last executing test programs: 10m27.416125306s ago: executing program 3 (id=540): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4011}, 0x80) socket$inet(0x2, 0x6, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r2, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000980)="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", 0x82f}], 0x1}, 0x4048805) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000740)=ANY=[@ANYBLOB="580100001000010000000000000000000a010102000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00200064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d532000000ac141436000000000000000000000000000000000000000000010000000000000000000000000000fdffffffffffffff000000000000000000000000000000000000000000000000e300000000000000fdffffffffffffff04000000000000000000000800c06131000000000000000100000000000073000000000200000000000000000000000a000000cd000000000000001c0017000000000027b97700000000002abd700028bd7000000000004c001400636d616328616573290000000000008e017c7a0000000000000000000000e53000"/275], 0x158}}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000300), 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "fbffffffffffffff", "1fd33c81cf7995313c09de00fd6ded74", '\x00', "1e00040000000100"}, 0x28) write$binfmt_script(r5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, r4, 0x1, 0x0, 0x0, {0x1d}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) 10m24.665712121s ago: executing program 3 (id=549): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) timer_create(0x2, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f0000000200)='m', 0x1) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) r4 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) r5 = syz_io_uring_setup(0x136f, &(0x7f00000001c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) 10m23.69890251s ago: executing program 3 (id=557): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='veno', 0x4) r1 = inotify_init1(0x80000) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x2000774) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) chown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000028c0)={'wlan0\x00', &(0x7f0000000100)=@ethtool_gstrings={0x1b, 0x1}}) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e1f0a00c90002"], 0x22) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000840)={'gre0\x00', 0x0, 0x20, 0x80, 0x40, 0xe, {{0x20, 0x4, 0x0, 0x4, 0x80, 0x65, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @local, {[@cipso={0x86, 0x52, 0x1, [{0x7, 0xb, "59a1b8078523b64ff2"}, {0x5, 0x2}, {0x1, 0xf, "26fbdba8f32c1e945b368dfa1d"}, {0x1, 0x11, "8f00272f80856ace0f1b2a7f41f576"}, {0x2, 0x9, "16d3d73586fa97"}, {0x5, 0x10, "b8279a0cd3f5f3ab6506cccff063"}, {0x1, 0x6, "a7630f28"}]}, @end, @generic={0x82, 0x7, "857995bb02"}, @noop, @timestamp={0x44, 0x10, 0xaf, 0x0, 0x2, [0x1, 0x2, 0x7fff]}]}}}}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1da787015aac8a6f3c1d00000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="1800a800aa830000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000d0000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x7, 0x8, &(0x7f00000002c0)="b8000005000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) 10m23.322392458s ago: executing program 3 (id=559): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='f\b\x00', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES8=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d5957f993cadd234ca5378a53d1a0fb17ba151a93f5835c5644472cdb084a4a1ed75b55ce6c3d2255d28db4a78fda99c7836f685cf9b7f80e8c54f3fcaea9b165c2991da0d41ba2c28ffc34c33815f835f7c84fbb0e7e508bc41bcf679ee43bdc3913d8ad3cd8d26a989df1ba934829a17f31e31f9208f51555b5c79250b839c7d6253a33c4d5ab0c9f", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xa) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4042, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)={0x7, [0x8, 0x3, 0x4, 0xce, 0x5, 0x57a, 0xd747]}) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) mmap$KVM_VCPU(&(0x7f0000001000/0x3000)=nil, r9, 0x2, 0x13, r8, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) 10m22.604476757s ago: executing program 3 (id=562): ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) umount2(0x0, 0x8) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) 10m22.280782717s ago: executing program 3 (id=563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffa}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0xc010}, 0x2400000000000000) 10m21.707029562s ago: executing program 32 (id=563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffa}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0xc010}, 0x2400000000000000) 13.909414974s ago: executing program 0 (id=3142): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000040)=0x9, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) 13.744854314s ago: executing program 0 (id=3143): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x2c, 0x9, 0x6, 0x301, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 13.552613138s ago: executing program 0 (id=3145): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000400), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xf, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x1, 0xffffffff, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x49, 0x20000000, 0x1ff, 0x0, 0x0, 0x80002, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x5, 0x0, 0x0, 0x272, 0xb, 0x9, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0xe, 0x9, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb9a, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0x6, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffff, 0xffff8003, 0x0, 0xffffffff, 0x1, 0x38000, 0x800009, 0xfffffffd, 0x0, 0x8, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x80000001, 0x2, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x8, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4000, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x800000, 0x0, 0x5, 0x0, 0x9, 0xfffffffd, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x2, 0x13, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0xdd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x26c, 0x4, 0x7, 0xffff, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x594, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x3, 0x0, 0x19, 0x40000000}, 0x0, 0x100007f, 0x2}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11.928350871s ago: executing program 0 (id=3151): sendmsg$rds(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 10.943563978s ago: executing program 0 (id=3161): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000ee0000000000000000050000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c9601fe45a0bca4ac74ab731d", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 10.732463591s ago: executing program 0 (id=3164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) 3.282069181s ago: executing program 5 (id=3236): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x59032, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) 2.925559769s ago: executing program 2 (id=3240): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r1}) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x82040) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0xda3f, 0x0, 0x0, 0x0, 0x1f, 0x5, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000004c0800", "2809e8dbe10a598948224ad54afac11d875397bdb22d0000b420a1a93c5240f05f819e01177d3d458dd4992a61ac000000000000000000000000000700", "f400", [0x5, 0xfa9]}}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002f80)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES8=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0xfe, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x2, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000440)={@initdev, 0x0}, &(0x7f0000000480)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x1000000002}, 0x18) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0xb9440efd44d97a33, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r10, {0xc, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmmsg$inet(r7, &(0x7f0000002ec0)=[{{&(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f0000000300)=[{&(0x7f00000002c0)}, {&(0x7f00000003c0)="d304473ed9a1f8a0e9dd5b1cbb6a9c54ad948fee9c2ecc4ca03fed2c8b1e9ae262baf09aab3fe8f0d22eb5ce8e1dc1e464c6cad81e423a40105631847e8002ca3c79e0742cb8c2893a", 0x49}], 0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r8, @ANYBLOB="640101027f000001000000002c000000000000000000000007000000441cd07000000007000000070000000400000000fffff3110001000000000000110000000000000000000000010000000607000000000000100000000000000000000000070000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000300000000000000140000000000000000000000020000000600000000000000"], 0xc8}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000005c0)="40fc922cf0c3904bba", 0x9}, {&(0x7f0000000600)="1a6dca9f804999c19ed0672e28c8a615258e9bed", 0x14}, {&(0x7f0000000640)="4b232f92a1e9f77caeede8a36a5118a45ee47788df1b40ff4d59d6e345837e9bea55bf4910647a9a6dab53373beea09dc8f9f8ea911299d9d60b76ec77a904b56253c533c978df003e44b868d3187b7e3c1ce57266c984bbff7ba7271223392b7de772072580cf8cb913501259c74e9f9352455a55f72401ed1bf64e57bae119c363a4409d3c", 0x86}, {&(0x7f0000000700)="3da899fa7540ea404dae8485cee0c3240d0af101e20acd336af4137d9af5287612be48cacf57161afc6e9eb8a8715700eb1592ad17", 0x35}, {&(0x7f0000000740)="d3165516a1bb5873d007328abdf9417dac56e895127779095e1d79fb2fd78d9b8e0babc3113f1b044741788ed6f82c699c1e6422f88418b704d3c7e37e459505c1b910743081a62b9e8019b647f494056534bb38d88e9b347f1936437cbc4558ac9c", 0x62}, {&(0x7f00000007c0)="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", 0x1000}], 0x6, &(0x7f0000001840)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x400}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0xe0}}, {{&(0x7f0000001940)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002e00)=[{&(0x7f0000001980)="d7eb8f93992aaa41e9dd3a4df4", 0xd}, {&(0x7f00000019c0)="135209a39a4b9805f1c1f61aef47e47213c171be585bd7641cf0d5b23866e702bce54109234a87eb24885ef28170142e2e0fa73752b96ea6b81e1151293527ff27c8c24815519e114f4d8c2c98693e8fc1b47ab5e4a32d5666b82739bf3067d9e5b5536307deb0528cd83b5eb2cc9ed86fe7ac5f37b9afdd455906644ff11174a82c777799269370d25f164729294c6e0353accb4481cfe710a34a89c65acfe02d600313a46a0074", 0xa8}, {&(0x7f0000001a80)="63eb698a69d91a55cde814652ff51d6287b9c4512ad557598491f7d563b360d5e512a0bb275661b3c87ad9a846221b85c0c7ee355e9da03f3f86ec484d936ace3e1996d6b30bb3c9a56e7266e575b361a30d00ee83925171e8d6c0648d218f06c758e108a2ed2df6b56a72f320c0c92ce44f6433976f8d7ba07afeb7e75bc6a6687f15b78b87bda10ecc40d918351beb12da0d467d03c8add5e659bec806874dcd714981a50c67c9e5fab5958cedc1f4a6f0c2649f3104a0fff6c985378a7c414be1ab07e7be17dc", 0xc8}, {&(0x7f0000001b80)="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", 0xfc}, {&(0x7f0000001c80)="ce2da128602e7ab1c9aec4cd0020008ab0e8356130cb2567f79f2a63cde2fd69ecb58037c7325651b18735205ae8678de43da459a5af07cb870fd98560c4cbbce4a9760d5830acd30abd9d0c0f8ce758466b72182a60181c3ba2", 0x5a}, {&(0x7f0000001d00)="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", 0xed7}, {&(0x7f0000002d00)="8c1bfdec3c128ef4d97fffece626a6d915b277fd7f40bc97af613c7617ab8571cc953a8f0f6c616c84c83d979e033e2af78770658193d6d4e6c0ae2799bbdc1b3ca3c910d61aaf37ab35799706bb09edcd7bdde687489e30db36a0e00dfe6c186a2751866ea575d94b16df20d20b441b92e3abcdd27cdbee38e01006b87595e9474b2117c4c11b57152a4df794668c3df1173cfc7c250f3abf4bdc7ab429868c605e76f5f690270d562b796f20a3c354059d2a1aa37f936a521ff664c2bc4d6fd9a8bc512b25958ea3b38370be402f231a917a27b10aaf3ae4fa7224c045b74a55f23d5f66e525038ab096d9d807e338", 0xf0}], 0x7, &(0x7f0000002e80)}}], 0x3, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10) 2.91288085s ago: executing program 5 (id=3241): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000280)={r3, 0x2, 0x6, @local}, 0x6b) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @multicast}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 2.400628171s ago: executing program 4 (id=3246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000306050000000000000000000200000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) 2.266116797s ago: executing program 2 (id=3247): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a48637cb781581aac75a2f848f285c99133f0435497bf6ae25625c64f82ecc0a7", 0x3e}, {&(0x7f0000000cc0)="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", 0x1e2}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="d0f28c036a8b6293adbae6a1f4a98928a2efe08e665dac369f8749c5c15e9819ef3627a4cf2264401c991774440846e7", 0x30}, {&(0x7f0000000300)="e11b12d8e463a0b8dd59326154501ecf0819f23ca714d4a23e3be62be279e7e5959106799deb35c7f7fd59d5f8dc617c2a8fbccb4792bf67e3723aaf17f518045fa8f87f907a589f5bf63177c693d8c440d2fe9db6916a0a7ab91e693509f4e9440ad12f02126e866ae679f93d", 0x6d}], 0x2}}], 0x2, 0x54004) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) writev(r0, &(0x7f0000000b80)=[{&(0x7f0000000640)="46daf6dfa0fcabb990635232180cb28bc15167fe7fca2e7b023acc6def6992c5e3af7df84bb75b8cbeb4188c17a2b3b175d65c4b83ed20bbe4c43c0f8554eaeed8de48e062ad02a56840a46f15524fa387dd2a288a0e0d2a110ff5bc598e9b3dc58ed87f5884ebed5f5d7d80ebbcc33c2a59ce98edb0d70ac96d956c8254958f6e87f032578859d76d306003d84d37e34a6f89c5a45f626e68e3cbe3608529671ee9851a1113aa91612b7ac1ffc845ac6400b872b9471d7150a26b9c813b1a6cacf8", 0xc2}, {&(0x7f0000000740)="bbb444be37206ac692bec92c8b221ac8b632c039dfff045c852647329abce195b9fd275caf831923a728f0b38d2737e671f106cfc064d215814c52e79b3429a7fbb3474efc51f649f12ba162aa2704e6d0ad784aacb7f727e87aacf421816bb1bd327f882d2d2d45ddad53286fa1323660630078dfc9f1bcbc9d2941c65ebd4a7b09b6aec6ff7b109853f3fa5c458853f636395fc091b59d1249f479a1cf72c2f78362e532f373ae85149b2eee945baab41c7d1b2ebb6839f58f7e39c1853bd2a6e53bcd26dc98180df0f4ff3a618d914eaefc2f0461c7dcf9c27f6ee24e5abddce3140f9949675a8cc7fda68cd73648c77802b3d58fece7f7d281af", 0xfc}, {&(0x7f0000000200)="0bb927cb6765e383ee796e0edc2c5b31583e39f1e0e9d1739afac441519fb775405d0887559b64b104bb10c5487456e21699a1e993211f843c5d154c2626bafc8fec3a168db78ce38080ffc5a102799414104ebd22a5e469446bfd6a36b68d1af7cea192e082a4748d7c80d57399462070bee90725", 0x75}, {&(0x7f0000000a40)="a2b3e3997e78105743a0748a83811f0fcf424e79ea7f9be3083679f57a7e4a65c0e264ee0b6b02732f85161c1d74522ad60c1c5580e79953cee5d253af5873c2242082d8823389fdfde0c83160d07a99ff948c1129c3afd00dc6db3406a92703ad4e8dd69f5220262e55b4ef4f263a77426b2ba68b8417ab7c01bf715430c822337ffa2266", 0x85}], 0x4) 2.260477193s ago: executing program 4 (id=3248): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a48637cb781581aac75a2f848f285c99133f0435497bf6ae25625c64f82ecc0a7bb7b", 0x40}, {&(0x7f0000000cc0)="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", 0x1e1}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="d0f28c036a8b6293adbae6a1f4a98928a2efe08e665dac369f8749c5c15e9819ef3627a4cf2264401c991774440846e7", 0x30}, {&(0x7f0000000300)="e11b12d8e463a0b8dd59326154501ecf0819f23ca714d4a23e3be62be279e7e5959106799deb35c7f7fd59d5f8dc617c2a8fbccb4792bf67e3723aaf17f5", 0x3e}], 0x2}}], 0x2, 0x54004) writev(0xffffffffffffffff, &(0x7f0000000b80)=[{&(0x7f0000000640)="46daf6dfa0fcabb990635232180cb28bc15167fe7fca2e7b023acc6def6992c5e3af7df84bb75b8cbeb4188c17a2b3b175d65c4b83ed20bbe4c43c0f8554eaeed8de48e062ad02a56840a46f15524fa387dd2a288a0e0d2a110ff5bc598e9b3dc58ed87f5884ebed5f5d7d80ebbcc33c2a59ce98edb0d70ac96d956c8254958f6e87f032578859d76d306003d84d37e34a6f89c5a45f626e68e3cbe3608529671ee9851a1113aa91612b7ac1ffc845ac6400b872b9471d7150a26b9c813b1a6cacf8", 0xc2}, {&(0x7f0000000740)="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", 0xfc}, {&(0x7f0000000200)="0bb927cb6765e383ee796e0edc2c5b31583e39f1e0e9d1739afac441519fb775405d0887559b64b104bb10c5487456e21699a1e993211f843c5d154c2626bafc8fec3a168db78ce38080ffc5a102799414104ebd22a5e469446bfd6a36b68d1af7cea192e082a4748d7c80d57399462070bee90725", 0x75}, {&(0x7f0000000a40)="a2b3e3997e78105743a0748a83811f0fcf424e79ea7f9be3083679f57a7e4a65c0e264ee0b6b02732f85161c1d74522ad60c1c5580e79953cee5d253af5873c2242082d8823389fdfde0c83160d07a99ff948c1129c3afd00dc6db3406a92703ad4e8dd69f5220262e55b4ef4f263a77426b2ba6", 0x74}], 0x4) 2.19301554s ago: executing program 1 (id=3249): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x22f}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000cc0)="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", 0x1fe}], 0x1}}], 0x2, 0x54004) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.123232234s ago: executing program 1 (id=3250): socket$l2tp(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000003a80)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x2}, {0x0}, &(0x7f0000003a00)=[{&(0x7f00000016c0)=""/96, 0x60}], 0x1, 0x39, 0x2}}], 0x48, 0x4000000}, 0x0) 2.122821023s ago: executing program 4 (id=3251): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.018763596s ago: executing program 4 (id=3252): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x18) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x64) sendto$inet(r0, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 1.975120989s ago: executing program 1 (id=3253): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x301, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1.888953134s ago: executing program 4 (id=3254): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x22, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x10000001, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000140)={0x800100, 0x0, 0x97e, 0x0, 0x0, 0x4000003}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.849417205s ago: executing program 1 (id=3255): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, 0x10000009, 0xffffffff) 1.683564774s ago: executing program 4 (id=3256): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'veth0_macvtap\x00', &(0x7f00000002c0)=@ethtool_rxfh_indir={0x38}}) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) write$tun(r2, &(0x7f0000000400)=ANY=[], 0xa2) readv(r2, &(0x7f0000000800)=[{&(0x7f00000025c0)=""/4101, 0x1005}], 0x1) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f00000001c0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) setxattr$security_evm(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0xa, 0x9, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000040)={0x7f, 0x6, 0x1, 0x4, 0x6, "9aae439c05a53a345f726e45db37f7f8daea0a", 0x0, 0x6}) writev(r4, &(0x7f0000002640)=[{&(0x7f0000000280)="391f", 0x2}], 0x1) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_SYNC(r5, 0x4) ioctl$SCSI_IOCTL_START_UNIT(r5, 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) 1.32496122s ago: executing program 2 (id=3257): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syncfs(0xffffffffffffffff) 1.248390088s ago: executing program 2 (id=3258): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000001010102000000000000000002004e090c00198008000100060000"], 0x20}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) 1.159142098s ago: executing program 2 (id=3259): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x22f}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000cc0)="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", 0x1fe}], 0x1}}], 0x2, 0x54004) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 441.856574ms ago: executing program 1 (id=3260): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000c40)={{0x80, 0x40}, 'port0\x00', 0x41, 0xfe8ee28a1d9fac77, 0x8, 0x6, 0x2, 0x40, 0x0, 0x0, 0x6, 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0xc0a85320, &(0x7f00000007c0)={{0x80}, 'port0\x00', 0x3c, 0x141000, 0xd, 0x2, 0x107, 0x6, 0x5, 0x0, 0x0, 0x3}) close(r2) 408.471751ms ago: executing program 5 (id=3261): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000a00)={r2}, &(0x7f0000000180)=0x8) 206.665077ms ago: executing program 2 (id=3262): sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 206.331026ms ago: executing program 5 (id=3263): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x19, 0xa, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x24008804) 206.038583ms ago: executing program 1 (id=3264): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r4, {0xfff1, 0x4}, {}, {0x5, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4000050) 102.048062ms ago: executing program 5 (id=3265): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x52}, 0x1c, &(0x7f0000000d80)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x240480c3) r2 = dup(r1) write$binfmt_elf32(r1, &(0x7f00000006c0)=ANY=[], 0x5c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000f40)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff6, @empty, 0x7f}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x6}, 0x9c) 0s ago: executing program 5 (id=3266): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00'], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f004a5d30c6e7c2365d75b215ad28d201acaadee3b53b7b9a8888b6401306e42a9ae65ab6493c35ca2df15bf7b6c8c44463108207812a5b3f64342b8e1a87772b31ece45c8d8633af9ace2408c91cb003747fb64577b309c80c37a20424523b9020806d5865046ba01e6058fba159dc8a9610c2f013742284cae8b086169cacb4c8c99e8d29"], 0x0, 0x34}, 0x20) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x0) utimensat(r3, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) close(0xffffffffffffffff) r7 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) socket$inet_udplite(0x2, 0x2, 0x88) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/oops_count', 0x8a883, 0x2) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000080)={r8, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r8) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r12, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x40000001, 0x4, 0x0, 0x2, "0062ba7d8207000000ecf5000000f7ffffff00"}) kernel console output (not intermixed with test programs): exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 779.017008][ T10] usb 1-1: USB disconnect, device number 11 [ 779.040602][ T30] audit: type=1326 audit(1766807301.229:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.1.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 779.065172][ T30] audit: type=1326 audit(1766807301.229:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15409 comm="syz.1.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 779.098881][T15413] syzkaller0: entered promiscuous mode [ 779.105315][T15413] syzkaller0: entered allmulticast mode [ 779.232694][T15274] usbhid 6-1:0.0: can't add hid device: -32 [ 779.239347][T15274] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 779.897395][ T10] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 780.061458][ T10] usb 1-1: device descriptor read/64, error -71 [ 780.313632][ T10] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 780.447594][ T10] usb 1-1: device descriptor read/64, error -71 [ 780.557307][ T10] usb usb1-port1: attempt power cycle [ 780.749186][T15438] binder: 15435:15438 ioctl 4018620d 0 returned -22 [ 780.897160][ T10] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 780.917400][ T10] usb 1-1: device descriptor read/8, error -71 [ 781.176727][ T10] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 781.209851][ T10] usb 1-1: device descriptor read/8, error -71 [ 781.326956][ T10] usb usb1-port1: unable to enumerate USB device [ 781.342686][T15274] usb 6-1: USB disconnect, device number 91 [ 781.776730][T15274] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 781.940554][T15274] usb 6-1: Using ep0 maxpacket: 8 [ 781.997073][T15274] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 782.006137][T15274] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.014497][T15274] usb 6-1: Product: syz [ 782.027717][T15274] usb 6-1: Manufacturer: syz [ 782.032355][T15274] usb 6-1: SerialNumber: syz [ 782.049182][T15274] usb 6-1: config 0 descriptor?? [ 782.058404][T15274] gspca_main: sq905-2.14.0 probing 2770:9120 [ 782.295932][T15451] syzkaller0: entered promiscuous mode [ 782.306848][T15451] syzkaller0: entered allmulticast mode [ 782.821239][ T30] audit: type=1326 audit(1766807305.039:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15455 comm="syz.1.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 782.835216][T15461] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.2556'. [ 782.909797][T15450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2560'. [ 782.928262][ T30] audit: type=1326 audit(1766807305.039:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15455 comm="syz.1.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 782.965754][T15464] netlink: 'syz.0.2564': attribute type 1 has an invalid length. [ 782.979599][ T30] audit: type=1326 audit(1766807305.039:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15455 comm="syz.1.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 783.031846][ T30] audit: type=1326 audit(1766807305.039:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15455 comm="syz.1.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 783.306403][T15441] could not allocate digest TFM handle cryptd(blake2b-160) [ 783.457354][T15464] 8021q: adding VLAN 0 to HW filter on device bond1 [ 783.535048][T15274] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 783.546752][T15274] sq905 6-1:0.0: probe with driver sq905 failed with error -71 [ 783.576411][T15274] usb 6-1: USB disconnect, device number 92 [ 783.894958][T15491] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2571'. [ 783.997258][ T10] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 784.076886][ T5988] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 784.098604][T15498] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2573'. [ 784.129841][T15498] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 784.230645][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 784.239871][ T5988] usb 1-1: Using ep0 maxpacket: 8 [ 784.249022][ T5988] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 784.265138][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.273861][ T5988] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 784.286500][ T10] usb 5-1: Product: syz [ 784.296723][ T10] usb 5-1: Manufacturer: syz [ 784.301370][ T10] usb 5-1: SerialNumber: syz [ 784.306064][ T5988] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 784.335600][ T5988] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 784.346032][ T5988] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.358211][ T5988] usb 1-1: Product: syz [ 784.366267][ T5988] usb 1-1: Manufacturer: syz [ 784.376451][ T5988] usb 1-1: SerialNumber: syz [ 784.476837][T15246] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 784.600184][ T5988] usb 1-1: 0:2 : does not exist [ 784.634997][ T5988] usb 1-1: USB disconnect, device number 16 [ 784.641560][T15246] usb 6-1: Using ep0 maxpacket: 8 [ 784.692617][T15246] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 784.713014][T15246] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.722316][T15246] usb 6-1: Product: syz [ 784.733363][T15246] usb 6-1: Manufacturer: syz [ 784.746745][T15246] usb 6-1: SerialNumber: syz [ 784.766444][T15246] usb 6-1: config 0 descriptor?? [ 784.980193][T15246] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 785.029282][T15507] binder: BINDER_SET_CONTEXT_MGR already set [ 785.035341][T15507] binder: 15504:15507 ioctl 4018620d 200000000140 returned -16 [ 785.601193][T15246] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 785.868318][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 785.897101][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 785.932658][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 785.959112][ T10] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 785.984373][ T10] usb 5-1: USB disconnect, device number 122 [ 786.087929][T15521] syzkaller1: entered promiscuous mode [ 786.093439][T15521] syzkaller1: entered allmulticast mode [ 786.736678][ T5819] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 786.900795][ T5819] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 786.913939][ T5819] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 786.976166][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.992126][ T5819] usb 3-1: Product: syz [ 786.999746][ T5819] usb 3-1: Manufacturer: syz [ 787.009700][ T5819] usb 3-1: SerialNumber: syz [ 787.034944][ T5819] usb 3-1: config 0 descriptor?? [ 787.048239][ T5819] ims_pcu 3-1:0.0: Missing CDC union descriptor [ 787.054629][ T5819] ims_pcu 3-1:0.0: probe with driver ims_pcu failed with error -22 [ 787.343048][ T5819] usb 6-1: USB disconnect, device number 93 [ 787.466842][ T10] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 787.616970][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 787.626084][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.640528][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.686011][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 787.710744][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.791657][ T10] usb 5-1: config 0 descriptor?? [ 787.801666][ T10] hub 5-1:0.0: USB hub found [ 788.007642][ T10] hub 5-1:0.0: 1 port detected [ 788.436861][ T5819] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 788.626287][ T5819] usb 2-1: Using ep0 maxpacket: 16 [ 788.626305][T15247] hub 5-1:0.0: activate --> -90 [ 788.662123][ T5819] usb 2-1: config 0 has no interfaces? [ 788.673001][ T5819] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 788.692698][ T5819] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 788.708326][ T5819] usb 2-1: Manufacturer: syz [ 788.735551][ T5819] usb 2-1: config 0 descriptor?? [ 788.954325][T15564] netlink: 'syz.5.2592': attribute type 10 has an invalid length. [ 788.966232][T15564] macvlan0: entered promiscuous mode [ 788.980624][T15564] team0: Port device macvlan0 added [ 789.001865][ T10] usb 2-1: USB disconnect, device number 8 [ 789.352049][ T10] usb 3-1: USB disconnect, device number 38 [ 789.409417][T15246] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 789.574781][T15246] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 789.588148][T15246] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.599841][T15246] usb 1-1: config 0 descriptor?? [ 789.633552][T15246] cp210x 1-1:0.0: cp210x converter detected [ 789.718290][ T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 789.917294][ T2123] bond0: (slave bond_slave_0): interface is now down [ 789.926683][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 789.930046][ T2123] bond0: (slave bond_slave_1): interface is now down [ 789.934754][ T10] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 789.951226][ T2123] bond0: now running without any active interface! [ 789.985911][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 790.033561][ T10] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 790.052802][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.071768][ T10] usb 3-1: config 0 descriptor?? [ 790.213302][T15246] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 790.226944][T15246] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 790.244044][T15246] usb 1-1: cp210x converter now attached to ttyUSB0 [ 790.265542][T15246] usb 1-1: USB disconnect, device number 17 [ 790.281510][T15246] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 790.294638][T15246] cp210x 1-1:0.0: device disconnected [ 790.314991][T15586] fuse: Bad value for 'fd' [ 790.396822][ T129] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 790.497449][T15247] usb 5-1-port1: cannot disable (err = -110) [ 790.505693][ T10] nzxt-smart2 0003:1E71:2009.0032: unknown main item tag 0x0 [ 790.520931][ T10] nzxt-smart2 0003:1E71:2009.0032: unknown main item tag 0x0 [ 790.530894][ T10] nzxt-smart2 0003:1E71:2009.0032: unknown main item tag 0x0 [ 790.546158][ T10] nzxt-smart2 0003:1E71:2009.0032: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 790.576933][ T129] usb 2-1: Using ep0 maxpacket: 16 [ 790.588666][ T129] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 790.608998][ T129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.632032][ T129] usb 2-1: Product: syz [ 790.643192][ T129] usb 2-1: Manufacturer: syz [ 790.671926][ T129] usb 2-1: SerialNumber: syz [ 790.696183][ T129] usb 2-1: config 0 descriptor?? [ 790.715071][ T129] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 791.074370][ T5819] usb 3-1: USB disconnect, device number 39 [ 791.156395][T15601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2606'. [ 791.157850][ T129] usb 5-1: USB disconnect, device number 123 [ 791.236723][T15274] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 791.397042][T15274] usb 1-1: Using ep0 maxpacket: 16 [ 791.412069][T15274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 791.435300][T15274] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 791.444936][T15274] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.453516][T15274] usb 1-1: Product: syz [ 791.461214][T15274] usb 1-1: Manufacturer: syz [ 791.465948][T15274] usb 1-1: SerialNumber: syz [ 791.474130][T15274] usb 1-1: config 0 descriptor?? [ 791.486124][T15274] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 791.498369][T15274] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 791.887203][ T5819] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 792.036953][ T5819] usb 5-1: device descriptor read/64, error -71 [ 792.112878][T15274] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 792.157044][ T129] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 792.286735][ T5819] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 792.296263][T15613] syzkaller0: entered promiscuous mode [ 792.302276][T15613] syzkaller0: entered allmulticast mode [ 792.309047][ T129] usb 6-1: Using ep0 maxpacket: 8 [ 792.319277][ T129] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 792.328284][ T129] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 792.339786][ T129] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 792.350425][ T129] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 792.361112][ T129] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 792.384743][ T129] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 792.394315][ T129] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.447082][ T5819] usb 5-1: device descriptor read/64, error -71 [ 792.544627][T15274] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 792.553410][T15274] em28xx 1-1:0.0: board has no eeprom [ 792.559326][ T5819] usb usb5-port1: attempt power cycle [ 792.615665][ T129] usb 6-1: GET_CAPABILITIES returned 0 [ 792.624315][ T129] usbtmc 6-1:16.0: can't read capabilities [ 792.629001][T15617] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2611'. [ 792.906744][ T5819] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 792.937245][ T5819] usb 5-1: device descriptor read/8, error -71 [ 793.097450][T15275] usb 2-1: USB disconnect, device number 9 [ 793.276689][ T5819] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 793.276720][T14862] Bluetooth: hci0: command 0x0406 tx timeout [ 793.377603][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 793.386960][ T5819] usb 5-1: device descriptor read/8, error -71 [ 793.496971][ T5819] usb usb5-port1: unable to enumerate USB device [ 793.575750][T15622] fuse: Bad value for 'fd' [ 793.686732][T15274] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 793.698119][T15274] em28xx 1-1:0.0: dvb set to bulk mode. [ 793.714673][ T5819] em28xx 1-1:0.0: Binding DVB extension [ 793.743391][T15274] usb 1-1: USB disconnect, device number 18 [ 793.792316][T15274] em28xx 1-1:0.0: Disconnecting em28xx [ 793.864233][T15629] fuse: Bad value for 'group_id' [ 793.873807][ T5819] em28xx 1-1:0.0: Registering input extension [ 793.874917][T15629] fuse: Bad value for 'group_id' [ 793.888595][T15274] em28xx 1-1:0.0: Closing input extension [ 793.906187][T15629] fuse: Unknown parameter '0xffffffffffffffff' [ 793.918185][T15274] em28xx 1-1:0.0: Freeing device [ 793.962777][T15632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2615'. [ 794.120555][T15639] loop2: detected capacity change from 0 to 7 [ 794.129845][T15639] Dev loop2: unable to read RDB block 7 [ 794.135451][T15639] loop2: unable to read partition table [ 794.141630][T15639] loop2: partition table beyond EOD, truncated [ 794.149386][T15639] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 794.169254][ T5199] Dev loop2: unable to read RDB block 7 [ 794.174856][ T5199] loop2: unable to read partition table [ 794.182018][ T5199] loop2: partition table beyond EOD, truncated [ 794.256703][T15275] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 794.432048][T15275] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 794.455645][T15275] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 794.472597][T15275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.490413][T15275] usb 3-1: config 0 descriptor?? [ 794.506367][T15275] pwc: Askey VC010 type 2 USB webcam detected. [ 794.701371][ T129] usb 6-1: USB disconnect, device number 94 [ 794.930635][T15275] pwc: recv_control_msg error -32 req 02 val 2b00 [ 794.966695][T15246] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 794.995868][T15275] pwc: recv_control_msg error -71 req 02 val 2700 [ 795.025755][T15275] pwc: recv_control_msg error -71 req 02 val 2c00 [ 795.048879][T15275] pwc: recv_control_msg error -71 req 04 val 1000 [ 795.087147][ T129] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 795.106360][T15275] pwc: recv_control_msg error -71 req 04 val 1300 [ 795.144724][T15275] pwc: recv_control_msg error -71 req 04 val 1400 [ 795.179916][T15275] pwc: recv_control_msg error -71 req 02 val 2000 [ 795.208000][T15275] pwc: recv_control_msg error -71 req 02 val 2100 [ 795.235156][T15275] pwc: recv_control_msg error -71 req 04 val 1500 [ 795.255168][T15275] pwc: recv_control_msg error -71 req 02 val 2500 [ 795.263391][ T5819] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 795.274698][T15275] pwc: recv_control_msg error -71 req 02 val 2400 [ 795.334707][T15246] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 795.368525][T15246] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 795.387794][T14862] Bluetooth: hci0: command 0x0406 tx timeout [ 795.436767][T15246] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 795.437068][T15275] pwc: recv_control_msg error -71 req 02 val 2600 [ 795.452671][T15246] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.461414][T15246] usb 1-1: Product: syz [ 795.465608][T15246] usb 1-1: Manufacturer: syz [ 795.471506][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 795.487822][ T5819] usb 5-1: Using ep0 maxpacket: 16 [ 795.493080][T15246] usb 1-1: SerialNumber: syz [ 795.506000][ T5819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 795.518123][ T5819] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 795.531923][T15275] pwc: recv_control_msg error -71 req 02 val 2900 [ 795.538911][ T5819] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 795.550916][T15275] pwc: recv_control_msg error -71 req 02 val 2800 [ 795.566843][ T129] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 795.590604][T15246] usb 1-1: config 0 descriptor?? [ 795.611867][T15275] pwc: recv_control_msg error -71 req 04 val 1100 [ 795.648437][T15246] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 795.657791][ T5819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.709970][T15275] pwc: recv_control_msg error -71 req 04 val 1200 [ 795.739277][ T5819] usb 5-1: config 0 descriptor?? [ 795.745578][T15275] pwc: Registered as video103. [ 795.776986][ T3823] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 795.867309][T15275] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input80 [ 795.923960][T15275] usb 3-1: USB disconnect, device number 40 [ 796.269945][ T5819] HID 045e:07da: Invalid code 65791 type 1 [ 796.279623][ T5819] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0033/input/input81 [ 796.327645][ T5819] microsoft 0003:045E:07DA.0033: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 796.453545][T15682] vivid-002: disconnect [ 796.582333][T15678] vivid-002: reconnect [ 796.821377][T14612] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 796.852632][T14612] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 797.402563][T15688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.415116][T15688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.494926][T15246] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 797.716756][ T5819] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 797.946707][ T5819] usb 6-1: Using ep0 maxpacket: 8 [ 797.959635][ T5819] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 797.972709][ T5819] usb 6-1: config 0 has no interface number 0 [ 797.998253][ T5819] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 798.030430][ T5819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.067964][ T5819] usb 6-1: Product: syz [ 798.082075][ T5819] usb 6-1: Manufacturer: syz [ 798.102317][ T5819] usb 6-1: SerialNumber: syz [ 798.146969][ T5819] usb 6-1: config 0 descriptor?? [ 798.323140][T15246] usb 1-1: USB disconnect, device number 19 [ 798.362933][ T5819] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 798.399886][ T5819] uvcvideo 6-1:0.31: No valid video chain found. [ 798.465961][ T5819] usb 6-1: USB disconnect, device number 95 [ 798.642282][T15274] usb 5-1: USB disconnect, device number 2 [ 799.116700][T15274] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 799.236712][ T129] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 799.275706][T15699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2636'. [ 799.284670][T15274] usb 5-1: Using ep0 maxpacket: 32 [ 799.356821][T15704] netlink: 'syz.5.2637': attribute type 7 has an invalid length. [ 799.404118][T15274] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 799.436828][ T129] usb 3-1: device descriptor read/64, error -71 [ 799.457035][T15274] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 799.470564][T15699] veth7: entered allmulticast mode [ 799.502274][T15274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 799.524822][T15274] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 799.536905][T15274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 799.559086][T15274] usb 5-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 799.629268][T15274] usb 5-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 799.717507][ T129] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 799.888879][T15274] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.913959][T15274] usb 5-1: Product: syz [ 799.923039][T15274] usb 5-1: Manufacturer: syz [ 799.931271][T15274] usb 5-1: SerialNumber: syz [ 799.945604][T15274] usb 5-1: config 0 descriptor?? [ 799.956865][T15693] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 799.968239][T15274] pn533_usb 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 799.996746][ T129] usb 3-1: device descriptor read/64, error -71 [ 800.089348][ T30] audit: type=1326 audit(1766807322.309:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15707 comm="syz.1.2638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 800.117485][ T129] usb usb3-port1: attempt power cycle [ 800.136884][ T30] audit: type=1326 audit(1766807322.309:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15707 comm="syz.1.2638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 800.167009][T15274] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 800.167800][ T30] audit: type=1326 audit(1766807322.309:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15707 comm="syz.1.2638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 800.207057][ T30] audit: type=1326 audit(1766807322.309:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15707 comm="syz.1.2638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 800.257887][T15246] usb 5-1: USB disconnect, device number 3 [ 800.320143][T15274] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.338395][T15274] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 800.350449][T15274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.372374][T15274] usb 1-1: config 0 descriptor?? [ 800.413975][T15274] pwc: Askey VC010 type 2 USB webcam detected. [ 800.466888][ T129] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 800.498771][ T129] usb 3-1: device descriptor read/8, error -71 [ 800.746907][ T129] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 800.767580][ T129] usb 3-1: device descriptor read/8, error -71 [ 800.819291][T15274] pwc: recv_control_msg error -32 req 02 val 2b00 [ 800.826017][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 800.849099][T15274] pwc: recv_control_msg error -32 req 02 val 2700 [ 800.855891][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 800.863458][T15274] pwc: recv_control_msg error -32 req 02 val 2c00 [ 800.877345][ T129] usb usb3-port1: unable to enumerate USB device [ 800.884110][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 800.891410][T15274] pwc: recv_control_msg error -32 req 04 val 1000 [ 800.898406][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 800.905647][T15274] pwc: recv_control_msg error -32 req 04 val 1300 [ 800.913227][T15274] pwc: recv_control_msg error -71 req 04 val 1400 [ 800.920229][T15274] pwc: recv_control_msg error -71 req 02 val 2000 [ 800.938553][T15274] pwc: recv_control_msg error -71 req 02 val 2100 [ 800.946018][T15274] pwc: recv_control_msg error -71 req 04 val 1500 [ 800.970706][T15274] pwc: recv_control_msg error -71 req 02 val 2500 [ 800.981363][T15274] pwc: recv_control_msg error -71 req 02 val 2400 [ 800.992876][T15274] pwc: recv_control_msg error -71 req 02 val 2600 [ 801.007175][T15274] pwc: recv_control_msg error -71 req 02 val 2900 [ 801.017088][T15274] pwc: recv_control_msg error -71 req 02 val 2800 [ 801.036723][T15274] pwc: recv_control_msg error -71 req 04 val 1100 [ 801.048001][T15274] pwc: recv_control_msg error -71 req 04 val 1200 [ 801.086224][T15274] pwc: Registered as video103. [ 801.096079][T15274] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input82 [ 801.168249][T15274] usb 1-1: USB disconnect, device number 20 [ 801.281721][ T129] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 801.296859][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 801.439525][ T129] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 801.449026][ T129] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.468351][ T129] usb 5-1: config 0 descriptor?? [ 801.493149][ T129] cp210x 5-1:0.0: cp210x converter detected [ 801.555714][T15729] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 801.565825][T15729] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 801.716711][ T129] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 801.738710][ T129] cp210x 5-1:0.0: querying part number failed [ 801.750314][ T129] usb 5-1: cp210x converter now attached to ttyUSB0 [ 802.059144][ T129] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 802.231682][T15736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.249556][T15736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.264568][T15750] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 802.288948][ T129] usb 2-1: unable to get BOS descriptor or descriptor too short [ 802.299532][ T129] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 802.312630][ T129] usb 2-1: can't read configurations, error -71 [ 802.773385][ T30] audit: type=1326 audit(1766807324.989:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15748 comm="syz.5.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3288f8f749 code=0x7ffc0000 [ 802.801479][T15752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 802.909044][ T30] audit: type=1326 audit(1766807324.989:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15748 comm="syz.5.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3288f8f749 code=0x7ffc0000 [ 803.008898][ T30] audit: type=1326 audit(1766807324.989:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15748 comm="syz.5.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3288f8f749 code=0x7ffc0000 [ 803.040334][ T30] audit: type=1326 audit(1766807324.989:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15748 comm="syz.5.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3288f8f749 code=0x7ffc0000 [ 803.820819][ T30] audit: type=1326 audit(1766807326.039:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15771 comm="syz.1.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 803.998249][T15274] usb 5-1: USB disconnect, device number 4 [ 804.008947][T15274] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 804.048978][ T30] audit: type=1326 audit(1766807326.039:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15771 comm="syz.1.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 804.049477][T15274] cp210x 5-1:0.0: device disconnected [ 804.377226][ T129] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 804.516708][ T129] usb 2-1: device descriptor read/64, error -71 [ 804.766718][ T129] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 804.945743][T15799] binder: 15796:15799 ioctl 4018620d 0 returned -22 [ 805.146752][ T129] usb 2-1: device descriptor read/64, error -71 [ 805.276372][ T129] usb usb2-port1: attempt power cycle [ 805.381483][T15799] binder: 15796:15799 ioctl d000941e 0 returned -22 [ 805.626886][ T129] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 805.647366][ T129] usb 2-1: device descriptor read/8, error -71 [ 805.886835][ T129] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 805.907436][ T129] usb 2-1: device descriptor read/8, error -71 [ 806.017822][ T129] usb usb2-port1: unable to enumerate USB device [ 806.562919][T15813] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2672'. [ 806.615532][T15813] bond0: ARP target 128.0.0.0 is already present [ 806.637054][T15813] bond0: option arp_ip_target: invalid value (128) [ 806.706946][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 807.195494][ T10] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 807.204812][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.231149][ T10] usb 1-1: config 0 descriptor?? [ 807.245429][ T10] cp210x 1-1:0.0: cp210x converter detected [ 807.256460][T15823] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 807.304252][T15823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 807.447743][ T10] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 807.455579][ T10] cp210x 1-1:0.0: querying part number failed [ 807.490024][ T10] usb 1-1: cp210x converter now attached to ttyUSB0 [ 808.660320][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.666966][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.776835][ T5819] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 808.985394][ T5819] usb 2-1: Using ep0 maxpacket: 8 [ 808.998980][T15852] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 809.016152][ T5819] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 809.028551][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.036792][ T5819] usb 2-1: Product: syz [ 809.041172][ T5819] usb 2-1: Manufacturer: syz [ 809.053865][ T5819] usb 2-1: SerialNumber: syz [ 809.092924][ T5819] usb 2-1: config 0 descriptor?? [ 809.120773][ T5819] gspca_main: sq905-2.14.0 probing 2770:9120 [ 809.136302][T15855] loop5: detected capacity change from 0 to 3 [ 809.160868][T15855] Dev loop5: unable to read RDB block 3 [ 809.166930][T15855] loop5: unable to read partition table [ 809.173722][T15855] loop5: partition table beyond EOD, truncated [ 809.199083][T15855] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 809.276706][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 809.426913][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 809.441150][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 809.451738][ T10] usb 5-1: config 0 has no interface number 0 [ 809.464324][ T10] usb 5-1: too many endpoints for config 0 interface 1 altsetting 1: 128, using maximum allowed: 30 [ 809.494770][ T10] usb 5-1: config 0 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 809.521389][T15246] usb 1-1: USB disconnect, device number 21 [ 809.534108][T15246] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 809.554166][T15246] cp210x 1-1:0.0: device disconnected [ 809.561092][ T10] usb 5-1: config 0 interface 1 has no altsetting 0 [ 809.594595][ T10] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 809.616460][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.629482][ T10] usb 5-1: Product: syz [ 809.633783][ T10] usb 5-1: Manufacturer: syz [ 809.642073][ T10] usb 5-1: SerialNumber: syz [ 809.646968][ T129] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 809.677431][ T10] usb 5-1: config 0 descriptor?? [ 809.709319][ T10] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 809.788658][ T129] usb 6-1: device descriptor read/64, error -71 [ 809.856988][ T5833] Bluetooth: hci4: command 0x0c1a tx timeout [ 809.926391][ T5819] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 809.936223][ T5819] sq905 2-1:0.0: probe with driver sq905 failed with error -71 [ 809.936803][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 809.978184][ T5819] usb 2-1: USB disconnect, device number 16 [ 810.026971][ T129] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 810.106801][T15247] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 810.115311][T15246] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 810.166786][ T129] usb 6-1: device descriptor read/64, error -71 [ 810.216990][ T10] gspca_spca1528: reg_w err -110 [ 810.236759][ T10] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 810.248185][T15246] usb 3-1: device descriptor read/64, error -71 [ 810.266819][T15247] usb 1-1: Using ep0 maxpacket: 32 [ 810.274219][T15247] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.289434][ T129] usb usb6-port1: attempt power cycle [ 810.296089][T15247] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.310494][T15247] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 810.320095][T15247] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.368442][T15247] usb 1-1: config 0 descriptor?? [ 810.377033][T15247] hub 1-1:0.0: USB hub found [ 810.497410][T15246] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 810.582429][T15247] hub 1-1:0.0: 1 port detected [ 810.626769][ T129] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 810.638187][T15246] usb 3-1: device descriptor read/64, error -71 [ 810.667410][ T129] usb 6-1: device descriptor read/8, error -71 [ 810.757829][T15246] usb usb3-port1: attempt power cycle [ 810.916917][ T129] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 811.017339][ T129] usb 6-1: device descriptor read/8, error -71 [ 811.127223][ T129] usb usb6-port1: unable to enumerate USB device [ 811.136841][T15246] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 811.167685][T15246] usb 3-1: device descriptor read/8, error -71 [ 811.200171][T15247] hub 1-1:0.0: activate --> -90 [ 811.417029][T15246] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 811.477243][T15246] usb 3-1: device descriptor read/8, error -71 [ 811.587484][T15246] usb usb3-port1: unable to enumerate USB device [ 811.817925][T15246] usb 5-1: USB disconnect, device number 5 [ 811.939691][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 812.317706][T15246] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 812.416124][T15246] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 812.577046][ T5819] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 812.763738][ T5819] usb 2-1: Using ep0 maxpacket: 32 [ 812.847441][T15275] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 812.858511][ T5819] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 812.893150][ T5819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 812.897339][T15247] usb 1-1-port1: cannot disable (err = -110) [ 812.935973][ T5819] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 812.951834][ T5819] usb 2-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 812.966551][ T5819] usb 2-1: Product: syz [ 812.975417][ T5819] usb 2-1: Manufacturer: syz [ 812.988216][T15910] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2699'. [ 813.005323][ T5819] usb 2-1: SerialNumber: syz [ 813.028516][T15275] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 813.100976][ T5819] usb 2-1: config 0 descriptor?? [ 813.111489][T15275] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.132409][T15275] usb 6-1: config 0 descriptor?? [ 813.156397][T15275] cp210x 6-1:0.0: cp210x converter detected [ 813.162272][T15915] loop5: detected capacity change from 0 to 7 [ 813.175620][T15915] Dev loop5: unable to read RDB block 7 [ 813.182216][T15915] loop5: unable to read partition table [ 813.187198][ T5819] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 813.200051][T15915] loop5: partition table beyond EOD, truncated [ 813.230981][T15915] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 813.406958][T15275] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 813.445609][T15275] cp210x 6-1:0.0: querying part number failed [ 813.462761][T15275] usb 6-1: cp210x converter now attached to ttyUSB0 [ 813.480067][T15894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.498001][T15919] netlink: 'syz.2.2701': attribute type 21 has an invalid length. [ 813.522025][T15894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.950221][T15274] usb 1-1: USB disconnect, device number 22 [ 813.996871][T15925] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 814.627680][T14612] usb 2-1: Failed to submit usb control message: -110 [ 814.664722][T15928] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2703'. [ 814.678088][T14612] usb 2-1: unable to send the bmi data to the device: -110 [ 814.691074][T14612] usb 2-1: unable to get target info from device [ 814.703914][T14612] usb 2-1: could not get target info (-110) [ 814.713469][T14612] usb 2-1: could not probe fw (-110) [ 815.237211][T15925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 815.496779][T15274] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 815.551357][T15247] usb 2-1: USB disconnect, device number 17 [ 815.684603][T15246] usb 6-1: USB disconnect, device number 100 [ 815.697686][T15274] usb 5-1: Using ep0 maxpacket: 16 [ 815.702139][T15246] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 815.705942][T15274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 815.754592][T15274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 815.765273][T15274] usb 5-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 815.789623][T15274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.815466][T15246] cp210x 6-1:0.0: device disconnected [ 815.857392][T15274] usb 5-1: config 0 descriptor?? [ 816.349136][T15952] FAULT_INJECTION: forcing a failure. [ 816.349136][T15952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 816.372815][T15952] CPU: 1 UID: 0 PID: 15952 Comm: syz.0.2710 Tainted: G L syzkaller #0 PREEMPT(full) [ 816.372835][T15952] Tainted: [L]=SOFTLOCKUP [ 816.372843][T15952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 816.372850][T15952] Call Trace: [ 816.372856][T15952] [ 816.372862][T15952] dump_stack_lvl+0xe8/0x150 [ 816.372883][T15952] should_fail_ex+0x414/0x560 [ 816.372903][T15952] _copy_to_user+0x31/0xb0 [ 816.372918][T15952] simple_read_from_buffer+0xe1/0x170 [ 816.372934][T15952] proc_fail_nth_read+0x1b3/0x220 [ 816.372947][T15952] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 816.372960][T15952] ? rw_verify_area+0x2a6/0x4d0 [ 816.372976][T15952] ? tun_chr_write_iter+0xe0/0x200 [ 816.372988][T15952] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 816.372999][T15952] vfs_read+0x200/0xa30 [ 816.373018][T15952] ? fdget_pos+0x247/0x320 [ 816.373036][T15952] ? __pfx___mutex_lock+0x10/0x10 [ 816.373056][T15952] ? __pfx_vfs_read+0x10/0x10 [ 816.373074][T15952] ? __fget_files+0x2a/0x420 [ 816.373100][T15952] ? __fget_files+0x3a0/0x420 [ 816.373120][T15952] ? __fget_files+0x2a/0x420 [ 816.373149][T15952] ksys_read+0x145/0x250 [ 816.373177][T15952] ? __pfx_ksys_read+0x10/0x10 [ 816.373196][T15952] do_syscall_64+0xec/0xf80 [ 816.373215][T15952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.373231][T15952] ? trace_irq_disable+0x37/0x100 [ 816.373259][T15952] ? clear_bhb_loop+0x60/0xb0 [ 816.373281][T15952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.373301][T15952] RIP: 0033:0x7f1dd298e15c [ 816.373318][T15952] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 816.373335][T15952] RSP: 002b:00007f1dd38ad030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 816.373356][T15952] RAX: ffffffffffffffda RBX: 00007f1dd2be5fa0 RCX: 00007f1dd298e15c [ 816.373373][T15952] RDX: 000000000000000f RSI: 00007f1dd38ad0a0 RDI: 0000000000000003 [ 816.373384][T15952] RBP: 00007f1dd38ad090 R08: 0000000000000000 R09: 0000000000000000 [ 816.373395][T15952] R10: 0000000000000042 R11: 0000000000000246 R12: 0000000000000001 [ 816.373406][T15952] R13: 00007f1dd2be6038 R14: 00007f1dd2be5fa0 R15: 00007f1dd2d0fa28 [ 816.373432][T15952] [ 816.810903][T15274] zeroplus 0003:0C12:0030.0034: hidraw0: USB HID v0.00 Device [HID 0c12:0030] on usb-dummy_hcd.4-1/input0 [ 816.822555][T15274] zeroplus 0003:0C12:0030.0034: no inputs found [ 816.990012][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 816.990034][ T30] audit: type=1326 audit(1766807339.129:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15954 comm="syz.1.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 817.025580][T15963] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 817.124400][T15963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 817.139614][T15274] usb 5-1: USB disconnect, device number 6 [ 817.170014][ T30] audit: type=1326 audit(1766807339.129:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15954 comm="syz.1.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 817.239873][ T30] audit: type=1326 audit(1766807339.129:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15954 comm="syz.1.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 817.326735][T15246] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 817.400616][ T30] audit: type=1326 audit(1766807339.139:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15954 comm="syz.1.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 817.503666][ T30] audit: type=1326 audit(1766807339.139:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15954 comm="syz.1.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 817.538139][ T5819] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 817.548294][T15246] usb 3-1: Using ep0 maxpacket: 32 [ 817.555680][T15966] fido_id[15966]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 817.574363][T15246] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.586627][T15246] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 817.626847][T15246] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 817.635969][ T30] audit: type=1326 audit(1766807339.139:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15954 comm="syz.1.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 817.665745][T15246] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.692995][T15246] usb 3-1: config 0 descriptor?? [ 817.698069][ T5819] usb 2-1: Using ep0 maxpacket: 16 [ 817.724536][ T30] audit: type=1326 audit(1766807339.139:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15954 comm="syz.1.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 817.748588][ T30] audit: type=1326 audit(1766807339.139:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15954 comm="syz.1.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 817.772913][T15246] hub 3-1:0.0: USB hub found [ 817.813314][ T5819] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 817.822535][ T5819] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 817.833126][ T30] audit: type=1326 audit(1766807339.139:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15954 comm="syz.1.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 817.886186][ T5819] usb 2-1: config 0 has no interface number 0 [ 817.940886][ T30] audit: type=1326 audit(1766807339.139:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15954 comm="syz.1.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 817.987889][T15246] hub 3-1:0.0: 1 port detected [ 818.052396][ T5819] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 818.070552][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.094053][ T5819] usb 2-1: Product: syz [ 818.111361][ T5819] usb 2-1: Manufacturer: syz [ 818.145736][ T5819] usb 2-1: SerialNumber: syz [ 818.171853][ T5819] usb 2-1: config 0 descriptor?? [ 818.224910][ T5819] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 818.256048][ T5819] uvcvideo 2-1:0.105: No valid video chain found. [ 818.469655][T15974] vlan2: entered allmulticast mode [ 818.536809][ T5819] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 818.555224][T15961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.578414][T15961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.592909][T15246] hub 3-1:0.0: activate --> -90 [ 818.698103][ T5819] usb 5-1: Using ep0 maxpacket: 8 [ 818.738242][ T5819] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 818.774067][ T5819] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 818.836768][ T5819] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 818.903897][ T5819] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 818.934249][ T5819] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 818.955621][ T5819] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 819.134619][ T5819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.196816][T15274] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 819.282528][T15982] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2718'. [ 819.359475][T15274] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 819.373836][T15274] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.429133][T15274] usb 6-1: config 0 descriptor?? [ 819.438633][ T5819] usb 5-1: GET_CAPABILITIES returned 0 [ 819.444748][ T5819] usbtmc 5-1:16.0: can't read capabilities [ 819.467256][T15274] cp210x 6-1:0.0: cp210x converter detected [ 819.872668][T15274] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 819.904480][T15274] usb 6-1: cp210x converter now attached to ttyUSB0 [ 819.936798][T15247] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 820.094136][T15274] usb 6-1: USB disconnect, device number 101 [ 820.104634][T15274] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 820.136286][T15274] cp210x 6-1:0.0: device disconnected [ 820.149694][T15247] usb 1-1: config index 0 descriptor too short (expected 43839, got 27) [ 820.164435][T15247] usb 1-1: config 2 has an invalid descriptor of length 76, skipping remainder of the config [ 820.191737][T15247] usb 1-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 820.215483][T15247] usb 1-1: New USB device found, idVendor=9be0, idProduct=0815, bcdDevice=7e.66 [ 820.225791][T15247] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.239299][T15247] usb 1-1: Product: syz [ 820.245863][T15247] usb 1-1: Manufacturer: syz [ 820.253931][T15247] usb 1-1: SerialNumber: syz [ 820.337207][T15246] usb 3-1-port1: cannot disable (err = -110) [ 820.529353][T15274] usb 1-1: USB disconnect, device number 23 [ 820.715080][T15246] usb 2-1: USB disconnect, device number 18 [ 820.730093][T15990] FAULT_INJECTION: forcing a failure. [ 820.730093][T15990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 820.756330][T15990] CPU: 1 UID: 0 PID: 15990 Comm: syz.5.2720 Tainted: G L syzkaller #0 PREEMPT(full) [ 820.756363][T15990] Tainted: [L]=SOFTLOCKUP [ 820.756370][T15990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 820.756381][T15990] Call Trace: [ 820.756390][T15990] [ 820.756399][T15990] dump_stack_lvl+0xe8/0x150 [ 820.756429][T15990] should_fail_ex+0x414/0x560 [ 820.756464][T15990] _copy_from_user+0x2d/0xb0 [ 820.756489][T15990] kstrtouint_from_user+0xc4/0x170 [ 820.756512][T15990] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 820.756548][T15990] proc_fail_nth_write+0x88/0x200 [ 820.756570][T15990] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 820.756597][T15990] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 820.756618][T15990] vfs_write+0x27e/0xb30 [ 820.756645][T15990] ? __pfx_vfs_write+0x10/0x10 [ 820.756664][T15990] ? __fget_files+0x2a/0x420 [ 820.756691][T15990] ? __fget_files+0x3a0/0x420 [ 820.756714][T15990] ? __fget_files+0x2a/0x420 [ 820.756745][T15990] ksys_write+0x145/0x250 [ 820.756763][T15990] ? __fget_files+0x3a0/0x420 [ 820.756787][T15990] ? __pfx_ksys_write+0x10/0x10 [ 820.756818][T15990] do_syscall_64+0xec/0xf80 [ 820.756837][T15990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.756854][T15990] ? trace_irq_disable+0x37/0x100 [ 820.756880][T15990] ? clear_bhb_loop+0x60/0xb0 [ 820.756902][T15990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.756917][T15990] RIP: 0033:0x7f3288f8e1ff [ 820.756933][T15990] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 820.756948][T15990] RSP: 002b:00007f3289e24030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 820.756967][T15990] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3288f8e1ff [ 820.756981][T15990] RDX: 0000000000000001 RSI: 00007f3289e240a0 RDI: 0000000000000003 [ 820.756995][T15990] RBP: 00007f3289e24090 R08: 0000000000000000 R09: 0000000000000000 [ 820.757008][T15990] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 820.757019][T15990] R13: 00007f32891e6038 R14: 00007f32891e5fa0 R15: 00007f328930fa28 [ 820.757052][T15990] [ 821.234039][T15247] usb 3-1: USB disconnect, device number 49 [ 821.494631][T16004] pimreg: entered allmulticast mode [ 821.505385][T16004] pimreg: left allmulticast mode [ 821.773165][ T5819] usb 5-1: USB disconnect, device number 7 [ 821.953174][T16007] cgroup: fork rejected by pids controller in /syz2 [ 822.908116][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 822.908134][ T30] audit: type=1326 audit(1766807345.129:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16319 comm="syz.5.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3288f8f749 code=0x7ffc0000 [ 823.016843][ T30] audit: type=1326 audit(1766807345.159:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16319 comm="syz.5.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3288f8f749 code=0x7ffc0000 [ 823.104926][ T30] audit: type=1326 audit(1766807345.159:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16319 comm="syz.5.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3288f8f749 code=0x7ffc0000 [ 823.820989][T16446] bond3: option ad_user_port_key: invalid value (45708) [ 823.829690][T16446] bond3: option ad_user_port_key: allowed values 0 - 1023 [ 823.847466][T16446] bond3 (unregistering): Released all slaves [ 825.086685][ T30] audit: type=1326 audit(1766807347.299:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16519 comm="syz.1.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 825.137569][ T30] audit: type=1326 audit(1766807347.299:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16519 comm="syz.1.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 825.216042][ T30] audit: type=1326 audit(1766807347.299:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16519 comm="syz.1.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 825.273759][ T30] audit: type=1326 audit(1766807347.309:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16519 comm="syz.1.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 825.331753][T16526] vlan0: entered promiscuous mode [ 825.334336][ T30] audit: type=1326 audit(1766807347.309:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16519 comm="syz.1.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 825.357215][T16526] bond0: entered promiscuous mode [ 825.385964][T16526] bond_slave_0: entered promiscuous mode [ 825.399744][ T30] audit: type=1326 audit(1766807347.309:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16519 comm="syz.1.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 825.402405][T16526] bond_slave_1: entered promiscuous mode [ 825.456486][ T30] audit: type=1326 audit(1766807347.309:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16519 comm="syz.1.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 825.637475][T16529] program syz.5.2785 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 825.667327][T16529] program syz.5.2785 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 825.676947][T16529] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 825.697806][T16529] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2785'. [ 825.992819][T16541] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2790'. [ 826.483425][T16569] lo: entered allmulticast mode [ 826.495689][T16569] pimreg: entered allmulticast mode [ 826.526207][T16568] lo: left allmulticast mode [ 826.810672][T16585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2812'. [ 827.035012][T16595] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2816'. [ 827.052724][T16593] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.2817' sets config #0 [ 827.069839][T16593] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.2817' sets config #1 [ 827.077242][ T5819] usb 3-1: new low-speed USB device number 50 using dummy_hcd [ 827.096881][T16595] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2816'. [ 827.127642][T16596] hub 2-0:1.0: USB hub found [ 827.134768][T16596] hub 2-0:1.0: 1 port detected [ 827.247437][ T5819] usb 3-1: device descriptor read/64, error -71 [ 827.404499][T16607] tipc: Enabling of bearer rejected, failed to enable media [ 827.496717][ T5819] usb 3-1: new low-speed USB device number 51 using dummy_hcd [ 827.627669][ T5819] usb 3-1: device descriptor read/64, error -71 [ 827.747098][ T5819] usb usb3-port1: attempt power cycle [ 827.801942][T16623] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2831'. [ 827.821483][T16623] unsupported nla_type 24929 [ 827.856846][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 827.924682][T16633] xt_hashlimit: max too large, truncated to 1048576 [ 827.931701][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 827.931717][ T30] audit: type=1326 audit(1766807350.139:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16629 comm="syz.4.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956a38f749 code=0x7ffc0000 [ 827.962202][T16633] xt_CT: You must specify a L4 protocol and not use inversions on it [ 827.970355][ T30] audit: type=1326 audit(1766807350.139:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16629 comm="syz.4.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956a38f749 code=0x7ffc0000 [ 827.970727][ T30] audit: type=1326 audit(1766807350.139:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16629 comm="syz.4.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f956a38f749 code=0x7ffc0000 [ 827.970770][ T30] audit: type=1326 audit(1766807350.139:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16629 comm="syz.4.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956a38f749 code=0x7ffc0000 [ 827.970811][ T30] audit: type=1326 audit(1766807350.139:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16629 comm="syz.4.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956a38f749 code=0x7ffc0000 [ 828.063279][ T30] audit: type=1326 audit(1766807350.139:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16629 comm="syz.4.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f956a38f749 code=0x7ffc0000 [ 828.116689][ T5819] usb 3-1: new low-speed USB device number 52 using dummy_hcd [ 828.157492][ T5819] usb 3-1: device descriptor read/8, error -71 [ 828.212554][ T30] audit: type=1326 audit(1766807350.139:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16629 comm="syz.4.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956a38f749 code=0x7ffc0000 [ 828.297036][ T30] audit: type=1326 audit(1766807350.139:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16629 comm="syz.4.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956a38f749 code=0x7ffc0000 [ 828.374777][ T30] audit: type=1326 audit(1766807350.139:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16629 comm="syz.4.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f956a38f749 code=0x7ffc0000 [ 828.410112][ T30] audit: type=1326 audit(1766807350.139:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16629 comm="syz.4.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956a38f749 code=0x7ffc0000 [ 828.439586][ T5819] usb 3-1: new low-speed USB device number 53 using dummy_hcd [ 828.473843][ T5819] usb 3-1: device descriptor read/8, error -71 [ 828.587155][ T5819] usb usb3-port1: unable to enumerate USB device [ 828.704725][ T7494] vivid-000: reconnect [ 828.726941][T16664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2849'. [ 828.735866][T16664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2849'. [ 828.751791][T16664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2849'. [ 828.796162][T16664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2849'. [ 828.956781][T15247] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 828.992830][T16673] bridge3: entered promiscuous mode [ 828.998766][T16673] bridge3: entered allmulticast mode [ 829.086767][T15247] usb 6-1: device descriptor read/64, error -71 [ 829.327045][T15247] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 829.476770][T15247] usb 6-1: device descriptor read/64, error -71 [ 829.587246][T15247] usb usb6-port1: attempt power cycle [ 829.976705][T15247] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 829.997351][T15247] usb 6-1: device descriptor read/8, error -71 [ 830.247093][T15247] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 830.287670][T15247] usb 6-1: device descriptor read/8, error -71 [ 830.417591][T15247] usb usb6-port1: unable to enumerate USB device [ 831.236706][ T5819] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 831.400790][ T5819] usb 6-1: device descriptor read/64, error -71 [ 831.530408][T16719] team_slave_0: left promiscuous mode [ 831.552557][T16719] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 831.577242][T16719] team0 (unregistering): Port device team_slave_0 removed [ 831.595709][T16719] team_slave_1: left promiscuous mode [ 831.613228][T16719] team0 (unregistering): Failed to send options change via netlink (err -105) [ 831.636907][T16719] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 831.656730][ T5819] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 831.667535][T16719] team0 (unregistering): Port device team_slave_1 removed [ 831.787368][ T5819] usb 6-1: device descriptor read/64, error -71 [ 831.827674][T16725] __nla_validate_parse: 5 callbacks suppressed [ 831.827696][T16725] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2874'. [ 831.907986][ T5819] usb usb6-port1: attempt power cycle [ 832.480540][T16736] syzkaller0: entered promiscuous mode [ 832.496832][T16736] syzkaller0: entered allmulticast mode [ 836.240208][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 836.240225][ T30] audit: type=1326 audit(1766807358.459:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16822 comm="syz.1.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 836.392178][ T30] audit: type=1326 audit(1766807358.489:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16822 comm="syz.1.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 836.492853][ T30] audit: type=1326 audit(1766807358.489:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16822 comm="syz.1.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 836.586769][ T30] audit: type=1326 audit(1766807358.489:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16822 comm="syz.1.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 836.688265][T16840] netdevsim netdevsim1: Direct firmware load for ./file1 failed with error -2 [ 836.726895][T16840] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file1 [ 837.066913][ T5819] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 837.231980][ T5819] usb 1-1: unable to get BOS descriptor or descriptor too short [ 837.259643][ T5819] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 837.288639][ T5819] usb 1-1: can't read configurations, error -71 [ 837.419355][T16863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2940'. [ 837.444657][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 837.459834][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 837.471778][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 837.480621][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 837.492589][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 838.158207][ T30] audit: type=1326 audit(1766807360.379:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16879 comm="syz.0.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd298f749 code=0x7ffc0000 [ 838.235107][ T30] audit: type=1326 audit(1766807360.399:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16879 comm="syz.0.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd298f749 code=0x7ffc0000 [ 838.305400][ T30] audit: type=1326 audit(1766807360.399:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16879 comm="syz.0.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd298f749 code=0x7ffc0000 [ 838.348930][ T30] audit: type=1326 audit(1766807360.409:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16879 comm="syz.0.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f1dd298f749 code=0x7ffc0000 [ 838.436129][ T30] audit: type=1326 audit(1766807360.409:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16879 comm="syz.0.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd298f749 code=0x7ffc0000 [ 838.478566][ T6175] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.556999][ T30] audit: type=1326 audit(1766807360.409:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16879 comm="syz.0.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd298f749 code=0x7ffc0000 [ 838.662543][ T6175] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.758607][T16865] chnl_net:caif_netlink_parms(): no params data found [ 838.792979][T16903] pim6reg: entered allmulticast mode [ 838.811259][T16899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2956'. [ 838.909929][ T6175] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.013739][T16912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2961'. [ 839.422400][ T6175] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.446192][T16897] pim6reg: left allmulticast mode [ 839.546882][ T5836] Bluetooth: hci5: command tx timeout [ 839.670287][T16865] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.678297][T16865] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.686346][T16865] bridge_slave_0: entered allmulticast mode [ 839.696083][T16865] bridge_slave_0: entered promiscuous mode [ 839.706004][T16865] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.713640][T16865] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.723580][T16865] bridge_slave_1: entered allmulticast mode [ 839.732126][T16865] bridge_slave_1: entered promiscuous mode [ 839.886324][T16865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.917547][T16865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 839.935103][T16939] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2970'. [ 840.010715][T16939] 0X: renamed from caif0 [ 840.046497][T16939] 0X: entered allmulticast mode [ 840.070416][T16939] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 840.182924][T16865] team0: Port device team_slave_0 added [ 840.207976][T16865] team0: Port device team_slave_1 added [ 840.479825][T16865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 840.496253][T16865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.557118][T16865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 840.594316][ T6175] bridge_slave_1: left allmulticast mode [ 840.606002][ T6175] bridge_slave_1: left promiscuous mode [ 840.618687][ T6175] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.623778][ T5819] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x4 [ 840.641322][ T5819] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x2 [ 840.659352][ T6175] bridge_slave_0: left promiscuous mode [ 840.659438][ T5819] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x0 [ 840.667256][ T6175] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.673226][ T5819] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x0 [ 840.689527][ T5819] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x0 [ 840.705628][ T5819] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x0 [ 840.714745][ T5819] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x0 [ 840.722867][ T5819] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x0 [ 840.731790][ T5819] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x0 [ 840.742983][ T5819] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x0 [ 840.792966][ T5819] hid-generic 0000:3000000:0000.0035: hidraw0: HID v0.00 Device [sy] on syz0 [ 840.824101][T16970] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2976'. [ 841.009624][T16969] fido_id[16969]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 841.366130][T16979] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2986'. [ 841.386204][T16979] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2986'. [ 841.620113][ T5836] Bluetooth: hci5: command tx timeout [ 841.841100][ T6175] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 841.849397][ T6175] bridge1 (unregistering): left promiscuous mode [ 842.067697][ T6175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 842.078240][ T6175] bond_slave_0: left promiscuous mode [ 842.085160][ T6175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 842.094430][ T6175] bond_slave_1: left promiscuous mode [ 842.102014][ T6175] bond0 (unregistering): Released all slaves [ 842.115414][ T6175] bond1 (unregistering): Released all slaves [ 842.268477][ T6175] bond2 (unregistering): Released all slaves [ 842.285198][T16865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 842.292237][T16865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 842.318867][T16865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 842.558101][ T6175] tipc: Disabling bearer [ 842.587263][ T6175] tipc: Disabling bearer [ 842.610876][ T6175] tipc: Left network mode [ 842.660126][T16865] hsr_slave_0: entered promiscuous mode [ 842.697817][T16865] hsr_slave_1: entered promiscuous mode [ 842.733785][T16865] debugfs: 'hsr0' already exists in 'hsr' [ 842.762455][T16865] Cannot create hsr debugfs directory [ 843.224599][T16999] syzkaller0: entered promiscuous mode [ 843.230334][T16999] syzkaller0: entered allmulticast mode [ 843.715074][ T5836] Bluetooth: hci5: command tx timeout [ 843.965452][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 843.965469][ T30] audit: type=1326 audit(1766807366.179:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17038 comm="syz.1.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 844.026675][ T30] audit: type=1326 audit(1766807366.219:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17038 comm="syz.1.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 844.076515][ T30] audit: type=1326 audit(1766807366.219:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17038 comm="syz.1.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 844.104341][ T30] audit: type=1326 audit(1766807366.219:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17038 comm="syz.1.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 844.131312][ T30] audit: type=1326 audit(1766807366.219:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17038 comm="syz.1.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 844.155162][ T30] audit: type=1326 audit(1766807366.219:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17038 comm="syz.1.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 844.198885][ T30] audit: type=1326 audit(1766807366.219:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17038 comm="syz.1.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 844.222724][ T30] audit: type=1326 audit(1766807366.219:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17038 comm="syz.1.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 844.257115][ T30] audit: type=1326 audit(1766807366.219:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17038 comm="syz.1.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 844.280714][ T30] audit: type=1326 audit(1766807366.219:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17038 comm="syz.1.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2603d8f749 code=0x7ffc0000 [ 845.777514][ T5836] Bluetooth: hci5: command tx timeout [ 846.055123][T17066] program syz.1.3012 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 847.625370][T17087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3021'. [ 847.635581][T17087] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3021'. [ 847.669112][T17074] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 847.677083][T17074] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 847.725085][T17074] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 847.756923][T17074] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 847.792162][T17074] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 847.811571][T17074] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 848.245815][T17074] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 848.253195][T17074] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 848.332237][T17074] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 848.352364][T17074] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 848.409930][T17118] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3032'. [ 848.756538][ T6175] hsr_slave_0: left promiscuous mode [ 848.796898][ T6175] hsr_slave_1: left promiscuous mode [ 848.809315][ T6175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 848.827956][ T6175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 848.835395][ T6175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 848.962229][ T6175] veth1_macvtap: left promiscuous mode [ 848.997848][ T6175] veth0_macvtap: left promiscuous mode [ 849.224336][T17151] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3045'. [ 849.273468][ T6175] pim6reg (unregistering): left allmulticast mode [ 849.307390][ T6175] batadv3 (unregistering): left promiscuous mode [ 849.329249][ T6175] team0 (unregistering): Port device batadv3 removed [ 849.452194][T17147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3043'. [ 849.528415][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 849.528434][ T30] audit: type=1326 audit(1766807371.749:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17157 comm="syz.0.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd298f749 code=0x7ffc0000 [ 849.576275][T17147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3043'. [ 849.579806][ T30] audit: type=1326 audit(1766807371.749:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17157 comm="syz.0.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd298f749 code=0x7ffc0000 [ 849.628866][ T30] audit: type=1326 audit(1766807371.749:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17157 comm="syz.0.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dd298f749 code=0x7ffc0000 [ 849.663720][ T30] audit: type=1326 audit(1766807371.749:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17157 comm="syz.0.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd298f749 code=0x7ffc0000 [ 849.714866][T17162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3043'. [ 849.722911][ T30] audit: type=1326 audit(1766807371.749:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17157 comm="syz.0.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd298f749 code=0x7ffc0000 [ 849.764542][T17147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3043'. [ 849.777858][ T30] audit: type=1326 audit(1766807371.749:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17157 comm="syz.0.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dd298f749 code=0x7ffc0000 [ 849.816080][ T30] audit: type=1326 audit(1766807371.749:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17157 comm="syz.0.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd298f749 code=0x7ffc0000 [ 849.853901][T17162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3043'. [ 849.861831][ T30] audit: type=1326 audit(1766807371.749:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17157 comm="syz.0.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd298f749 code=0x7ffc0000 [ 849.917801][ T30] audit: type=1326 audit(1766807371.749:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17157 comm="syz.0.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f1dd298f749 code=0x7ffc0000 [ 849.976495][ T30] audit: type=1326 audit(1766807371.749:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17157 comm="syz.0.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd298f749 code=0x7ffc0000 [ 850.098564][ T6175] team_slave_1 (unregistering): left promiscuous mode [ 850.108421][ T6175] team0 (unregistering): Port device team_slave_1 removed [ 850.154730][ T6175] team_slave_0 (unregistering): left promiscuous mode [ 850.163653][ T6175] team0 (unregistering): Port device team_slave_0 removed [ 850.716480][T16865] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 850.776792][T16865] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 850.798961][T16865] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 850.862136][T16865] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 851.313581][ T6175] IPVS: stop unused estimator thread 0... [ 851.472343][T16865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 851.521056][T16865] 8021q: adding VLAN 0 to HW filter on device team0 [ 851.556387][T17204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3057'. [ 851.560389][ T6175] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.572466][ T6175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 851.590530][ T6175] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.597740][ T6175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.691455][T17204] bond2: entered promiscuous mode [ 851.704068][T17204] bond2: entered allmulticast mode [ 851.715872][T17204] 8021q: adding VLAN 0 to HW filter on device bond2 [ 851.961785][T16865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 852.090016][T16865] veth0_vlan: entered promiscuous mode [ 852.131568][T16865] veth1_vlan: entered promiscuous mode [ 852.235322][T16865] veth0_macvtap: entered promiscuous mode [ 852.269042][T16865] veth1_macvtap: entered promiscuous mode [ 852.299478][T16865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 852.318228][T16865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 852.354169][ T3823] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.374101][ T3823] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.399101][ T3823] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.425715][ T3823] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.609056][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.626486][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.646752][T15247] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 852.717613][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.734232][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.738860][T17257] __nla_validate_parse: 3 callbacks suppressed [ 852.738882][T17257] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3072'. [ 852.796847][T15247] usb 6-1: device descriptor read/64, error -71 [ 852.907940][T17262] netdevsim netdevsim4: Direct firmware load for he_free failed with error -2 [ 852.922936][T17262] netdevsim netdevsim4: Falling back to sysfs fallback for: he_free [ 853.003359][T15273] hid_parser_main: 6 callbacks suppressed [ 853.003381][T15273] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 853.037631][T15247] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 853.049635][T15273] hid-generic 0000:0000:0000.0036: hidraw0: HID v0.00 Device [syz1] on syz0 [ 853.227772][T15247] usb 6-1: device descriptor read/64, error -71 [ 853.363813][T15247] usb usb6-port1: attempt power cycle [ 853.371424][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 853.382410][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 853.393264][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 853.403214][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 853.414960][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 853.679807][T17282] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3079'. [ 853.757018][T15247] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 853.833865][T15247] usb 6-1: device descriptor read/8, error -71 [ 853.969329][T17294] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 853.969329][T17294] program syz.4.3082 not setting count and/or reply_len properly [ 854.063998][T17278] chnl_net:caif_netlink_parms(): no params data found [ 854.086931][T15247] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 854.112460][T15247] usb 6-1: device descriptor read/8, error -71 [ 854.237344][T15247] usb usb6-port1: unable to enumerate USB device [ 854.322252][ T6029] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.526868][ T6029] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.560188][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 854.560207][ T30] audit: type=1326 audit(1766807376.779:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17311 comm="syz.0.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd298f749 code=0x7ffc0000 [ 854.717424][ T30] audit: type=1326 audit(1766807376.819:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17311 comm="syz.0.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd298f749 code=0x7ffc0000 [ 854.772552][ T6029] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.796928][ T30] audit: type=1326 audit(1766807376.819:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17311 comm="syz.0.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd298f749 code=0x7ffc0000 [ 854.864453][ T30] audit: type=1326 audit(1766807376.819:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17311 comm="syz.0.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd298f749 code=0x7ffc0000 [ 854.918859][ T30] audit: type=1326 audit(1766807376.819:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17311 comm="syz.0.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dd298f749 code=0x7ffc0000 [ 854.974303][ T30] audit: type=1326 audit(1766807376.819:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17311 comm="syz.0.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd298f749 code=0x7ffc0000 [ 855.003268][ T6029] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.027130][ T30] audit: type=1326 audit(1766807376.819:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17311 comm="syz.0.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd298f749 code=0x7ffc0000 [ 855.071580][T17278] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.083241][T17278] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.091604][ T30] audit: type=1326 audit(1766807376.819:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17311 comm="syz.0.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd298f749 code=0x7ffc0000 [ 855.116356][T17329] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3090'. [ 855.116483][T17278] bridge_slave_0: entered allmulticast mode [ 855.137894][T17278] bridge_slave_0: entered promiscuous mode [ 855.143907][ T30] audit: type=1326 audit(1766807376.819:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17311 comm="syz.0.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dd298f749 code=0x7ffc0000 [ 855.179249][T17278] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.200882][T17278] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.217086][T17278] bridge_slave_1: entered allmulticast mode [ 855.224883][ T30] audit: type=1326 audit(1766807376.819:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17311 comm="syz.0.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd298f749 code=0x7ffc0000 [ 855.254194][T17278] bridge_slave_1: entered promiscuous mode [ 855.462807][ T5836] Bluetooth: hci3: command tx timeout [ 855.510024][T17278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 855.527647][T17342] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3096'. [ 855.540172][T17342] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3096'. [ 855.681924][T17278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.074714][T17278] team0: Port device team_slave_0 added [ 856.117302][ T6029] bridge_slave_1: left allmulticast mode [ 856.123782][ T6029] bridge_slave_1: left promiscuous mode [ 856.157418][ T6029] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.268486][ T6029] bridge_slave_0: left allmulticast mode [ 856.274191][ T6029] bridge_slave_0: left promiscuous mode [ 856.307787][ T6029] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.538396][ T5836] Bluetooth: hci3: command tx timeout [ 857.753206][ T6029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 857.781505][ T6029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 857.799114][ T6029] bond0 (unregistering): Released all slaves [ 857.822196][T17278] team0: Port device team_slave_1 added [ 857.834142][T17417] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3116'. [ 857.919592][ T6029] tipc: Left network mode [ 858.090125][T17278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 858.105165][T17278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.149979][T17278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 858.174223][T17430] pim6reg: entered allmulticast mode [ 858.183114][T17430] team0: entered allmulticast mode [ 858.189338][T17430] team_slave_0: entered allmulticast mode [ 858.195416][T17430] team_slave_1: entered allmulticast mode [ 858.210220][T17278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 858.217901][T17278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.247065][T17278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 858.261969][T17434] netlink: 'syz.5.3124': attribute type 13 has an invalid length. [ 858.388082][ T1133] bond0: (slave bond_slave_0): interface is now down [ 858.398454][T17434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 858.405215][ T1133] bond0: (slave bond_slave_1): interface is now down [ 858.422497][T17434] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 858.438675][ T1133] bond0: (slave bond_slave_0): interface is now down [ 858.445377][ T1133] bond0: (slave bond_slave_1): interface is now down [ 858.474474][ T1133] bond0: (slave bond_slave_0): interface is now down [ 858.494246][ T1133] bond0: (slave bond_slave_1): interface is now down [ 858.537962][ T12] bond0: (slave bond_slave_0): interface is now down [ 858.544806][ T12] bond0: (slave bond_slave_1): interface is now down [ 858.586777][T14612] bond0: (slave bond_slave_0): interface is now down [ 858.593889][T14612] bond0: (slave bond_slave_1): interface is now down [ 858.598486][T17278] hsr_slave_0: entered promiscuous mode [ 858.617053][ T3823] bond0: (slave bond_slave_0): interface is now down [ 858.619238][T17278] hsr_slave_1: entered promiscuous mode [ 858.623835][ T3823] bond0: (slave bond_slave_1): interface is now down [ 858.659487][ T36] bond0: (slave bond_slave_0): interface is now down [ 858.667186][ T36] bond0: (slave bond_slave_1): interface is now down [ 858.681362][ T6029] hsr_slave_0: left promiscuous mode [ 858.687780][ T36] bond0: (slave bond_slave_0): interface is now down [ 858.694494][ T36] bond0: (slave bond_slave_1): interface is now down [ 858.720830][ T6029] hsr_slave_1: left promiscuous mode [ 858.737334][ T6029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 858.744755][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 858.756863][ T36] bond0: (slave bond_slave_0): interface is now down [ 858.763586][ T36] bond0: (slave bond_slave_1): interface is now down [ 858.798449][ T6029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 858.806166][ T36] bond0: (slave bond_slave_0): interface is now down [ 858.823608][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 858.837854][ T36] bond0: (slave bond_slave_1): interface is now down [ 858.876721][ T36] bond0: (slave bond_slave_0): interface is now down [ 858.883575][ T36] bond0: (slave bond_slave_1): interface is now down [ 858.914062][ T6029] veth1_macvtap: left promiscuous mode [ 858.936746][ T1133] bond0: (slave bond_slave_0): interface is now down [ 858.936792][ T6029] veth0_macvtap: left promiscuous mode [ 858.947572][ T1133] bond0: (slave bond_slave_1): interface is now down [ 858.977032][ T12] bond0: (slave bond_slave_0): interface is now down [ 858.983794][ T12] bond0: (slave bond_slave_1): interface is now down [ 859.010119][ T12] bond0: (slave bond_slave_0): interface is now down [ 859.021238][ T12] bond0: (slave bond_slave_1): interface is now down [ 859.087006][ T12] bond0: (slave bond_slave_0): interface is now down [ 859.094732][ T12] bond0: (slave bond_slave_1): interface is now down [ 859.126743][ T12] bond0: (slave bond_slave_0): interface is now down [ 859.135839][ T12] bond0: (slave bond_slave_1): interface is now down [ 859.186744][T14614] bond0: (slave bond_slave_0): interface is now down [ 859.220744][T14614] bond0: (slave bond_slave_1): interface is now down [ 859.276722][ T5964] bond0: (slave bond_slave_0): interface is now down [ 859.305333][ T5964] bond0: (slave bond_slave_1): interface is now down [ 859.367657][ T5964] bond0: (slave bond_slave_0): interface is now down [ 859.378907][ T5964] bond0: (slave bond_slave_1): interface is now down [ 859.437151][ T5964] bond0: (slave bond_slave_0): interface is now down [ 859.465889][ T5964] bond0: (slave bond_slave_1): interface is now down [ 859.486721][T14614] bond0: (slave bond_slave_0): interface is now down [ 859.496291][T14614] bond0: (slave bond_slave_1): interface is now down [ 859.497650][T17460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3136'. [ 859.546729][ T1160] bond0: (slave bond_slave_0): interface is now down [ 859.564129][T17460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3136'. [ 859.565470][ T1160] bond0: (slave bond_slave_1): interface is now down [ 859.617209][ T1160] bond0: (slave bond_slave_0): interface is now down [ 859.624027][ T1160] bond0: (slave bond_slave_1): interface is now down [ 859.626839][ T5836] Bluetooth: hci3: command tx timeout [ 859.656886][T14612] bond0: (slave bond_slave_0): interface is now down [ 859.676737][T14612] bond0: (slave bond_slave_1): interface is now down [ 859.711545][T14612] bond0: (slave bond_slave_0): interface is now down [ 859.737421][T14612] bond0: (slave bond_slave_1): interface is now down [ 859.767371][T14612] bond0: (slave bond_slave_0): interface is now down [ 859.783255][T14612] bond0: (slave bond_slave_1): interface is now down [ 859.819538][T14612] bond0: (slave bond_slave_0): interface is now down [ 859.836735][T14612] bond0: (slave bond_slave_1): interface is now down [ 859.857384][ T36] bond0: (slave bond_slave_0): interface is now down [ 859.870236][ T36] bond0: (slave bond_slave_1): interface is now down [ 859.907100][ T36] bond0: (slave bond_slave_0): interface is now down [ 859.919529][ T36] bond0: (slave bond_slave_1): interface is now down [ 859.956737][ T36] bond0: (slave bond_slave_0): interface is now down [ 859.976821][ T36] bond0: (slave bond_slave_1): interface is now down [ 860.006754][ T1133] bond0: (slave bond_slave_0): interface is now down [ 860.021223][ T1133] bond0: (slave bond_slave_1): interface is now down [ 860.056804][ T1133] bond0: (slave bond_slave_0): interface is now down [ 860.072643][ T1133] bond0: (slave bond_slave_1): interface is now down [ 860.102077][ T1133] bond0: (slave bond_slave_0): interface is now down [ 860.118083][ T1133] bond0: (slave bond_slave_1): interface is now down [ 860.156687][T14612] bond0: (slave bond_slave_0): interface is now down [ 860.166829][T14612] bond0: (slave bond_slave_1): interface is now down [ 860.204079][T14612] bond0: (slave bond_slave_0): interface is now down [ 860.218610][T14612] bond0: (slave bond_slave_1): interface is now down [ 860.246696][ T1133] bond0: (slave bond_slave_0): interface is now down [ 860.273431][ T1133] bond0: (slave bond_slave_1): interface is now down [ 860.316733][ T1133] bond0: (slave bond_slave_0): interface is now down [ 860.327162][ T1133] bond0: (slave bond_slave_1): interface is now down [ 860.357061][ T1133] bond0: (slave bond_slave_0): interface is now down [ 860.363927][ T1133] bond0: (slave bond_slave_1): interface is now down [ 860.397287][ T1133] bond0: (slave bond_slave_0): interface is now down [ 860.420762][ T1133] bond0: (slave bond_slave_1): interface is now down [ 860.447135][ T5964] bond0: (slave bond_slave_0): interface is now down [ 860.454405][ T5964] bond0: (slave bond_slave_1): interface is now down [ 860.496851][T14612] bond0: (slave bond_slave_0): interface is now down [ 860.506843][T14612] bond0: (slave bond_slave_1): interface is now down [ 860.546841][ T36] bond0: (slave bond_slave_0): interface is now down [ 860.554855][ T36] bond0: (slave bond_slave_1): interface is now down [ 860.608348][ T5964] bond0: (slave bond_slave_0): interface is now down [ 860.615314][ T5964] bond0: (slave bond_slave_1): interface is now down [ 860.636889][ T5964] bond0: (slave bond_slave_0): interface is now down [ 860.643626][ T5964] bond0: (slave bond_slave_1): interface is now down [ 860.667578][ T36] bond0: (slave bond_slave_0): interface is now down [ 860.674336][ T36] bond0: (slave bond_slave_1): interface is now down [ 860.687308][ T6029] team_slave_1 (unregistering): left promiscuous mode [ 860.695563][ T6029] team0 (unregistering): Port device team_slave_1 removed [ 860.706777][ T36] bond0: (slave bond_slave_0): interface is now down [ 860.726660][ T36] bond0: (slave bond_slave_1): interface is now down [ 860.746787][T14612] bond0: (slave bond_slave_0): interface is now down [ 860.753529][T14612] bond0: (slave bond_slave_1): interface is now down [ 860.780267][ T6029] team_slave_0 (unregistering): left promiscuous mode [ 860.786938][T14612] bond0: (slave bond_slave_0): interface is now down [ 860.793866][T14612] bond0: (slave bond_slave_1): interface is now down [ 860.801317][ T6029] team0 (unregistering): Port device team_slave_0 removed [ 860.824021][ T5964] bond0: (slave bond_slave_0): interface is now down [ 860.832230][ T5964] bond0: (slave bond_slave_1): interface is now down [ 860.866751][ T5964] bond0: (slave bond_slave_0): interface is now down [ 860.873486][ T5964] bond0: (slave bond_slave_1): interface is now down [ 860.928478][ T1133] bond0: (slave bond_slave_0): interface is now down [ 860.935553][ T1133] bond0: (slave bond_slave_1): interface is now down [ 860.960928][ T5964] bond0: (slave bond_slave_0): interface is now down [ 860.976973][ T5964] bond0: (slave bond_slave_1): interface is now down [ 860.996749][ T5964] bond0: (slave bond_slave_0): interface is now down [ 861.003552][ T5964] bond0: (slave bond_slave_1): interface is now down [ 861.033390][ T5964] bond0: (slave bond_slave_0): interface is now down [ 861.040325][ T5964] bond0: (slave bond_slave_1): interface is now down [ 861.067685][T14612] bond0: (slave bond_slave_0): interface is now down [ 861.081385][T14612] bond0: (slave bond_slave_1): interface is now down [ 861.114374][T14612] bond0: (slave bond_slave_0): interface is now down [ 861.123409][T14612] bond0: (slave bond_slave_1): interface is now down [ 861.154337][T14612] bond0: (slave bond_slave_0): interface is now down [ 861.161223][T14612] bond0: (slave bond_slave_1): interface is now down [ 861.199756][ T1160] bond0: (slave bond_slave_0): interface is now down [ 861.216033][ T1160] bond0: (slave bond_slave_1): interface is now down [ 861.246722][ T1160] bond0: (slave bond_slave_0): interface is now down [ 861.253458][ T1160] bond0: (slave bond_slave_1): interface is now down [ 861.293080][ T1160] bond0: (slave bond_slave_0): interface is now down [ 861.300486][ T1160] bond0: (slave bond_slave_1): interface is now down [ 861.335596][ T1160] bond0: (slave bond_slave_0): interface is now down [ 861.343599][ T1160] bond0: (slave bond_slave_1): interface is now down [ 861.373301][ T1160] bond0: (slave bond_slave_0): interface is now down [ 861.380348][ T1160] bond0: (slave bond_slave_1): interface is now down [ 861.415092][ T1160] bond0: (slave bond_slave_0): interface is now down [ 861.422086][ T1160] bond0: (slave bond_slave_1): interface is now down [ 861.460791][ T5964] bond0: (slave bond_slave_0): interface is now down [ 861.469945][ T5964] bond0: (slave bond_slave_1): interface is now down [ 861.516763][ T1160] bond0: (slave bond_slave_0): interface is now down [ 861.523504][ T1160] bond0: (slave bond_slave_1): interface is now down [ 861.576733][ T1160] bond0: (slave bond_slave_0): interface is now down [ 861.583701][ T1160] bond0: (slave bond_slave_1): interface is now down [ 861.627610][ T1160] bond0: (slave bond_slave_0): interface is now down [ 861.634351][ T1160] bond0: (slave bond_slave_1): interface is now down [ 861.686746][ T1160] bond0: (slave bond_slave_0): interface is now down [ 861.693481][ T1160] bond0: (slave bond_slave_1): interface is now down [ 861.700289][ T5836] Bluetooth: hci3: command tx timeout [ 861.736682][ T1160] bond0: (slave bond_slave_0): interface is now down [ 861.743416][ T1160] bond0: (slave bond_slave_1): interface is now down [ 861.773558][ T1160] bond0: (slave bond_slave_0): interface is now down [ 861.791267][ T1160] bond0: (slave bond_slave_1): interface is now down [ 861.834515][ T5964] bond0: (slave bond_slave_0): interface is now down [ 861.841681][ T5964] bond0: (slave bond_slave_1): interface is now down [ 861.883792][T14614] bond0: (slave bond_slave_0): interface is now down [ 861.891272][T14614] bond0: (slave bond_slave_1): interface is now down [ 861.926739][T14614] bond0: (slave bond_slave_0): interface is now down [ 861.933475][T14614] bond0: (slave bond_slave_1): interface is now down [ 861.961000][T14614] bond0: now running without any active interface! [ 861.985251][T17481] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 862.427374][T17506] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 862.457346][ T6029] IPVS: stop unused estimator thread 0... [ 863.022747][T17278] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 863.057019][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 863.100826][T17278] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 863.133672][T17278] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 863.192060][T17278] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 863.579445][T17278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 863.625757][T17278] 8021q: adding VLAN 0 to HW filter on device team0 [ 863.655608][ T6175] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.663022][ T6175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 863.714021][ T5964] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.721284][ T5964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 863.970782][T17278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 864.122506][T17278] veth0_vlan: entered promiscuous mode [ 864.176382][T17278] veth1_vlan: entered promiscuous mode [ 864.253125][T17278] veth0_macvtap: entered promiscuous mode [ 864.290722][T17278] veth1_macvtap: entered promiscuous mode [ 864.359335][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 864.359355][ T30] audit: type=1326 audit(1766807386.569:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17570 comm="syz.5.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3288f8f749 code=0x7ffc0000 [ 864.384981][T17278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 864.396235][ T30] audit: type=1326 audit(1766807386.579:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17570 comm="syz.5.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3288f8f749 code=0x7ffc0000 [ 864.443195][T17278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 864.445682][ T30] audit: type=1326 audit(1766807386.579:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17570 comm="syz.5.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3288f8f749 code=0x7ffc0000 [ 864.465406][ T6175] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.505618][ T6175] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.556878][ T30] audit: type=1326 audit(1766807386.579:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17570 comm="syz.5.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3288f8f749 code=0x7ffc0000 [ 864.593742][ T6175] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.642384][ T6175] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.707950][T17580] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3177'. [ 864.758809][T17580] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3177'. [ 864.759365][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.809095][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.872586][ T3823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.883595][ T3823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.589362][ T30] audit: type=1326 audit(1766807387.809:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17607 comm="syz.4.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1303f8f749 code=0x7ffc0000 [ 865.668347][ T30] audit: type=1326 audit(1766807387.809:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17607 comm="syz.4.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1303f8f749 code=0x7ffc0000 [ 865.726084][ T30] audit: type=1326 audit(1766807387.809:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17607 comm="syz.4.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1303f8f749 code=0x7ffc0000 [ 865.782972][ T30] audit: type=1326 audit(1766807387.809:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17607 comm="syz.4.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1303f8f749 code=0x7ffc0000 [ 865.885018][ T30] audit: type=1326 audit(1766807387.809:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17607 comm="syz.4.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1303f8f749 code=0x7ffc0000 [ 865.958981][ T30] audit: type=1326 audit(1766807387.809:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17607 comm="syz.4.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1303f8f749 code=0x7ffc0000 [ 866.436320][T17634] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3193'. [ 866.452255][T17634] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3193'. [ 866.506744][T17634] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3193'. [ 866.540539][T17634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3193'. [ 866.675140][T17634] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3193'. [ 866.697812][T17634] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3193'. [ 866.711655][T17634] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3193'. [ 866.723924][T17634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3193'. [ 867.327622][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 867.338550][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 867.347477][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 867.362091][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 867.371783][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 867.383481][T17648] random: crng reseeded on system resumption [ 867.673220][T17672] program syz.5.3202 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 867.709386][T17672] program syz.5.3202 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 867.760372][T17672] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 867.763166][T17679] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 867.776497][T17679] IPv6: NLM_F_CREATE should be set when creating new route [ 867.935421][T17683] lo: entered allmulticast mode [ 867.976937][T17683] tunl0: entered allmulticast mode [ 868.008667][T17683] gre0: entered allmulticast mode [ 868.049594][T17683] gretap0: entered allmulticast mode [ 868.089373][T17683] erspan0: entered allmulticast mode [ 868.137142][T17683] ip_vti0: entered allmulticast mode [ 868.143664][T17683] ip6_vti0: entered allmulticast mode [ 868.170333][T17683] sit0: entered allmulticast mode [ 868.219845][T17683] ip6tnl0: entered allmulticast mode [ 868.250826][T17683] ip6gre0: entered allmulticast mode [ 868.288757][T17683] syz_tun: entered allmulticast mode [ 868.318234][T17683] ip6gretap0: entered allmulticast mode [ 868.335320][T17683] bridge0: entered allmulticast mode [ 868.346122][T17683] vcan0: entered allmulticast mode [ 868.363273][T17683] bond0: entered allmulticast mode [ 868.372994][T17683] bond_slave_0: entered allmulticast mode [ 868.386849][T17683] bond_slave_1: entered allmulticast mode [ 868.417320][T17683] dummy0: entered allmulticast mode [ 868.434056][T17683] nlmon0: entered allmulticast mode [ 868.440427][T17683] caif0: entered allmulticast mode [ 868.446021][T17683] batadv0: left promiscuous mode [ 868.474646][T17683] batadv0: entered allmulticast mode [ 868.496118][T17683] vxcan0: entered allmulticast mode [ 868.516956][T17683] vxcan1: entered allmulticast mode [ 868.522409][T17683] veth0: entered allmulticast mode [ 868.528337][T17683] veth1: entered allmulticast mode [ 868.533674][T17683] wg0: entered allmulticast mode [ 868.539084][T17683] wg1: entered allmulticast mode [ 868.544240][T17683] veth0_to_bridge: entered allmulticast mode [ 868.550759][T17683] veth1_to_bridge: entered allmulticast mode [ 868.557137][T17683] veth0_to_bond: entered allmulticast mode [ 868.563409][T17683] veth1_to_bond: entered allmulticast mode [ 868.583895][T17683] veth0_to_team: entered allmulticast mode [ 868.596929][T17683] team_slave_0: entered allmulticast mode [ 868.603589][T17683] veth1_to_team: entered allmulticast mode [ 868.610244][T17683] team_slave_1: entered allmulticast mode [ 868.616183][T17683] veth0_to_batadv: entered allmulticast mode [ 868.622650][T17683] batadv_slave_0: entered allmulticast mode [ 868.629162][T17683] veth1_to_batadv: entered allmulticast mode [ 868.635448][T17683] batadv_slave_1: entered allmulticast mode [ 868.641697][T17683] xfrm0: entered allmulticast mode [ 868.647102][T17683] veth0_to_hsr: entered allmulticast mode [ 868.653113][T17683] hsr_slave_0: entered allmulticast mode [ 868.659151][T17683] veth1_to_hsr: entered allmulticast mode [ 868.665180][T17683] hsr_slave_1: entered allmulticast mode [ 868.671187][T17683] hsr0: entered allmulticast mode [ 868.676376][T17683] veth1_virt_wifi: entered allmulticast mode [ 868.682997][T17683] veth0_virt_wifi: entered allmulticast mode [ 868.689564][T17683] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 868.697389][T17683] veth1_vlan: entered allmulticast mode [ 868.703617][T17683] veth0_vlan: entered allmulticast mode [ 868.709525][T17683] vlan0: entered allmulticast mode [ 868.714804][T17683] vlan1: entered allmulticast mode [ 868.720917][T17683] macvlan0: entered allmulticast mode [ 868.731372][T17683] macvlan1: entered allmulticast mode [ 868.737876][T17683] ipvlan0: entered allmulticast mode [ 868.743514][T17683] ipvlan1: entered allmulticast mode [ 868.749072][T17683] veth1_macvtap: entered allmulticast mode [ 868.755070][T17683] veth0_macvtap: entered allmulticast mode [ 868.761109][T17683] macsec0: entered allmulticast mode [ 868.766510][T17683] geneve0: entered allmulticast mode [ 868.772176][T17683] geneve1: entered allmulticast mode [ 868.777678][T17683] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 868.785168][T17683] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 868.792895][T17683] netdevsim netdevsim5 netdevsim2: entered allmulticast mode [ 868.800586][T17683] netdevsim netdevsim5 netdevsim3: entered allmulticast mode [ 868.809137][T17683] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 868.816453][T17683] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 868.824920][T17683] mac80211_hwsim hwsim14 wlan2: entered allmulticast mode [ 868.832301][T17683] syztnl1: entered allmulticast mode [ 868.837759][T17683] mac80211_hwsim hwsim17 wlan3: entered allmulticast mode [ 868.845036][T17683] veth2: entered allmulticast mode [ 868.850569][T17683] veth4: entered allmulticast mode [ 868.858911][T17683] bond1: entered allmulticast mode [ 868.864127][T17683] ip6erspan0: entered allmulticast mode [ 868.885156][T17683] ip6gretap1: entered allmulticast mode [ 869.168883][ T1160] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.297411][T17717] bond2: entered promiscuous mode [ 869.309058][T17717] bond2: entered allmulticast mode [ 869.317881][T17717] 8021q: adding VLAN 0 to HW filter on device bond2 [ 869.379785][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 869.379804][ T30] audit: type=1326 audit(1766807391.599:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17733 comm="syz.2.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facffb8f749 code=0x7ffc0000 [ 869.418994][ T30] audit: type=1326 audit(1766807391.599:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17733 comm="syz.2.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facffb8f749 code=0x7ffc0000 [ 869.441869][ T30] audit: type=1326 audit(1766807391.599:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17733 comm="syz.2.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facffb8f749 code=0x7ffc0000 [ 869.468338][ T5836] Bluetooth: hci2: command tx timeout [ 869.486804][ T30] audit: type=1326 audit(1766807391.599:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17733 comm="syz.2.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facffb8f749 code=0x7ffc0000 [ 869.510246][ T30] audit: type=1326 audit(1766807391.599:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17733 comm="syz.2.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7facffb8f749 code=0x7ffc0000 [ 869.543372][ T30] audit: type=1326 audit(1766807391.599:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17733 comm="syz.2.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facffb8f749 code=0x7ffc0000 [ 869.591749][ T30] audit: type=1326 audit(1766807391.599:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17733 comm="syz.2.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facffb8f749 code=0x7ffc0000 [ 869.615378][ T30] audit: type=1326 audit(1766807391.599:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17733 comm="syz.2.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facffb8f749 code=0x7ffc0000 [ 869.655368][ T30] audit: type=1326 audit(1766807391.599:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17733 comm="syz.2.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facffb8f749 code=0x7ffc0000 [ 869.678856][ T30] audit: type=1326 audit(1766807391.599:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17733 comm="syz.2.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7facffb8f749 code=0x7ffc0000 [ 869.717053][T17734] __nla_validate_parse: 5 callbacks suppressed [ 869.717071][T17734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3224'. [ 869.893149][T17717] bond2 (unregistering): Released all slaves [ 869.950149][T17664] chnl_net:caif_netlink_parms(): no params data found [ 869.998619][ T1160] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.101666][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.108356][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.270524][ T1160] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.448120][ T1160] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.526136][T17664] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.538120][T17664] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.546078][T17664] bridge_slave_0: entered allmulticast mode [ 870.558824][T17664] bridge_slave_0: entered promiscuous mode [ 870.578248][T17664] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.585445][T17664] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.594005][T17664] bridge_slave_1: entered allmulticast mode [ 870.603388][T17664] bridge_slave_1: entered promiscuous mode [ 870.697689][T17664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 870.719740][T17664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 870.968893][T17664] team0: Port device team_slave_0 added [ 871.053428][T17664] team0: Port device team_slave_1 added [ 871.221424][T17792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3240'. [ 871.308965][T17802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3242'. [ 871.441035][T17802] hsr_slave_1 (unregistering): left promiscuous mode [ 871.514997][T17813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3245'. [ 871.547586][ T5833] Bluetooth: hci2: command tx timeout [ 871.583350][T17813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3245'. [ 871.606409][T17792] hsr_slave_1 (unregistering): left promiscuous mode [ 871.628717][T17664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 871.646967][T17664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 871.734489][T17664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 871.773419][ T1160] bridge_slave_1: left allmulticast mode [ 871.797225][ T1160] bridge_slave_1: left promiscuous mode [ 871.814235][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.896212][ T1160] bridge_slave_0: left promiscuous mode [ 871.914774][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.312626][T17845] program syz.4.3256 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 872.322771][T17845] program syz.4.3256 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 872.347013][T17845] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 873.000194][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 873.011504][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 873.021973][ T1160] bond0 (unregistering): Released all slaves [ 873.175479][ T1160] bond1 (unregistering): Released all slaves [ 873.330733][ T1160] bond2 (unregistering): Released all slaves [ 873.448063][T17664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 873.455176][T17664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 873.481438][T17664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 873.524253][T17845] lo: entered allmulticast mode [ 873.558285][T17845] tunl0: entered allmulticast mode [ 873.578379][T17845] gre0: entered allmulticast mode [ 873.614300][T17845] gretap0: entered allmulticast mode [ 873.620582][ T5833] Bluetooth: hci2: command tx timeout [ 873.651661][T17845] erspan0: entered allmulticast mode [ 873.712142][T17845] ip_vti0: entered allmulticast mode [ 873.747538][T17845] ip6_vti0: entered allmulticast mode [ 873.756231][T17845] sit0: entered allmulticast mode [ 873.818888][T17845] ip6tnl0: entered allmulticast mode [ 873.829627][T17863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3264'. [ 873.840510][T17845] ip6gre0: entered allmulticast mode [ 873.850450][T17845] syz_tun: entered allmulticast mode [ 873.868250][T17845] ip6gretap0: entered allmulticast mode [ 873.891119][T17845] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.898866][T17845] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.941864][T17845] bridge0: entered allmulticast mode [ 873.962400][T17845] vcan0: entered allmulticast mode [ 873.986128][T17845] bond0: entered allmulticast mode [ 874.001500][T17845] bond_slave_0: entered allmulticast mode [ 874.015451][T17845] bond_slave_1: entered allmulticast mode [ 874.039337][T17845] team0: entered allmulticast mode [ 874.044633][T17845] team_slave_0: entered allmulticast mode [ 874.051557][T17845] team_slave_1: entered allmulticast mode [ 874.078136][T17845] dummy0: entered allmulticast mode [ 874.106700][T17845] nlmon0: entered allmulticast mode [ 874.114087][T17845] caif0: entered allmulticast mode [ 874.138148][T17845] batadv0: entered allmulticast mode [ 874.170163][T17845] vxcan0: entered allmulticast mode [ 874.188585][T17845] vxcan1: entered allmulticast mode [ 874.195515][T17845] veth0: entered allmulticast mode [ 874.219285][T17845] veth1: entered allmulticast mode [ 874.232788][T17845] wg0: entered allmulticast mode [ 874.250830][T17845] wg1: entered allmulticast mode [ 874.268112][T17845] wg2: entered allmulticast mode [ 874.274879][T17845] veth0_to_bridge: entered allmulticast mode [ 874.295336][T17873] loop7: detected capacity change from 0 to 7 [ 874.314011][T17845] veth1_to_bridge: entered allmulticast mode [ 874.324369][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 874.334061][ C1] buffer_io_error: 43 callbacks suppressed [ 874.334081][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 874.351826][T17845] veth0_to_bond: entered allmulticast mode [ 874.358704][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 874.368416][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 874.388429][T17845] veth1_to_bond: entered allmulticast mode [ 874.397036][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 874.406739][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 874.408429][T17845] veth0_to_team: entered allmulticast mode [ 874.420842][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 874.430559][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 874.461619][T17845] veth1_to_team: entered allmulticast mode [ 874.468288][T17874] [ 874.470637][T17874] ====================================================== [ 874.477728][T17874] WARNING: possible circular locking dependency detected [ 874.484773][T17874] syzkaller #0 Tainted: G L [ 874.490760][T17874] ------------------------------------------------------ [ 874.497769][T17874] syz.5.3266/17874 is trying to acquire lock: [ 874.503818][T17874] ffff88801bef0220 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9e/0x450 [ 874.514071][T17874] [ 874.514071][T17874] but task is already holding lock: [ 874.521423][T17874] ffff888141bfdfb0 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x1604/0x1c50 [ 874.531160][T17874] [ 874.531160][T17874] which lock already depends on the new lock. [ 874.531160][T17874] [ 874.532318][T17845] veth0_to_batadv: entered allmulticast mode [ 874.541561][T17874] [ 874.541561][T17874] the existing dependency chain (in reverse order) is: [ 874.541573][T17874] [ 874.541573][T17874] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 874.541611][T17874] blk_alloc_queue+0x52f/0x610 [ 874.541638][T17874] __blk_mq_alloc_disk+0x15c/0x340 [ 874.541661][T17874] loop_add+0x411/0xad0 [ 874.541686][T17874] loop_init+0xd9/0x170 [ 874.541711][T17874] do_one_initcall+0x1f1/0x800 [ 874.541735][T17874] do_initcall_level+0x104/0x190 [ 874.541753][T17874] do_initcalls+0x59/0xa0 [ 874.541770][T17874] kernel_init_freeable+0x2a7/0x3d0 [ 874.541787][T17874] kernel_init+0x1d/0x1d0 [ 874.541812][T17874] ret_from_fork+0x510/0xa50 [ 874.541829][T17874] ret_from_fork_asm+0x1a/0x30 [ 874.541856][T17874] [ 874.541856][T17874] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 874.541887][T17874] fs_reclaim_acquire+0x72/0x100 [ 874.541905][T17874] kmem_cache_alloc_noprof+0x45/0x710 [ 874.554576][T17845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 874.556887][T17874] __kernfs_iattrs+0xd9/0x320 [ 874.556913][T17874] kernfs_iop_setattr+0xea/0x3f0 [ 874.556929][T17874] notify_change+0xc1a/0xf40 [ 874.566134][T17845] batadv_slave_0: entered allmulticast mode [ 874.570765][T17874] do_truncate+0x1a4/0x220 [ 874.570786][T17874] path_openat+0x359d/0x3dd0 [ 874.570800][T17874] do_filp_open+0x1fa/0x410 [ 874.570815][T17874] do_sys_openat2+0x121/0x200 [ 874.579474][T17845] veth1_to_batadv: entered allmulticast mode [ 874.581092][T17874] __x64_sys_openat+0x138/0x170 [ 874.581123][T17874] do_syscall_64+0xec/0xf80 [ 874.588439][T17845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 874.591053][T17874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.591079][T17874] [ 874.591079][T17874] -> #0 [ 874.596650][T17845] batadv_slave_1: entered allmulticast mode [ 874.601362][T17874] (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 874.601391][T17874] __lock_acquire+0x15a6/0x2cf0 [ 874.601410][T17874] lock_acquire+0x107/0x340 [ 874.601426][T17874] down_read+0x47/0x2e0 [ 874.610016][T17845] xfrm0: entered allmulticast mode [ 874.611953][T17874] kernfs_iop_getattr+0x9e/0x450 [ 874.611980][T17874] vfs_getattr_nosec+0x2e1/0x430 [ 874.619266][T17845] veth0_to_hsr: entered allmulticast mode [ 874.622339][T17874] loop_assign_backing_file+0x222/0x400 [ 874.622370][T17874] lo_ioctl+0x167f/0x1c50 [ 874.632362][T17845] hsr_slave_0: entered allmulticast mode [ 874.634998][T17874] blkdev_ioctl+0x60e/0x710 [ 874.644151][T17845] hsr0: entered allmulticast mode [ 874.648332][T17874] __se_sys_ioctl+0xfc/0x170 [ 874.648365][T17874] do_syscall_64+0xec/0xf80 [ 874.648384][T17874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.648402][T17874] [ 874.648402][T17874] other info that might help us debug this: [ 874.648402][T17874] [ 874.656783][T17845] veth1_virt_wifi: entered allmulticast mode [ 874.659026][T17874] Chain exists of: [ 874.659026][T17874] &root->kernfs_iattr_rwsem --> fs_reclaim --> [ 874.666276][T17845] veth0_virt_wifi: entered allmulticast mode [ 874.670009][T17874] &q->q_usage_counter(io)#24 [ 874.670009][T17874] [ 874.670031][T17874] Possible unsafe locking scenario: [ 874.670031][T17874] [ 874.670037][T17874] CPU0 CPU1 [ 874.670044][T17874] ---- ---- [ 874.670051][T17874] lock(&q->q_usage_counter(io)#24); [ 874.678303][T17845] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 874.680065][T17874] lock(fs_reclaim); [ 874.680087][T17874] lock( [ 874.685583][T17845] veth1_vlan: entered allmulticast mode [ 874.690274][T17874] &q->q_usage_counter(io)#24); [ 874.690295][T17874] rlock(&root->kernfs_iattr_rwsem); [ 874.690309][T17874] [ 874.690309][T17874] *** DEADLOCK *** [ 874.690309][T17874] [ 874.690316][T17874] 3 locks held by syz.5.3266/17874: [ 874.690326][T17874] #0: ffff888024c30448 (&lo->lo_mutex [ 874.699328][T17845] veth0_vlan: entered allmulticast mode [ 874.701645][T17874] ){+.+.}-{4:4}, at: lo_ioctl+0x11e4/0x1c50 [ 874.713427][T17845] vlan0: entered allmulticast mode [ 874.714022][T17874] #1: ffff888141bfdfb0 (&q->q_usage_counter(io) [ 874.721046][T17845] vlan1: entered allmulticast mode [ 874.725383][T17874] #24){++++}-{0:0}, at: lo_ioctl+0x1604/0x1c50 [ 874.966591][T17874] #2: ffff888141bfdfe8 (&q->q_usage_counter(queue)#8){+.+.}-{0:0}, at: lo_ioctl+0x1604/0x1c50 [ 874.976956][T17874] [ 874.976956][T17874] stack backtrace: [ 874.982837][T17874] CPU: 0 UID: 0 PID: 17874 Comm: syz.5.3266 Tainted: G L syzkaller #0 PREEMPT(full) [ 874.982856][T17874] Tainted: [L]=SOFTLOCKUP [ 874.982860][T17874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 874.982868][T17874] Call Trace: [ 874.982873][T17874] [ 874.982879][T17874] dump_stack_lvl+0xe8/0x150 [ 874.982896][T17874] print_circular_bug+0x2e2/0x300 [ 874.982912][T17874] check_noncircular+0x12e/0x150 [ 874.982925][T17874] __lock_acquire+0x15a6/0x2cf0 [ 874.982937][T17874] ? tomoyo_path_perm+0x1e3/0x4b0 [ 874.982952][T17874] ? kernfs_iop_getattr+0x9e/0x450 [ 874.982962][T17874] lock_acquire+0x107/0x340 [ 874.982972][T17874] ? kernfs_iop_getattr+0x9e/0x450 [ 874.982984][T17874] down_read+0x47/0x2e0 [ 874.982997][T17874] ? kernfs_iop_getattr+0x9e/0x450 [ 874.983007][T17874] kernfs_iop_getattr+0x9e/0x450 [ 874.983019][T17874] vfs_getattr_nosec+0x2e1/0x430 [ 874.983037][T17874] loop_assign_backing_file+0x222/0x400 [ 874.983051][T17874] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 874.983071][T17874] lo_ioctl+0x167f/0x1c50 [ 874.983085][T17874] ? __pfx_lo_ioctl+0x10/0x10 [ 874.983096][T17874] ? kernel_text_address+0xa5/0xe0 [ 874.983112][T17874] ? __lock_acquire+0x6b6/0x2cf0 [ 874.983123][T17874] ? __lock_acquire+0x6b6/0x2cf0 [ 874.983134][T17874] ? __lock_acquire+0x6b6/0x2cf0 [ 874.983145][T17874] ? __lock_acquire+0x6b6/0x2cf0 [ 874.983155][T17874] ? __lock_acquire+0x6b6/0x2cf0 [ 874.983166][T17874] ? __lock_acquire+0x6b6/0x2cf0 [ 874.983176][T17874] ? __lock_acquire+0x6b6/0x2cf0 [ 874.983187][T17874] ? unwind_next_frame+0xa5/0x23d0 [ 874.983201][T17874] ? unwind_next_frame+0xa5/0x23d0 [ 874.983213][T17874] ? is_bpf_text_address+0x26/0x2b0 [ 874.983230][T17874] ? is_bpf_text_address+0x26/0x2b0 [ 874.983246][T17874] ? is_bpf_text_address+0x292/0x2b0 [ 874.983260][T17874] ? is_bpf_text_address+0x26/0x2b0 [ 874.983275][T17874] ? kernel_text_address+0xa5/0xe0 [ 874.983289][T17874] ? __kernel_text_address+0xd/0x40 [ 874.983302][T17874] ? unwind_get_return_address+0x4d/0x90 [ 874.983314][T17874] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 874.983330][T17874] ? arch_stack_walk+0xfc/0x150 [ 874.983344][T17874] ? stack_trace_save+0x9c/0xe0 [ 874.983358][T17874] ? __pfx_stack_trace_save+0x10/0x10 [ 874.983373][T17874] ? stack_depot_save_flags+0x33/0x810 [ 874.983398][T17874] ? kasan_save_track+0x4f/0x80 [ 874.983413][T17874] ? kasan_save_track+0x3e/0x80 [ 874.983429][T17874] ? kasan_save_free_info+0x46/0x50 [ 874.983443][T17874] ? __kasan_slab_free+0x5c/0x80 [ 874.983453][T17874] ? kfree+0x1c0/0x660 [ 874.983467][T17874] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 874.983477][T17874] ? security_file_ioctl+0xcb/0x2d0 [ 874.983487][T17874] ? __se_sys_ioctl+0x47/0x170 [ 874.983502][T17874] ? do_syscall_64+0xec/0xf80 [ 874.983512][T17874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.983525][T17874] ? __asan_memset+0x22/0x50 [ 874.983540][T17874] ? blk_get_meta_cap+0x18c/0x750 [ 874.983554][T17874] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 874.983569][T17874] ? blkdev_common_ioctl+0x11d9/0x2c70 [ 874.983584][T17874] ? kasan_quarantine_put+0xbb/0x1f0 [ 874.983595][T17874] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 874.983609][T17874] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 874.983621][T17874] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 874.983637][T17874] ? do_vfs_ioctl+0xbe8/0x1430 [ 874.983647][T17874] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 874.983662][T17874] ? __pfx_lo_ioctl+0x10/0x10 [ 874.983674][T17874] blkdev_ioctl+0x60e/0x710 [ 874.983689][T17874] ? __pfx_blkdev_ioctl+0x10/0x10 [ 874.983702][T17874] ? __fget_files+0x2a/0x420 [ 874.983715][T17874] ? bpf_lsm_file_ioctl+0x9/0x20 [ 874.983726][T17874] ? __pfx_blkdev_ioctl+0x10/0x10 [ 874.983740][T17874] __se_sys_ioctl+0xfc/0x170 [ 874.983755][T17874] do_syscall_64+0xec/0xf80 [ 874.983765][T17874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.983775][T17874] ? trace_irq_disable+0x37/0x100 [ 874.983789][T17874] ? clear_bhb_loop+0x60/0xb0 [ 874.983800][T17874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.983811][T17874] RIP: 0033:0x7f3288f8f749 [ 874.983823][T17874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 874.983833][T17874] RSP: 002b:00007f3289da0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 874.983846][T17874] RAX: ffffffffffffffda RBX: 00007f32891e6360 RCX: 00007f3288f8f749 [ 874.983855][T17874] RDX: 000000000000000a RSI: 0000000000004c06 RDI: 0000000000000008 [ 874.983862][T17874] RBP: 00007f3289013f91 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 874.983869][T17874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 874.983875][T17874] R13: 00007f32891e63f8 R14: 00007f32891e6360 R15: 00007f328930fa28 [ 874.983887][T17874] [ 875.444439][T17845] macvlan0: entered allmulticast mode [ 875.461263][T17845] macvlan1: entered allmulticast mode [ 875.491085][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 875.493014][T17845] ipvlan0: entered allmulticast mode [ 875.500702][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 875.514342][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 875.523958][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 875.531948][T17873] ldm_validate_partition_table(): Disk read failed. [ 875.533653][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 875.548191][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 875.606842][T17845] ipvlan1: entered allmulticast mode [ 875.682897][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 875.692540][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 875.698142][T17845] veth1_macvtap: entered allmulticast mode [ 875.700597][ T5833] Bluetooth: hci2: command tx timeout [ 875.713926][T17845] veth0_macvtap: entered allmulticast mode [ 875.746798][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 875.756397][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 875.787787][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 875.797401][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 875.805346][T17873] Dev loop7: unable to read RDB block 0 [ 875.811700][T17845] macvtap0: entered allmulticast mode [ 875.831654][T17845] macsec0: entered allmulticast mode [ 875.840275][T17873] loop7: unable to read partition table [ 875.846110][T17873] loop7: partition table beyond EOD, truncated [ 875.867161][T17845] geneve0: entered allmulticast mode [ 875.879461][T17845] geneve1: entered allmulticast mode [ 875.910108][T17845] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 875.929617][T17873] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 875.943466][ T7491] ldm_validate_partition_table(): Disk read failed. [ 875.950459][T17845] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 875.968706][T17845] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 875.988111][ T7491] Dev loop7: unable to read RDB block 0 [ 875.995422][T17845] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 876.003463][ T7491] loop7: unable to read partition table [ 876.021649][ T7491] loop7: partition table beyond EOD, truncated [ 876.030403][T17845] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode [ 876.047895][T17874] ldm_validate_partition_table(): Disk read failed. [ 876.055055][T17874] Dev loop7: unable to read RDB block 0 [ 876.064208][T17845] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 876.067204][T17874] loop7: unable to read partition table [ 876.073233][T17845] sit1: entered allmulticast mode [ 876.088554][T17874] loop7: partition table beyond EOD, truncated [ 876.094843][T17874] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 876.181718][ T1160] tipc: Left network mode [ 876.209427][T17863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 876.227953][T17863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 876.243762][T17863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 876.251520][T17863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 876.337067][ T6029] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.407569][T15221] syz_tun (unregistering): left allmulticast mode [ 876.455029][ T6029] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.511243][ T6029] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.628646][ T6029] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.707575][ T1160] hsr_slave_0: left promiscuous mode [ 876.730169][ T1160] hsr_slave_1: left promiscuous mode [ 876.754481][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 876.776989][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 876.790062][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 876.807239][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 876.828156][ T1160] veth1_macvtap: left promiscuous mode [ 876.833798][ T1160] veth0_macvtap: left promiscuous mode [ 876.839509][ T1160] veth1_vlan: left promiscuous mode [ 876.844805][ T1160] veth0_vlan: left promiscuous mode [ 876.911013][ T1160] pim6reg (unregistering): left allmulticast mode [ 876.929489][ T1160] pimreg (unregistering): left allmulticast mode [ 877.103291][ T1160] team_slave_1 (unregistering): left allmulticast mode [ 877.113472][ T1160] team0 (unregistering): Port device team_slave_1 removed [ 877.124429][ T1160] team_slave_0 (unregistering): left allmulticast mode [ 877.132183][ T1160] team0 (unregistering): Port device team_slave_0 removed [ 877.243728][ T1160] team0 (unregistering): left allmulticast mode [ 877.530289][ T1160] IPVS: stop unused estimator thread 0... [ 877.599678][ T1160] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.660930][ T1160] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.715108][ T1160] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.797960][ T1160] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.468029][ T1160] bridge_slave_1: left allmulticast mode [ 878.473707][ T1160] bridge_slave_1: left promiscuous mode [ 878.479515][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.488385][ T1160] bridge_slave_0: left allmulticast mode [ 878.494023][ T1160] bridge_slave_0: left promiscuous mode [ 878.499909][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.508699][ T1160] bridge_slave_1: left promiscuous mode [ 878.514330][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.522808][ T1160] bridge_slave_0: left promiscuous mode [ 878.528574][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.537492][ T1160] bridge_slave_1: left allmulticast mode [ 878.543127][ T1160] bridge_slave_1: left promiscuous mode [ 878.549051][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.557653][ T1160] bridge_slave_0: left allmulticast mode [ 878.563318][ T1160] bridge_slave_0: left promiscuous mode [ 878.570283][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.579894][ T1160] bridge_slave_1: left allmulticast mode [ 878.585531][ T1160] bridge_slave_1: left promiscuous mode [ 878.591349][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.600136][ T1160] bridge_slave_0: left promiscuous mode [ 878.605756][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.668959][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 878.682011][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 878.692754][ T1160] bond0 (unregistering): Released all slaves [ 878.952390][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 878.962357][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 878.971648][ T1160] bond0 (unregistering): Released all slaves [ 879.020167][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 879.029869][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 879.039430][ T1160] bond0 (unregistering): Released all slaves [ 879.327277][ T1160] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 879.466121][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 879.476001][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 879.485060][ T1160] bond0 (unregistering): Released all slaves [ 879.494007][ T1160] bond1 (unregistering): Released all slaves [ 879.573579][ T1160] tipc: Left network mode [ 879.981974][ T1160] hsr_slave_0: left promiscuous mode [ 879.988657][ T1160] hsr_slave_1: left promiscuous mode [ 879.997076][ T1160] hsr_slave_0: left promiscuous mode [ 880.002913][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 880.010697][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 880.018604][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 880.026305][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 880.037289][ T1160] hsr_slave_0: left promiscuous mode [ 880.043193][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 880.051808][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 880.062741][ T1160] veth1_macvtap: left promiscuous mode [ 880.068510][ T1160] veth0_macvtap: left promiscuous mode [ 880.074186][ T1160] veth1_vlan: left promiscuous mode [ 880.079969][ T1160] veth0_vlan: left promiscuous mode [ 880.236869][ T1160] team0 (unregistering): Port device team_slave_1 removed [ 880.264310][ T1160] team0 (unregistering): Port device team_slave_0 removed [ 880.464252][ T1160] team0 (unregistering): Port device team_slave_1 removed [ 880.503995][ T1160] team0 (unregistering): Port device team_slave_0 removed [ 880.890537][ T1160] team0 (unregistering): Port device team_slave_1 removed [ 880.916735][ T1160] team0 (unregistering): Port device team_slave_0 removed [ 882.325479][ T1160] IPVS: stop unused estimator thread 0...