last executing test programs: 3.857240815s ago: executing program 4 (id=581): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001800)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000080000001c0002801800038010000180040003000800010000000000080001800c00018008000100", @ANYRES32=r2], 0x3c}}, 0x0) 3.703715546s ago: executing program 4 (id=584): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}, 0x28}], 0x1, 0x40000102, 0x0) 3.632817607s ago: executing program 3 (id=586): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="54000000020601030000000000000000000000000900020073797a30000000000500010006000000050005800000000005000400000000000c00078008000600000000010d00030068617368"], 0x54}}, 0x0) 3.583456433s ago: executing program 4 (id=587): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r1, 0x0) 3.491661927s ago: executing program 3 (id=589): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) 3.424562853s ago: executing program 4 (id=590): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f8, 0x4a4a, 0x0, 0x0, 0x0) pause() 3.372020813s ago: executing program 3 (id=591): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0104000000000000004002000000400004803c0001800b00010065787468647200002c000280050002001400000008000340000000000800044000000001080006400000000208000140000000130900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 3.322982148s ago: executing program 3 (id=592): r0 = socket(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4}, 0xc) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x6, 0x0, 0xffffff8f}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, {0xa, 0x0, 0x0, @mcast1, 0x108}, 0x2, {[0x1, 0x1, 0x400000, 0x0, 0xfffffffe, 0x46]}}, 0x5c) 3.143674048s ago: executing program 3 (id=595): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.094992481s ago: executing program 3 (id=596): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x18, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.56271368s ago: executing program 0 (id=605): r0 = io_uring_setup(0x7fdb, &(0x7f0000000080)={0x0, 0xfffffffc, 0x0, 0x0, 0xffffeeff}) syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x1001) syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.45357917s ago: executing program 4 (id=607): r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) mq_open(&(0x7f00000006c0)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1cQ\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8x\xa2\xe46\"\xbc\xbe\x10\xe5xI:\x11wh\xebM\xa8H3\xa4^\xd2\xcc:\xaf\xb8\xf0Dkh/\xc5\x83o)\x0etyy\x818\xd6z\xdc4\xb45C\x164\xbf \xea\f\x049Z\xa5&F\xf3^@\xae0\xe4q@\x8c|IJ\x89L\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) pipe(0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x17, 0x0, &(0x7f0000000400)) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.379997876s ago: executing program 0 (id=608): io_uring_setup(0x6f94, &(0x7f0000001240)={0x0, 0x78f5, 0x0, 0x2}) pause() 1.815590262s ago: executing program 1 (id=612): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000014c0), 0x4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) 1.596098526s ago: executing program 1 (id=614): r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000a06b9500000011f7000000002b8ad7243ca17f9d191a522d04e76f04e0af039853983d5ad38db637e610f1f9f0de1213ab207f0e710622ff1338756272f9d78d84a8c6c00745aad46f08e3e97aed24db424e93168a8b55fc8da375e933ae52b1cb5f0050d5b0226129f0ad5a66724a36c71f5ae916ec0546e1ef34f1132bb4c9c877be2fdeccd553abcf53cdc03f730344e69fb1c51b19392d516b12ec8030697212e9ace1ce81ae2c", 0xad, r0) 1.434769452s ago: executing program 2 (id=616): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000006c0)=ANY=[], 0xe0, 0x4000}, 0x80) 1.430952111s ago: executing program 0 (id=617): sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4f549b, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x32, 0xfffffffffffffffe]}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="36d0e866b8970000000f23c80f21f866350c00a0000f23f89d0f326635000400000f302e8dcc0f23742e3b5753baf80466b8f494f78e66efbafc0c66b83ac80000666fda6509", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.308020819s ago: executing program 1 (id=618): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) unshare(0x22020600) r1 = openat$vsock(0xffffff9c, &(0x7f0000000000), 0x200200, 0x0) pwritev(r1, 0x0, 0x0, 0x4, 0x2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb) 1.209166953s ago: executing program 2 (id=619): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000006c0)=ANY=[], 0xe0, 0x4000}, 0x80) 884.285981ms ago: executing program 0 (id=620): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001380)="53f10d80e2bb82c502cffd659f8eed", 0xf}, {&(0x7f0000001040)}], 0x2}, 0x8000) 883.875908ms ago: executing program 2 (id=621): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x1dd7ac7c10a772b1}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x3}, {0x0, 0x1000}, {0x0, 0x1000}, {0xd000, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, {}, {}, 0xddf8ffdb, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, [0x0, 0x0, 0x8]}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000040)={0x8080000, 0xf000, 0xf1, 0x1, 0x9}) 688.035596ms ago: executing program 1 (id=622): r0 = socket$inet(0x2, 0x3, 0x4) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newqdisc={0x5c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_mq={0x7}, @qdisc_kind_options=@q_codel={{0xa}, {0x24, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_TARGET={0x8, 0x1, 0x7}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x2}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 585.982279ms ago: executing program 0 (id=623): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="54000000020601030000000000000000000000000900020073797a30000000000500010006000000050005800000000005000400000000000c00078008000600000000010d000300686173683a6d61"], 0x54}}, 0x0) 536.631187ms ago: executing program 2 (id=624): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000014c0), 0x4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) 371.18064ms ago: executing program 1 (id=625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0104000000000000004002000000400004803c0001800b00010065787468647200002c000280050002001400000008000340000000000800044000000001080006400000000208000140000000130900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 311.643786ms ago: executing program 1 (id=626): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4, "33a436e2323f58be128a8a9238a30e00000000000000005e3400", 0x82bf, 0x0, 0x7, 0x255}, 0x3c) remap_file_pages(&(0x7f000057a000/0x1000)=nil, 0x1000, 0x0, 0x3fe, 0x1c0000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) 179.679409ms ago: executing program 4 (id=627): pause() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 145.296238ms ago: executing program 0 (id=628): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty, 0x53}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x4, 0x278, 0xffffffff, 0x0, 0xe8, 0xe8, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x8000000, 0x0, {[{{@ip={@broadcast, @remote, 0xffffff00, 0x0, 'veth0_to_hsr\x00', 'wg0\x00', {0xff}, {0xff}, 0x62}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ip={@remote, @private=0xa010101, 0xff000000, 0xff000000, 'ip6gre0\x00', '\x00', {0xff}, {}, 0x5e, 0x2, 0x49}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1, 0x6}, {0x1, 0x3, 0x2}, {0xffffffffffffffff}, 0x8, 0x10}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x6, 0x4}, {0x0, 0x0, 0x5}, 0x6, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006a00)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x940, 0x57ac123a25013287}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) write$binfmt_format(r2, &(0x7f0000000100)='-1\x00', 0x2) write(r2, &(0x7f00000002c0), 0x0) r7 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x7, 0x10c81) sendmsg$AUDIT_SIGNAL_INFO(r7, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f2, 0x100, 0x70bd27, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004044}, 0x4040) close(r2) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, 0x0, 0x0) r10 = socket$kcm(0x2, 0xa, 0x2) r11 = syz_io_uring_setup(0x6ae5, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000004000), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r11, 0x13, 0x2000ac0a, r12) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x11, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r12}}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="00000800010000000000120000004500001600000000000190780a010100ac1414aa0400907800000000450000000066000000210000ac1414aa7f000001"], 0x3e) 145.069339ms ago: executing program 2 (id=629): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000006c0)=ANY=[], 0xe0, 0x4000}, 0x80) 0s ago: executing program 2 (id=630): lseek(0xffffffffffffffff, 0x0, 0x1) io_submit(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x3, 0xffffffffffffffff, &(0x7f0000000280)="902f8cef188a6dd8f7851f2004aececc94d2", 0x12, 0x7, 0x0, 0x2}]) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) socket(0x400000000010, 0x3, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.17' (ED25519) to the list of known hosts. [ 58.564953][ T5817] cgroup: Unknown subsys name 'net' [ 58.671509][ T5817] cgroup: Unknown subsys name 'cpuset' [ 58.679897][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.998999][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.161318][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.171198][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.182039][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.190214][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.197944][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.206281][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.213508][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.214091][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.229339][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.235062][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.237184][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.244881][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.252218][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.260135][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.272309][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.272571][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.281552][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.288102][ T5849] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 64.293884][ T5846] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 64.301019][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.308566][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.321473][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.322610][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.331195][ T5849] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 64.336832][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 64.350972][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.357841][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.358218][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.372995][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 64.390410][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.831890][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 64.842755][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 64.853906][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 64.887769][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 64.901991][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 65.018304][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.025950][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.034355][ T5830] bridge_slave_0: entered allmulticast mode [ 65.041869][ T5830] bridge_slave_0: entered promiscuous mode [ 65.082318][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.089749][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.096879][ T5830] bridge_slave_1: entered allmulticast mode [ 65.103821][ T5830] bridge_slave_1: entered promiscuous mode [ 65.175465][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.185010][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.193270][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.200666][ T5827] bridge_slave_0: entered allmulticast mode [ 65.207137][ T5827] bridge_slave_0: entered promiscuous mode [ 65.246222][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.258657][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.266049][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.273523][ T5827] bridge_slave_1: entered allmulticast mode [ 65.280768][ T5827] bridge_slave_1: entered promiscuous mode [ 65.287676][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.294774][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.302037][ T5838] bridge_slave_0: entered allmulticast mode [ 65.308881][ T5838] bridge_slave_0: entered promiscuous mode [ 65.315518][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.323289][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.330644][ T5842] bridge_slave_0: entered allmulticast mode [ 65.338216][ T5842] bridge_slave_0: entered promiscuous mode [ 65.378170][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.385356][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.393014][ T5838] bridge_slave_1: entered allmulticast mode [ 65.400485][ T5838] bridge_slave_1: entered promiscuous mode [ 65.416112][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.425545][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.434026][ T5842] bridge_slave_1: entered allmulticast mode [ 65.441247][ T5842] bridge_slave_1: entered promiscuous mode [ 65.456848][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.464014][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.471235][ T5829] bridge_slave_0: entered allmulticast mode [ 65.478236][ T5829] bridge_slave_0: entered promiscuous mode [ 65.488235][ T5830] team0: Port device team_slave_0 added [ 65.497560][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.517137][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.538194][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.548551][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.555685][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.563121][ T5829] bridge_slave_1: entered allmulticast mode [ 65.571364][ T5829] bridge_slave_1: entered promiscuous mode [ 65.579080][ T5830] team0: Port device team_slave_1 added [ 65.595120][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.605942][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.624055][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.685469][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.692892][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.718962][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.738457][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.750251][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.761122][ T5827] team0: Port device team_slave_0 added [ 65.769534][ T5838] team0: Port device team_slave_0 added [ 65.778637][ T5827] team0: Port device team_slave_1 added [ 65.790687][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.797866][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.824107][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.845677][ T5838] team0: Port device team_slave_1 added [ 65.860310][ T5842] team0: Port device team_slave_0 added [ 65.872054][ T5842] team0: Port device team_slave_1 added [ 65.908495][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.915477][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.941658][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.955358][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.962906][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.989314][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.021369][ T5829] team0: Port device team_slave_0 added [ 66.028758][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.035717][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.062117][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.078663][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.085611][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.111610][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.124116][ T5829] team0: Port device team_slave_1 added [ 66.139898][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.146880][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.173207][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.203210][ T5830] hsr_slave_0: entered promiscuous mode [ 66.210329][ T5830] hsr_slave_1: entered promiscuous mode [ 66.217646][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.224599][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.251151][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.276403][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.283440][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.310807][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.340702][ T5827] hsr_slave_0: entered promiscuous mode [ 66.346933][ T5827] hsr_slave_1: entered promiscuous mode [ 66.353339][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.362110][ T5827] Cannot create hsr debugfs directory [ 66.368303][ T54] Bluetooth: hci0: command tx timeout [ 66.374215][ T5836] Bluetooth: hci1: command tx timeout [ 66.396749][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.403890][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.430036][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.447560][ T5836] Bluetooth: hci4: command tx timeout [ 66.457468][ T54] Bluetooth: hci2: command tx timeout [ 66.463261][ T5836] Bluetooth: hci3: command tx timeout [ 66.522635][ T5838] hsr_slave_0: entered promiscuous mode [ 66.529321][ T5838] hsr_slave_1: entered promiscuous mode [ 66.535313][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.543419][ T5838] Cannot create hsr debugfs directory [ 66.576733][ T5829] hsr_slave_0: entered promiscuous mode [ 66.583622][ T5829] hsr_slave_1: entered promiscuous mode [ 66.590175][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.598145][ T5829] Cannot create hsr debugfs directory [ 66.634198][ T5842] hsr_slave_0: entered promiscuous mode [ 66.640609][ T5842] hsr_slave_1: entered promiscuous mode [ 66.646536][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.654495][ T5842] Cannot create hsr debugfs directory [ 66.945096][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.958856][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.968106][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.980827][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.049663][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.060268][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.075625][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.084867][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.130868][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.141355][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.161578][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.188130][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.233497][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.244123][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.255590][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.265701][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.332337][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.344873][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.366948][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.377017][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.400478][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.430827][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.462101][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.469327][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.490323][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.497429][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.582595][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.601133][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.627943][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.656185][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.670652][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.689842][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.697544][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.706168][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.713285][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.733762][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.740906][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.769346][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.776651][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.826828][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.870302][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.933188][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.953366][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.972640][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.991122][ T3585] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.998281][ T3585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.021498][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.061914][ T3585] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.069081][ T3585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.096857][ T3585] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.104026][ T3585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.119037][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.126139][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.285983][ T5827] veth0_vlan: entered promiscuous mode [ 68.308959][ T5827] veth1_vlan: entered promiscuous mode [ 68.326257][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.371799][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.396958][ T5827] veth0_macvtap: entered promiscuous mode [ 68.426074][ T5829] veth0_vlan: entered promiscuous mode [ 68.448496][ T5836] Bluetooth: hci1: command tx timeout [ 68.453953][ T5836] Bluetooth: hci0: command tx timeout [ 68.463461][ T5827] veth1_macvtap: entered promiscuous mode [ 68.523258][ T5829] veth1_vlan: entered promiscuous mode [ 68.537602][ T54] Bluetooth: hci3: command tx timeout [ 68.543052][ T54] Bluetooth: hci2: command tx timeout [ 68.547944][ T5836] Bluetooth: hci4: command tx timeout [ 68.559944][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.595670][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.638773][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.661502][ T5827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.683201][ T5827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.693342][ T5827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.703493][ T5827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.758741][ T5829] veth0_macvtap: entered promiscuous mode [ 68.772432][ T5829] veth1_macvtap: entered promiscuous mode [ 68.844601][ T5842] veth0_vlan: entered promiscuous mode [ 68.862731][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.876197][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.888325][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.899627][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.933276][ T5842] veth1_vlan: entered promiscuous mode [ 68.946957][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.958761][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.970481][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.989399][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.996122][ T5829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.003231][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.006680][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.023600][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.032353][ T5829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.110505][ T5838] veth0_vlan: entered promiscuous mode [ 69.119952][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.125080][ T5838] veth1_vlan: entered promiscuous mode [ 69.142770][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.171348][ T5842] veth0_macvtap: entered promiscuous mode [ 69.209428][ T5842] veth1_macvtap: entered promiscuous mode [ 69.233179][ T5830] veth0_vlan: entered promiscuous mode [ 69.254350][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.265066][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.277025][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.280379][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.296479][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.314200][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.333279][ T5838] veth0_macvtap: entered promiscuous mode [ 69.343966][ T3509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.345111][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.363293][ T3509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.372172][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.382338][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.393186][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.405405][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.417510][ T5838] veth1_macvtap: entered promiscuous mode [ 69.426858][ T5830] veth1_vlan: entered promiscuous mode [ 69.461069][ T5842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.475609][ T5842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.497092][ T5842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.506012][ T5842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.556957][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.590147][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.650813][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.665704][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.676083][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.686915][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.699125][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.709967][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.752820][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.790271][ T5830] veth0_macvtap: entered promiscuous mode [ 69.827518][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.844165][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.854197][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.865091][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.875151][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.885667][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.897096][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.958647][ T5830] veth1_macvtap: entered promiscuous mode [ 69.977126][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.988012][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.997993][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.008659][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.018611][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.029149][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.039059][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.049678][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.060697][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.122853][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.134055][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.157868][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.186676][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.197185][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.213364][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.228423][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.249206][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.260517][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.278737][ T5933] syz.3.9 uses obsolete (PF_INET,SOCK_PACKET) [ 70.286090][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.293927][ T5838] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.293960][ T5838] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.293982][ T5838] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.294004][ T5838] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.298904][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.349556][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.363447][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.375093][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.386759][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.531615][ T5836] Bluetooth: hci0: command tx timeout [ 70.531623][ T54] Bluetooth: hci1: command tx timeout [ 70.603040][ T3509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.608647][ T5836] Bluetooth: hci4: command tx timeout [ 70.611068][ T3509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.616307][ T5836] Bluetooth: hci2: command tx timeout [ 70.629268][ T5836] Bluetooth: hci3: command tx timeout [ 70.678572][ T5941] warning: `syz.2.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.809689][ T5948] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 70.862569][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.879759][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.888760][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.896299][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.017178][ T3585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.031657][ T3585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.136441][ T3585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.166893][ T3585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.759306][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.788005][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.174982][ T5965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.463014][ T5991] tipc: Started in network mode [ 72.493979][ T5991] tipc: Node identity 1, cluster identity 4711 [ 72.571837][ T5991] tipc: Node number set to 1 [ 72.666542][ T5836] Bluetooth: hci0: command tx timeout [ 72.672249][ T5836] Bluetooth: hci1: command tx timeout [ 72.694772][ T5837] Bluetooth: hci2: command tx timeout [ 72.694791][ T5836] Bluetooth: hci3: command tx timeout [ 72.700313][ T5837] Bluetooth: hci4: command tx timeout [ 72.937624][ T6040] netlink: 'syz.1.25': attribute type 1 has an invalid length. [ 72.947543][ T6040] netlink: 224 bytes leftover after parsing attributes in process `syz.1.25'. [ 73.177657][ T6047] Zero length message leads to an empty skb [ 73.303697][ T6053] netlink: 'syz.0.27': attribute type 1 has an invalid length. [ 73.402406][ T6055] netlink: 20 bytes leftover after parsing attributes in process `syz.0.27'. [ 73.492960][ T6055] vlan2: entered promiscuous mode [ 73.576805][ T6055] syz_tun: entered promiscuous mode [ 73.670279][ T6033] infiniband syz1: set active [ 73.675213][ T6033] infiniband syz1: added team_slave_0 [ 73.919049][ T6015] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96 [ 73.928655][ T6033] RDS/IB: syz1: added [ 73.933331][ T6033] smc: adding ib device syz1 with port count 1 [ 73.945223][ T6033] smc: ib device syz1 port 1 has pnetid [ 73.972530][ T6072] vivid-000: disconnect [ 75.040660][ T6071] vivid-000: reconnect [ 76.266090][ T6121] netlink: 'syz.4.41': attribute type 1 has an invalid length. [ 76.281587][ T6121] netlink: 224 bytes leftover after parsing attributes in process `syz.4.41'. [ 78.591512][ T6171] netlink: 'syz.1.55': attribute type 1 has an invalid length. [ 78.675919][ T6173] netlink: 20 bytes leftover after parsing attributes in process `syz.1.55'. [ 78.769254][ T6173] vlan2: entered promiscuous mode [ 78.847389][ T6173] veth1: entered promiscuous mode [ 79.629685][ T5881] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 79.811691][ T5881] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 79.838306][ T5881] usb 2-1: New USB device found, idVendor=0582, idProduct=28e8, bcdDevice=f5.06 [ 79.847800][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.862525][ T5881] usb 2-1: Product: syz [ 79.871222][ T5881] usb 2-1: Manufacturer: syz [ 79.875950][ T5881] usb 2-1: SerialNumber: syz [ 79.926321][ T5881] usb 2-1: config 0 descriptor?? [ 79.962188][ T6232] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 81.195258][ T6235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.73'. [ 81.244958][ T5881] usb 2-1: USB disconnect, device number 2 [ 81.421876][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 81.435199][ T5884] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 81.449100][ T5955] udevd[5955]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 81.867685][ T6264] tipc: Started in network mode [ 81.872607][ T6264] tipc: Node identity 1, cluster identity 4711 [ 81.878919][ T6264] tipc: Node number set to 1 [ 81.895781][ T6262] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.900248][ T3074] cfg80211: failed to load regulatory.db [ 82.127469][ T5884] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.277325][ T5884] usb 1-1: Using ep0 maxpacket: 32 [ 82.290437][ T5884] usb 1-1: config 1 has an invalid interface number: 236 but max is 0 [ 82.308774][ T5884] usb 1-1: config 1 has no interface number 0 [ 82.315030][ T5884] usb 1-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 1024 [ 82.345815][ T5884] usb 1-1: config 1 interface 236 has no altsetting 0 [ 82.372309][ T5884] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 82.386160][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.414530][ T5884] usb 1-1: Product: syz [ 82.433081][ T5884] usb 1-1: Manufacturer: syz [ 82.451373][ T5884] usb 1-1: SerialNumber: syz [ 82.490066][ T6266] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 82.509244][ T5884] ti_usb_3410_5052 1-1:1.236: TI USB 5052 2 port adapter converter detected [ 82.748062][ T5884] usb 1-1: USB disconnect, device number 2 [ 83.266897][ T6311] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 83.747995][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.785563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.809296][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 84.046496][ T29] audit: type=1326 audit(1736391223.747:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6339 comm="syz.0.120" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f812f185d29 code=0x0 [ 85.522520][ T6396] binder: 6395:6396 ioctl c0306201 20000680 returned -14 [ 85.531614][ T6393] kvm: MWAIT instruction emulated as NOP! [ 85.643623][ T29] audit: type=1326 audit(1736391225.347:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.4.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda98d85d29 code=0x7fc00000 [ 85.667055][ T29] audit: type=1326 audit(1736391225.347:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.4.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fda98d85d29 code=0x7fc00000 [ 85.694189][ T29] audit: type=1326 audit(1736391225.347:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.4.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda98d85d29 code=0x7fc00000 [ 85.758963][ T6405] program syz.1.160 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.795418][ T29] audit: type=1326 audit(1736391225.347:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.4.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda98d85d29 code=0x7fc00000 [ 85.877325][ T29] audit: type=1326 audit(1736391225.347:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.4.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda98d85d29 code=0x7fc00000 [ 85.921163][ T29] audit: type=1326 audit(1736391225.347:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.4.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda98d85d29 code=0x7fc00000 [ 86.004420][ T29] audit: type=1326 audit(1736391225.347:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.4.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda98d85d29 code=0x7fc00000 [ 86.026420][ C1] vkms_vblank_simulate: vblank timer overrun [ 86.047060][ T29] audit: type=1326 audit(1736391225.347:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.4.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda98d85d29 code=0x7fc00000 [ 86.070883][ T29] audit: type=1326 audit(1736391225.347:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.4.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda98d85d29 code=0x7fc00000 [ 86.092951][ C1] vkms_vblank_simulate: vblank timer overrun [ 86.267909][ T58] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 86.429282][ T58] usb 1-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 86.438562][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.456776][ T58] usb 1-1: config 0 descriptor?? [ 86.489968][ T58] pwc: Creative Labs Webcam Pro Ex detected. [ 86.590384][ T6441] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.631278][ T3074] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.666397][ T6442] netlink: 'syz.1.166': attribute type 10 has an invalid length. [ 86.684192][ T6442] syz_tun: entered promiscuous mode [ 86.700225][ T58] pwc: Failed to set LED on/off time (-71) [ 86.707210][ T58] pwc: send_video_command error -71 [ 86.712537][ T58] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 86.724573][ T58] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 86.735536][ T6442] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 86.789301][ T58] usb 1-1: USB disconnect, device number 3 [ 86.817895][ T3074] usb 4-1: Using ep0 maxpacket: 32 [ 86.827791][ T3074] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 86.845773][ T3074] usb 4-1: config 0 has no interface number 0 [ 86.869863][ T3074] usb 4-1: config 0 interface 12 has no altsetting 0 [ 86.917923][ T3074] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 86.927063][ T3074] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.935422][ T3074] usb 4-1: Product: syz [ 86.939702][ T3074] usb 4-1: Manufacturer: syz [ 86.944369][ T3074] usb 4-1: SerialNumber: syz [ 86.954294][ T3074] usb 4-1: config 0 descriptor?? [ 87.749824][ T6486] IPv6: Can't replace route, no match found [ 88.090163][ T6503] usb usb7: usbfs: process 6503 (syz.4.189) did not claim interface 0 before use [ 88.420178][ T3074] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 88.428876][ T3074] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 88.477396][ T3074] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 88.485059][ T3074] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 88.549026][ T3074] usb 4-1: USB disconnect, device number 2 [ 88.678322][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.514749][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 89.514766][ T29] audit: type=1326 audit(1736391229.217:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe943b85d29 code=0x7ffc0000 [ 89.624302][ T29] audit: type=1326 audit(1736391229.247:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe943b85d29 code=0x7ffc0000 [ 89.703212][ T29] audit: type=1326 audit(1736391229.267:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fe943b85d29 code=0x7ffc0000 [ 89.807354][ T29] audit: type=1326 audit(1736391229.267:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe943b85d29 code=0x7ffc0000 [ 89.917502][ T29] audit: type=1326 audit(1736391229.267:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe943b85d29 code=0x7ffc0000 [ 90.025870][ T29] audit: type=1326 audit(1736391229.287:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812f185d29 code=0x7fc00000 [ 90.158111][ T29] audit: type=1326 audit(1736391229.287:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f812f185d29 code=0x7fc00000 [ 90.181345][ T29] audit: type=1326 audit(1736391229.287:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812f185d29 code=0x7fc00000 [ 90.278381][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.286685][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.295540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.307592][ T29] audit: type=1326 audit(1736391229.287:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812f185d29 code=0x7fc00000 [ 90.403860][ T29] audit: type=1326 audit(1736391229.287:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812f185d29 code=0x7fc00000 [ 90.518397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.537532][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.707762][ T58] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 90.899350][ T58] usb 1-1: Using ep0 maxpacket: 32 [ 90.925738][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 91.031430][ T58] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 91.046744][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.065495][ T58] usb 1-1: Product: syz [ 91.075836][ T58] usb 1-1: Manufacturer: syz [ 91.085717][ T58] usb 1-1: SerialNumber: syz [ 91.166831][ T58] usb 1-1: config 0 descriptor?? [ 91.289338][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.478477][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 91.485662][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 91.494768][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 91.526048][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 91.539457][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 91.559754][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.596394][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 91.613937][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.689800][ T6624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.244'. [ 91.824873][ T58] peak_usb 1-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 91.865231][ T9] usb 3-1: usb_control_msg returned -32 [ 91.877314][ T9] usbtmc 3-1:16.0: can't read capabilities [ 91.906660][ T58] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 91.947611][ T58] usb 1-1: USB disconnect, device number 4 [ 92.223562][ T6646] usbtmc 3-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 92.237354][ T5832] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 92.409350][ T5832] usb 4-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 92.424091][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.435315][ T5832] usb 4-1: config 0 descriptor?? [ 92.443933][ T5832] pwc: Creative Labs Webcam Pro Ex detected. [ 92.474401][ T6652] mmap: syz.4.257 (6652) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 92.589464][ T6654] dccp_invalid_packet: P.Data Offset(4) too small [ 92.614488][ T6654] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 92.635111][ T6656] netlink: 24 bytes leftover after parsing attributes in process `syz.4.258'. [ 92.646568][ T5832] pwc: Failed to set LED on/off time (-71) [ 92.665288][ T5832] pwc: send_video_command error -71 [ 92.679513][ T5832] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 92.692376][ T5832] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 92.705386][ T5832] usb 4-1: USB disconnect, device number 3 [ 93.353565][ T6649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.067379][ T5832] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.092923][ T3074] usb 3-1: USB disconnect, device number 2 [ 94.137359][ T6683] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0x7 [ 94.275869][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.307573][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.333036][ T5832] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 94.379458][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.418826][ T5832] usb 5-1: config 0 descriptor?? [ 94.559364][ T6688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.271'. [ 94.637720][ T5832] usbhid 5-1:0.0: can't add hid device: -71 [ 94.644441][ T5832] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 94.655904][ T5832] usb 5-1: USB disconnect, device number 2 [ 94.673016][ T6688] bridge_slave_1: left allmulticast mode [ 94.697426][ T6688] bridge_slave_1: left promiscuous mode [ 94.704210][ T6688] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.722980][ T6688] bridge1: port 1(bridge_slave_1) entered blocking state [ 94.732336][ T6688] bridge1: port 1(bridge_slave_1) entered disabled state [ 94.741655][ T6688] bridge_slave_1: entered allmulticast mode [ 94.750307][ T6688] bridge_slave_1: entered promiscuous mode [ 94.847386][ T3074] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 95.009377][ T3074] usb 2-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 95.020893][ T3074] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.035737][ T3074] usb 2-1: config 0 descriptor?? [ 95.048245][ T3074] pwc: Creative Labs Webcam Pro Ex detected. [ 95.273937][ T3074] pwc: Failed to set LED on/off time (-71) [ 95.294345][ T3074] pwc: send_video_command error -71 [ 95.308659][ T3074] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 95.343484][ T3074] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 95.382336][ T3074] usb 2-1: USB disconnect, device number 3 [ 95.385682][ T6708] netlink: 28 bytes leftover after parsing attributes in process `syz.4.280'. [ 95.398488][ T6708] netlink: 40 bytes leftover after parsing attributes in process `syz.4.280'. [ 95.492561][ T6710] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0x7 [ 98.078706][ T3074] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 98.229415][ T3074] usb 1-1: Using ep0 maxpacket: 32 [ 98.249122][ T3074] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.272216][ T3074] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.292340][ T3074] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 98.314675][ T3074] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.346222][ T3074] usb 1-1: config 0 descriptor?? [ 98.658937][ T6803] netlink: 64 bytes leftover after parsing attributes in process `syz.1.323'. [ 98.781985][ T3074] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 99.074612][ T5913] usb 1-1: USB disconnect, device number 5 [ 101.747511][ T3074] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 101.923374][ T3074] usb 4-1: config 0 has no interfaces? [ 101.940691][ T3074] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 101.972810][ T3074] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.002923][ T3074] usb 4-1: config 0 descriptor?? [ 102.264705][ T5913] usb 4-1: USB disconnect, device number 4 [ 102.537383][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 102.707727][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 102.728644][ T9] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.749431][ T9] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x2 has invalid wMaxPacketSize 0 [ 102.777349][ T9] usb 5-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 102.817310][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 102.841431][ T9] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 102.878680][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.909858][ T9] usb 5-1: config 0 descriptor?? [ 103.351369][ T9] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 103.387536][ T9] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 103.395420][ T9] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 103.427467][ T9] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 103.435352][ T9] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 103.487774][ T9] hid-thrustmaster 0003:044F:B65D.0003: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 103.513921][ T9] hid-thrustmaster 0003:044F:B65D.0003: setup data couldn't be sent [ 103.552619][ C0] hid-thrustmaster 0003:044F:B65D.0003: URB to get model id failed with error -71 [ 103.556438][ T3074] usb 5-1: USB disconnect, device number 3 [ 104.433166][ T6974] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.538199][ T6974] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 104.568057][ T6974] macvlan2: entered allmulticast mode [ 104.575941][ T6974] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 104.627959][ T6974] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 104.635021][ T6974] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 104.967480][ T5884] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 105.152052][ T5884] usb 4-1: unable to get BOS descriptor or descriptor too short [ 105.173784][ T5884] usb 4-1: config 9 has an invalid interface number: 5 but max is 0 [ 105.200052][ T5884] usb 4-1: config 9 has no interface number 0 [ 105.221894][ T5884] usb 4-1: config 9 interface 5 has no altsetting 0 [ 105.246049][ T5884] usb 4-1: New USB device found, idVendor=07ca, idProduct=a110, bcdDevice=87.9b [ 105.273334][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.308613][ T5884] usb 4-1: Product: syz [ 105.323048][ T5884] usb 4-1: Manufacturer: 慉ņŠŸ [ 105.343559][ T5884] usb 4-1: SerialNumber: syz [ 105.704987][ T5884] usb 4-1: USB disconnect, device number 5 [ 106.175493][ T5837] Bluetooth: hci4: unexpected event 0x03 length: 17 > 11 [ 107.395152][ T7074] netlink: 36 bytes leftover after parsing attributes in process `syz.2.439'. [ 108.577547][ T7106] netlink: 36 bytes leftover after parsing attributes in process `syz.3.453'. [ 109.402612][ T7141] netlink: 36 bytes leftover after parsing attributes in process `syz.3.470'. [ 110.726343][ T7166] netlink: 16 bytes leftover after parsing attributes in process `syz.1.481'. [ 112.363586][ T7197] netlink: 16 bytes leftover after parsing attributes in process `syz.3.493'. [ 112.987848][ T7221] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 113.150762][ T7226] netlink: 16 bytes leftover after parsing attributes in process `syz.2.506'. [ 113.840267][ T5837] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 114.029382][ T7212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.904975][ T7315] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 117.017403][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 117.086075][ T7307] dccp_invalid_packet: P.Data Offset(4) too small [ 117.207547][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 117.231243][ T9] usb 1-1: New USB device found, idVendor=1b80, idProduct=c161, bcdDevice=ce.43 [ 117.272860][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.315847][ T9] usb 1-1: Product: syz [ 117.336251][ T9] usb 1-1: Manufacturer: syz [ 117.357320][ T9] usb 1-1: SerialNumber: syz [ 117.400847][ T9] usb 1-1: config 0 descriptor?? [ 117.468341][ C0] Unknown status report in ack skb [ 117.710499][ T7304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.410703][ T9] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 118.498269][ T9] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 118.569374][ T9] usb 1-1: USB disconnect, device number 6 [ 119.519277][ T7378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.573'. [ 119.683525][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.577'. [ 119.708720][ T7386] netlink: 'syz.2.577': attribute type 3 has an invalid length. [ 120.410573][ T7424] pim6reg: entered allmulticast mode [ 120.551369][ T7430] netlink: 'syz.1.594': attribute type 12 has an invalid length. [ 120.559914][ T7430] netlink: 'syz.1.594': attribute type 29 has an invalid length. [ 120.573403][ T7430] netlink: 'syz.1.594': attribute type 2 has an invalid length. [ 120.590434][ T7430] netlink: 260 bytes leftover after parsing attributes in process `syz.1.594'. [ 120.843810][ T5912] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 121.020017][ T5912] usb 4-1: Using ep0 maxpacket: 8 [ 121.035773][ T5912] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 121.047443][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.070488][ T5912] usb 4-1: Product: syz [ 121.074831][ T5912] usb 4-1: Manufacturer: syz [ 121.079956][ T5912] usb 4-1: SerialNumber: syz [ 121.101032][ T5912] usb 4-1: config 0 descriptor?? [ 121.121362][ T5912] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 123.725721][ T7511] [ 123.728108][ T7511] ============================================ [ 123.734263][ T7511] WARNING: possible recursive locking detected [ 123.740428][ T7511] 6.13.0-rc6-next-20250107-syzkaller #0 Not tainted [ 123.740440][ T7511] -------------------------------------------- [ 123.740447][ T7511] syz.2.630/7511 is trying to acquire lock: [ 123.740463][ T7511] ffff888031259c08 (vm_lock){++++}-{0:0}, at: move_pages+0x26b/0x1680 [ 123.740532][ T7511] [ 123.740532][ T7511] but task is already holding lock: [ 123.740539][ T7511] ffff88803575b488 (vm_lock){++++}-{0:0}, at: uffd_lock_vma+0x20/0x2c0 [ 123.740576][ T7511] [ 123.740576][ T7511] other info that might help us debug this: [ 123.740583][ T7511] Possible unsafe locking scenario: [ 123.740583][ T7511] [ 123.740589][ T7511] CPU0 [ 123.740594][ T7511] ---- [ 123.740599][ T7511] lock(vm_lock); [ 123.740611][ T7511] lock(vm_lock); [ 123.740624][ T7511] [ 123.740624][ T7511] *** DEADLOCK *** [ 123.740624][ T7511] [ 123.740629][ T7511] May be due to missing lock nesting notation [ 123.740629][ T7511] [ 123.740635][ T7511] 2 locks held by syz.2.630/7511: [ 123.740644][ T7511] #0: ffff88803575b488 (vm_lock){++++}-{0:0}, at: uffd_lock_vma+0x20/0x2c0 [ 123.740686][ T7511] #1: ffffffff8e937ee0 (rcu_read_lock){....}-{1:3}, at: lock_vma_under_rcu+0x1dd/0x9a0 [ 123.740729][ T7511] [ 123.740729][ T7511] stack backtrace: [ 123.740748][ T7511] CPU: 1 UID: 0 PID: 7511 Comm: syz.2.630 Not tainted 6.13.0-rc6-next-20250107-syzkaller #0 [ 123.740765][ T7511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 123.740779][ T7511] Call Trace: [ 123.740786][ T7511] [ 123.740792][ T7511] dump_stack_lvl+0x241/0x360 [ 123.740811][ T7511] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.740826][ T7511] ? __pfx__printk+0x10/0x10 [ 123.740848][ T7511] ? lockdep_unlock+0x16a/0x300 [ 123.740870][ T7511] print_deadlock_bug+0x483/0x620 [ 123.740893][ T7511] ? validate_chain+0x11e/0x5920 [ 123.740916][ T7511] validate_chain+0x15e2/0x5920 [ 123.740937][ T7511] ? do_syscall_64+0xf3/0x230 [ 123.740960][ T7511] ? __pfx_validate_chain+0x10/0x10 [ 123.740983][ T7511] ? __pfx_validate_chain+0x10/0x10 [ 123.741006][ T7511] ? __lock_acquire+0x1397/0x2100 [ 123.741026][ T7511] ? mark_lock+0x9a/0x360 [ 123.741049][ T7511] ? __lock_acquire+0x1397/0x2100 [ 123.741070][ T7511] ? validate_chain+0x11e/0x5920 [ 123.741093][ T7511] ? reacquire_held_locks+0x3eb/0x690 [ 123.741116][ T7511] ? mark_lock+0x9a/0x360 [ 123.741136][ T7511] __lock_acquire+0x1397/0x2100 [ 123.741161][ T7511] lock_acquire+0x1ed/0x550 [ 123.741180][ T7511] ? move_pages+0x26b/0x1680 [ 123.741198][ T7511] ? __pfx_lock_acquire+0x10/0x10 [ 123.741222][ T7511] ? mas_walk+0x1f3/0x280 [ 123.741244][ T7511] lock_vma_under_rcu+0x35f/0x9a0 [ 123.741260][ T7511] ? move_pages+0x26b/0x1680 [ 123.741274][ T7511] ? lock_vma_under_rcu+0x1dd/0x9a0 [ 123.741291][ T7511] ? move_pages+0x26b/0x1680 [ 123.741306][ T7511] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 123.741327][ T7511] ? uffd_lock_vma+0x91/0x2c0 [ 123.741342][ T7511] move_pages+0x26b/0x1680 [ 123.741356][ T7511] ? __pfx___might_resched+0x10/0x10 [ 123.741372][ T7511] ? __might_fault+0xaa/0x120 [ 123.741393][ T7511] ? preempt_count_add+0x93/0x190 [ 123.741409][ T7511] ? __pfx_move_pages+0x10/0x10 [ 123.741424][ T7511] ? __might_fault+0xc6/0x120 [ 123.741444][ T7511] userfaultfd_ioctl+0x5221/0x6840 [ 123.741478][ T7511] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 123.741497][ T7511] ? stack_trace_save+0x118/0x1d0 [ 123.741514][ T7511] ? __pfx_stack_trace_save+0x10/0x10 [ 123.741532][ T7511] ? stack_depot_save_flags+0x37/0x940 [ 123.741552][ T7511] ? kasan_save_track+0x51/0x80 [ 123.741571][ T7511] ? kasan_save_track+0x3f/0x80 [ 123.741589][ T7511] ? kasan_save_free_info+0x40/0x50 [ 123.741604][ T7511] ? __kasan_slab_free+0x59/0x70 [ 123.741623][ T7511] ? kfree+0x196/0x430 [ 123.741636][ T7511] ? tomoyo_path_number_perm+0x679/0x860 [ 123.741652][ T7511] ? security_file_ioctl+0xc6/0x2a0 [ 123.741668][ T7511] ? __se_sys_ioctl+0x46/0x170 [ 123.741685][ T7511] ? do_syscall_64+0xf3/0x230 [ 123.741701][ T7511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.741722][ T7511] ? do_vfs_ioctl+0xf07/0x2e40 [ 123.741742][ T7511] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 123.741762][ T7511] ? mark_lock+0x9a/0x360 [ 123.741788][ T7511] ? tomoyo_path_number_perm+0x206/0x860 [ 123.741803][ T7511] ? __pfx_lock_release+0x10/0x10 [ 123.741824][ T7511] ? tomoyo_path_number_perm+0x679/0x860 [ 123.741841][ T7511] ? tomoyo_path_number_perm+0x679/0x860 [ 123.741859][ T7511] ? tomoyo_path_number_perm+0x6f9/0x860 [ 123.741874][ T7511] ? __lock_acquire+0x1397/0x2100 [ 123.741894][ T7511] ? tomoyo_path_number_perm+0x206/0x860 [ 123.741910][ T7511] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 123.741941][ T7511] ? __fget_files+0x2a/0x410 [ 123.741958][ T7511] ? __fget_files+0x2a/0x410 [ 123.741975][ T7511] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 123.741994][ T7511] __se_sys_ioctl+0xf5/0x170 [ 123.742012][ T7511] do_syscall_64+0xf3/0x230 [ 123.742029][ T7511] ? clear_bhb_loop+0x35/0x90 [ 123.742050][ T7511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.742076][ T7511] RIP: 0033:0x7f8dc1985d29 [ 123.742099][ T7511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.742112][ T7511] RSP: 002b:00007f8dc284a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.742130][ T7511] RAX: ffffffffffffffda RBX: 00007f8dc1b75fa0 RCX: 00007f8dc1985d29 [ 123.742142][ T7511] RDX: 0000000020000040 RSI: 00000000c028aa05 RDI: 0000000000000003 [ 123.742153][ T7511] RBP: 00007f8dc1a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 123.742163][ T7511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.742172][ T7511] R13: 0000000000000000 R14: 00007f8dc1b75fa0 R15: 00007ffe5d8e73d8 [ 123.742189][ T7511] [ 123.748281][ T5912] gspca_sonixj: reg_w1 err -71 [ 123.787340][ T5912] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 123.788611][ T5912] usb 4-1: USB disconnect, device number 6 [ 123.822189][ T7509] syzkaller1: entered promiscuous mode [ 123.822212][ T7509] syzkaller1: entered allmulticast mode [ 133.098638][ T1296] ieee802154 phy1 wpan1: encryption failed: -22