6: NLM_F_CREATE should be set when creating new route [ 1516.842334][T25685] IPv6: NLM_F_CREATE should be set when creating new route [ 1516.884223][T25686] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5997'. [ 1517.161974][T25701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6001'. [ 1517.279569][ T7567] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1517.426332][ T7567] usb 3-1: device descriptor read/64, error -71 [ 1517.769003][T25707] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1517.883644][ T7567] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1518.029582][ T7567] usb 3-1: device descriptor read/64, error -71 [ 1518.091444][T25711] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6007'. [ 1518.140079][ T7567] usb usb3-port1: attempt power cycle [ 1518.325073][T25105] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1518.336186][T25105] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1518.347265][T25105] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1518.357403][T25105] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1518.365482][T25105] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1518.509522][ T7567] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1518.540349][ T7567] usb 3-1: device descriptor read/8, error -71 [ 1518.789759][ T7567] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1518.830917][ T7567] usb 3-1: device descriptor read/8, error -71 [ 1518.951560][ T7567] usb usb3-port1: unable to enumerate USB device [ 1519.350762][T21754] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1519.412364][T25720] chnl_net:caif_netlink_parms(): no params data found [ 1519.597670][T21754] usb 1-1: config index 0 descriptor too short (expected 797, got 739) [ 1519.610345][T21754] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 1519.620135][T21754] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1519.640259][T21754] usb 1-1: config 0 has no interface number 0 [ 1519.646445][T21754] usb 1-1: config 0 interface 16 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1519.657539][T21754] usb 1-1: config 0 interface 16 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1519.667982][T21754] usb 1-1: config 0 interface 16 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1519.681700][T21754] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice= 2.10 [ 1519.691987][T21754] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1519.709599][T21754] usb 1-1: config 0 descriptor?? [ 1519.931601][T21754] (null): keene_cmd_main failed (-71) [ 1519.966248][T21754] video4linux radio48: keene_cmd_main failed (-71) [ 1519.979424][T21754] radio-keene 1-1:0.16: V4L2 device registered as radio48 [ 1520.057186][T21754] usb 1-1: USB disconnect, device number 110 [ 1520.361574][T25720] bridge0: port 1(bridge_slave_0) entered blocking state [ 1520.380795][T25720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1520.400410][T15478] Bluetooth: hci5: command tx timeout [ 1520.408834][T25720] bridge_slave_0: entered allmulticast mode [ 1520.420684][T25720] bridge_slave_0: entered promiscuous mode [ 1520.439553][ T7567] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1520.453104][T25720] bridge0: port 2(bridge_slave_1) entered blocking state [ 1520.484984][T25720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1520.527461][T25720] bridge_slave_1: entered allmulticast mode [ 1520.544925][T25720] bridge_slave_1: entered promiscuous mode [ 1520.707674][ T7567] usb 5-1: Using ep0 maxpacket: 16 [ 1520.714551][T25762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6020'. [ 1521.471448][ T7567] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1521.489730][ T7567] usb 5-1: can't read configurations, error -61 [ 1521.551589][T25767] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6023'. [ 1521.627484][T25768] netlink: 'syz.2.6022': attribute type 9 has an invalid length. [ 1521.639577][ T7567] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1521.819365][ T7567] usb 5-1: Using ep0 maxpacket: 16 [ 1521.827334][T25775] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6025'. [ 1521.834325][ T7567] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1521.834370][ T7567] usb 5-1: can't read configurations, error -61 [ 1521.834895][ T7567] usb usb5-port1: attempt power cycle [ 1522.058372][ T6702] bond1 (unregistering): Released all slaves [ 1522.189616][ T7567] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1522.220518][ T7567] usb 5-1: Using ep0 maxpacket: 16 [ 1522.229867][ T7567] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1522.244684][ T7567] usb 5-1: can't read configurations, error -61 [ 1522.306641][T25786] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6029'. [ 1522.366209][ T6702] bond2 (unregistering): Released all slaves [ 1522.379594][ T7567] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1522.400032][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1522.456470][ T7567] usb 5-1: Using ep0 maxpacket: 16 [ 1522.471843][ T7567] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1522.480446][T15478] Bluetooth: hci5: command tx timeout [ 1522.493057][ T7567] usb 5-1: can't read configurations, error -61 [ 1522.507189][ T7567] usb usb5-port1: unable to enumerate USB device [ 1522.598908][ T6702] bond3 (unregistering): Released all slaves [ 1522.648200][T25766] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1522.759600][T21759] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1522.937454][T21759] usb 1-1: config index 0 descriptor too short (expected 797, got 739) [ 1522.947506][T21759] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 1522.967857][T21759] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1523.004562][T21759] usb 1-1: config 0 has no interface number 0 [ 1523.015054][T21759] usb 1-1: config 0 interface 16 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1523.032446][T21759] usb 1-1: config 0 interface 16 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1523.053319][T21759] usb 1-1: config 0 interface 16 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1523.074741][T21759] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice= 2.10 [ 1523.086496][T21759] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.128552][T21759] usb 1-1: config 0 descriptor?? [ 1523.129266][T25786] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1523.174743][T25786] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1523.211619][T25786] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1523.258187][T25786] bridge0: port 2(bridge_slave_1) entered disabled state [ 1523.265815][T25786] bridge0: port 1(bridge_slave_0) entered disabled state [ 1523.307230][T25786] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 1523.328820][T25786] bond0 (unregistering): Released all slaves [ 1523.353377][T21759] (null): keene_cmd_main failed (-71) [ 1523.377390][T21759] video4linux radio48: keene_cmd_main failed (-71) [ 1523.396117][T21759] radio-keene 1-1:0.16: V4L2 device registered as radio48 [ 1523.403811][T25720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1523.456174][T25720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1523.458663][T21759] usb 1-1: USB disconnect, device number 111 [ 1523.502978][ T6702] : left promiscuous mode [ 1523.879461][T21752] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1523.947671][T25720] team0: Port device team_slave_0 added [ 1523.987796][T25720] team0: Port device team_slave_1 added [ 1524.049437][T21752] usb 5-1: Using ep0 maxpacket: 16 [ 1524.102278][T21752] usb 5-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 1524.111921][T21752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.134944][T21752] usb 5-1: Product: syz [ 1524.139184][T21752] usb 5-1: Manufacturer: syz [ 1524.157249][T21752] usb 5-1: SerialNumber: syz [ 1524.186695][T21752] usb 5-1: config 0 descriptor?? [ 1524.551323][T15478] Bluetooth: hci5: command tx timeout [ 1524.710346][T25720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1524.726517][T25720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1524.858459][T25720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1524.954616][T25829] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6039'. [ 1525.020719][T25720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1525.086854][T25720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1525.192988][T25720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1525.480473][T25836] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6040'. [ 1525.577522][T25836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6040'. [ 1525.668710][T25836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6040'. [ 1525.876480][T25836] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6040'. [ 1525.895954][ T6702] batadv0: left promiscuous mode [ 1525.978891][T25839] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6041'. [ 1525.988536][T25839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6041'. [ 1525.998402][T25839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6041'. [ 1526.014834][ T6702] dummy0: left promiscuous mode [ 1526.066642][ T6702] hsr_slave_0: left promiscuous mode [ 1526.066699][T25839] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6041'. [ 1526.124479][ T6702] hsr_slave_1: left promiscuous mode [ 1526.424436][T25842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6042'. [ 1526.507369][ T6702] pim6reg9 (unregistering): left allmulticast mode [ 1526.630574][T15478] Bluetooth: hci5: command tx timeout [ 1526.870675][ T7567] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1527.049675][ T7567] usb 4-1: Using ep0 maxpacket: 8 [ 1527.111305][ T7567] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1527.140019][ T7567] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1527.176464][ T7567] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1527.199627][ T7567] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1527.238638][ T7567] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1527.292311][ T7567] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1527.385828][T25863] loop6: detected capacity change from 0 to 7 [ 1527.395346][ T5839] Dev loop6: unable to read RDB block 7 [ 1527.411906][ T5839] loop6: unable to read partition table [ 1527.419016][ T5839] loop6: partition table beyond EOD, truncated [ 1527.429401][T25863] Dev loop6: unable to read RDB block 7 [ 1527.442081][T25863] loop6: unable to read partition table [ 1527.451491][T25863] loop6: partition table beyond EOD, truncated [ 1527.468300][T25863] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1527.531804][ T7567] usb 4-1: GET_CAPABILITIES returned 0 [ 1527.537904][ T7567] usbtmc 4-1:16.0: can't read capabilities [ 1527.916172][T21750] usb 4-1: USB disconnect, device number 88 [ 1528.060214][T21759] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1528.250311][T21759] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1528.261051][T21759] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1528.295233][T21759] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1528.321128][T21759] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1528.334708][T21759] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1528.360270][T21759] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1528.369731][T21759] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1528.377773][T21759] usb 3-1: Product: syz [ 1528.386093][T21759] usb 3-1: Manufacturer: syz [ 1528.440108][T21759] cdc_wdm 3-1:1.0: skipping garbage [ 1528.445546][T21759] cdc_wdm 3-1:1.0: skipping garbage [ 1528.498811][T21759] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1528.517582][T21759] cdc_wdm 3-1:1.0: Unknown control protocol [ 1529.525829][T21752] usb_8dev 5-1:0.0 can0: sending command message failed [ 1529.611078][T21752] usb_8dev 5-1:0.0 can0: can't get firmware version [ 1529.785895][T25720] hsr_slave_0: entered promiscuous mode [ 1529.806213][T25720] hsr_slave_1: entered promiscuous mode [ 1529.813998][T25720] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1529.824165][T25720] Cannot create hsr debugfs directory [ 1529.927730][T21752] usb_8dev 5-1:0.0: probe with driver usb_8dev failed with error -22 [ 1529.995316][T21752] usb 5-1: USB disconnect, device number 123 [ 1530.564527][T21752] usb 3-1: USB disconnect, device number 86 [ 1531.713047][T25911] __nla_validate_parse: 2 callbacks suppressed [ 1531.713071][T25911] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6058'. [ 1533.021263][T25934] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6062'. [ 1533.326565][T25936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6063'. [ 1533.358017][T25940] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6065'. [ 1533.379643][T25936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6063'. [ 1533.410465][T25720] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1533.433419][T25720] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1533.494401][T25720] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1533.552304][T25720] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1533.709438][T21766] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1533.842040][T21752] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1533.863242][T21766] usb 1-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 1533.964546][T21766] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.984507][T21766] usb 1-1: config 0 descriptor?? [ 1534.057890][T21766] pcwd_usb: The device isn't a Human Interface Device [ 1534.069483][T21752] usb 4-1: Using ep0 maxpacket: 8 [ 1534.086837][T21752] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1534.101633][T21752] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.110720][T21752] usb 4-1: Product: syz [ 1534.114948][T21752] usb 4-1: Manufacturer: syz [ 1534.121002][T21752] usb 4-1: SerialNumber: syz [ 1534.141449][T21752] usb 4-1: config 0 descriptor?? [ 1534.174865][T21752] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1534.229703][T25720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1534.318891][T25720] 8021q: adding VLAN 0 to HW filter on device team0 [ 1534.342968][ T6702] bridge0: port 1(bridge_slave_0) entered blocking state [ 1534.350814][ T6702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1534.473944][T23013] bridge0: port 2(bridge_slave_1) entered blocking state [ 1534.481296][T23013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1534.587883][T25957] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6067'. [ 1534.792250][T25961] netlink: 'syz.2.6069': attribute type 30 has an invalid length. [ 1534.861379][T21752] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 1534.877417][T21752] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 1534.898704][T21752] usb 4-1: USB disconnect, device number 89 [ 1534.964336][T21765] usb 1-1: USB disconnect, device number 112 [ 1535.212392][T25720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1535.400536][T25720] veth0_vlan: entered promiscuous mode [ 1535.447296][T25720] veth1_vlan: entered promiscuous mode [ 1535.595501][T25720] veth0_macvtap: entered promiscuous mode [ 1535.629743][T25720] veth1_macvtap: entered promiscuous mode [ 1535.670491][T25720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1535.759662][T25720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.790734][T25720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1535.834099][T25720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.874781][T25720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1535.926183][T25720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1535.954283][T25992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6075'. [ 1535.964520][T25720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1535.970436][T25992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6075'. [ 1535.988956][T25992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6075'. [ 1536.003437][T25720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1536.079595][T25720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1536.124041][T25720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1536.159413][T21765] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1536.224955][T25720] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.246233][T25720] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.258039][T25720] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.275534][T25720] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.359567][T21765] usb 1-1: Using ep0 maxpacket: 16 [ 1536.771415][T21765] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1536.845085][T21765] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1536.924272][T21765] usb 1-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 1536.937696][T23010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1536.965896][T21765] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1536.974261][T23010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1537.046474][T26013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6080'. [ 1537.071852][T21765] usb 1-1: config 0 descriptor?? [ 1537.545308][T21765] input: HID 28bd:0934 Mouse as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0934.0054/input/input93 [ 1537.691273][T23010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1537.763015][T23010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1537.813133][T21765] uclogic 0003:28BD:0934.0054: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0934] on usb-dummy_hcd.0-1/input0 [ 1539.392742][T21759] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1539.439151][T21754] usb 1-1: USB disconnect, device number 113 [ 1539.854308][T21759] usb 4-1: config 0 has no interfaces? [ 1539.870215][T21759] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1539.880682][T21759] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.892637][T21765] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1539.896140][T21759] usb 4-1: Product: syz [ 1539.946674][T21759] usb 4-1: Manufacturer: syz [ 1539.957295][T21759] usb 4-1: SerialNumber: syz [ 1539.969210][T26051] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6086'. [ 1540.015180][T21759] usb 4-1: config 0 descriptor?? [ 1540.116809][T21765] usb 5-1: config 0 has no interfaces? [ 1540.134142][T21765] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1540.171806][T21765] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.297711][T21765] usb 5-1: Product: syz [ 1540.331354][T21765] usb 5-1: Manufacturer: syz [ 1540.336107][T21765] usb 5-1: SerialNumber: syz [ 1540.406483][T21765] usb 5-1: config 0 descriptor?? [ 1541.874515][T26051] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1541.920757][T26051] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1541.965997][T26051] bond0 (unregistering): Released all slaves [ 1542.457057][T26074] netlink: zone id is out of range [ 1542.529910][T26074] netlink: zone id is out of range [ 1542.535089][T26074] netlink: zone id is out of range [ 1542.547764][T26076] syz_tun: entered allmulticast mode [ 1542.671558][T26074] netlink: zone id is out of range [ 1542.676749][T26074] netlink: zone id is out of range [ 1542.703553][T21765] usb 5-1: USB disconnect, device number 124 [ 1542.814970][T21766] usb 4-1: USB disconnect, device number 90 [ 1542.819134][T26074] netlink: zone id is out of range [ 1542.874730][T26074] netlink: zone id is out of range [ 1542.911262][T26074] netlink: zone id is out of range [ 1542.945426][T26074] netlink: zone id is out of range [ 1542.988842][T26071] syz_tun: left allmulticast mode [ 1543.168480][T26088] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1543.213178][T25105] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1543.234935][T25105] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1543.247209][T25105] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1543.265965][T25105] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1543.277400][T25105] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1544.013025][T21750] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1544.219761][T21750] usb 2-1: Using ep0 maxpacket: 16 [ 1544.632738][T21750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1544.659035][T21750] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1544.873053][T21750] usb 2-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 1544.908148][T21750] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.929468][T26130] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1544.936802][T26130] IPv6: NLM_F_CREATE should be set when creating new route [ 1544.944159][T26130] IPv6: NLM_F_CREATE should be set when creating new route [ 1544.952992][T21750] usb 2-1: config 0 descriptor?? [ 1545.010232][T21754] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1545.249795][T21754] usb 5-1: Using ep0 maxpacket: 16 [ 1545.349937][T15478] Bluetooth: hci0: command tx timeout [ 1545.366860][T21754] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1545.383743][T21754] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1545.415807][T21754] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1545.426601][T21754] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.440564][T21754] usb 5-1: Product: syz [ 1545.449054][T21754] usb 5-1: Manufacturer: syz [ 1545.491428][T21754] usb 5-1: SerialNumber: syz [ 1545.577868][T21750] input: HID 28bd:0934 Mouse as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0934.0055/input/input94 [ 1545.626359][T26093] chnl_net:caif_netlink_parms(): no params data found [ 1545.627378][T21754] usb 5-1: config 0 descriptor?? [ 1545.672190][T21754] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1545.720209][T21754] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1545.890495][T21750] uclogic 0003:28BD:0934.0055: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0934] on usb-dummy_hcd.1-1/input0 [ 1546.137389][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.147860][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.191746][T21754] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1546.198201][T21754] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1546.209412][T21754] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 1546.235562][T21754] em28xx 5-1:0.0: No AC97 audio processor [ 1546.553476][T21754] usb 5-1: USB disconnect, device number 125 [ 1546.591812][T21754] em28xx 5-1:0.0: Disconnecting em28xx [ 1546.698412][T21754] em28xx 5-1:0.0: Freeing device [ 1547.118824][T21766] usb 2-1: USB disconnect, device number 66 [ 1547.387924][T26093] bridge0: port 1(bridge_slave_0) entered blocking state [ 1547.402959][T26093] bridge0: port 1(bridge_slave_0) entered disabled state [ 1547.411215][T26093] bridge_slave_0: entered allmulticast mode [ 1547.421697][T26093] bridge_slave_0: entered promiscuous mode [ 1547.430975][T15478] Bluetooth: hci0: command tx timeout [ 1547.444813][T26093] bridge0: port 2(bridge_slave_1) entered blocking state [ 1547.452426][T26093] bridge0: port 2(bridge_slave_1) entered disabled state [ 1547.462709][T26093] bridge_slave_1: entered allmulticast mode [ 1547.473396][T26093] bridge_slave_1: entered promiscuous mode [ 1547.643207][T26093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1547.667118][T26093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1547.700416][T26170] only policy match revision 0 supported [ 1547.700441][T26170] unable to load match [ 1547.865380][T26176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6111'. [ 1548.014645][T26176] bridge_slave_1: left allmulticast mode [ 1548.061099][T26176] bridge_slave_1: left promiscuous mode [ 1548.067276][T26176] bridge0: port 2(bridge_slave_1) entered disabled state [ 1548.191466][T26176] bridge_slave_0: left allmulticast mode [ 1548.197399][T26176] bridge_slave_0: left promiscuous mode [ 1548.224202][T26176] bridge0: port 1(bridge_slave_0) entered disabled state [ 1548.308951][T26183] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6116'. [ 1548.897457][T26093] team0: Port device team_slave_0 added [ 1548.949938][T21766] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1548.960769][T26191] netlink: 'syz.1.6118': attribute type 10 has an invalid length. [ 1548.968925][T26191] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6118'. [ 1548.992410][T26093] team0: Port device team_slave_1 added [ 1549.119520][T21766] usb 5-1: Using ep0 maxpacket: 16 [ 1549.131052][T21766] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1549.147318][T26191] batadv0: entered promiscuous mode [ 1549.154239][T26191] batadv0: entered allmulticast mode [ 1549.164705][T26191] bridge0: port 3(batadv0) entered blocking state [ 1549.175465][T21766] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1549.200150][T26191] bridge0: port 3(batadv0) entered disabled state [ 1549.211091][T21766] usb 5-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 1549.231802][T26191] bridge0: port 3(batadv0) entered blocking state [ 1549.238495][T26191] bridge0: port 3(batadv0) entered forwarding state [ 1549.246367][T21766] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.387795][T21766] usb 5-1: config 0 descriptor?? [ 1549.453022][T26093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1549.470885][T26093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1549.510547][T15478] Bluetooth: hci0: command tx timeout [ 1549.559967][T26093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1549.678975][T26196] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6119'. [ 1549.702637][T26093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1549.728610][ T6702] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1549.738240][ T6702] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1549.752042][T26093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1549.796765][T26093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1549.933682][T21766] input: HID 28bd:0934 Mouse as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0934.0056/input/input95 [ 1550.201162][T21766] uclogic 0003:28BD:0934.0056: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0934] on usb-dummy_hcd.4-1/input0 [ 1550.359174][T26093] hsr_slave_0: entered promiscuous mode [ 1550.396276][T26093] hsr_slave_1: entered promiscuous mode [ 1550.425607][T26093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1550.487759][T26093] Cannot create hsr debugfs directory [ 1551.609402][T15478] Bluetooth: hci0: command tx timeout [ 1551.780042][T21750] usb 5-1: USB disconnect, device number 126 [ 1551.839532][T26221] Cannot find add_set index 0 as target [ 1552.608287][T26226] program syz.1.6125 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1552.877682][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1552.877704][ T30] audit: type=1326 audit(1746909896.779:6603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26229 comm="syz.1.6126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1553.049987][ T30] audit: type=1326 audit(1746909896.819:6604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26229 comm="syz.1.6126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1553.161023][ T30] audit: type=1326 audit(1746909896.819:6605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26229 comm="syz.1.6126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1553.183501][ C1] vkms_vblank_simulate: vblank timer overrun [ 1553.326474][T26237] FAULT_INJECTION: forcing a failure. [ 1553.326474][T26237] name failslab, interval 1, probability 0, space 0, times 0 [ 1553.327264][ T30] audit: type=1326 audit(1746909896.819:6606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26229 comm="syz.1.6126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1553.361638][ C1] vkms_vblank_simulate: vblank timer overrun [ 1553.389800][T26237] CPU: 0 UID: 0 PID: 26237 Comm: syz.1.6128 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) [ 1553.389832][T26237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1553.389847][T26237] Call Trace: [ 1553.389856][T26237] [ 1553.389866][T26237] dump_stack_lvl+0x189/0x250 [ 1553.389906][T26237] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1553.389936][T26237] ? __pfx__printk+0x10/0x10 [ 1553.389959][T26237] ? __pfx___might_resched+0x10/0x10 [ 1553.389978][T26237] ? fs_reclaim_acquire+0x7d/0x100 [ 1553.390013][T26237] should_fail_ex+0x414/0x560 [ 1553.390053][T26237] should_failslab+0xa8/0x100 [ 1553.390081][T26237] __kmalloc_noprof+0xcb/0x4f0 [ 1553.390106][T26237] ? tomoyo_encode+0x28b/0x550 [ 1553.390136][T26237] tomoyo_encode+0x28b/0x550 [ 1553.390170][T26237] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1553.390208][T26237] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1553.390241][T26237] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1553.390277][T26237] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1553.390353][T26237] ? __fget_files+0x2a/0x420 [ 1553.390385][T26237] ? __fget_files+0x3a0/0x420 [ 1553.390410][T26237] ? __fget_files+0x2a/0x420 [ 1553.390440][T26237] security_file_ioctl_compat+0xcb/0x2d0 [ 1553.390474][T26237] __ia32_compat_sys_ioctl+0x128/0x840 [ 1553.390500][T26237] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1553.390523][T26237] ? __fget_files+0x3a0/0x420 [ 1553.390556][T26237] ? fput+0xa0/0xd0 [ 1553.390592][T26237] ? ksys_write+0x1f0/0x250 [ 1553.390623][T26237] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1553.390650][T26237] ? lockdep_hardirqs_on+0x9c/0x150 [ 1553.390676][T26237] __do_fast_syscall_32+0xb4/0x110 [ 1553.390702][T26237] ? lockdep_hardirqs_on+0x9c/0x150 [ 1553.390730][T26237] do_fast_syscall_32+0x34/0x80 [ 1553.390755][T26237] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1553.390781][T26237] RIP: 0023:0xf708e539 [ 1553.390799][T26237] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1553.390817][T26237] RSP: 002b:00000000f507e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1553.390839][T26237] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c04c560f [ 1553.390854][T26237] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 1553.390867][T26237] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1553.390880][T26237] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1553.390892][T26237] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1553.390923][T26237] [ 1553.391384][T26237] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1553.558368][ T30] audit: type=1326 audit(1746909896.839:6607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26229 comm="syz.1.6126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=231 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1553.655051][T26093] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1553.723221][T26093] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1553.784466][T26093] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1553.850237][ T30] audit: type=1326 audit(1746909896.839:6608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26229 comm="syz.1.6126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1553.857059][T26093] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1553.881200][ T30] audit: type=1326 audit(1746909896.839:6609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26229 comm="syz.1.6126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1553.964674][ T30] audit: type=1326 audit(1746909896.849:6610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26229 comm="syz.1.6126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1554.094812][ T30] audit: type=1326 audit(1746909896.849:6611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26229 comm="syz.1.6126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1554.163393][T26257] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6137'. [ 1554.181266][ T30] audit: type=1326 audit(1746909896.849:6612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26229 comm="syz.1.6126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1554.505257][T21766] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1554.690821][T26257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1554.704800][T21766] usb 1-1: Using ep0 maxpacket: 16 [ 1554.714380][T21766] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1554.731661][T21766] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1554.755946][T21766] usb 1-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 1554.768210][T26257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1554.782967][T26257] bond0 (unregistering): Released all slaves [ 1554.793741][T21766] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.813380][T21766] usb 1-1: config 0 descriptor?? [ 1555.143519][T26093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1555.163197][T26264] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6139'. [ 1555.235711][T26093] 8021q: adding VLAN 0 to HW filter on device team0 [ 1555.300222][T23010] bridge0: port 1(bridge_slave_0) entered blocking state [ 1555.307672][T23010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1555.324215][T21766] input: HID 28bd:0934 Mouse as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0934.0057/input/input96 [ 1555.376492][T26271] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 1555.383341][T26271] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1555.405713][T23010] bridge0: port 2(bridge_slave_1) entered blocking state [ 1555.413031][T23010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1555.457224][T26271] vhci_hcd vhci_hcd.0: Device attached [ 1555.554542][T21766] uclogic 0003:28BD:0934.0057: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0934] on usb-dummy_hcd.0-1/input0 [ 1555.689735][T21750] usb 35-1: new high-speed USB device number 3 using vhci_hcd [ 1555.829608][T21759] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1555.844640][T26272] vhci_hcd: connection reset by peer [ 1555.877705][ T1101] vhci_hcd: stop threads [ 1555.894226][ T1101] vhci_hcd: release socket [ 1555.916771][ T1101] vhci_hcd: disconnect device [ 1555.987579][T26280] netlink: 'syz.3.6143': attribute type 8 has an invalid length. [ 1555.997677][T21759] usb 5-1: Using ep0 maxpacket: 8 [ 1556.014158][T21759] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1556.026782][T21759] usb 5-1: config 0 has no interface number 0 [ 1556.046361][T21759] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1556.096197][T21759] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1556.125493][T21759] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1556.130996][T26093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1556.153793][T21759] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1556.186871][T21759] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1556.198862][T21759] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.218829][T21759] usb 5-1: config 0 descriptor?? [ 1556.247800][T21759] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1556.339040][T26093] veth0_vlan: entered promiscuous mode [ 1556.371033][T26093] veth1_vlan: entered promiscuous mode [ 1556.509348][T21765] usb 5-1: USB disconnect, device number 127 [ 1556.510178][ C0] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 1556.548412][T26276] ldusb 5-1:0.55: Couldn't submit interrupt_out_urb -19 [ 1556.612450][T21765] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1556.692440][T19922] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1556.842902][T26093] veth0_macvtap: entered promiscuous mode [ 1556.854710][T26093] veth1_macvtap: entered promiscuous mode [ 1556.912654][T21766] usb 1-1: USB disconnect, device number 114 [ 1556.975681][T19922] usb 4-1: config 0 has no interfaces? [ 1557.079574][T19922] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1557.096213][T26093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1557.117139][T19922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.143839][T26093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1557.159426][T19922] usb 4-1: Product: syz [ 1557.164433][T19922] usb 4-1: Manufacturer: syz [ 1557.179012][T26093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1557.190328][T19922] usb 4-1: SerialNumber: syz [ 1557.205162][T19922] usb 4-1: config 0 descriptor?? [ 1557.210438][T26093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1557.243163][T26093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1557.274535][T26093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1557.307217][T26093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1557.321989][T26093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1557.370760][T26093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1557.381591][T26093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1557.394017][T26093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1557.434659][T26093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1557.469924][T26301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6148'. [ 1557.902654][T26093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1557.983639][T26093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1558.000248][T26093] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.009113][T26093] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.021913][T26093] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.031027][ T7567] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1558.040936][T26093] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.100246][T21754] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1558.263314][ T7567] usb 1-1: config 0 has no interfaces? [ 1558.272531][T21754] usb 2-1: Using ep0 maxpacket: 32 [ 1558.273121][ T7567] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1558.287791][ T7567] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.296713][ T7567] usb 1-1: Product: syz [ 1558.341270][ T7567] usb 1-1: Manufacturer: syz [ 1558.350538][T21754] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1558.373975][ T7567] usb 1-1: SerialNumber: syz [ 1558.385796][T21754] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.433366][ T7567] usb 1-1: config 0 descriptor?? [ 1558.438392][T21754] usb 2-1: config 0 descriptor?? [ 1558.449455][T21754] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1558.767601][T23013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1558.809479][T23013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1558.940148][T16143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1558.967499][T16143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1559.535491][T21759] usb 4-1: USB disconnect, device number 91 [ 1560.321358][T21754] gspca_vc032x: I2c Bus Busy Wait 45 [ 1560.699886][T21753] usb 1-1: USB disconnect, device number 115 [ 1560.779784][T21750] vhci_hcd: vhci_device speed not set [ 1561.139249][T21754] gspca_vc032x: reg_w err -71 [ 1561.158571][T21754] gspca_vc032x: I2c Bus Busy Wait 45 [ 1561.178282][T21754] gspca_vc032x: I2c Bus Busy Wait 45 [ 1561.197218][T21754] gspca_vc032x: I2c Bus Busy Wait 45 [ 1561.258822][T21754] gspca_vc032x: I2c Bus Busy Wait 45 [ 1561.286075][T21754] gspca_vc032x: I2c Bus Busy Wait 45 [ 1561.305600][T21754] gspca_vc032x: I2c Bus Busy Wait 45 [ 1561.326230][T21754] gspca_vc032x: I2c Bus Busy Wait 45 [ 1561.348709][T21754] gspca_vc032x: I2c Bus Busy Wait 45 [ 1561.375537][T21754] gspca_vc032x: I2c Bus Busy Wait 45 [ 1561.388348][T21754] gspca_vc032x: I2c Bus Busy Wait 45 [ 1561.409006][T21754] gspca_vc032x: I2c Bus Busy Wait 45 [ 1561.424679][T21754] gspca_vc032x: I2c Bus Busy Wait 45 [ 1561.488972][T21754] gspca_vc032x: I2c Bus Busy Wait 45 [ 1561.538538][T21754] gspca_vc032x: I2c Bus Busy Wait 45 [ 1561.595030][T21754] gspca_vc032x: I2c Bus Busy Wait 45 [ 1561.611908][T21754] gspca_vc032x: I2c Bus Busy Wait 45 [ 1561.636769][T21754] gspca_vc032x: I2c Bus Busy Wait 45 [ 1561.680731][T21754] gspca_vc032x: Unknown sensor... [ 1561.710761][T21754] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 1561.770294][T21754] usb 2-1: USB disconnect, device number 67 [ 1561.799629][T21750] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1561.980407][T21750] usb 1-1: Using ep0 maxpacket: 16 [ 1562.005637][T21750] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1562.031858][T26334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6158'. [ 1562.051484][T21750] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1562.091673][T26339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6158'. [ 1562.127941][T21750] usb 1-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 1562.148996][T21750] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1562.221331][T21750] usb 1-1: config 0 descriptor?? [ 1562.578425][T25105] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1562.600314][T25105] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1562.609852][T25105] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1562.620419][T25105] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1562.631586][T25105] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1563.012236][T21750] input: HID 28bd:0934 Mouse as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0934.0058/input/input97 [ 1563.183956][T21750] uclogic 0003:28BD:0934.0058: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0934] on usb-dummy_hcd.0-1/input0 [ 1563.666523][T26358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6163'. [ 1563.696838][T26358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6163'. [ 1564.141667][T26352] chnl_net:caif_netlink_parms(): no params data found [ 1564.704253][T26352] bridge0: port 1(bridge_slave_0) entered blocking state [ 1564.709606][T15478] Bluetooth: hci4: command tx timeout [ 1564.734245][T26352] bridge0: port 1(bridge_slave_0) entered disabled state [ 1564.746621][ T7567] usb 1-1: USB disconnect, device number 116 [ 1564.777520][T26374] FAULT_INJECTION: forcing a failure. [ 1564.777520][T26374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1564.786293][T26352] bridge_slave_0: entered allmulticast mode [ 1564.791970][T26374] CPU: 0 UID: 0 PID: 26374 Comm: syz.2.6167 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) [ 1564.792008][T26374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1564.792023][T26374] Call Trace: [ 1564.792034][T26374] [ 1564.792045][T26374] dump_stack_lvl+0x189/0x250 [ 1564.792082][T26374] ? __lock_acquire+0xaac/0xd20 [ 1564.792116][T26374] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1564.792149][T26374] ? __pfx__printk+0x10/0x10 [ 1564.792172][T26374] ? __might_fault+0xb0/0x130 [ 1564.792212][T26374] should_fail_ex+0x414/0x560 [ 1564.792254][T26374] _copy_from_iter+0x1db/0x15a0 [ 1564.792289][T26374] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 1564.792314][T26374] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1564.792345][T26374] ? __pfx__copy_from_iter+0x10/0x10 [ 1564.792374][T26374] ? __build_skb_around+0x257/0x3e0 [ 1564.792405][T26374] ? netlink_sendmsg+0x642/0xb30 [ 1564.792428][T26374] ? skb_put+0x11b/0x210 [ 1564.792458][T26374] netlink_sendmsg+0x6b2/0xb30 [ 1564.792494][T26374] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1564.792522][T26374] ? __import_iovec+0x5d4/0x7f0 [ 1564.792559][T26374] ? aa_sock_msg_perm+0x94/0x160 [ 1564.792598][T26374] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1564.792623][T26374] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1564.792650][T26374] __sock_sendmsg+0x219/0x270 [ 1564.792690][T26374] ____sys_sendmsg+0x505/0x830 [ 1564.792728][T26374] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1564.792775][T26374] ___sys_sendmsg+0x21f/0x2a0 [ 1564.792803][T26374] ? __pfx____sys_sendmsg+0x10/0x10 [ 1564.792872][T26374] ? __fget_files+0x2a/0x420 [ 1564.792899][T26374] ? __fget_files+0x3a0/0x420 [ 1564.792939][T26374] __sys_sendmsg+0x164/0x220 [ 1564.792970][T26374] ? __pfx___sys_sendmsg+0x10/0x10 [ 1564.793016][T26374] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1564.793046][T26374] ? lockdep_hardirqs_on+0x9c/0x150 [ 1564.793073][T26374] __do_fast_syscall_32+0xb4/0x110 [ 1564.793104][T26374] ? lockdep_hardirqs_on+0x9c/0x150 [ 1564.793133][T26374] do_fast_syscall_32+0x34/0x80 [ 1564.793161][T26374] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1564.793189][T26374] RIP: 0023:0xf7f92539 [ 1564.793209][T26374] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1564.793230][T26374] RSP: 002b:00000000f50b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1564.793254][T26374] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 1564.793270][T26374] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1564.793284][T26374] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1564.793297][T26374] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1564.793311][T26374] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1564.793343][T26374] [ 1565.151331][T26352] bridge_slave_0: entered promiscuous mode [ 1565.206352][T26380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6168'. [ 1565.216840][T26380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6168'. [ 1565.238649][T26385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6169'. [ 1565.278252][T26352] bridge0: port 2(bridge_slave_1) entered blocking state [ 1565.303725][T26352] bridge0: port 2(bridge_slave_1) entered disabled state [ 1565.315819][T26352] bridge_slave_1: entered allmulticast mode [ 1565.335504][T26352] bridge_slave_1: entered promiscuous mode [ 1565.630379][T26380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6168'. [ 1565.689983][T26380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6168'. [ 1566.111751][T26397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6171'. [ 1566.158517][T26352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1566.310680][T26352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1566.799489][T15478] Bluetooth: hci4: command tx timeout [ 1567.058705][T26352] team0: Port device team_slave_0 added [ 1567.155409][T26352] team0: Port device team_slave_1 added [ 1567.288366][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1567.288384][ T30] audit: type=1326 audit(1746909911.169:6616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26409 comm="syz.3.6175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 1567.507798][ T30] audit: type=1326 audit(1746909911.169:6617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26409 comm="syz.3.6175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 1567.543493][ T30] audit: type=1326 audit(1746909911.169:6618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26409 comm="syz.3.6175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=133 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 1567.579637][ T30] audit: type=1326 audit(1746909911.169:6619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26409 comm="syz.3.6175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 1567.610716][ T30] audit: type=1326 audit(1746909911.169:6620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26409 comm="syz.3.6175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 1567.642826][ T30] audit: type=1326 audit(1746909911.169:6621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26409 comm="syz.3.6175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 1567.678750][ T30] audit: type=1326 audit(1746909911.169:6622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26409 comm="syz.3.6175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 1567.714448][T26352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1567.728583][T26352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1567.773721][ T30] audit: type=1326 audit(1746909911.169:6623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26409 comm="syz.3.6175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 1567.847643][T26352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1567.884820][T26352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1567.899758][ T30] audit: type=1326 audit(1746909911.169:6624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26409 comm="syz.3.6175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 1568.047377][T26352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1568.083910][ T30] audit: type=1326 audit(1746909911.179:6625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26409 comm="syz.3.6175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 1568.119604][T26352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1568.190228][T26423] __nla_validate_parse: 2 callbacks suppressed [ 1568.193146][T26423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6178'. [ 1568.329606][ T7567] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1568.550645][ T7567] usb 3-1: Using ep0 maxpacket: 16 [ 1568.561021][T26352] hsr_slave_0: entered promiscuous mode [ 1568.579188][T26352] hsr_slave_1: entered promiscuous mode [ 1568.654637][ T7567] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1568.657992][T26352] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1568.766036][ T7567] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1568.824338][T26352] Cannot create hsr debugfs directory [ 1568.870365][ T7567] usb 3-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 1568.870466][T15478] Bluetooth: hci4: command tx timeout [ 1568.944733][ T7567] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.080027][ T7567] usb 3-1: config 0 descriptor?? [ 1569.383090][T26440] tipc: Started in network mode [ 1569.388023][T26440] tipc: Node identity ac141417, cluster identity 4711 [ 1569.521019][T26440] tipc: Enabled bearer , priority 10 [ 1569.521560][ T7567] input: HID 28bd:0934 Mouse as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:0934.0059/input/input98 [ 1569.673651][T26443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6185'. [ 1569.727674][ T7567] uclogic 0003:28BD:0934.0059: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0934] on usb-dummy_hcd.2-1/input0 [ 1570.132446][T26450] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6186'. [ 1570.643672][T21759] tipc: Node number set to 2886997015 [ 1570.950654][T15478] Bluetooth: hci4: command tx timeout [ 1571.000283][ T7567] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1571.355118][ T7567] usb 2-1: config 224 has too many interfaces: 209, using maximum allowed: 32 [ 1571.365076][T21759] usb 3-1: USB disconnect, device number 87 [ 1571.525831][ T7567] usb 2-1: config 224 has an invalid descriptor of length 76, skipping remainder of the config [ 1571.558024][ T7567] usb 2-1: config 224 has 0 interfaces, different from the descriptor's value: 209 [ 1571.669477][ T7567] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1571.699459][ T7567] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.623215][T26352] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1572.769391][T26352] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1572.885250][T26352] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1572.964033][T26352] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1573.602089][T26473] netlink: 'syz.2.6193': attribute type 1 has an invalid length. [ 1573.609433][ T7567] usb 2-1: string descriptor 0 read error: -71 [ 1573.677941][ T7567] usb 2-1: USB disconnect, device number 68 [ 1573.877377][T26352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1573.890304][T26478] loop6: detected capacity change from 0 to 7 [ 1573.927106][T26478] Dev loop6: unable to read RDB block 7 [ 1573.964783][T26478] loop6: unable to read partition table [ 1573.968015][T26352] 8021q: adding VLAN 0 to HW filter on device team0 [ 1573.980987][T26478] loop6: partition table beyond EOD, truncated [ 1574.009581][T26478] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1574.068148][T23009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1574.076082][T23009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1574.108638][T26483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6197'. [ 1574.147874][T23009] bridge0: port 2(bridge_slave_1) entered blocking state [ 1574.155516][T23009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1574.359877][T26492] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.6197'. [ 1574.387973][T26493] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6196'. [ 1574.468318][T26492] netlink: zone id is out of range [ 1574.496604][T26483] bridge0: port 3(batadv0) entered disabled state [ 1574.527231][T26492] netlink: zone id is out of range [ 1574.576245][T26492] netlink: get zone limit has 8 unknown bytes [ 1574.625099][T26483] bridge_slave_0: left allmulticast mode [ 1574.644651][T26483] bridge_slave_0: left promiscuous mode [ 1574.710503][T26483] bridge0: port 1(bridge_slave_0) entered disabled state [ 1574.769221][T26483] bridge_slave_1: left allmulticast mode [ 1574.783421][T26483] bridge_slave_1: left promiscuous mode [ 1574.797485][T26483] bridge0: port 2(bridge_slave_1) entered disabled state [ 1574.830546][T19922] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1574.899953][T26483] team0: Port device team_slave_0 removed [ 1574.927451][T26483] team0: Port device team_slave_1 removed [ 1575.212807][T26483] [ 1575.216413][T26483] ============================= [ 1575.221424][T26483] WARNING: suspicious RCU usage [ 1575.226347][T26483] 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 Not tainted [ 1575.233544][T26483] ----------------------------- [ 1575.238468][T26483] net/ipv6/ip6_fib.c:1351 suspicious rcu_dereference_protected() usage! [ 1575.247813][T26483] [ 1575.247813][T26483] other info that might help us debug this: [ 1575.247813][T26483] [ 1575.258385][T26483] [ 1575.258385][T26483] rcu_scheduler_active = 2, debug_locks = 1 [ 1575.266937][T26483] 3 locks held by syz.1.6197/26483: [ 1575.272748][T26483] #0: ffffffff8f2f4848 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 1575.281980][T26483] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: __fib6_clean_all+0x9b/0x380 [ 1575.291840][T26483] #2: ffff888024301c30 (&tb->tb6_lock){+.-.}-{3:3}, at: __fib6_clean_all+0x1ce/0x380 [ 1575.302259][T26483] [ 1575.302259][T26483] stack backtrace: [ 1575.308279][T26483] CPU: 1 UID: 0 PID: 26483 Comm: syz.1.6197 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) [ 1575.308301][T26483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1575.308312][T26483] Call Trace: [ 1575.308322][T26483] [ 1575.308329][T26483] dump_stack_lvl+0x189/0x250 [ 1575.308367][T26483] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1575.308401][T26483] ? __pfx__printk+0x10/0x10 [ 1575.308427][T26483] ? print_lock_name+0xde/0x100 [ 1575.308466][T26483] lockdep_rcu_suspicious+0x140/0x1d0 [ 1575.308503][T26483] __fib6_update_sernum_upto_root+0x223/0x230 [ 1575.308534][T26483] fib6_update_sernum_upto_root+0x125/0x190 [ 1575.308556][T26483] ? __pfx_fib6_update_sernum_upto_root+0x10/0x10 [ 1575.308576][T26483] ? rt6_multipath_rebalance+0xf7/0x8b0 [ 1575.308597][T26483] fib6_ifup+0x142/0x180 [ 1575.308615][T26483] ? __pfx_fib6_ifup+0x10/0x10 [ 1575.308632][T26483] fib6_clean_node+0x24a/0x590 [ 1575.308652][T26483] ? __pfx_fib6_clean_node+0x10/0x10 [ 1575.308683][T26483] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1575.308714][T26483] fib6_walk_continue+0x678/0x910 [ 1575.308741][T26483] fib6_walk+0x149/0x290 [ 1575.308760][T26483] __fib6_clean_all+0x234/0x380 [ 1575.308775][T26483] ? __fib6_clean_all+0x9b/0x380 [ 1575.308791][T26483] ? __pfx_fib6_ifup+0x10/0x10 [ 1575.308809][T26483] ? __pfx___fib6_clean_all+0x10/0x10 [ 1575.308828][T26483] ? __pfx_fib6_clean_node+0x10/0x10 [ 1575.308845][T26483] ? __pfx_fib6_ifup+0x10/0x10 [ 1575.308862][T26483] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1575.308895][T26483] rt6_sync_up+0x128/0x160 [ 1575.308912][T26483] ? __pfx_rt6_sync_up+0x10/0x10 [ 1575.308932][T26483] ? ipv6_mc_up+0x3da/0x580 [ 1575.308951][T26483] addrconf_notify+0xd55/0x1010 [ 1575.308975][T26483] notifier_call_chain+0x1b3/0x3e0 [ 1575.308997][T26483] netif_state_change+0x284/0x3a0 [ 1575.309016][T26483] ? __pfx_netif_state_change+0x10/0x10 [ 1575.309034][T26483] ? do_set_master+0x1f7/0x6d0 [ 1575.309050][T26483] ? validate_linkmsg+0x765/0x950 [ 1575.309077][T26483] do_setlink+0x2eb6/0x40d0 [ 1575.309107][T26483] ? __pfx_do_setlink+0x10/0x10 [ 1575.309124][T26483] ? do_raw_spin_lock+0x121/0x290 [ 1575.309151][T26483] ? lockdep_hardirqs_on+0x9c/0x150 [ 1575.309169][T26483] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1575.309186][T26483] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1575.309206][T26483] ? rcu_is_watching+0x15/0xb0 [ 1575.309231][T26483] ? __mutex_lock+0xa6d/0xe80 [ 1575.309259][T26483] ? __mutex_lock+0x51b/0xe80 [ 1575.309291][T26483] ? rtnl_newlink+0x8db/0x1c70 [ 1575.309315][T26483] ? __pfx___mutex_lock+0x10/0x10 [ 1575.309348][T26483] ? ns_capable+0x8a/0xf0 [ 1575.309369][T26483] ? rtnl_link_get_net_capable+0x16a/0x350 [ 1575.309395][T26483] rtnl_newlink+0x149f/0x1c70 [ 1575.309415][T26483] ? kasan_save_track+0x3e/0x80 [ 1575.309453][T26483] ? __pfx_rtnl_newlink+0x10/0x10 [ 1575.309493][T26483] ? kasan_quarantine_put+0xdd/0x220 [ 1575.309509][T26483] ? lockdep_hardirqs_on+0x9c/0x150 [ 1575.309531][T26483] ? nlmon_xmit+0xb0/0x100 [ 1575.309556][T26483] ? kmem_cache_free+0x192/0x3f0 [ 1575.309592][T26483] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1575.309626][T26483] ? lockdep_hardirqs_on+0x9c/0x150 [ 1575.309653][T26483] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1575.309677][T26483] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1575.309707][T26483] ? aa_get_newest_label+0xf7/0x5d0 [ 1575.309726][T26483] ? __lock_acquire+0xaac/0xd20 [ 1575.309765][T26483] ? __pfx_rtnl_newlink+0x10/0x10 [ 1575.309781][T26483] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1575.309800][T26483] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1575.309815][T26483] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1575.309834][T26483] ? ref_tracker_free+0x63a/0x7d0 [ 1575.309850][T26483] ? __copy_skb_header+0xa7/0x550 [ 1575.309889][T26483] netlink_rcv_skb+0x219/0x490 [ 1575.309910][T26483] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1575.309929][T26483] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1575.309960][T26483] ? netlink_deliver_tap+0x2e/0x1b0 [ 1575.309976][T26483] ? netlink_deliver_tap+0x2e/0x1b0 [ 1575.309996][T26483] netlink_unicast+0x758/0x8d0 [ 1575.310019][T26483] netlink_sendmsg+0x805/0xb30 [ 1575.310046][T26483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1575.310068][T26483] ? __import_iovec+0x5d4/0x7f0 [ 1575.310088][T26483] ? aa_sock_msg_perm+0x94/0x160 [ 1575.310105][T26483] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1575.310124][T26483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1575.310248][T26483] __sock_sendmsg+0x219/0x270 [ 1575.310275][T26483] ____sys_sendmsg+0x505/0x830 [ 1575.310299][T26483] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1575.310325][T26483] ? preempt_schedule_thunk+0x16/0x30 [ 1575.310348][T26483] ___sys_sendmsg+0x21f/0x2a0 [ 1575.310370][T26483] ? __pfx____sys_sendmsg+0x10/0x10 [ 1575.310391][T26483] ? wake_up_q+0xca/0x110 [ 1575.310439][T26483] ? __fget_files+0x2a/0x420 [ 1575.310459][T26483] ? __fget_files+0x3a0/0x420 [ 1575.310486][T26483] __sys_sendmsg+0x164/0x220 [ 1575.310507][T26483] ? __pfx___sys_sendmsg+0x10/0x10 [ 1575.310539][T26483] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1575.310558][T26483] ? lockdep_hardirqs_on+0x9c/0x150 [ 1575.310577][T26483] __do_fast_syscall_32+0xb4/0x110 [ 1575.310598][T26483] ? lockdep_hardirqs_on+0x9c/0x150 [ 1575.310618][T26483] do_fast_syscall_32+0x34/0x80 [ 1575.310637][T26483] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1575.310657][T26483] RIP: 0023:0xf708e539 [ 1575.310694][T26483] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1575.310714][T26483] RSP: 002b:00000000f507e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1575.310737][T26483] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 1575.310753][T26483] RDX: 0000000000044000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1575.310767][T26483] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1575.310781][T26483] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1575.310795][T26483] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1575.310818][T26483] [ 1575.913036][T26483] [ 1575.915670][T26483] ============================= [ 1575.921478][T26483] WARNING: suspicious RCU usage [ 1575.926355][T26483] 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 Not tainted [ 1575.933772][T26483] ----------------------------- [ 1575.940096][T26483] net/ipv6/ip6_fib.c:1358 suspicious rcu_dereference_protected() usage! [ 1575.949895][T26483] [ 1575.949895][T26483] other info that might help us debug this: [ 1575.949895][T26483] [ 1575.962512][T26483] [ 1575.962512][T26483] rcu_scheduler_active = 2, debug_locks = 1 [ 1575.971852][T26483] 3 locks held by syz.1.6197/26483: [ 1575.977163][T26483] #0: ffffffff8f2f4848 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 1575.986321][T26483] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: __fib6_clean_all+0x9b/0x380 [ 1575.996700][T26483] #2: ffff888024301c30 (&tb->tb6_lock){+.-.}-{3:3}, at: __fib6_clean_all+0x1ce/0x380 [ 1576.006724][T26483] [ 1576.006724][T26483] stack backtrace: [ 1576.013474][T26483] CPU: 1 UID: 0 PID: 26483 Comm: syz.1.6197 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) [ 1576.013496][T26483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1576.013511][T26483] Call Trace: [ 1576.013520][T26483] [ 1576.013528][T26483] dump_stack_lvl+0x189/0x250 [ 1576.013557][T26483] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1576.013580][T26483] ? __pfx__printk+0x10/0x10 [ 1576.013598][T26483] ? print_lock_name+0xde/0x100 [ 1576.013627][T26483] lockdep_rcu_suspicious+0x140/0x1d0 [ 1576.013654][T26483] __fib6_update_sernum_upto_root+0x18e/0x230 [ 1576.013676][T26483] fib6_update_sernum_upto_root+0x125/0x190 [ 1576.013694][T26483] ? __pfx_fib6_update_sernum_upto_root+0x10/0x10 [ 1576.013714][T26483] ? rt6_multipath_rebalance+0xf7/0x8b0 [ 1576.013736][T26483] fib6_ifup+0x142/0x180 [ 1576.013754][T26483] ? __pfx_fib6_ifup+0x10/0x10 [ 1576.013770][T26483] fib6_clean_node+0x24a/0x590 [ 1576.013790][T26483] ? __pfx_fib6_clean_node+0x10/0x10 [ 1576.013813][T26483] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1576.013875][T26483] fib6_walk_continue+0x678/0x910 [ 1576.013903][T26483] fib6_walk+0x149/0x290 [ 1576.013921][T26483] __fib6_clean_all+0x234/0x380 [ 1576.013937][T26483] ? __fib6_clean_all+0x9b/0x380 [ 1576.013953][T26483] ? __pfx_fib6_ifup+0x10/0x10 [ 1576.013974][T26483] ? __pfx___fib6_clean_all+0x10/0x10 [ 1576.013994][T26483] ? __pfx_fib6_clean_node+0x10/0x10 [ 1576.014010][T26483] ? __pfx_fib6_ifup+0x10/0x10 [ 1576.014028][T26483] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1576.014055][T26483] rt6_sync_up+0x128/0x160 [ 1576.014073][T26483] ? __pfx_rt6_sync_up+0x10/0x10 [ 1576.014098][T26483] ? ipv6_mc_up+0x3da/0x580 [ 1576.014117][T26483] addrconf_notify+0xd55/0x1010 [ 1576.014139][T26483] notifier_call_chain+0x1b3/0x3e0 [ 1576.014161][T26483] netif_state_change+0x284/0x3a0 [ 1576.014180][T26483] ? __pfx_netif_state_change+0x10/0x10 [ 1576.014198][T26483] ? do_set_master+0x1f7/0x6d0 [ 1576.014215][T26483] ? validate_linkmsg+0x765/0x950 [ 1576.014242][T26483] do_setlink+0x2eb6/0x40d0 [ 1576.014272][T26483] ? __pfx_do_setlink+0x10/0x10 [ 1576.014287][T26483] ? do_raw_spin_lock+0x121/0x290 [ 1576.014325][T26483] ? lockdep_hardirqs_on+0x9c/0x150 [ 1576.014344][T26483] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1576.014361][T26483] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1576.014380][T26483] ? rcu_is_watching+0x15/0xb0 [ 1576.014407][T26483] ? __mutex_lock+0xa6d/0xe80 [ 1576.014425][T26483] ? __mutex_lock+0x51b/0xe80 [ 1576.014448][T26483] ? rtnl_newlink+0x8db/0x1c70 [ 1576.014465][T26483] ? __pfx___mutex_lock+0x10/0x10 [ 1576.014491][T26483] ? ns_capable+0x8a/0xf0 [ 1576.014506][T26483] ? rtnl_link_get_net_capable+0x16a/0x350 [ 1576.014526][T26483] rtnl_newlink+0x149f/0x1c70 [ 1576.014542][T26483] ? kasan_save_track+0x3e/0x80 [ 1576.014567][T26483] ? __pfx_rtnl_newlink+0x10/0x10 [ 1576.014606][T26483] ? kasan_quarantine_put+0xdd/0x220 [ 1576.014622][T26483] ? lockdep_hardirqs_on+0x9c/0x150 [ 1576.014644][T26483] ? nlmon_xmit+0xb0/0x100 [ 1576.014664][T26483] ? kmem_cache_free+0x192/0x3f0 [ 1576.014689][T26483] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1576.014712][T26483] ? lockdep_hardirqs_on+0x9c/0x150 [ 1576.014730][T26483] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1576.014754][T26483] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1576.014783][T26483] ? aa_get_newest_label+0xf7/0x5d0 [ 1576.014803][T26483] ? __lock_acquire+0xaac/0xd20 [ 1576.014850][T26483] ? __pfx_rtnl_newlink+0x10/0x10 [ 1576.014866][T26483] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1576.014886][T26483] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1576.014901][T26483] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1576.014920][T26483] ? ref_tracker_free+0x63a/0x7d0 [ 1576.014935][T26483] ? __copy_skb_header+0xa7/0x550 [ 1576.014962][T26483] netlink_rcv_skb+0x219/0x490 [ 1576.014981][T26483] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1576.014998][T26483] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1576.015028][T26483] ? netlink_deliver_tap+0x2e/0x1b0 [ 1576.015045][T26483] ? netlink_deliver_tap+0x2e/0x1b0 [ 1576.015065][T26483] netlink_unicast+0x758/0x8d0 [ 1576.015090][T26483] netlink_sendmsg+0x805/0xb30 [ 1576.015114][T26483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1576.015133][T26483] ? __import_iovec+0x5d4/0x7f0 [ 1576.015153][T26483] ? aa_sock_msg_perm+0x94/0x160 [ 1576.015170][T26483] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1576.015187][T26483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1576.015205][T26483] __sock_sendmsg+0x219/0x270 [ 1576.015232][T26483] ____sys_sendmsg+0x505/0x830 [ 1576.015256][T26483] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1576.015281][T26483] ? preempt_schedule_thunk+0x16/0x30 [ 1576.015303][T26483] ___sys_sendmsg+0x21f/0x2a0 [ 1576.015324][T26483] ? __pfx____sys_sendmsg+0x10/0x10 [ 1576.015346][T26483] ? wake_up_q+0xca/0x110 [ 1576.015392][T26483] ? __fget_files+0x2a/0x420 [ 1576.015411][T26483] ? __fget_files+0x3a0/0x420 [ 1576.015438][T26483] __sys_sendmsg+0x164/0x220 [ 1576.015460][T26483] ? __pfx___sys_sendmsg+0x10/0x10 [ 1576.015491][T26483] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1576.015510][T26483] ? lockdep_hardirqs_on+0x9c/0x150 [ 1576.015529][T26483] __do_fast_syscall_32+0xb4/0x110 [ 1576.015550][T26483] ? lockdep_hardirqs_on+0x9c/0x150 [ 1576.015570][T26483] do_fast_syscall_32+0x34/0x80 [ 1576.015590][T26483] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1576.015609][T26483] RIP: 0023:0xf708e539 [ 1576.015623][T26483] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1576.015636][T26483] RSP: 002b:00000000f507e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1576.015652][T26483] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 1576.015663][T26483] RDX: 0000000000044000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1576.015672][T26483] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1576.015681][T26483] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1576.015690][T26483] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1576.015711][T26483] [ 1576.635440][T26483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1576.637957][T19922] usb 2-1: Using ep0 maxpacket: 8 [ 1576.661008][T26483] batman_adv: batadv0: Removing interface: batadv_slave_0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1576.670422][T19922] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1576.679836][T19922] usb 2-1: config 4 interface 0 has no altsetting 0 [ 1576.690064][T19922] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1576.699756][T19922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1576.709645][T19922] usb 2-1: Product: syz [ 1576.713900][T19922] usb 2-1: Manufacturer: syz [ 1576.718538][T19922] usb 2-1: SerialNumber: syz [ 1576.903850][T26483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1577.029024][T26483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1577.729951][ C0] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000013: 0000 [#1] SMP KASAN PTI [ 1577.742720][ C0] KASAN: null-ptr-deref in range [0x0000000000000098-0x000000000000009f] [ 1577.751990][ C0] CPU: 0 UID: 0 PID: 21754 Comm: kworker/0:6 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) [ 1577.764711][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1577.775028][ C0] Workqueue: mld mld_ifc_work [ 1577.779769][ C0] RIP: 0010:nexthop_is_blackhole+0x23/0x2c0 [ 1577.785704][ C0] Code: 90 90 90 90 90 90 90 55 41 57 41 56 53 48 89 fb 49 bf 00 00 00 00 00 fc ff df e8 58 ff b1 f7 4c 8d 73 66 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 18 02 00 00 41 80 3e 00 74 41 48 83 eb [ 1577.805619][ C0] RSP: 0018:ffffc90000007058 EFLAGS: 00010202 [ 1577.811730][ C0] RAX: 0000000000000013 RBX: 0000000000000032 RCX: ffff88802fcb8000 [ 1577.819756][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000032 [ 1577.827775][ C0] RBP: ffffc900000071d8 R08: 0000000000000000 R09: 0000000000000047 [ 1577.835784][ C0] R10: ffffc90000007160 R11: fffff52000000e2e R12: 1ffffffff33a2710 [ 1577.845005][ C0] R13: ffffffff99d138d0 R14: 0000000000000098 R15: dffffc0000000000 [ 1577.853727][ C0] FS: 0000000000000000(0000) GS:ffff8881260cc000(0000) knlGS:0000000000000000 [ 1577.862779][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1577.870557][ C0] CR2: 0000558a346d2000 CR3: 000000000dd36000 CR4: 00000000003526f0 [ 1577.879031][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1577.887762][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1577.895770][ C0] Call Trace: [ 1577.899163][ C0] [ 1577.902165][ C0] __find_rr_leaf+0x428/0x6d0 [ 1577.906870][ C0] ? __pfx___find_rr_leaf+0x10/0x10 [ 1577.912340][ C0] fib6_table_lookup+0x53f/0xa80 [ 1577.917313][ C0] ? __pfx_fib6_table_lookup+0x10/0x10 [ 1577.922841][ C0] ? ip6_pol_route+0x162/0x1180 [ 1577.927707][ C0] ip6_pol_route+0x222/0x1180 [ 1577.932412][ C0] ? __pfx_ip6_pol_route+0x10/0x10 [ 1577.937738][ C0] ? ip6t_do_table+0x1db/0x1530 [ 1577.943361][ C0] fib6_rule_lookup+0x52f/0x6f0 [ 1577.949127][ C0] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 1577.955384][ C0] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1577.960816][ C0] ? nf_nat_ipv6_fn+0xe7/0x2d0 [ 1577.965796][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 1577.971123][ C0] ? ip6table_mangle_hook+0x2a2/0x6c0 [ 1577.977395][ C0] ? nf_nat_ipv6_in+0xe5/0x2b0 [ 1577.982311][ C0] ip6_route_input+0x6ce/0xa50 [ 1577.987137][ C0] ? __pfx_ip6_route_input+0x10/0x10 [ 1577.992535][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 1577.997835][ C0] ? nf_hook_slow_list+0x2af/0x390 [ 1578.003006][ C0] ? ip6_rcv_finish_core+0x222/0x420 [ 1578.008494][ C0] ip6_sublist_rcv+0x704/0xdd0 [ 1578.013558][ C0] ? __pfx_ip6_sublist_rcv+0x10/0x10 [ 1578.019064][ C0] ? skb_orphan+0xaf/0xd0 [ 1578.024783][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1578.030054][ C0] ? ip6_rcv_core+0x9e/0x1590 [ 1578.034772][ C0] ipv6_list_rcv+0x3e5/0x430 [ 1578.039866][ C0] ? __pfx_ipv6_list_rcv+0x10/0x10 [ 1578.045137][ C0] ? __pfx_ipv6_list_rcv+0x10/0x10 [ 1578.051231][ C0] __netif_receive_skb_list_core+0x5f4/0x800 [ 1578.057879][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 1578.064850][ C0] ? netif_receive_skb_list_internal+0x4fd/0xcc0 [ 1578.072489][ C0] netif_receive_skb_list_internal+0x975/0xcc0 [ 1578.079044][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 1578.084524][ C0] ? netif_receive_skb_list_internal+0x4fd/0xcc0 [ 1578.091705][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 1578.098620][ C0] ? ieee80211_rx_napi+0xca/0x3d0 [ 1578.104307][ C0] netif_receive_skb_list+0x54/0x450 [ 1578.109623][ C0] ? ieee80211_rx_napi+0xca/0x3d0 [ 1578.114675][ C0] ieee80211_rx_napi+0x354/0x3d0 [ 1578.119677][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 1578.126408][ C0] ? skb_dequeue+0x10e/0x150 [ 1578.131022][ C0] ieee80211_handle_queued_frames+0xe8/0x1f0 [ 1578.137627][ C0] tasklet_action_common+0x369/0x580 [ 1578.143047][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 1578.148985][ C0] ? handle_softirqs+0x717/0x870 [ 1578.154027][ C0] ? workqueue_softirq_action+0xd4/0x150 [ 1578.160236][ C0] handle_softirqs+0x283/0x870 [ 1578.165592][ C0] ? do_softirq+0xec/0x180 [ 1578.170171][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1578.175949][ C0] ? __dev_queue_xmit+0x27e/0x3a70 [ 1578.181318][ C0] do_softirq+0xec/0x180 [ 1578.185609][ C0] [ 1578.188572][ C0] [ 1578.191525][ C0] ? __pfx_do_softirq+0x10/0x10 [ 1578.196597][ C0] ? __lock_acquire+0xaac/0xd20 [ 1578.201506][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 1578.206814][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 1578.212248][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1578.218116][ C0] ? __dev_queue_xmit+0x27e/0x3a70 [ 1578.223461][ C0] ? __dev_queue_xmit+0x27e/0x3a70 [ 1578.228634][ C0] ? __dev_queue_xmit+0x27e/0x3a70 [ 1578.233805][ C0] __dev_queue_xmit+0x1cd7/0x3a70 [ 1578.239333][ C0] ? __dev_queue_xmit+0x27e/0x3a70 [ 1578.245316][ C0] ? __pfx_fib_rules_lookup+0x10/0x10 [ 1578.251267][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1578.257029][ C0] ? l3mdev_update_flow+0x4d1/0x640 [ 1578.262280][ C0] ? __lock_acquire+0xaac/0xd20 [ 1578.267786][ C0] ? __lock_acquire+0xaac/0xd20 [ 1578.272877][ C0] ? ip6_finish_output2+0xf99/0x16a0 [ 1578.278981][ C0] ip6_finish_output2+0x11bc/0x16a0 [ 1578.284611][ C0] ? ip6_finish_output2+0x701/0x16a0 [ 1578.290021][ C0] ? __pfx_ip6_finish_output2+0x10/0x10 [ 1578.295689][ C0] ? ip6_mtu+0x7d/0x3f0 [ 1578.299987][ C0] ? ip6_mtu+0x7d/0x3f0 [ 1578.304298][ C0] ip6_finish_output+0x234/0x7d0 [ 1578.309455][ C0] NF_HOOK+0x9e/0x380 [ 1578.313660][ C0] ? NF_HOOK+0x101/0x380 [ 1578.319408][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1578.324289][ C0] ? __pfx_dst_output+0x10/0x10 [ 1578.329177][ C0] ? icmp6_dst_alloc+0x3a5/0x420 [ 1578.334713][ C0] ? icmp6_dst_alloc+0x3a5/0x420 [ 1578.339877][ C0] mld_sendpack+0x800/0xd80 [ 1578.345064][ C0] ? mld_sendpack+0x1de/0xd80 [ 1578.349945][ C0] ? __pfx_mld_sendpack+0x10/0x10 [ 1578.355337][ C0] mld_ifc_work+0x835/0xde0 [ 1578.360307][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1578.365932][ C0] ? process_scheduled_works+0x9ec/0x17a0 [ 1578.372721][ C0] process_scheduled_works+0xadb/0x17a0 [ 1578.378635][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1578.384947][ C0] worker_thread+0x8a0/0xda0 [ 1578.389605][ C0] kthread+0x70e/0x8a0 [ 1578.393775][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1578.398934][ C0] ? __pfx_kthread+0x10/0x10 [ 1578.403944][ C0] ? __pfx_kthread+0x10/0x10 [ 1578.408853][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1578.414923][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1578.421084][ C0] ? __pfx_kthread+0x10/0x10 [ 1578.425957][ C0] ret_from_fork+0x4b/0x80 [ 1578.430520][ C0] ? __pfx_kthread+0x10/0x10 [ 1578.435257][ C0] ret_from_fork_asm+0x1a/0x30 [ 1578.440219][ C0] [ 1578.443908][ C0] Modules linked in: [ 1578.448375][ C0] ---[ end trace 0000000000000000 ]--- [ 1578.454010][ C0] RIP: 0010:nexthop_is_blackhole+0x23/0x2c0 [ 1578.460461][ C0] Code: 90 90 90 90 90 90 90 55 41 57 41 56 53 48 89 fb 49 bf 00 00 00 00 00 fc ff df e8 58 ff b1 f7 4c 8d 73 66 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 18 02 00 00 41 80 3e 00 74 41 48 83 eb [ 1578.481029][ C0] RSP: 0018:ffffc90000007058 EFLAGS: 00010202 [ 1578.487287][ C0] RAX: 0000000000000013 RBX: 0000000000000032 RCX: ffff88802fcb8000 [ 1578.495434][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000032 [ 1578.503610][ C0] RBP: ffffc900000071d8 R08: 0000000000000000 R09: 0000000000000047 [ 1578.511669][ C0] R10: ffffc90000007160 R11: fffff52000000e2e R12: 1ffffffff33a2710 [ 1578.519810][ C0] R13: ffffffff99d138d0 R14: 0000000000000098 R15: dffffc0000000000 [ 1578.527848][ C0] FS: 0000000000000000(0000) GS:ffff8881260cc000(0000) knlGS:0000000000000000 [ 1578.536869][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1578.544152][ C0] CR2: 0000558a346d2000 CR3: 000000000dd36000 CR4: 00000000003526f0 [ 1578.552303][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1578.560558][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1578.568667][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 1578.576401][ C0] Kernel Offset: disabled [ 1578.580773][ C0] Rebooting in 86400 seconds..