last executing test programs: 29m21.969199296s ago: executing program 32 (id=27): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) io_getevents(0x0, 0x407, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = fanotify_init(0xf00, 0x1) fanotify_mark(r1, 0x105, 0x40009975, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x1000000, 0x3) 28m2.690526836s ago: executing program 33 (id=149): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x400000009) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000100)={0x20, 0x0, 0x0, 0x1, 0x6}) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f00000003c0), 0x280449d, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d31eea03ddc3caa801dd0569e3e261e9510d7b300b4a83e6b7e8c6c93750a6778986716d7b5d676d04331a198d374fb2ab25512a8407ee7a763372418fc0d3bc2", @ANYRESDEC=0x0, @ANYBLOB, @ANYBLOB=',\x00']) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="18000400000004000d8000"/24], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 20m39.22279277s ago: executing program 34 (id=684): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ptmx(0xffffff9c, 0x0, 0xa578b166ab60d784, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0x4, 0x5}}}, 0x24}}, 0x2000400c) close(r3) 11m36.738903261s ago: executing program 35 (id=1318): syz_usb_connect(0x5, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='adfs\x00', 0x2000010, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) syz_open_dev$vcsa(&(0x7f0000000240), 0x0, 0x1) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 10m19.769192138s ago: executing program 36 (id=1787): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x2c080}, 0x0) 8m20.809798976s ago: executing program 37 (id=2941): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 8m19.101380621s ago: executing program 38 (id=2951): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'bond0\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "d3ec9f2d164aaf6bfd59e25ceda02ae02c7a3ae7f4b0482098e21d1bae929b81", "db389695e1500c5090c78dece199044d531aab227aa6681ffc6614b2423d8cb6", "ea5366ca32cd855b6a98000000000000000042d96853a20d72e61d875e3efdf8", "5c9440b293df83a1765902579d8ffa9ef500c6472de363ab0ffe220b60b9a4bf", "5749e0ddfdffffffffffffff8be5db17d15fa8f59dcdc74a94edc5f14e0ae944", "3887ca14bbbb41c522b2aad9", 0x400000, 0xe8, 0xfffffff8, 0x0, 0x7}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) 8m18.256192069s ago: executing program 39 (id=2959): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffff"], 0x30}}, 0x0) 4m16.376620194s ago: executing program 3 (id=5077): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x27) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000380)='./file0\x00', 0x10000005) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_io_uring_setup(0x4873, 0x0, 0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x10, r2, 0x10000000) syz_io_uring_submit(0x0, r3, r4, &(0x7f0000000240)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x39, 0x0, 0x0, 0x0, 0x23456}) ftruncate(r2, 0x2000009) sendfile(r0, r2, 0x0, 0x20000000000006) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) tee(r5, r6, 0x1, 0x0) 4m16.085183003s ago: executing program 3 (id=5080): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_int(r0, 0x0, 0xc, 0x0, &(0x7f0000000780)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0xa, 0x8000, 0x0, 0x9, 0x7, 0xfffffdffffffffff, 0x8000, 0xffffffff}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x2008c0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x6) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0xffffffffffffffff) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x9) 4m13.162975227s ago: executing program 3 (id=5088): r0 = syz_clone(0x1a0000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000001c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='S', 0x1}], 0x1}}], 0x1, 0x20008000) shutdown(r5, 0x1) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x111302, 0x0) sendfile(r3, r6, 0x0, 0x201f00) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x3, 0x0, &(0x7f0000000040)) r7 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x2) preadv(r7, &(0x7f0000000740)=[{&(0x7f0000000340)=""/162, 0xca80}], 0x1, 0x80000001, 0x3f7a) ioctl$VIDIOC_S_STD(r7, 0x40085618, &(0x7f0000000300)=0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ptrace(0x10, r0) 4m8.415829981s ago: executing program 3 (id=5108): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='.\x00', 0x0, 0x897848, 0x0) 4m7.932562862s ago: executing program 3 (id=5114): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_int(r0, 0x0, 0xc, 0x0, &(0x7f0000000780)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0xa, 0x8000, 0x0, 0x9, 0x7, 0xfffffdffffffffff, 0x8000, 0xffffffff}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x2008c0, 0x0) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x6) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0xffffffffffffffff) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x9) 4m6.663482012s ago: executing program 3 (id=5124): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='.\x00', 0x0, 0x897848, 0x0) 4m5.884471859s ago: executing program 40 (id=5124): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='.\x00', 0x0, 0x897848, 0x0) 3m20.738671053s ago: executing program 2 (id=5287): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004800)=[{&(0x7f00000036c0)=""/4112, 0x1010}, {&(0x7f00000006c0)=""/4072, 0xfe8}, {&(0x7f0000000000)=""/203, 0xcb}, {&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f0000000440)=""/240, 0xf0}, {&(0x7f00000005c0)=""/53, 0x35}, {&(0x7f0000004700)=""/67, 0x43}, {&(0x7f0000004780)=""/74, 0x4a}], 0x8}, 0x0) 3m20.234965955s ago: executing program 2 (id=5289): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x7}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) 3m18.856813512s ago: executing program 2 (id=5292): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, 0x0, 0x440e0) 3m18.411730818s ago: executing program 2 (id=5295): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x3) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0x3, &(0x7f00000000c0)=@rnullb, r2, &(0x7f00000001c0)) fcntl$setownex(r1, 0xf, &(0x7f0000000240)={0x2}) 3m17.924033408s ago: executing program 2 (id=5297): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000500000000000000800000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3m17.523493719s ago: executing program 2 (id=5298): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x2, 0x1ff, 0x0, 0x0, 0x7, 0x4, 0x3, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xf, 0xe}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x80000000}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0xa, r4, 0x2e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000940)='2', 0x1}], 0x1}, 0x4) 3m16.180687909s ago: executing program 4 (id=5303): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) splice(r2, 0x0, r5, 0x0, 0x80, 0x4) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 3m15.826029384s ago: executing program 4 (id=5307): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x1000, &(0x7f000097e000/0x1000)=nil}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) close(r3) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) 3m15.62814246s ago: executing program 0 (id=5309): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0xa0001) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000640)={0x53, 0xffffffffffffffff, 0x0, 0x8, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0}) 3m15.383131312s ago: executing program 0 (id=5311): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 3m15.068744408s ago: executing program 0 (id=5314): r0 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) preadv(r0, &(0x7f0000000740), 0x0, 0x80000001, 0x3f7a) 3m14.842838104s ago: executing program 0 (id=5317): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000200)={0x0, 0xfffffffc, 0x100, 0x8000, 0x0, "7a58beca3900000000000000000000000200"}) close(0x3) 3m14.371901061s ago: executing program 0 (id=5321): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0xa0001) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000640)={0x53, 0xffffffffffffffff, 0x0, 0x8, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0}) 3m14.091713162s ago: executing program 0 (id=5325): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x52, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x7}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) 3m13.999290685s ago: executing program 4 (id=5326): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="0d32818e2cede722", 0x8}]) 3m12.897221153s ago: executing program 4 (id=5332): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0xfa11, 0x10}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) connect$inet6(r3, &(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback, 0x1170}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0xfefe) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) write$tun(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="01010008fc000600040063460ba00030060000000000000000000000000000000000fe8000000000000000000000000000240000000000000000000000000000000a00004e2200004e2400000000000000020000000100d97bace69e4e4b1c000000"], 0x62) pause() setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "fb00080000528e46", "252432e72844858a068b92a5a810f4dc", "b5ab0900", "5aee41448c84afb7"}, 0x28) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) 3m12.649871463s ago: executing program 4 (id=5335): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0xa0001) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000640)={0x53, 0xffffffffffffffff, 0x0, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f00000004c0), 0x0, 0x1, 0x4, 0x0, 0x0}) 3m12.453727543s ago: executing program 4 (id=5337): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r0, 0xa) r1 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x2, 0x200ff}, 0x8) r2 = syz_open_dev$media(&(0x7f0000000280), 0xc, 0x20200) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0x541b, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES64=r1, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, &(0x7f00000005c0)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0xfffffffffffffe9f, 0x8, &(0x7f00000002c0)="b80000050000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) ioctl$VIDIOC_S_PARM(r4, 0xc0cc5616, &(0x7f0000001600)={0x1, @capture={0x1000, 0x0, {0x6, 0x20000001}, 0x2, 0xfffffff4}}) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r7, @ANYBLOB="01180200031100002c0012800e000100698a3665727370616e0000001800028008001500a8bc0d0004006110cf54909af114672ac7192bf5da97cedf7ceb8030f6f3d605d91422c4e4a7b7a0b40c14533bd0c97dc1b469ad28ddb4a83846f624a4753a943a20e65339a6fc6da22d7726538a352f9717"], 0x4c}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(0xffffffffffffffff, r9) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r9, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000080)={r8, 0x0, 0x1, "03"}, 0x9) 3m7.16283564s ago: executing program 8 (id=5395): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x3) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000240)={0x2, r1}) 3m7.093884604s ago: executing program 8 (id=5397): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) sendmmsg$inet(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000580)="c45d3639", 0x4}], 0x1}}], 0x1, 0x4000000) 3m6.89075909s ago: executing program 8 (id=5400): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) dup2(r1, r0) r2 = socket(0x1e, 0x4, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x5008, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x80400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(0xffffffffffffffff, 0xc06c4124, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r4, &(0x7f00000030c0), 0x0, 0x9200000000000000) recvfrom(r2, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86) r5 = socket$inet6(0xa, 0x80002, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@updpolicy={0xb4, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x3, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@local, 0x4e21, 0x4000, 0x0, 0xc9c, 0xa, 0x10, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x7, 0x3, 0x0, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x0, 0xfffffffffffffffd}, 0x2, 0x0, 0x1, 0x1, 0x2}}, 0xb4}, 0x1, 0x0, 0x0, 0x84811}, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x800, &(0x7f0000000080)={0xa, 0x4e20, 0x104, @local}, 0x1c) 3m6.002344863s ago: executing program 8 (id=5410): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) sendmmsg$inet(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000580)="c45d3639", 0x4}], 0x1}}], 0x1, 0x4000000) 3m5.943765062s ago: executing program 8 (id=5412): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @private2, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000140)}, 0x440e0) 3m5.849572056s ago: executing program 8 (id=5414): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x1, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x9, 0x5}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x1000, "8c9833c07d0faafd4c32686e726ee3e5"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) 3m2.409466886s ago: executing program 41 (id=5298): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x2, 0x1ff, 0x0, 0x0, 0x7, 0x4, 0x3, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xf, 0xe}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x80000000}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0xa, r4, 0x2e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000940)='2', 0x1}], 0x1}, 0x4) 2m59.000463438s ago: executing program 42 (id=5325): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x52, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x7}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) 2m57.403924414s ago: executing program 43 (id=5337): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r0, 0xa) r1 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x2, 0x200ff}, 0x8) r2 = syz_open_dev$media(&(0x7f0000000280), 0xc, 0x20200) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0x541b, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES64=r1, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, &(0x7f00000005c0)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0xfffffffffffffe9f, 0x8, &(0x7f00000002c0)="b80000050000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) ioctl$VIDIOC_S_PARM(r4, 0xc0cc5616, &(0x7f0000001600)={0x1, @capture={0x1000, 0x0, {0x6, 0x20000001}, 0x2, 0xfffffff4}}) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r7, @ANYBLOB="01180200031100002c0012800e000100698a3665727370616e0000001800028008001500a8bc0d0004006110cf54909af114672ac7192bf5da97cedf7ceb8030f6f3d605d91422c4e4a7b7a0b40c14533bd0c97dc1b469ad28ddb4a83846f624a4753a943a20e65339a6fc6da22d7726538a352f9717"], 0x4c}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(0xffffffffffffffff, r9) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r9, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000080)={r8, 0x0, 0x1, "03"}, 0x9) 2m50.778279161s ago: executing program 44 (id=5414): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x1, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x9, 0x5}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x1000, "8c9833c07d0faafd4c32686e726ee3e5"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) 9.871743563s ago: executing program 7 (id=6810): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) syz_emit_ethernet(0x1f, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x24000045, 0x0, 0x0) 9.585466265s ago: executing program 7 (id=6814): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="200105"], 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) 8.159515203s ago: executing program 6 (id=6819): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 7.731345663s ago: executing program 6 (id=6820): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x4, 0xea, 0x440, 0x0, 0x10, 0x0, 0x8}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)=0x3dbc, 0x4) bind$inet6(r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000000)={'\x00', 0x9, 0x4, 0x6, 0x6, 0x4, 0x0}) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r2 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000000c0)=0x8, 0x4) unshare(0x22020600) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r5, 0x0, 0x0, 0x100008) r6 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) fcntl$getflags(r6, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@private2, 0x4, 0x2, 0x2, 0x3, 0x3c76, 0x4}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$security_capability(r4, 0x0, 0x0, 0xfffffe04, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) fcntl$getflags(r7, 0x40a) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x6}) ptrace$pokeuser(0x6, r1, 0xe67d, 0xfa0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 5.699056562s ago: executing program 6 (id=6826): r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv2(r0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000001380)=""/129, 0x81}], 0x2, 0x1000, 0x0, 0x1) 5.584917286s ago: executing program 5 (id=6827): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x12a) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffffffffffffff08e139f58dca0ccf29a9a592e403609c0045000028000000000001"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setgid(0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001480)={0x20, 0x0, 0x1cb59a75dde80c6d, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x408d0) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) chdir(&(0x7f0000000000)='./bus\x00') unlink(&(0x7f00000004c0)='./file1\x00') 5.539439151s ago: executing program 7 (id=6828): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) 5.388783604s ago: executing program 6 (id=6830): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 5.291235014s ago: executing program 7 (id=6831): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, &(0x7f00000000c0)) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x0, 0x25dffbfc, {0x2, 0x1f, 0x81, 0xcb, r6}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010102}, @IFA_LABEL={0x14}]}, 0x34}, 0x1, 0x0, 0x0, 0xc1}, 0x2400c012) write$proc_mixer(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='VOLUME \')ine\' 1'], 0x2a) close(r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r8, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r8, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x2, 0x6, 0x9a6, 0x10001, 0x8}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r8, 0x7a9, &(0x7f00000003c0)={{@my=0x1}, 0xfff, 0xffffffffffffffff, 0x0, 0x0, 0x80000, 0x2, 0x1000000000ff6, 0x58df}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r11, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x203, 0x0, 0xcc}]}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000", @ANYRES32=r7, @ANYBLOB="0a001800b7dc2c958c760f4b6e62d10303030303030000080026006c0900009002000000ddd5ee28a358e744baff695aa9b4faaa6ee709e74056af277017e7c871919450fe46f8e649a2fdc6f7913cad9f73d669b8409c381197baeba3826fa99801b15f0c76da02cbd49d464a97ebfd6d3cf2b52c0325d114285fe2f5c560"], 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x28, r2, 0x2, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4, 0x4e}}}}}, 0x28}}, 0x0) 5.07248576s ago: executing program 6 (id=6832): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r1, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=""/173, 0xad}, 0x76fc5092}], 0x1, 0x40000100, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, 0x0, 0x0) 4.872573305s ago: executing program 9 (id=6835): openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$radio(0x0, 0x2, 0x2) epoll_create1(0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) 3.926477348s ago: executing program 5 (id=6836): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x4, 0xea, 0x440, 0x0, 0x10, 0x0, 0x8}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)=0x3dbc, 0x4) bind$inet6(r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000000)={'\x00', 0x9, 0x4, 0x6, 0x6, 0x4, 0x0}) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r2 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000000c0)=0x8, 0x4) unshare(0x22020600) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r5, 0x0, 0x0, 0x100008) r6 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) fcntl$getflags(r6, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@private2, 0x4, 0x2, 0x2, 0x3, 0x3c76, 0x4}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$security_capability(r4, 0x0, 0x0, 0xfffffe04, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) fcntl$getflags(r7, 0x40a) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x6}) ptrace$pokeuser(0x6, r1, 0xe67d, 0xfa0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x91}], 0x1, 0x0, 0x0) 3.109135817s ago: executing program 1 (id=6837): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 3.108382072s ago: executing program 6 (id=6838): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x6, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x3c}, @rand_addr=0x64010102}, 0x10) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001e80)=[{{&(0x7f0000000200)={0xa, 0x4e24, 0x6, @local, 0x4}, 0x1c, 0x0}}], 0x1, 0x880c1) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3d, &(0x7f00000020c0)=""/168, &(0x7f0000000000)=0xa8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x22200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000180)={0x9, 0x1, 0xfffffffe, 0x2}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x50) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000100)=@ethtool_regs={0x4, 0x11}}) write(0xffffffffffffffff, &(0x7f00000002c0)="04", 0x1) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) socket$l2tp(0x2, 0x2, 0x73) ptrace(0x4207, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000000c0)={0x0, 0xfffffffffffffdc8, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x8000061, 0x2}}]}, 0x20}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 3.036707475s ago: executing program 7 (id=6839): openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r1, 0x0, 0x0, 0x2004c080, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000003fc0), 0x0, 0x40a, 0x7ffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) semget(0x3, 0x3, 0x5a8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x1}) 2.653428482s ago: executing program 9 (id=6840): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r0, 0x0, 0x0, 0x1000, 0x0, 0x1) 1.556178159s ago: executing program 7 (id=6841): socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(0x4) 1.500663198s ago: executing program 9 (id=6842): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000180)={0x5, 0x12, 0x7, 0xfffffff2, 0x2, "4d6b5ccb000000000000000000000000000004", 0x104}) poll(&(0x7f0000000280)=[{r0, 0x405}], 0x1, 0x960a) 1.284863483s ago: executing program 5 (id=6843): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r0, 0xa) r1 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x2, 0x200ff}, 0x8) r2 = syz_open_dev$media(&(0x7f0000000280), 0xc, 0x20200) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0x541b, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB, @ANYBLOB='\x00'/28], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(0xffffffffffffffff, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) 1.278799154s ago: executing program 1 (id=6844): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) epoll_pwait2(0xffffffffffffffff, &(0x7f00000003c0)=[{}], 0x1, 0x0, 0x0, 0x0) r1 = socket(0x1e, 0x805, 0x0) connect$tipc(r1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'erspan0\x00', &(0x7f0000000480)={'erspan0\x00', 0x0, 0x7, 0x10, 0x7, 0xd1, {{0x1f, 0x4, 0x1, 0x11, 0x7c, 0x66, 0x0, 0x11, 0x29, 0x0, @multicast1, @remote, {[@lsrr={0x83, 0xb, 0x2d, [@local, @dev={0xac, 0x14, 0x14, 0xb}]}, @generic={0x7, 0x10, "cd9c74e033694b5ecd225d501562"}, @timestamp={0x44, 0x2c, 0x25, 0x0, 0x2, [0x0, 0x660, 0x1000, 0x80000001, 0x4, 0x1000, 0x941, 0x2, 0x2c000000, 0x8000]}, @end, @timestamp_prespec={0x44, 0x1c, 0x3e, 0x3, 0x5, [{@remote}, {@local, 0x38000}, {@remote, 0x7}]}, @end]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r0, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000680)=[0x0, 0x0], &(0x7f00000006c0)=[0x0], 0x0, 0x86, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x2, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000009c0)={'syztnl1\x00', &(0x7f0000000940)={'erspan0\x00', 0x0, 0x7800, 0x8000, 0x4, 0x8, {{0x12, 0x4, 0x0, 0x22, 0x48, 0x68, 0x0, 0xf, 0x4, 0x0, @loopback, @empty, {[@rr={0x7, 0x7, 0xe8, [@local]}, @timestamp_prespec={0x44, 0x24, 0x28, 0x3, 0x9, [{@local, 0x7}, {@private=0xa010102, 0xfff}, {@local, 0x7}, {@broadcast, 0xfffffeff}]}, @rr={0x7, 0x3, 0xae}, @generic={0x88, 0x6, "df57cd19"}]}}}}}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x20000014}) 1.201167145s ago: executing program 9 (id=6845): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) 915.385386ms ago: executing program 1 (id=6846): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000000000)={0xc, {"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", 0x1030}}, 0x1006) 915.023053ms ago: executing program 9 (id=6847): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x24040040) 563.988216ms ago: executing program 1 (id=6848): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r1, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=""/173, 0xad}, 0x76fc5092}], 0x1, 0x40000100, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, 0x0, 0x0) 436.925301ms ago: executing program 5 (id=6849): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, &(0x7f00000000c0)) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x0, 0x25dffbfc, {0x2, 0x1f, 0x81, 0xcb, r6}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010102}, @IFA_LABEL={0x14}]}, 0x34}, 0x1, 0x0, 0x0, 0xc1}, 0x2400c012) write$proc_mixer(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='VOLUME \')ine\' 1'], 0x2a) close(r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r8, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r8, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x2, 0x6, 0x9a6, 0x10001, 0x8}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r8, 0x7a9, &(0x7f00000003c0)={{@my=0x1}, 0xfff, 0xffffffffffffffff, 0x0, 0x0, 0x80000, 0x2, 0x1000000000ff6, 0x58df}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r11, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x203, 0x0, 0xcc}]}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000", @ANYRES32=r7, @ANYBLOB="0a001800b7dc2c958c760f4b6e62d10303030303030000080026006c0900009002000000ddd5ee28a358e744baff695aa9b4faaa6ee709e74056af277017e7c871919450fe46f8e649a2fdc6f7913cad9f73d669b8409c381197baeba3826fa99801b15f0c76da02cbd49d464a97ebfd6d3cf2b52c0325d114285fe2f5c560"], 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x28, r2, 0x2, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4, 0x4e}}}}}, 0x28}}, 0x0) 306.097918ms ago: executing program 9 (id=6850): syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 269.328331ms ago: executing program 1 (id=6851): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x28, r0, 0x701, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x4000) 207.357127ms ago: executing program 5 (id=6852): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r0, 0x0, 0x0, 0x1000, 0x0, 0x1) 12.305056ms ago: executing program 5 (id=6853): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x4, 0xea, 0x440, 0x0, 0x10, 0x0, 0x8}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)=0x3dbc, 0x4) bind$inet6(r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000000)={'\x00', 0x9, 0x4, 0x6, 0x6, 0x4, 0x0}) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r2 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000000c0)=0x8, 0x4) unshare(0x22020600) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r5, 0x0, 0x0, 0x100008) r6 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) fcntl$getflags(r6, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@private2, 0x4, 0x2, 0x2, 0x3, 0x3c76, 0x4}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$security_capability(r4, 0x0, 0x0, 0xfffffe04, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) fcntl$getflags(r7, 0x40a) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x6}) ptrace$pokeuser(0x6, r1, 0xe67d, 0xfa0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x91}], 0x1, 0x0, 0x0) 0s ago: executing program 1 (id=6854): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, 0x0, 0x840) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) kernel console output (not intermixed with test programs): ed: batadv_slave_0 [ 1510.533270][T19679] batadv_slave_0: entered promiscuous mode [ 1512.180540][ T8691] Bluetooth: hci3: command 0x0406 tx timeout [ 1516.898954][T19873] netlink: 212356 bytes leftover after parsing attributes in process `syz.4.3838'. [ 1517.292540][ T5819] Bluetooth: hci6: command 0x0406 tx timeout [ 1517.292577][ T5819] Bluetooth: hci7: command 0x0406 tx timeout [ 1520.027923][ T8682] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 1520.203879][ T8682] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1520.203911][ T8682] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.203932][ T8682] usb 4-1: Product: syz [ 1520.203945][ T8682] usb 4-1: Manufacturer: syz [ 1520.203959][ T8682] usb 4-1: SerialNumber: syz [ 1520.770586][ T8682] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1522.864886][ T5202] usb 4-1: USB disconnect, device number 17 [ 1522.921303][ T5202] usblp0: removed [ 1524.071922][T20068] netlink: 212356 bytes leftover after parsing attributes in process `syz.4.3909'. [ 1524.687789][ T6057] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1524.837685][ T6057] usb 4-1: Using ep0 maxpacket: 16 [ 1524.855422][ T6057] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1524.855457][ T6057] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1524.855479][ T6057] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1524.855499][ T6057] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1524.855518][ T6057] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1524.855555][ T6057] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1524.855576][ T6057] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1524.948456][T20095] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1524.981191][ T6057] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 1525.049699][ T6057] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 1528.310293][ T5202] usb 4-1: USB disconnect, device number 18 [ 1528.611427][T20211] binder: 20209:20211 ioctl c0306201 200000000040 returned -22 [ 1528.612607][T20211] binder: 20209:20211 ioctl c0306201 200000000640 returned -22 [ 1529.564662][T20238] netlink: 212356 bytes leftover after parsing attributes in process `syz.4.3976'. [ 1533.597798][ T31] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1533.748647][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 1533.766073][ T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1533.766105][ T31] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1533.766128][ T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1533.766147][ T31] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1533.766176][ T31] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1533.766216][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1533.766237][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.840016][T20372] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1533.865051][ T31] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 1533.865295][ T31] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 1534.246744][T20361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1534.318155][T20361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1534.767817][T17849] usb 5-1: USB disconnect, device number 33 [ 1537.903606][T20514] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4076'. [ 1537.903629][T20514] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4076'. [ 1538.231922][T20523] binder: 20521:20523 ioctl c0306201 200000000040 returned -22 [ 1538.232687][T20523] binder: 20521:20523 ioctl c0306201 200000000640 returned -22 [ 1538.557829][T17849] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 1538.714131][T17849] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1538.714161][T17849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1538.748659][T17849] usb 4-1: config 0 descriptor?? [ 1538.795095][T17849] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1541.209770][T17849] usb 4-1: USB disconnect, device number 19 [ 1541.579035][ T31] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1541.729921][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 1541.756687][ T31] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1541.756718][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.756737][ T31] usb 5-1: Product: syz [ 1541.756750][ T31] usb 5-1: Manufacturer: syz [ 1541.756763][ T31] usb 5-1: SerialNumber: syz [ 1541.815091][ T31] usb 5-1: config 0 descriptor?? [ 1541.881461][ T31] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1542.148737][T20588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4104'. [ 1542.195911][ T31] gspca_ov534_9: reg_w failed -71 [ 1542.587687][ T31] gspca_ov534_9: Unknown sensor 0000 [ 1542.587781][ T31] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 1542.631587][ T31] usb 5-1: USB disconnect, device number 34 [ 1543.579349][ T31] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 1543.839625][ T31] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1543.839654][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.839673][ T31] usb 4-1: Product: syz [ 1543.839687][ T31] usb 4-1: Manufacturer: syz [ 1543.839701][ T31] usb 4-1: SerialNumber: syz [ 1544.376681][ T31] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1545.726682][T20729] syzkaller0: entered promiscuous mode [ 1545.726707][T20729] syzkaller0: entered allmulticast mode [ 1546.327876][T10731] usb 4-1: USB disconnect, device number 20 [ 1546.358295][T10731] usblp0: removed [ 1548.337735][T10731] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1548.554953][T10731] usb 5-1: config index 0 descriptor too short (expected 24441, got 36) [ 1548.554989][T10731] usb 5-1: config 114 has too many interfaces: 116, using maximum allowed: 32 [ 1548.555007][T10731] usb 5-1: config 114 has an invalid descriptor of length 101, skipping remainder of the config [ 1548.555024][T10731] usb 5-1: config 114 has 0 interfaces, different from the descriptor's value: 116 [ 1548.560987][T10731] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1548.561015][T10731] usb 5-1: New USB device strings: Mfr=0, Product=10, SerialNumber=0 [ 1548.561034][T10731] usb 5-1: Product: syz [ 1549.836376][T10731] usb 5-1: USB disconnect, device number 35 [ 1552.077737][ T31] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1552.227649][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 1552.236118][ T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1552.236153][ T31] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1552.236176][ T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1552.236196][ T31] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1552.236217][ T31] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1552.236258][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1552.236280][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.260014][T20936] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1552.283579][ T31] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 1552.283808][ T31] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 1554.097009][T20931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1554.119524][T20931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1554.418998][T10731] usb 5-1: USB disconnect, device number 36 [ 1555.006302][T21030] syzkaller0: entered promiscuous mode [ 1555.006329][T21030] syzkaller0: entered allmulticast mode [ 1556.168168][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1556.168237][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1556.261700][T21091] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4325'. [ 1558.148061][T10731] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 1558.201775][T21154] syzkaller0: entered promiscuous mode [ 1558.201800][T21154] syzkaller0: entered allmulticast mode [ 1558.304884][T10731] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1558.304915][T10731] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.304934][T10731] usb 5-1: Product: syz [ 1558.304947][T10731] usb 5-1: Manufacturer: syz [ 1558.304960][T10731] usb 5-1: SerialNumber: syz [ 1558.853287][T10731] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 37 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1558.912314][T10731] usb 5-1: USB disconnect, device number 37 [ 1558.946084][T10731] usblp0: removed [ 1560.317767][ T5202] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 1560.480447][ T5202] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1560.480477][ T5202] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1560.480496][ T5202] usb 5-1: Product: syz [ 1560.480510][ T5202] usb 5-1: Manufacturer: syz [ 1560.480523][ T5202] usb 5-1: SerialNumber: syz [ 1560.952684][ T5202] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 38 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1561.037867][ T5202] usb 5-1: USB disconnect, device number 38 [ 1561.109402][ T5202] usblp0: removed [ 1561.750989][T21297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4416'. [ 1561.751014][T21297] openvswitch: netlink: Flow actions attr not present in new flow. [ 1564.199501][T21370] binder: 21367:21370 ioctl c0306201 200000000040 returned -22 [ 1564.199742][T21370] binder: 21367:21370 ioctl c0306201 200000000640 returned -22 [ 1564.843989][T21389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4453'. [ 1564.844011][T21389] openvswitch: netlink: Flow actions attr not present in new flow. [ 1565.357770][T12967] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1565.477111][T21406] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4457'. [ 1565.477137][T21406] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4457'. [ 1565.508500][T12967] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1565.509947][T12967] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1565.509998][T12967] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1565.510024][T12967] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1565.511249][T12967] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1565.511299][T12967] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1565.511323][T12967] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1565.513066][T12967] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1565.513115][T12967] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1565.513140][T12967] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1565.547665][T12967] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1565.547717][T12967] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1565.547743][T12967] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1565.602271][T12967] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1565.602326][T12967] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1565.602352][T12967] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1565.647640][T12967] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1565.647694][T12967] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1565.647718][T12967] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1565.653932][T12967] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1565.653988][T12967] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1565.654014][T12967] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1565.727621][T12967] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1565.727676][T12967] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1565.727702][T12967] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1565.736117][T12967] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1565.736145][T12967] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1565.736163][T12967] usb 5-1: Product: syz [ 1565.736178][T12967] usb 5-1: Manufacturer: syz [ 1565.736191][T12967] usb 5-1: SerialNumber: syz [ 1565.804628][T12967] usb 5-1: config 0 descriptor?? [ 1565.846237][T12967] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 1566.090080][T12967] usb 5-1: USB disconnect, device number 39 [ 1566.124980][T12967] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 1570.422348][T21519] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4514'. [ 1571.077689][T12967] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1571.239209][T12967] usb 5-1: Using ep0 maxpacket: 16 [ 1571.246642][T12967] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1571.246674][T12967] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1571.246697][T12967] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1571.246716][T12967] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1571.246738][T12967] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1571.246777][T12967] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1571.246798][T12967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1571.346925][T21531] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1571.363042][T12967] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 1571.363995][T12967] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 1571.771773][T21551] sg_write: data in/out 986488799/130 bytes for SCSI command 0xc5-- guessing data in; [ 1571.771773][T21551] program syz.3.4529 not setting count and/or reply_len properly [ 1572.581993][T10731] usb 5-1: USB disconnect, device number 40 [ 1574.439013][T17849] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1574.588868][T17849] usb 4-1: Using ep0 maxpacket: 16 [ 1574.592146][T17849] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1574.592178][T17849] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1574.592212][T17849] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1574.592234][T17849] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1574.592255][T17849] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1574.592296][T17849] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1574.592317][T17849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.664660][T21625] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1574.689792][T17849] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 1574.706923][T17849] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 1576.346243][T21673] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.4581'. [ 1577.231925][T17849] usb 4-1: USB disconnect, device number 21 [ 1577.319658][T21696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4593'. [ 1577.373695][T21700] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4594'. [ 1577.512075][T21702] syzkaller0: entered promiscuous mode [ 1577.512100][T21702] syzkaller0: entered allmulticast mode [ 1580.584576][T21814] binder: 21813:21814 ioctl c0306201 200000000040 returned -22 [ 1580.888591][T21825] netlink: 212396 bytes leftover after parsing attributes in process `syz.3.4654'. [ 1581.240513][T21840] sg_write: data in/out 986488799/130 bytes for SCSI command 0xc5-- guessing data in; [ 1581.240513][T21840] program syz.8.4660 not setting count and/or reply_len properly [ 1581.625325][T21855] binder: 21849:21855 ioctl c0306201 200000000040 returned -22 [ 1583.845793][ T8691] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1583.938000][ T8691] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1583.958758][ T8691] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1583.982246][ T8691] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1583.990900][ T8691] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1585.458546][T21950] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.4702'. [ 1585.511119][T21926] syzkaller0: entered promiscuous mode [ 1585.511146][T21926] syzkaller0: entered allmulticast mode [ 1586.199622][T11947] Bluetooth: hci0: command tx timeout [ 1586.487193][ T152] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.105532][T21970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1587.106074][T21970] batadv_slave_0: entered promiscuous mode [ 1587.855024][ T152] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.163461][T22013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1588.163595][T22013] batadv_slave_0: entered promiscuous mode [ 1588.237697][T11947] Bluetooth: hci0: command tx timeout [ 1588.377115][T22021] sg_write: data in/out 986488799/130 bytes for SCSI command 0xc5-- guessing data in; [ 1588.377115][T22021] program syz.4.4732 not setting count and/or reply_len properly [ 1588.664473][ T152] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.265091][T22044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4743'. [ 1589.290500][T22046] sg_write: data in/out 986488799/130 bytes for SCSI command 0xc5-- guessing data in; [ 1589.290500][T22046] program syz.4.4744 not setting count and/or reply_len properly [ 1589.512904][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880a7bf2c00: rx timeout, send abort [ 1589.533970][T22050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4746'. [ 1589.671175][ T152] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1590.321423][T11947] Bluetooth: hci0: command tx timeout [ 1590.498504][T21905] chnl_net:caif_netlink_parms(): no params data found [ 1590.948472][T21905] bridge0: port 1(bridge_slave_0) entered blocking state [ 1590.949945][T21905] bridge0: port 1(bridge_slave_0) entered disabled state [ 1590.950169][T21905] bridge_slave_0: entered allmulticast mode [ 1590.987907][T21905] bridge_slave_0: entered promiscuous mode [ 1590.994876][T21905] bridge0: port 2(bridge_slave_1) entered blocking state [ 1590.995025][T21905] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.995146][T21905] bridge_slave_1: entered allmulticast mode [ 1591.051148][T21905] bridge_slave_1: entered promiscuous mode [ 1591.662451][T21905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1591.706847][T21905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1592.375673][T21905] team0: Port device team_slave_0 added [ 1592.397664][T11947] Bluetooth: hci0: command tx timeout [ 1592.597241][T21905] team0: Port device team_slave_1 added [ 1593.024193][T21905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1593.024210][T21905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1593.024235][T21905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1593.028500][T21905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1593.028510][T21905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1593.028524][T21905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1593.609846][ T152] bridge_slave_1: left allmulticast mode [ 1593.609875][ T152] bridge_slave_1: left promiscuous mode [ 1593.610190][ T152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1593.725100][ T152] bridge_slave_0: left allmulticast mode [ 1593.725128][ T152] bridge_slave_0: left promiscuous mode [ 1593.725466][ T152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1593.992217][T12967] IPVS: starting estimator thread 0... [ 1594.077815][T22178] IPVS: using max 10 ests per chain, 24000 per kthread [ 1595.429474][ T152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1595.507952][ T152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1595.568604][ T152] bond0 (unregistering): Released all slaves [ 1595.674911][ T5482] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1595.837372][T21905] hsr_slave_0: entered promiscuous mode [ 1595.839219][T21905] hsr_slave_1: entered promiscuous mode [ 1598.652897][ T152] hsr_slave_0: left promiscuous mode [ 1598.687744][ T152] hsr_slave_1: left promiscuous mode [ 1598.688956][ T152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1598.688981][ T152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1598.750199][ T152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1598.750227][ T152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1598.937718][T13931] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1598.956205][ T152] veth1_macvtap: left promiscuous mode [ 1598.963329][ T152] veth0_macvtap: left promiscuous mode [ 1598.963574][ T152] veth1_vlan: left promiscuous mode [ 1598.963734][ T152] veth0_vlan: left promiscuous mode [ 1599.087635][T13931] usb 5-1: Using ep0 maxpacket: 32 [ 1599.095538][T13931] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1599.095568][T13931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.095588][T13931] usb 5-1: Product: syz [ 1599.095602][T13931] usb 5-1: Manufacturer: syz [ 1599.095616][T13931] usb 5-1: SerialNumber: syz [ 1599.126220][T13931] usb 5-1: config 0 descriptor?? [ 1599.199014][T13931] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1599.400586][T22329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4842'. [ 1599.743318][T13931] gspca_ov534_9: reg_w failed -110 [ 1600.207636][T13931] gspca_ov534_9: Unknown sensor 0000 [ 1600.207729][T13931] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 1600.701091][ T152] team0 (unregistering): Port device team_slave_1 removed [ 1600.769540][ T152] team0 (unregistering): Port device team_slave_0 removed [ 1601.203875][T13931] usb 5-1: USB disconnect, device number 41 [ 1601.339799][T22379] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4874'. [ 1602.608638][T22418] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4888'. [ 1603.774059][ T5482] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1607.627704][T17849] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 1607.782908][T17849] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1607.782939][T17849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1607.782959][T17849] usb 4-1: Product: syz [ 1607.782972][T17849] usb 4-1: Manufacturer: syz [ 1607.782986][T17849] usb 4-1: SerialNumber: syz [ 1608.447810][ T31] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1608.604913][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 1608.630263][ T31] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1608.630292][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.630456][ T31] usb 5-1: Product: syz [ 1608.630527][ T31] usb 5-1: Manufacturer: syz [ 1608.630542][ T31] usb 5-1: SerialNumber: syz [ 1608.748971][ T31] usb 5-1: config 0 descriptor?? [ 1608.777706][ T31] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1608.782645][T21905] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1608.874670][T21905] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1608.875561][T21905] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1608.919997][T21905] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1608.921070][T21905] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1608.956212][T17849] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1608.992191][T21905] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1608.993283][T21905] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1608.996383][T22598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4946'. [ 1609.063065][ T31] gspca_ov534_9: reg_w failed -71 [ 1609.069181][T22617] binder: 22616:22617 ioctl c0306201 200000000040 returned -11 [ 1609.080672][T17849] usb 4-1: USB disconnect, device number 22 [ 1609.116580][T21905] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1609.223436][T17849] usblp0: removed [ 1609.386161][T21905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1609.418312][T21905] 8021q: adding VLAN 0 to HW filter on device team0 [ 1609.425861][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1609.426061][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1609.459587][ T31] gspca_ov534_9: Unknown sensor 0000 [ 1609.459649][ T31] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 1609.496529][T22633] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4960'. [ 1609.555621][ T31] usb 5-1: USB disconnect, device number 42 [ 1609.781351][ T8432] bridge0: port 2(bridge_slave_1) entered blocking state [ 1609.781455][ T8432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1609.947660][ T31] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 1610.009303][T22649] binder: 22648:22649 ioctl c0306201 200000000040 returned -11 [ 1610.118292][ T31] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1610.118323][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.118342][ T31] usb 5-1: Product: syz [ 1610.118355][ T31] usb 5-1: Manufacturer: syz [ 1610.118369][ T31] usb 5-1: SerialNumber: syz [ 1610.632309][T21905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1610.885486][T21905] veth0_vlan: entered promiscuous mode [ 1610.964206][T21905] veth1_vlan: entered promiscuous mode [ 1611.114525][ T31] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1611.114939][T21905] veth0_macvtap: entered promiscuous mode [ 1611.141428][ T31] usb 5-1: USB disconnect, device number 43 [ 1611.157191][T21905] veth1_macvtap: entered promiscuous mode [ 1611.182678][ T31] usblp0: removed [ 1611.271042][T21905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1611.458333][T21905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1611.530661][ T3516] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.536936][ T3516] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.560948][ T3516] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.586493][ T3516] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1612.530510][ T207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1612.530531][ T207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1612.656697][T22710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4991'. [ 1612.883357][ T8432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1612.883378][ T8432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1613.577072][T22727] sg_write: data in/out 40927/136 bytes for SCSI command 0x0-- guessing data in; [ 1613.577072][T22727] program syz.3.4998 not setting count and/or reply_len properly [ 1614.138851][ T8691] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1614.200785][ T8691] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1614.207223][ T8691] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1614.236700][ T8691] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1614.250322][ T8691] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1614.987331][T22755] binder: 22750:22755 ioctl c0306201 0 returned -14 [ 1615.055803][T22757] binder: 22750:22757 ioctl c0306201 0 returned -14 [ 1615.394931][T22740] chnl_net:caif_netlink_parms(): no params data found [ 1616.117706][ T31] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1616.269923][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 1616.292506][ T31] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1616.292536][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.292555][ T31] usb 4-1: Product: syz [ 1616.292568][ T31] usb 4-1: Manufacturer: syz [ 1616.292582][ T31] usb 4-1: SerialNumber: syz [ 1616.314893][ T31] usb 4-1: config 0 descriptor?? [ 1616.328884][ T31] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1616.417898][T11947] Bluetooth: hci1: command tx timeout [ 1616.584898][T22767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5009'. [ 1616.841783][ T31] gspca_ov534_9: reg_w failed -110 [ 1617.014241][ T8448] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1617.237725][ T31] gspca_ov534_9: Unknown sensor 0000 [ 1617.237819][ T31] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 1617.305911][T22777] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5014'. [ 1617.378757][ T5894] usb 4-1: USB disconnect, device number 23 [ 1617.605765][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1617.605832][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1617.954951][T22740] bridge0: port 1(bridge_slave_0) entered blocking state [ 1617.955154][T22740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1617.955396][T22740] bridge_slave_0: entered allmulticast mode [ 1617.994565][T22740] bridge_slave_0: entered promiscuous mode [ 1618.481231][T11947] Bluetooth: hci1: command tx timeout [ 1618.597985][ T8682] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 1618.757988][ T8682] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1618.758020][ T8682] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.758039][ T8682] usb 5-1: Product: syz [ 1618.758053][ T8682] usb 5-1: Manufacturer: syz [ 1618.758065][ T8682] usb 5-1: SerialNumber: syz [ 1618.831985][T22806] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5025'. [ 1618.967443][ T8448] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.092167][T22740] bridge0: port 2(bridge_slave_1) entered blocking state [ 1619.092239][T22740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1619.092477][T22740] bridge_slave_1: entered allmulticast mode [ 1619.094606][T22740] bridge_slave_1: entered promiscuous mode [ 1619.259653][ T8682] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 44 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1619.860832][ T8448] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.971285][T22740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1619.977433][T22740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1620.124026][T22740] team0: Port device team_slave_0 added [ 1620.544009][ T8448] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1620.569335][T11947] Bluetooth: hci1: command tx timeout [ 1620.708360][T22831] binder: 22827:22831 ioctl c0306201 200000000040 returned -11 [ 1620.892179][T22740] team0: Port device team_slave_1 added [ 1621.003077][T22835] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5035'. [ 1621.321265][ T8682] usb 5-1: USB disconnect, device number 44 [ 1621.378804][ T8682] usblp0: removed [ 1621.664371][T22839] netlink: 'syz.0.5029': attribute type 21 has an invalid length. [ 1621.664396][T22839] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5029'. [ 1621.901887][T22740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1621.901899][T22740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1621.901912][T22740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1621.905038][T22740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1621.905047][T22740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1621.905061][T22740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1622.025222][T22841] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5037'. [ 1622.174485][T22740] hsr_slave_0: entered promiscuous mode [ 1622.178326][T22740] hsr_slave_1: entered promiscuous mode [ 1622.190014][T22740] debugfs: 'hsr0' already exists in 'hsr' [ 1622.190031][T22740] Cannot create hsr debugfs directory [ 1622.649029][T11947] Bluetooth: hci1: command tx timeout [ 1623.721851][T22866] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5047'. [ 1623.747676][ T6007] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 1623.912871][ T6007] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1623.912890][ T6007] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.912900][ T6007] usb 4-1: Product: syz [ 1623.912907][ T6007] usb 4-1: Manufacturer: syz [ 1623.912915][ T6007] usb 4-1: SerialNumber: syz [ 1623.988116][ T8448] bridge_slave_1: left allmulticast mode [ 1623.988145][ T8448] bridge_slave_1: left promiscuous mode [ 1623.988614][ T8448] bridge0: port 2(bridge_slave_1) entered disabled state [ 1624.140206][ T8448] bridge_slave_0: left allmulticast mode [ 1624.140233][ T8448] bridge_slave_0: left promiscuous mode [ 1624.140622][ T8448] bridge0: port 1(bridge_slave_0) entered disabled state [ 1624.148196][T22877] binder: 22872:22877 ioctl c0306201 200000000040 returned -11 [ 1624.398046][ T6007] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1625.048640][ T8448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1625.128325][ T8448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1625.152392][ T8448] bond0 (unregistering): Released all slaves [ 1625.298165][T22884] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5049'. [ 1625.306016][ T5482] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1626.540720][ T31] usb 4-1: USB disconnect, device number 24 [ 1626.608887][ T31] usblp0: removed [ 1626.764920][ T37] audit: type=1800 audit(1776662299.472:33): pid=22901 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.5054" name="file1" dev="tmpfs" ino=2377 res=0 errno=0 [ 1627.746363][T22933] binder: 22928:22933 ioctl c0306201 200000000040 returned -11 [ 1627.785611][T22901] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1627.883376][T22925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1627.894073][T22925] batadv_slave_0: entered promiscuous mode [ 1628.907022][ T8448] hsr_slave_0: left promiscuous mode [ 1628.937859][ T8448] hsr_slave_1: left promiscuous mode [ 1628.938914][ T8448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1628.938938][ T8448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1629.003994][ T8448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1629.004013][ T8448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1629.160191][ T8448] veth1_macvtap: left promiscuous mode [ 1629.161797][ T8448] veth0_macvtap: left promiscuous mode [ 1629.162040][ T8448] veth1_vlan: left promiscuous mode [ 1629.162208][ T8448] veth0_vlan: left promiscuous mode [ 1629.566200][ T37] audit: type=1326 audit(1776662302.372:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22959 comm="syz.3.5068" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd693b9c819 code=0x0 [ 1630.467678][T17849] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 1630.622034][T17849] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1630.622061][T17849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1630.622071][T17849] usb 1-1: Product: syz [ 1630.622079][T17849] usb 1-1: Manufacturer: syz [ 1630.622086][T17849] usb 1-1: SerialNumber: syz [ 1630.662712][ T8448] team0 (unregistering): Port device team_slave_1 removed [ 1630.748664][ T8448] team0 (unregistering): Port device team_slave_0 removed [ 1631.087780][T17849] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1632.505961][T22993] binder: 22989:22993 ioctl c0306201 200000000040 returned -11 [ 1632.635870][T22994] syz_tun: entered allmulticast mode [ 1633.107393][T22994] syz_tun: left allmulticast mode [ 1633.350135][ T5894] usb 1-1: USB disconnect, device number 19 [ 1633.406043][ T5894] usblp0: removed [ 1633.775417][T22740] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1633.805475][T22740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1633.812031][T22740] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1634.013459][T22740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1634.021676][T22740] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1634.086494][T22740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1634.090011][T22740] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1634.149944][T22740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1634.954259][T22740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1635.164014][T22740] 8021q: adding VLAN 0 to HW filter on device team0 [ 1635.235130][ T3516] bridge0: port 1(bridge_slave_0) entered blocking state [ 1635.235261][ T3516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1635.310055][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1635.310130][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1635.389589][T23049] could not allocate digest TFM handle _!5Á’›ã(ìÛiÀ£ïÕHP,ƒomñ«xúÄ™í©*Ô71U"~Âß ‘2.Ë>£~e’…ñŠ>/yµ™ [ 1636.524101][T23064] binder: 23059:23064 ioctl c0306201 200000000040 returned -11 [ 1636.956877][T22740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1637.181359][T22740] veth0_vlan: entered promiscuous mode [ 1637.269418][T22740] veth1_vlan: entered promiscuous mode [ 1637.396535][T22740] veth0_macvtap: entered promiscuous mode [ 1637.456999][T22740] veth1_macvtap: entered promiscuous mode [ 1637.625077][T22740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1637.675046][T22740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1637.731404][T12384] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1637.731642][T12384] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1637.731678][T12384] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1637.731711][T12384] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.012974][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1639.012990][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1639.243334][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1639.243351][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1640.686877][T23129] netlink: 'syz.4.5104': attribute type 1 has an invalid length. [ 1640.901740][T23129] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1641.073978][T23133] bond1: (slave geneve2): making interface the new active one [ 1641.133337][T23133] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1641.935642][T23153] binder: 23152:23153 ioctl c0306201 200000000040 returned -11 [ 1642.622358][ T31] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 1642.769710][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1642.769729][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1642.795828][ T31] usb 5-1: config 0 descriptor?? [ 1642.818306][ T31] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1643.744025][ T1176] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1644.513329][ T31] gspca_stv06xx: I2C: Read error writing address: -71 [ 1644.544583][ T31] usb 5-1: USB disconnect, device number 45 [ 1644.589328][ T8691] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1644.660125][ T8691] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1644.665007][ T8691] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1644.708164][ T8691] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1644.718606][ T8691] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1645.524846][ T1176] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1646.165000][ T1176] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1646.280799][T23213] binder: 23211:23213 ioctl c0306201 200000000040 returned -11 [ 1647.037743][ T8691] Bluetooth: hci3: command tx timeout [ 1647.474756][ T1176] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.117750][ T8691] Bluetooth: hci3: command tx timeout [ 1651.096161][T23193] chnl_net:caif_netlink_parms(): no params data found [ 1651.207736][ T8691] Bluetooth: hci3: command tx timeout [ 1652.347901][ T1176] bridge_slave_1: left allmulticast mode [ 1652.347931][ T1176] bridge_slave_1: left promiscuous mode [ 1652.348208][ T1176] bridge0: port 2(bridge_slave_1) entered disabled state [ 1652.450399][ T1176] bridge_slave_0: left allmulticast mode [ 1652.450441][ T1176] bridge_slave_0: left promiscuous mode [ 1652.450671][ T1176] bridge0: port 1(bridge_slave_0) entered disabled state [ 1653.278081][ T8691] Bluetooth: hci3: command tx timeout [ 1655.039073][ T1176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1655.143438][ T1176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1655.212988][ T1176] bond0 (unregistering): Released all slaves [ 1656.038409][T23193] bridge0: port 1(bridge_slave_0) entered blocking state [ 1656.038534][T23193] bridge0: port 1(bridge_slave_0) entered disabled state [ 1656.038777][T23193] bridge_slave_0: entered allmulticast mode [ 1656.044826][T23193] bridge_slave_0: entered promiscuous mode [ 1656.410999][T23193] bridge0: port 2(bridge_slave_1) entered blocking state [ 1656.411070][T23193] bridge0: port 2(bridge_slave_1) entered disabled state [ 1656.411233][T23193] bridge_slave_1: entered allmulticast mode [ 1656.412770][T23193] bridge_slave_1: entered promiscuous mode [ 1656.600980][T23193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1656.606412][T23193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1656.718698][T23193] team0: Port device team_slave_0 added [ 1656.729258][T23193] team0: Port device team_slave_1 added [ 1656.849348][T23193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1656.849359][T23193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1656.849373][T23193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1656.854854][T23193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1656.854865][T23193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1656.854878][T23193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1657.015679][T23193] hsr_slave_0: entered promiscuous mode [ 1657.031167][T23193] hsr_slave_1: entered promiscuous mode [ 1657.042607][T23193] debugfs: 'hsr0' already exists in 'hsr' [ 1657.042634][T23193] Cannot create hsr debugfs directory [ 1658.771865][T23380] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5169'. [ 1660.304536][ T5482] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1660.332705][T23387] syzkaller0: entered promiscuous mode [ 1660.332729][T23387] syzkaller0: entered allmulticast mode [ 1660.954977][ T1176] hsr_slave_0: left promiscuous mode [ 1661.013075][ T1176] hsr_slave_1: left promiscuous mode [ 1661.016834][ T1176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1661.058754][ T1176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1661.058781][ T1176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1661.240905][ T1176] veth1_macvtap: left promiscuous mode [ 1661.241001][ T1176] veth0_macvtap: left promiscuous mode [ 1661.241222][ T1176] veth1_vlan: left promiscuous mode [ 1661.241350][ T1176] veth0_vlan: left promiscuous mode [ 1662.869409][ T1176] team0 (unregistering): Port device team_slave_1 removed [ 1662.934267][ T1176] team0 (unregistering): Port device team_slave_0 removed [ 1663.336141][T23429] syz_tun: entered allmulticast mode [ 1663.354379][T23429] syz_tun: left allmulticast mode [ 1663.539606][T23437] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5183'. [ 1665.511660][T23473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1665.511850][T23473] batadv_slave_0: entered promiscuous mode [ 1665.576457][T23480] syzkaller0: entered promiscuous mode [ 1665.576482][T23480] syzkaller0: entered allmulticast mode [ 1665.589963][ T5482] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1666.691958][ T1176] IPVS: stop unused estimator thread 0... [ 1666.811162][T23504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5196'. [ 1668.910554][T23539] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5203'. [ 1668.910578][T23539] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5203'. [ 1669.189891][ T5482] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1669.579471][T23555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5210'. [ 1671.063761][ T5482] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1673.040218][T23193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1673.250651][T23193] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1673.253513][T23193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1673.350285][T23193] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1673.356001][T23193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1673.423285][T23193] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1673.424710][T23193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1673.505467][T23193] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1673.785645][T23193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1673.894383][T23193] 8021q: adding VLAN 0 to HW filter on device team0 [ 1673.980613][ T3522] bridge0: port 1(bridge_slave_0) entered blocking state [ 1673.980736][ T3522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1673.994016][ T3522] bridge0: port 2(bridge_slave_1) entered blocking state [ 1673.997171][ T3522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1674.898576][T23193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1675.130097][T23193] veth0_vlan: entered promiscuous mode [ 1675.155781][T23193] veth1_vlan: entered promiscuous mode [ 1675.312895][T23193] veth0_macvtap: entered promiscuous mode [ 1675.458267][T23193] veth1_macvtap: entered promiscuous mode [ 1675.619256][T23193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1675.715763][T23193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1675.870316][ T3522] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1675.874836][ T3522] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1675.877588][ T3522] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1675.878023][ T3522] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1675.967677][ T6057] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1676.117624][ T6057] usb 1-1: Using ep0 maxpacket: 32 [ 1676.122801][ T6057] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1676.122827][ T6057] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1676.122846][ T6057] usb 1-1: Product: syz [ 1676.122859][ T6057] usb 1-1: Manufacturer: syz [ 1676.122871][ T6057] usb 1-1: SerialNumber: syz [ 1676.179574][ T6057] usb 1-1: config 0 descriptor?? [ 1676.194376][ T6057] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1676.445664][T23718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5241'. [ 1676.699900][ T6057] gspca_ov534_9: reg_w failed -110 [ 1676.846228][T23721] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5244'. [ 1676.870122][T23721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5244'. [ 1677.097854][ T6057] gspca_ov534_9: Unknown sensor 0000 [ 1677.097941][ T6057] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 1677.187724][ T31] usb 1-1: USB disconnect, device number 20 [ 1678.032974][T23721] team0: Port device team_slave_1 removed [ 1679.045457][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1679.045524][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1679.066368][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1679.066387][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1679.527745][ T3593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1679.527767][ T3593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1680.637279][T23757] program syz.8.5254 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1681.437391][T23773] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5258'. [ 1681.772288][T10731] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1681.919306][T10731] usb 2-1: Using ep0 maxpacket: 8 [ 1681.922092][T10731] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1681.922117][T10731] usb 2-1: config 0 has no interface number 0 [ 1681.922158][T10731] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1681.922180][T10731] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1681.922203][T10731] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1681.922228][T10731] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1681.922278][T10731] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1681.922301][T10731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1682.024144][T10731] usb 2-1: config 0 descriptor?? [ 1682.058421][T10731] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1683.674044][T23816] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5271'. [ 1683.726366][T23816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5271'. [ 1684.543041][T10731] usb 2-1: USB disconnect, device number 3 [ 1684.586596][T10731] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1684.689808][T23829] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5273'. [ 1685.284586][T23816] team0: Port device team_slave_1 removed [ 1685.299854][ T37] audit: type=1326 audit(1776662358.132:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23844 comm="syz.4.5275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ac8ec819 code=0x7ffc0000 [ 1685.299908][ T37] audit: type=1326 audit(1776662358.132:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23844 comm="syz.4.5275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ac8ec819 code=0x7ffc0000 [ 1685.302788][ T37] audit: type=1326 audit(1776662358.132:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23844 comm="syz.4.5275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ac8ec819 code=0x7ffc0000 [ 1685.302838][ T37] audit: type=1326 audit(1776662358.132:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23844 comm="syz.4.5275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ac8ec819 code=0x7ffc0000 [ 1685.347212][ T37] audit: type=1326 audit(1776662358.172:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23844 comm="syz.4.5275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f70ac8ec819 code=0x7ffc0000 [ 1685.347275][ T37] audit: type=1326 audit(1776662358.172:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23844 comm="syz.4.5275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ac8ec819 code=0x7ffc0000 [ 1685.421435][ T37] audit: type=1326 audit(1776662358.252:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23844 comm="syz.4.5275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ac8ec819 code=0x7ffc0000 [ 1685.421485][ T37] audit: type=1326 audit(1776662358.252:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23844 comm="syz.4.5275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f70ac8ec582 code=0x7ffc0000 [ 1685.421526][ T37] audit: type=1326 audit(1776662358.252:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23844 comm="syz.4.5275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f70ac8ec617 code=0x7ffc0000 [ 1685.421564][ T37] audit: type=1326 audit(1776662358.252:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23844 comm="syz.4.5275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f70ac8a9511 code=0x7ffc0000 [ 1685.957579][ T6007] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1686.161207][ T6007] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1686.161241][ T6007] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1686.161278][ T6007] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1686.161301][ T6007] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.224115][ T6007] usb 5-1: config 0 descriptor?? [ 1686.717454][ T6007] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 1686.718732][ T6007] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 1686.791090][ T6007] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0004/input/input24 [ 1686.907618][ T6007] cm6533_jd 0003:0D8C:0022.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 1687.026419][T23845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1687.026973][T23845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1687.221645][T23881] binder: 23874:23881 ioctl c0306201 200000000040 returned -11 [ 1688.427173][T10731] usb 5-1: reset high-speed USB device number 46 using dummy_hcd [ 1688.997750][T13036] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1689.175659][T13036] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1689.175688][T13036] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1689.175707][T13036] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1689.175755][T13036] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1689.175780][T13036] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1689.240891][T13036] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1689.240932][T13036] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1689.240951][T13036] usb 2-1: Product: syz [ 1689.240965][T13036] usb 2-1: Manufacturer: syz [ 1689.379082][T13036] cdc_wdm 2-1:1.0: skipping garbage [ 1689.379102][T13036] cdc_wdm 2-1:1.0: skipping garbage [ 1689.384894][T13036] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 1689.384915][T13036] cdc_wdm 2-1:1.0: Unknown control protocol [ 1689.988079][ T31] usb 2-1: USB disconnect, device number 4 [ 1690.160698][ T6007] usb 5-1: USB disconnect, device number 46 [ 1690.561746][T23898] batman_adv: batadv0: Adding interface: dummy0 [ 1690.561758][T23898] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1690.561775][T23898] batman_adv: batadv0: Interface activated: dummy0 [ 1691.773445][T23920] batadv0: mtu less than device minimum [ 1692.023333][T23920] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1692.044401][T23920] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1692.076695][T23920] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1692.101551][T23920] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1692.156925][T23920] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1692.182261][T23920] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1692.208761][T23920] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1692.233133][T23920] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1692.294965][T23920] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1693.209633][T23970] syzkaller0: entered promiscuous mode [ 1693.209663][T23970] syzkaller0: entered allmulticast mode [ 1700.974545][T24142] netlink: 64 bytes leftover after parsing attributes in process `syz.8.5371'. [ 1706.811554][ T8691] Bluetooth: hci0: command 0x0406 tx timeout [ 1707.684263][ T8691] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1707.704247][ T8691] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1707.716373][ T8691] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1707.816021][ T8691] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1707.824802][ T8691] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1710.103759][ T8691] Bluetooth: hci4: command tx timeout [ 1711.194868][T11947] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1711.239947][T11947] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1711.313764][T11947] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1711.334480][T11947] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1711.335153][T11947] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1712.157693][T11947] Bluetooth: hci4: command tx timeout [ 1712.812017][ T8691] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1712.916120][ T8691] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1712.927093][ T8691] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1712.955786][ T8691] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1712.956622][ T8691] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1713.677812][T11947] Bluetooth: hci6: command tx timeout [ 1714.259631][T11947] Bluetooth: hci4: command tx timeout [ 1715.144500][T11947] Bluetooth: hci7: command tx timeout [ 1715.758100][T11947] Bluetooth: hci6: command tx timeout [ 1716.324878][T11947] Bluetooth: hci4: command tx timeout [ 1717.204093][T11947] Bluetooth: hci7: command tx timeout [ 1717.837813][T11947] Bluetooth: hci6: command tx timeout [ 1719.286416][T17038] Bluetooth: hci7: command tx timeout [ 1719.392381][ T8691] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1719.425510][ T8691] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1719.429040][ T8691] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1719.435170][ T8691] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1719.485690][ T8691] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1719.960453][ T8691] Bluetooth: hci6: command tx timeout [ 1721.358952][ T8691] Bluetooth: hci7: command tx timeout [ 1721.767012][ T8691] Bluetooth: hci8: command tx timeout [ 1723.893612][ T8691] Bluetooth: hci8: command tx timeout [ 1725.927666][ T8691] Bluetooth: hci8: command tx timeout [ 1725.988812][ T207] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1726.527256][ T207] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1727.143486][ T207] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1727.485115][T24609] chnl_net:caif_netlink_parms(): no params data found [ 1727.819391][ T207] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1727.900114][T24435] chnl_net:caif_netlink_parms(): no params data found [ 1727.997793][ T8691] Bluetooth: hci8: command tx timeout [ 1728.028866][T24313] chnl_net:caif_netlink_parms(): no params data found [ 1728.044855][T24405] chnl_net:caif_netlink_parms(): no params data found [ 1728.670330][T24609] bridge0: port 1(bridge_slave_0) entered blocking state [ 1728.670534][T24609] bridge0: port 1(bridge_slave_0) entered disabled state [ 1728.670776][T24609] bridge_slave_0: entered allmulticast mode [ 1728.710342][T24609] bridge_slave_0: entered promiscuous mode [ 1728.787757][T24609] bridge0: port 2(bridge_slave_1) entered blocking state [ 1728.787879][T24609] bridge0: port 2(bridge_slave_1) entered disabled state [ 1728.788097][T24609] bridge_slave_1: entered allmulticast mode [ 1728.790556][T24609] bridge_slave_1: entered promiscuous mode [ 1728.910438][T24435] bridge0: port 1(bridge_slave_0) entered blocking state [ 1728.910679][T24435] bridge0: port 1(bridge_slave_0) entered disabled state [ 1728.910882][T24435] bridge_slave_0: entered allmulticast mode [ 1728.913525][T24435] bridge_slave_0: entered promiscuous mode [ 1729.029424][T24435] bridge0: port 2(bridge_slave_1) entered blocking state [ 1729.029542][T24435] bridge0: port 2(bridge_slave_1) entered disabled state [ 1729.029777][T24435] bridge_slave_1: entered allmulticast mode [ 1729.032749][T24435] bridge_slave_1: entered promiscuous mode [ 1729.034192][T24313] bridge0: port 1(bridge_slave_0) entered blocking state [ 1729.034305][T24313] bridge0: port 1(bridge_slave_0) entered disabled state [ 1729.034485][T24313] bridge_slave_0: entered allmulticast mode [ 1729.037055][T24313] bridge_slave_0: entered promiscuous mode [ 1729.101707][T24405] bridge0: port 1(bridge_slave_0) entered blocking state [ 1729.101824][T24405] bridge0: port 1(bridge_slave_0) entered disabled state [ 1729.102028][T24405] bridge_slave_0: entered allmulticast mode [ 1729.116843][T24405] bridge_slave_0: entered promiscuous mode [ 1729.141804][T24609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1729.182389][T24313] bridge0: port 2(bridge_slave_1) entered blocking state [ 1729.182533][T24313] bridge0: port 2(bridge_slave_1) entered disabled state [ 1729.182769][T24313] bridge_slave_1: entered allmulticast mode [ 1729.186392][T24313] bridge_slave_1: entered promiscuous mode [ 1729.216872][T24405] bridge0: port 2(bridge_slave_1) entered blocking state [ 1729.216946][T24405] bridge0: port 2(bridge_slave_1) entered disabled state [ 1729.217097][T24405] bridge_slave_1: entered allmulticast mode [ 1729.223243][T24405] bridge_slave_1: entered promiscuous mode [ 1729.302310][T24609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1729.409415][T24435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1729.550101][T24435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1729.557911][T24313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1729.586712][T24405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1729.606821][T24609] team0: Port device team_slave_0 added [ 1729.649591][T24313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1729.652976][T24405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1729.656657][T24609] team0: Port device team_slave_1 added [ 1730.028031][ T207] bridge_slave_1: left allmulticast mode [ 1730.028060][ T207] bridge_slave_1: left promiscuous mode [ 1730.028315][ T207] bridge0: port 2(bridge_slave_1) entered disabled state [ 1730.110776][ T207] bridge_slave_0: left allmulticast mode [ 1730.110806][ T207] bridge_slave_0: left promiscuous mode [ 1730.111072][ T207] bridge0: port 1(bridge_slave_0) entered disabled state [ 1731.148535][ T207] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1731.468499][ T207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1731.551517][ T207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1731.591202][ T207] bond0 (unregistering): Released all slaves [ 1731.609238][ T207] bond1 (unregistering): Released all slaves [ 1732.243138][T24435] team0: Port device team_slave_0 added [ 1732.486939][T24435] team0: Port device team_slave_1 added [ 1732.492299][T24313] team0: Port device team_slave_0 added [ 1732.495537][T24405] team0: Port device team_slave_0 added [ 1732.497322][T24609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1732.497336][T24609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1732.497361][T24609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1732.536241][T24313] team0: Port device team_slave_1 added [ 1732.543844][T24405] team0: Port device team_slave_1 added [ 1732.546318][T24609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1732.546334][T24609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1732.546361][T24609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1732.670074][T24435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1732.670093][T24435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1732.670120][T24435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1732.765870][T24435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1732.765885][T24435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1732.765918][T24435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1732.768070][T24313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1732.768086][T24313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1732.768107][T24313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1732.771686][T24405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1732.771699][T24405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1732.771721][T24405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1732.973649][T24313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1732.973664][T24313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1732.973687][T24313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1732.975036][T24405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1732.975049][T24405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1732.975076][T24405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1733.473584][T24609] hsr_slave_0: entered promiscuous mode [ 1733.474954][T24609] hsr_slave_1: entered promiscuous mode [ 1733.476524][T24609] debugfs: 'hsr0' already exists in 'hsr' [ 1733.476550][T24609] Cannot create hsr debugfs directory [ 1733.687318][T24435] hsr_slave_0: entered promiscuous mode [ 1733.689529][T24435] hsr_slave_1: entered promiscuous mode [ 1733.690461][T24435] debugfs: 'hsr0' already exists in 'hsr' [ 1733.690485][T24435] Cannot create hsr debugfs directory [ 1733.917629][ T207] hsr_slave_0: left promiscuous mode [ 1733.960271][ T207] hsr_slave_1: left promiscuous mode [ 1733.960940][ T207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1733.989447][ T207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1733.989475][ T207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1734.099587][ T207] veth1_macvtap: left promiscuous mode [ 1734.099684][ T207] veth0_macvtap: left promiscuous mode [ 1734.099913][ T207] veth1_vlan: left promiscuous mode [ 1734.100077][ T207] veth0_vlan: left promiscuous mode [ 1735.139221][ T207] team0 (unregistering): Port device team_slave_1 removed [ 1735.199586][ T207] team0 (unregistering): Port device team_slave_0 removed [ 1735.481458][T24313] hsr_slave_0: entered promiscuous mode [ 1735.483446][T24313] hsr_slave_1: entered promiscuous mode [ 1735.484463][T24313] debugfs: 'hsr0' already exists in 'hsr' [ 1735.484487][T24313] Cannot create hsr debugfs directory [ 1735.494501][T24405] hsr_slave_0: entered promiscuous mode [ 1735.495705][T24405] hsr_slave_1: entered promiscuous mode [ 1735.496498][T24405] debugfs: 'hsr0' already exists in 'hsr' [ 1735.496528][T24405] Cannot create hsr debugfs directory [ 1737.439880][T11947] Bluetooth: hci1: command 0x0406 tx timeout [ 1737.493610][ T207] IPVS: stop unused estimator thread 0... [ 1738.511650][ T5482] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1739.064892][ T207] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1739.858667][ T207] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1740.445484][ T207] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1740.487188][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1740.487259][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1741.253187][ T5482] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1741.537391][ T207] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1742.931712][ T5482] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1743.803721][ T207] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1744.071974][ T5482] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1744.463818][ T207] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1745.165878][ T207] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1746.316506][ T207] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1747.856071][ T207] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1748.195910][ T207] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1748.638195][ T207] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1749.486272][ T207] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.228788][ T207] bridge_slave_1: left allmulticast mode [ 1751.228820][ T207] bridge_slave_1: left promiscuous mode [ 1751.229073][ T207] bridge0: port 2(bridge_slave_1) entered disabled state [ 1751.318937][ T207] bridge_slave_0: left allmulticast mode [ 1751.318959][ T207] bridge_slave_0: left promiscuous mode [ 1751.319125][ T207] bridge0: port 1(bridge_slave_0) entered disabled state [ 1751.658009][ T207] bridge_slave_1: left allmulticast mode [ 1751.658040][ T207] bridge_slave_1: left promiscuous mode [ 1751.658286][ T207] bridge0: port 2(bridge_slave_1) entered disabled state [ 1751.718513][ T207] bridge_slave_0: left allmulticast mode [ 1751.718534][ T207] bridge_slave_0: left promiscuous mode [ 1751.718689][ T207] bridge0: port 1(bridge_slave_0) entered disabled state [ 1752.027898][ T207] bridge_slave_1: left allmulticast mode [ 1752.027919][ T207] bridge_slave_1: left promiscuous mode [ 1752.028087][ T207] bridge0: port 2(bridge_slave_1) entered disabled state [ 1752.088580][ T207] bridge_slave_0: left allmulticast mode [ 1752.088601][ T207] bridge_slave_0: left promiscuous mode [ 1752.088752][ T207] bridge0: port 1(bridge_slave_0) entered disabled state [ 1753.238242][ T207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1753.318601][ T207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1753.361172][ T207] bond0 (unregistering): Released all slaves [ 1753.828287][ T207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1753.908310][ T207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1753.950827][ T207] bond0 (unregistering): Released all slaves [ 1754.298158][ T207] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1754.518372][ T207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1754.598263][ T207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1754.620055][ T207] bond0 (unregistering): Released all slaves [ 1754.708294][ T207] bond1 (unregistering): Released all slaves [ 1755.399426][T24609] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1755.462780][T24609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1755.464112][T24609] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1755.552994][T24609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1755.565707][T24609] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1755.639804][T24609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1756.071573][T24609] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1756.090927][T24609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1757.031417][T24435] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1757.070198][T24435] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1757.340500][T24435] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1757.362912][T24435] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1757.408608][T24435] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1757.460542][T24435] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1757.464057][T24435] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1757.510279][T24435] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1758.201800][T24313] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1758.230561][T24313] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1758.256513][T24313] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1758.280138][T24313] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1758.283901][T24609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1758.309421][T24313] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1758.341243][T24313] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1758.374472][T24313] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1758.416004][T24313] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1758.567712][ T207] hsr_slave_0: left promiscuous mode [ 1758.587662][ T207] hsr_slave_1: left promiscuous mode [ 1758.588413][ T207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1758.641024][ T207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1758.641047][ T207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1758.807677][ T207] hsr_slave_0: left promiscuous mode [ 1758.827704][ T207] hsr_slave_1: left promiscuous mode [ 1758.828474][ T207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1758.828490][ T207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1758.901810][ T207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1758.901838][ T207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1759.079120][ T207] hsr_slave_0: left promiscuous mode [ 1759.097625][ T207] hsr_slave_1: left promiscuous mode [ 1759.098327][ T207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1759.138404][ T207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1759.138433][ T207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1759.254447][ T207] veth1_macvtap: left promiscuous mode [ 1759.254512][ T207] veth0_macvtap: left promiscuous mode [ 1759.254647][ T207] veth1_vlan: left promiscuous mode [ 1759.254759][ T207] veth0_vlan: left promiscuous mode [ 1759.387829][ T207] veth1_macvtap: left promiscuous mode [ 1759.387893][ T207] veth0_macvtap: left promiscuous mode [ 1759.388039][ T207] veth1_vlan: left promiscuous mode [ 1759.388136][ T207] veth0_vlan: left promiscuous mode [ 1759.529413][ T207] veth1_macvtap: left promiscuous mode [ 1759.529477][ T207] veth0_macvtap: left promiscuous mode [ 1759.529615][ T207] veth1_vlan: left promiscuous mode [ 1759.529710][ T207] veth0_vlan: left promiscuous mode [ 1760.428146][ T207] team0 (unregistering): Port device team_slave_0 removed [ 1761.028472][ T207] team0 (unregistering): Port device team_slave_1 removed [ 1761.068087][ T207] team0 (unregistering): Port device team_slave_0 removed [ 1761.649126][ T207] team0 (unregistering): Port device team_slave_0 removed [ 1761.990233][T24609] 8021q: adding VLAN 0 to HW filter on device team0 [ 1762.059487][ T8448] bridge0: port 1(bridge_slave_0) entered blocking state [ 1762.059678][ T8448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1762.094604][T24405] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1762.120459][T24405] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1762.124974][T24405] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1762.221603][T24405] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1762.275058][T24405] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1762.336358][T24405] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1762.339729][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1762.339918][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1762.344465][T24405] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1762.380224][T24405] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1762.491619][T24435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1762.650099][T24435] 8021q: adding VLAN 0 to HW filter on device team0 [ 1762.766955][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 1762.767079][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1762.825816][ T8448] bridge0: port 2(bridge_slave_1) entered blocking state [ 1762.826031][ T8448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1762.894657][T24313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1763.085540][T24313] 8021q: adding VLAN 0 to HW filter on device team0 [ 1763.102802][ T8431] bridge0: port 1(bridge_slave_0) entered blocking state [ 1763.103501][ T8431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1763.212635][ T8431] bridge0: port 2(bridge_slave_1) entered blocking state [ 1763.212868][ T8431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1763.255209][T24405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1763.339263][T24609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1763.363604][T24405] 8021q: adding VLAN 0 to HW filter on device team0 [ 1763.400720][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1763.402058][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1763.460579][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1763.461188][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1763.790577][T24435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1764.429789][T24313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1764.614892][T24405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1764.735644][T24609] veth0_vlan: entered promiscuous mode [ 1764.813929][T24609] veth1_vlan: entered promiscuous mode [ 1764.956147][T24435] veth0_vlan: entered promiscuous mode [ 1764.985682][T24435] veth1_vlan: entered promiscuous mode [ 1765.145012][T24609] veth0_macvtap: entered promiscuous mode [ 1765.164751][T24609] veth1_macvtap: entered promiscuous mode [ 1765.349594][T24435] veth0_macvtap: entered promiscuous mode [ 1765.354421][T24609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1765.389608][T24435] veth1_macvtap: entered promiscuous mode [ 1765.434792][T24609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1765.486573][ T8432] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1765.499842][ T8432] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1765.506683][ T8432] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1765.530864][ T8432] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1765.609688][T24435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1765.749590][T24435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1766.055071][T24313] veth0_vlan: entered promiscuous mode [ 1766.072805][ T1176] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1766.224405][ T1176] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1766.363506][ T1176] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1766.392244][ T1176] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1766.619498][T24313] veth1_vlan: entered promiscuous mode [ 1766.662062][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1766.662085][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1766.759616][T24405] veth0_vlan: entered promiscuous mode [ 1767.061808][T24405] veth1_vlan: entered promiscuous mode [ 1767.166032][ T8448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1767.166053][ T8448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1767.358782][ T8432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1767.358816][ T8432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1767.364555][T24313] veth0_macvtap: entered promiscuous mode [ 1767.429297][T24313] veth1_macvtap: entered promiscuous mode [ 1767.626510][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1767.626532][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1767.627298][T24405] veth0_macvtap: entered promiscuous mode [ 1767.669377][T24405] veth1_macvtap: entered promiscuous mode [ 1767.868384][T24405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1767.989458][T24405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1768.255043][T11947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1768.311504][T11947] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1768.312968][T11947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1768.371542][T11947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1768.394568][T11947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1768.712351][ T8432] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1768.746505][ T8432] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1768.749402][ T8432] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1768.754656][ T8432] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1770.637618][T11947] Bluetooth: hci0: command tx timeout [ 1771.484914][ T8691] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1771.570207][ T8691] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1771.587776][ T8691] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1771.588744][ T8691] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1771.591242][ T8691] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1772.543993][ T31] IPVS: starting estimator thread 0... [ 1772.647712][T25977] IPVS: using max 11 ests per chain, 26400 per kthread [ 1772.717775][T11947] Bluetooth: hci0: command tx timeout [ 1773.758205][T11947] Bluetooth: hci2: command tx timeout [ 1774.797800][T11947] Bluetooth: hci0: command tx timeout [ 1775.103206][T26047] binder: BINDER_SET_CONTEXT_MGR already set [ 1775.103223][T26047] binder: 26044:26047 ioctl 4018620d 200000004a80 returned -16 [ 1775.435081][T25878] chnl_net:caif_netlink_parms(): no params data found [ 1775.837826][T11947] Bluetooth: hci2: command tx timeout [ 1776.026841][T26078] syz_tun: entered allmulticast mode [ 1776.109498][T25878] bridge0: port 1(bridge_slave_0) entered blocking state [ 1776.109652][T25878] bridge0: port 1(bridge_slave_0) entered disabled state [ 1776.109870][T25878] bridge_slave_0: entered allmulticast mode [ 1776.145650][T25878] bridge_slave_0: entered promiscuous mode [ 1776.163108][T26078] syz_tun: left allmulticast mode [ 1776.214858][T25878] bridge0: port 2(bridge_slave_1) entered blocking state [ 1776.215001][T25878] bridge0: port 2(bridge_slave_1) entered disabled state [ 1776.215228][T25878] bridge_slave_1: entered allmulticast mode [ 1776.243932][T25878] bridge_slave_1: entered promiscuous mode [ 1776.877752][T11947] Bluetooth: hci0: command tx timeout [ 1776.928880][T26089] syz_tun: entered allmulticast mode [ 1776.981146][T25878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1776.987222][T26089] syz_tun: left allmulticast mode [ 1777.081228][T25878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1777.555003][T25878] team0: Port device team_slave_0 added [ 1777.564366][T25960] chnl_net:caif_netlink_parms(): no params data found [ 1777.613529][T25878] team0: Port device team_slave_1 added [ 1777.917751][T11947] Bluetooth: hci2: command tx timeout [ 1778.110562][T25878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1778.110579][T25878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1778.112082][T25878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1778.239111][ T8448] bridge_slave_1: left allmulticast mode [ 1778.239138][ T8448] bridge_slave_1: left promiscuous mode [ 1778.239470][ T8448] bridge0: port 2(bridge_slave_1) entered disabled state [ 1778.360698][ T8448] bridge_slave_0: left allmulticast mode [ 1778.360730][ T8448] bridge_slave_0: left promiscuous mode [ 1778.362135][ T8448] bridge0: port 1(bridge_slave_0) entered disabled state [ 1779.719486][ T8448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1779.792106][ T8448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1779.840930][ T8448] bond0 (unregistering): Released all slaves [ 1779.880004][T25878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1779.880020][T25878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1779.880046][T25878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1779.997686][T11947] Bluetooth: hci2: command tx timeout [ 1780.181270][T25960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1780.181395][T25960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1780.181628][T25960] bridge_slave_0: entered allmulticast mode [ 1780.186302][T25960] bridge_slave_0: entered promiscuous mode [ 1780.308432][T25960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1780.308556][T25960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1780.308859][T25960] bridge_slave_1: entered allmulticast mode [ 1780.315415][T25960] bridge_slave_1: entered promiscuous mode [ 1780.337689][T25878] hsr_slave_0: entered promiscuous mode [ 1780.358975][T25878] hsr_slave_1: entered promiscuous mode [ 1780.517817][ T8448] hsr_slave_0: left promiscuous mode [ 1780.559230][ T8448] hsr_slave_1: left promiscuous mode [ 1780.561481][ T8448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1780.609694][ T8448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1780.785389][ T8448] veth1_macvtap: left promiscuous mode [ 1780.785458][ T8448] veth0_macvtap: left promiscuous mode [ 1780.785627][ T8448] veth1_vlan: left promiscuous mode [ 1780.785757][ T8448] veth0_vlan: left promiscuous mode [ 1781.749455][ T8448] team0 (unregistering): Port device team_slave_1 removed [ 1781.818651][ T8448] team0 (unregistering): Port device team_slave_0 removed [ 1782.387660][T25960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1782.524028][T25960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1782.829548][T26305] syz_tun: entered allmulticast mode [ 1782.848037][T25960] team0: Port device team_slave_0 added [ 1782.866471][T26305] syz_tun: left allmulticast mode [ 1782.965738][T25960] team0: Port device team_slave_1 added [ 1783.126251][T25960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1783.126269][T25960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1783.126290][T25960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1783.449552][T25960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1783.449571][T25960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1783.449599][T25960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1784.123449][T25960] hsr_slave_0: entered promiscuous mode [ 1784.126263][T25960] hsr_slave_1: entered promiscuous mode [ 1784.132689][T25960] debugfs: 'hsr0' already exists in 'hsr' [ 1784.132722][T25960] Cannot create hsr debugfs directory [ 1784.744711][T26372] syz_tun: entered allmulticast mode [ 1784.895733][T26370] syz_tun: left allmulticast mode [ 1785.002834][T26379] syz_tun: entered allmulticast mode [ 1785.777586][ T8448] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1785.893500][T26382] syz_tun: left allmulticast mode [ 1786.790748][ T8448] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.958576][T26444] syz_tun: entered allmulticast mode [ 1787.001128][T26444] syz_tun: left allmulticast mode [ 1787.811050][ T8448] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1788.067608][ T31] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1788.220232][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 1788.225109][ T31] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1788.225136][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1788.225154][ T31] usb 7-1: Product: syz [ 1788.225167][ T31] usb 7-1: Manufacturer: syz [ 1788.225181][ T31] usb 7-1: SerialNumber: syz [ 1788.245773][ T31] usb 7-1: config 0 descriptor?? [ 1788.342873][ T31] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1788.491290][T26493] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6231'. [ 1788.544355][ T31] gspca_ov534_9: reg_w failed -71 [ 1788.742004][ T8448] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1788.947626][ T31] gspca_ov534_9: Unknown sensor 0000 [ 1788.947721][ T31] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22 [ 1788.978605][ T31] usb 7-1: USB disconnect, device number 2 [ 1790.852179][ T8448] bridge_slave_1: left allmulticast mode [ 1790.852208][ T8448] bridge_slave_1: left promiscuous mode [ 1790.852462][ T8448] bridge0: port 2(bridge_slave_1) entered disabled state [ 1790.854493][T26596] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6260'. [ 1790.856385][T26596] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6260'. [ 1790.939906][ T8448] bridge_slave_0: left allmulticast mode [ 1790.939925][ T8448] bridge_slave_0: left promiscuous mode [ 1790.940100][ T8448] bridge0: port 1(bridge_slave_0) entered disabled state [ 1792.693383][ T8448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1792.739902][ T8448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1792.786728][ T8448] bond0 (unregistering): Released all slaves [ 1793.769645][ T8448] hsr_slave_0: left promiscuous mode [ 1793.811938][ T8448] hsr_slave_1: left promiscuous mode [ 1793.815324][ T8448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1793.815343][ T8448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1793.853243][ T8448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1793.853264][ T8448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1793.948880][ T8448] veth1_macvtap: left promiscuous mode [ 1793.948945][ T8448] veth0_macvtap: left promiscuous mode [ 1793.949820][ T8448] veth1_vlan: left promiscuous mode [ 1793.949922][ T8448] veth0_vlan: left promiscuous mode [ 1795.700515][ T8448] team0 (unregistering): Port device team_slave_1 removed [ 1795.765311][ T8448] team0 (unregistering): Port device team_slave_0 removed [ 1796.278287][T26690] pim6reg1: entered promiscuous mode [ 1796.278313][T26690] pim6reg1: entered allmulticast mode [ 1796.882318][T26747] misc userio: Invalid payload size [ 1796.882505][T26747] misc userio: The device must be registered before sending interrupts [ 1797.165534][T26757] fuse: Bad value for 'fd' [ 1797.271170][T26750] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6331'. [ 1801.270290][T25878] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1801.313829][T25878] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1801.325173][T25878] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1801.407317][T25878] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1801.429263][T25878] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1801.556639][T25878] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1801.563283][T25878] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1801.693142][T25878] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1801.927587][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1801.927687][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1803.074492][T25960] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1803.115724][T25960] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1803.143529][T25960] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1803.248974][T25960] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1803.251871][T25960] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1803.290894][T25960] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1803.325220][T25960] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1803.427705][T25960] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1803.716603][T25878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1803.893789][T25878] 8021q: adding VLAN 0 to HW filter on device team0 [ 1803.946391][T23103] bridge0: port 1(bridge_slave_0) entered blocking state [ 1803.946526][T23103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1804.085901][ T8448] bridge0: port 2(bridge_slave_1) entered blocking state [ 1804.086137][ T8448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1804.314374][T25960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1804.532324][T25960] 8021q: adding VLAN 0 to HW filter on device team0 [ 1804.593507][ T8431] bridge0: port 1(bridge_slave_0) entered blocking state [ 1804.594577][ T8431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1804.631743][ T8431] bridge0: port 2(bridge_slave_1) entered blocking state [ 1804.633563][ T8431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1805.113345][T25878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1805.592193][T12967] IPVS: starting estimator thread 0... [ 1805.687642][T27046] IPVS: using max 9 ests per chain, 21600 per kthread [ 1805.905249][T25960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1806.218445][T25878] veth0_vlan: entered promiscuous mode [ 1806.275016][T25878] veth1_vlan: entered promiscuous mode [ 1806.467044][T25878] veth0_macvtap: entered promiscuous mode [ 1806.481715][T25878] veth1_macvtap: entered promiscuous mode [ 1806.618620][T25878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1806.732587][T25878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1806.766113][ T8432] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.766509][ T8432] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.766788][ T8432] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.767081][ T8432] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1807.766190][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1807.766211][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1807.931418][T25960] veth0_vlan: entered promiscuous mode [ 1808.116702][T25960] veth1_vlan: entered promiscuous mode [ 1808.167294][ T1176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1808.167315][ T1176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1808.368292][T25960] veth0_macvtap: entered promiscuous mode [ 1808.402473][T25960] veth1_macvtap: entered promiscuous mode [ 1808.436722][T25960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1808.521911][T25960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1808.585730][ T8432] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.590619][ T8432] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.594294][ T8432] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.624339][ T8432] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1809.167535][T10731] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 1809.395566][T10731] usb 7-1: config 0 has no interfaces? [ 1809.395611][T10731] usb 7-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1809.395634][T10731] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1809.511088][T10731] usb 7-1: config 0 descriptor?? [ 1811.158978][ T3522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1811.158999][ T3522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1812.504254][T27190] @0Ù: renamed from veth1_to_hsr (while UP) [ 1812.594129][ T3522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1812.594152][ T3522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1814.189827][ T8691] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1814.234997][ T8691] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1814.246819][ T8691] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1814.259478][ T8691] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1814.265589][ T8691] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1815.781029][ T5806] usb 7-1: USB disconnect, device number 3 [ 1816.332262][T27222] chnl_net:caif_netlink_parms(): no params data found [ 1816.567987][T11947] Bluetooth: hci3: command tx timeout [ 1817.345391][ T8448] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1817.710273][T26955] net_ratelimit: 10 callbacks suppressed [ 1817.710291][T26955] Set syz1 is full, maxelem 65536 reached [ 1818.640124][T11947] Bluetooth: hci3: command tx timeout [ 1819.180930][ T8448] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1820.740140][T11947] Bluetooth: hci3: command tx timeout [ 1820.951232][ T8448] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1821.323185][T27336] netlink: 76 bytes leftover after parsing attributes in process `syz.7.6484'. [ 1821.355806][T27222] bridge0: port 1(bridge_slave_0) entered blocking state [ 1821.359571][T27222] bridge0: port 1(bridge_slave_0) entered disabled state [ 1821.359787][T27222] bridge_slave_0: entered allmulticast mode [ 1821.374098][T27222] bridge_slave_0: entered promiscuous mode [ 1821.737800][T27222] bridge0: port 2(bridge_slave_1) entered blocking state [ 1821.737956][T27222] bridge0: port 2(bridge_slave_1) entered disabled state [ 1821.738200][T27222] bridge_slave_1: entered allmulticast mode [ 1821.746826][T27222] bridge_slave_1: entered promiscuous mode [ 1822.161978][ T8448] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1822.475100][T27394] Context (ID=0x0) not attached to queue pair (handle=0x4e5:0x0) [ 1822.546412][T27222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1822.587380][T27222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1822.797576][T11947] Bluetooth: hci3: command tx timeout [ 1822.941546][T27222] team0: Port device team_slave_0 added [ 1822.962365][T27222] team0: Port device team_slave_1 added [ 1823.231038][T27222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1823.231050][T27222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1823.231064][T27222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1823.239083][T27222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1823.239100][T27222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1823.239125][T27222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1823.829041][T27431] binder: 27429:27431 ioctl c0306201 200000000040 returned -11 [ 1825.226850][T27222] hsr_slave_0: entered promiscuous mode [ 1825.242585][T27222] hsr_slave_1: entered promiscuous mode [ 1825.251311][T27222] debugfs: 'hsr0' already exists in 'hsr' [ 1825.251337][T27222] Cannot create hsr debugfs directory [ 1826.426229][ T8448] bridge_slave_1: left allmulticast mode [ 1826.426257][ T8448] bridge_slave_1: left promiscuous mode [ 1826.435924][ T8448] bridge0: port 2(bridge_slave_1) entered disabled state [ 1826.457664][T13931] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1826.565894][ T8448] bridge_slave_0: left allmulticast mode [ 1826.565922][ T8448] bridge_slave_0: left promiscuous mode [ 1826.566175][ T8448] bridge0: port 1(bridge_slave_0) entered disabled state [ 1826.617568][T13931] usb 6-1: Using ep0 maxpacket: 16 [ 1826.622511][T13931] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1826.622539][T13931] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1826.622558][T13931] usb 6-1: Product: syz [ 1826.622572][T13931] usb 6-1: Manufacturer: syz [ 1826.622585][T13931] usb 6-1: SerialNumber: syz [ 1826.640638][T13931] usb 6-1: config 0 descriptor?? [ 1827.607989][T13931] usb 6-1: USB disconnect, device number 2 [ 1828.240489][T25840] udevd[25840]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1828.520319][ T8448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1828.589053][ T8448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1828.641468][ T8448] bond0 (unregistering): Released all slaves [ 1830.845187][T27572] futex_wake_op: syz.9.6528 tries to shift op by -1; fix this program [ 1830.855824][T27572] syz.9.6528 uses obsolete (PF_INET,SOCK_PACKET) [ 1832.040151][T27589] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6539'. [ 1832.040539][T27592] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6539'. [ 1832.549915][ T8448] hsr_slave_0: left promiscuous mode [ 1832.602062][ T8448] hsr_slave_1: left promiscuous mode [ 1832.603146][ T8448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1832.705090][ T8448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1832.705114][ T8448] batadv0: mtu less than device minimum [ 1832.876358][ T8448] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1832.902251][ T8448] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1832.989053][ T8448] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1833.033621][ T8448] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1833.077155][ T8448] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1833.169399][ T8448] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1833.211466][ T8448] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1833.260419][ T8448] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1833.297986][ T8448] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1833.577285][ T8448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1833.600669][ T8448] batman_adv: batadv0: Interface deactivated: dummy0 [ 1833.600696][ T8448] batman_adv: batadv0: Removing interface: dummy0 [ 1833.817721][ T8448] veth1_macvtap: left promiscuous mode [ 1833.817818][ T8448] veth0_macvtap: left promiscuous mode [ 1833.818042][ T8448] veth1_vlan: left promiscuous mode [ 1833.818208][ T8448] veth0_vlan: left promiscuous mode [ 1835.159527][ T8448] team0 (unregistering): Port device team_slave_1 removed [ 1835.230852][ T8448] team0 (unregistering): Port device team_slave_0 removed [ 1836.610539][T27716] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6557'. [ 1839.229039][T27765] delete_channel: no stack [ 1839.230915][T27764] delete_channel: no stack [ 1839.917604][T11947] Bluetooth: hci7: command 0x0406 tx timeout [ 1840.715029][T27222] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1840.767340][T27222] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1840.776760][T27222] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1840.836493][T27222] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1840.837212][T27222] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1840.915045][T27222] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1840.924119][T27222] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1840.979667][T27222] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1841.040407][T27798] @0Ù: renamed from veth1_to_hsr (while UP) [ 1841.245553][T27813] delete_channel: no stack [ 1841.653579][T27222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1841.691035][T27222] 8021q: adding VLAN 0 to HW filter on device team0 [ 1841.709526][T23103] bridge0: port 1(bridge_slave_0) entered blocking state [ 1841.709914][T23103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1841.722018][ T8448] bridge0: port 2(bridge_slave_1) entered blocking state [ 1841.722139][ T8448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1842.593505][T27848] delete_channel: no stack [ 1843.357915][T27222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1843.687038][T27222] veth0_vlan: entered promiscuous mode [ 1843.721453][T27222] veth1_vlan: entered promiscuous mode [ 1843.822140][T27222] veth0_macvtap: entered promiscuous mode [ 1843.846518][T27222] veth1_macvtap: entered promiscuous mode [ 1843.913464][T27222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1843.985572][T27222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1844.070057][ T8448] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1844.070278][ T8448] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1844.070314][ T8448] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1844.070356][ T8448] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1844.871815][ T37] kauditd_printk_skb: 249 callbacks suppressed [ 1844.871833][ T37] audit: type=1326 audit(1776662517.672:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27873 comm="syz.7.6596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53abec819 code=0x7ffc0000 [ 1844.872324][ T37] audit: type=1326 audit(1776662517.702:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27873 comm="syz.7.6596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53abec819 code=0x7ffc0000 [ 1844.872877][ T37] audit: type=1326 audit(1776662517.702:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27873 comm="syz.7.6596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53abec819 code=0x7ffc0000 [ 1844.872916][ T37] audit: type=1326 audit(1776662517.702:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27873 comm="syz.7.6596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7ff53abec819 code=0x7ffc0000 [ 1844.872957][ T37] audit: type=1326 audit(1776662517.702:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27873 comm="syz.7.6596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53abec819 code=0x7ffc0000 [ 1844.874484][ T37] audit: type=1326 audit(1776662517.702:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27873 comm="syz.7.6596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53abec819 code=0x7ffc0000 [ 1844.876141][ T37] audit: type=1326 audit(1776662517.702:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27873 comm="syz.7.6596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53abec819 code=0x7ffc0000 [ 1844.926456][ T37] audit: type=1326 audit(1776662517.752:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27873 comm="syz.7.6596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff53abad04e code=0x7ffc0000 [ 1844.953765][ T37] audit: type=1326 audit(1776662517.782:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27873 comm="syz.7.6596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ff53abec819 code=0x7ffc0000 [ 1844.953817][ T37] audit: type=1326 audit(1776662517.782:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27873 comm="syz.7.6596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53abec819 code=0x7ffc0000 [ 1844.960462][ T8691] Bluetooth: hci8: command 0x0406 tx timeout [ 1845.653981][ T3522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1845.654005][ T3522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1846.215861][ T5482] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1846.534456][T12384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1846.534477][T12384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1846.959728][T27899] delete_channel: no stack [ 1847.899306][T27938] delete_channel: no stack [ 1848.540343][ T5202] IPVS: starting estimator thread 0... [ 1848.627619][T27963] IPVS: using max 9 ests per chain, 21600 per kthread [ 1848.745744][T27955] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 1850.659713][T27993] delete_channel: no stack [ 1851.295627][ T5482] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1852.473836][T28032] delete_channel: no stack [ 1853.949678][T10731] IPVS: starting estimator thread 0... [ 1854.067647][T28077] IPVS: using max 15 ests per chain, 36000 per kthread [ 1857.621355][T28138] fuse: Bad value for 'fd' [ 1857.916531][ T37] kauditd_printk_skb: 15 callbacks suppressed [ 1857.916550][ T37] audit: type=1326 audit(1776662530.742:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28123 comm="syz.5.6660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8bb2c819 code=0x7ffc0000 [ 1857.947825][ T37] audit: type=1326 audit(1776662530.772:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28123 comm="syz.5.6660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9a8bb2c819 code=0x7ffc0000 [ 1857.947862][ T37] audit: type=1326 audit(1776662530.772:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28123 comm="syz.5.6660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8bb2c819 code=0x7ffc0000 [ 1857.947888][ T37] audit: type=1326 audit(1776662530.772:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28123 comm="syz.5.6660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8bb2c819 code=0x7ffc0000 [ 1857.947916][ T37] audit: type=1326 audit(1776662530.772:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28123 comm="syz.5.6660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9a8bb2c819 code=0x7ffc0000 [ 1857.947943][ T37] audit: type=1326 audit(1776662530.772:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28123 comm="syz.5.6660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8bb2c819 code=0x7ffc0000 [ 1857.947972][ T37] audit: type=1326 audit(1776662530.772:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28123 comm="syz.5.6660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8bb2c819 code=0x7ffc0000 [ 1857.997578][ T37] audit: type=1326 audit(1776662530.812:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28123 comm="syz.5.6660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9a8bb2c819 code=0x7ffc0000 [ 1857.997647][ T37] audit: type=1326 audit(1776662530.812:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28123 comm="syz.5.6660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8bb2c819 code=0x7ffc0000 [ 1857.997687][ T37] audit: type=1326 audit(1776662530.812:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28123 comm="syz.5.6660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8bb2c819 code=0x7ffc0000 [ 1859.374353][T28181] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6677'. [ 1859.374748][T28181] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6677'. [ 1860.393460][T28195] syzkaller1: entered promiscuous mode [ 1860.393485][T28195] syzkaller1: entered allmulticast mode [ 1861.084246][T28236] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6691'. [ 1861.520036][T28255] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1862.459343][T28283] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6705'. [ 1862.945501][ T5482] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1863.261741][T28315] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6716'. [ 1863.261757][T28315] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6716'. [ 1863.375496][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1863.375564][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1863.754767][T28295] net_ratelimit: 10 callbacks suppressed [ 1863.754789][T28295] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1864.444479][T28329] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6722'. [ 1865.314650][T28348] binder: BINDER_SET_CONTEXT_MGR already set [ 1865.314667][T28348] binder: 28346:28348 ioctl 4018620d 200000004a80 returned -16 [ 1866.359069][T28381] dvmrp1: entered allmulticast mode [ 1866.483470][T10731] IPVS: starting estimator thread 0... [ 1866.545156][T28395] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6744'. [ 1866.546004][T28395] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6744'. [ 1866.567642][T28392] IPVS: using max 15 ests per chain, 36000 per kthread [ 1866.578994][T28391] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6741'. [ 1866.579017][T28391] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6741'. [ 1866.582591][ T5482] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1867.306844][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 1867.306862][ T37] audit: type=1800 audit(1776662540.132:335): pid=28416 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.9.6746" name="file1" dev="tmpfs" ino=340 res=0 errno=0 [ 1867.713710][T28420] binder: BINDER_SET_CONTEXT_MGR already set [ 1867.713724][T28420] binder: 28419:28420 ioctl 4018620d 200000004a80 returned -16 [ 1868.500680][T28416] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1868.911329][T28435] pimreg: entered allmulticast mode [ 1868.990537][T28439] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6753'. [ 1869.167655][T10731] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1869.266074][T28448] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6755'. [ 1869.276729][T28448] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6755'. [ 1869.337591][T10731] usb 2-1: Using ep0 maxpacket: 8 [ 1869.344568][T10731] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1869.344600][T10731] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1869.344620][T10731] usb 2-1: Product: syz [ 1869.344634][T10731] usb 2-1: Manufacturer: syz [ 1869.344648][T10731] usb 2-1: SerialNumber: syz [ 1869.401240][T10731] usb 2-1: config 0 descriptor?? [ 1869.414659][T10731] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1869.674834][T28435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1869.675450][T28435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1870.087700][T28438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1870.089574][T28438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1870.230405][T10731] gspca_zc3xx: reg_r err -110 [ 1870.230515][T10731] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1870.232715][T28438] pimreg: left allmulticast mode [ 1870.945897][T10731] usb 2-1: USB disconnect, device number 5 [ 1872.805450][ T37] audit: type=1800 audit(1776662545.632:336): pid=28518 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.6773" name="file1" dev="tmpfs" ino=166 res=0 errno=0 [ 1873.125668][T28518] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1874.435314][T28556] pimreg: entered allmulticast mode [ 1874.448401][T28557] pimreg: left allmulticast mode [ 1876.535483][ T5482] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1880.238200][T28664] pimreg: entered allmulticast mode [ 1880.527629][T13931] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1880.697548][T13931] usb 6-1: Using ep0 maxpacket: 8 [ 1880.702862][T13931] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1880.702891][T13931] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1880.702911][T13931] usb 6-1: Product: syz [ 1880.702926][T13931] usb 6-1: Manufacturer: syz [ 1880.702947][T13931] usb 6-1: SerialNumber: syz [ 1880.771314][T13931] usb 6-1: config 0 descriptor?? [ 1880.823138][T13931] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1880.997131][T28664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1881.002688][T28664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1881.130242][ T5482] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1881.299324][T28667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1881.319540][T28667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1881.517829][T13931] gspca_zc3xx: reg_r err -110 [ 1881.517923][T13931] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1881.793414][T13931] usb 6-1: USB disconnect, device number 3 [ 1881.836836][T28662] pimreg: left allmulticast mode [ 1882.482350][T28699] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6821'. [ 1882.535054][T28703] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6821'. [ 1884.529994][T28728] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6829'. [ 1884.782509][ T5482] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1885.825753][T28743] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6834'. [ 1886.664237][T28751] pimreg: entered allmulticast mode [ 1886.919444][ T31] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1887.148133][ T31] usb 7-1: Using ep0 maxpacket: 8 [ 1887.567532][ T31] usb 7-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1887.567565][ T31] usb 7-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1887.567586][ T31] usb 7-1: Product: syz [ 1887.567600][ T31] usb 7-1: Manufacturer: syz [ 1887.567614][ T31] usb 7-1: SerialNumber: syz [ 1887.668081][ T31] usb 7-1: config 0 descriptor?? [ 1887.706638][ T31] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1887.872071][T28751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1887.872556][T28751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1888.199057][T28751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1888.230672][T28751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1888.393724][ T31] gspca_zc3xx: reg_r err -110 [ 1888.393811][ T31] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1888.716161][ T31] usb 7-1: USB disconnect, device number 4 [ 1888.722895][T28750] pimreg: left allmulticast mode [ 1888.914095][T28787] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6847'. [ 1888.996738][T28791] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6847'. [ 1889.487524][ T5482] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1889.964723][T28750] ------------[ cut here ]------------ [ 1889.964737][T28750] kcov->t != t [ 1889.964755][T28750] WARNING: kernel/kcov.c:483 at kcov_task_exit+0xf5/0x160, CPU#1: syz.6.6838/28750 [ 1889.964893][T28750] Modules linked in: [ 1889.964925][T28750] CPU: 1 UID: 0 PID: 28750 Comm: syz.6.6838 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1889.964951][T28750] Tainted: [L]=SOFTLOCKUP [ 1889.964959][T28750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1889.964978][T28750] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 1889.965006][T28750] Code: 10 00 00 48 8b bb 90 00 00 00 e8 f6 b0 55 00 48 89 df 5b 41 5e 41 5f e9 19 6e 5b 00 7c 1c 5b 41 5e 41 5f c3 cc cc cc cc cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 7b 64 69 09 48 89 df be 03 00 [ 1889.965023][T28750] RSP: 0018:ffffc90006e4fd20 EFLAGS: 00010283 [ 1889.965039][T28750] RAX: afbcb7f945956700 RBX: ffff88802b390900 RCX: 0000000000000000 [ 1889.965054][T28750] RDX: 00000000b9174e89 RSI: ffffffff8ba732c0 RDI: 00000000ffffffff [ 1889.965069][T28750] RBP: ffffc90006e4fe78 R08: ffffffff8b2df740 R09: ffffffff8dfc80c0 [ 1889.965083][T28750] R10: dffffc0000000000 R11: fffffbfff1f1753f R12: dffffc0000000000 [ 1889.965097][T28750] R13: 0000000000000000 R14: ffff88802b390908 R15: ffff88802e3b5c40 [ 1889.965127][T28750] FS: 000055558dfb9500(0000) GS:ffff888126204000(0000) knlGS:0000000000000000 [ 1889.965146][T28750] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1889.965160][T28750] CR2: 00007f5780c41000 CR3: 0000000042bf6000 CR4: 00000000003526f0 [ 1889.965177][T28750] Call Trace: [ 1889.965186][T28750] [ 1889.965197][T28750] do_exit+0x150/0x22c0 [ 1889.965276][T28750] ? lockdep_hardirqs_on+0x7a/0x110 [ 1889.965386][T28750] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1889.965473][T28750] ? reacquire_held_locks+0x104/0x190 [ 1889.965527][T28750] ? rt_spin_lock+0x1e0/0x400 [ 1889.965552][T28750] ? __pfx_do_exit+0x10/0x10 [ 1889.965577][T28750] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1889.965613][T28750] ? rt_spin_unlock+0x160/0x200 [ 1889.965640][T28750] do_group_exit+0x21b/0x2d0 [ 1889.965668][T28750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1889.965715][T28750] __x64_sys_exit_group+0x3f/0x40 [ 1889.965741][T28750] x64_sys_call+0x221a/0x2240 [ 1889.965790][T28750] do_syscall_64+0x15f/0xf80 [ 1889.965844][T28750] ? trace_irq_disable+0x3b/0x140 [ 1889.965900][T28750] ? clear_bhb_loop+0x40/0x90 [ 1889.965927][T28750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1889.965948][T28750] RIP: 0033:0x7f1ddc97c819 [ 1889.965974][T28750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1889.966015][T28750] RSP: 002b:00007ffcc78a00d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1889.966037][T28750] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1ddc97c819 [ 1889.966052][T28750] RDX: 00007f1ddbbd9000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1889.966066][T28750] RBP: 00007ffcc78a013c R08: 0000000000000000 R09: 00000000000927c0 [ 1889.966080][T28750] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000008a [ 1889.966093][T28750] R13: 00000000000927c0 R14: 00000000001cc2d2 R15: 00007ffcc78a0190 [ 1889.966126][T28750] [ 1889.966137][T28750] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1889.966155][T28750] CPU: 1 UID: 0 PID: 28750 Comm: syz.6.6838 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1889.966183][T28750] Tainted: [L]=SOFTLOCKUP [ 1889.966192][T28750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1889.966204][T28750] Call Trace: [ 1889.966213][T28750] [ 1889.966221][T28750] vpanic+0x56c/0xa60 [ 1889.966252][T28750] ? __pfx__printk+0x10/0x10 [ 1889.966276][T28750] ? __pfx_vpanic+0x10/0x10 [ 1889.966295][T28750] ? is_bpf_text_address+0x292/0x2b0 [ 1889.966354][T28750] ? is_bpf_text_address+0x26/0x2b0 [ 1889.966385][T28750] panic+0xc5/0xd0 [ 1889.966405][T28750] ? __pfx_panic+0x10/0x10 [ 1889.966440][T28750] __warn+0x315/0x4c0 [ 1889.966460][T28750] ? kcov_task_exit+0xf5/0x160 [ 1889.966491][T28750] ? kcov_task_exit+0xf5/0x160 [ 1889.966523][T28750] __report_bug+0x29a/0x540 [ 1889.966620][T28750] ? kcov_task_exit+0xf5/0x160 [ 1889.966652][T28750] ? __pfx___report_bug+0x10/0x10 [ 1889.966684][T28750] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 1889.966715][T28750] ? rt_spin_lock+0x1e0/0x400 [ 1889.966740][T28750] ? rt_spin_lock+0x1e0/0x400 [ 1889.966774][T28750] ? kcov_task_exit+0xf5/0x160 [ 1889.966805][T28750] report_bug+0x16a/0x220 [ 1889.966833][T28750] ? kcov_task_exit+0xf5/0x160 [ 1889.966860][T28750] ? kcov_task_exit+0xf7/0x160 [ 1889.966889][T28750] handle_bug+0x9c/0x200 [ 1889.966911][T28750] exc_invalid_op+0x1a/0x50 [ 1889.966931][T28750] asm_exc_invalid_op+0x1a/0x20 [ 1889.966951][T28750] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 1889.966981][T28750] Code: 10 00 00 48 8b bb 90 00 00 00 e8 f6 b0 55 00 48 89 df 5b 41 5e 41 5f e9 19 6e 5b 00 7c 1c 5b 41 5e 41 5f c3 cc cc cc cc cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 7b 64 69 09 48 89 df be 03 00 [ 1889.966997][T28750] RSP: 0018:ffffc90006e4fd20 EFLAGS: 00010283 [ 1889.967014][T28750] RAX: afbcb7f945956700 RBX: ffff88802b390900 RCX: 0000000000000000 [ 1889.967029][T28750] RDX: 00000000b9174e89 RSI: ffffffff8ba732c0 RDI: 00000000ffffffff [ 1889.967044][T28750] RBP: ffffc90006e4fe78 R08: ffffffff8b2df740 R09: ffffffff8dfc80c0 [ 1889.967060][T28750] R10: dffffc0000000000 R11: fffffbfff1f1753f R12: dffffc0000000000 [ 1889.967075][T28750] R13: 0000000000000000 R14: ffff88802b390908 R15: ffff88802e3b5c40 [ 1889.967097][T28750] ? rt_spin_lock+0x1e0/0x400 [ 1889.967131][T28750] do_exit+0x150/0x22c0 [ 1889.967155][T28750] ? lockdep_hardirqs_on+0x7a/0x110 [ 1889.967184][T28750] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1889.967214][T28750] ? reacquire_held_locks+0x104/0x190 [ 1889.967242][T28750] ? rt_spin_lock+0x1e0/0x400 [ 1889.967265][T28750] ? __pfx_do_exit+0x10/0x10 [ 1889.967288][T28750] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1889.967320][T28750] ? rt_spin_unlock+0x160/0x200 [ 1889.967345][T28750] do_group_exit+0x21b/0x2d0 [ 1889.967375][T28750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1889.967397][T28750] __x64_sys_exit_group+0x3f/0x40 [ 1889.967422][T28750] x64_sys_call+0x221a/0x2240 [ 1889.967443][T28750] do_syscall_64+0x15f/0xf80 [ 1889.967469][T28750] ? trace_irq_disable+0x3b/0x140 [ 1889.967490][T28750] ? clear_bhb_loop+0x40/0x90 [ 1889.967514][T28750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1889.967534][T28750] RIP: 0033:0x7f1ddc97c819 [ 1889.967553][T28750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1889.967571][T28750] RSP: 002b:00007ffcc78a00d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1889.967592][T28750] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1ddc97c819 [ 1889.967607][T28750] RDX: 00007f1ddbbd9000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1889.967620][T28750] RBP: 00007ffcc78a013c R08: 0000000000000000 R09: 00000000000927c0 [ 1889.967633][T28750] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000008a [ 1889.967646][T28750] R13: 00000000000927c0 R14: 00000000001cc2d2 R15: 00007ffcc78a0190 [ 1889.967677][T28750] [ 1889.968027][T28750] Kernel Offset: disabled