last executing test programs: 5m58.76842412s ago: executing program 2 (id=90): r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100}, 0x0) 5m57.566577833s ago: executing program 2 (id=92): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000e80)={0x1c, &(0x7f0000000d40)={0x0, 0x0, 0x44, "b4a39ed2568f28db3a971a0533dff59a9bd2ef109284b9c4356185b5b32fd89b80ed6d1c9c813ec5b81f27d0f34cfb4270c31293308497ed835efd1afaaad7b55e758607"}, &(0x7f0000000e00)={0x0, 0xa, 0x1, 0x7}, 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x16) clock_gettime(0x0, 0x0) clock_gettime(0x0, &(0x7f0000002340)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000002480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002bc0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002a00)={0x40, 0x13, 0x6, @local}, 0x0, &(0x7f0000002a80)={0x40, 0x19, 0x2, "f807"}, &(0x7f0000002ac0)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000002b00)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000002b40)={0x40, 0x1e, 0x1, 0x10}, &(0x7f0000002b80)={0x40, 0x21, 0x1, 0x8}}) 5m53.746494064s ago: executing program 2 (id=97): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x9, 0x7, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d8008000100ac141400080002000000000014000500ff02000000000000000000000000000114000400fe8000", @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) fsopen(0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x4811) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x27}, 0xfffffffd}) fsopen(&(0x7f0000000240)='efs\x00', 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, 0x0, 0x4000) 5m41.190788072s ago: executing program 2 (id=117): socket$isdn(0x22, 0x2, 0x24) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 5m40.88117423s ago: executing program 2 (id=119): r0 = syz_io_uring_setup(0x110, &(0x7f0000000700)={0x0, 0x19e77, 0x2, 0x1, 0x200d6}, &(0x7f0000000640), &(0x7f0000000280)) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = getpgrp(0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32], 0x1c}}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) pwrite64(r0, &(0x7f0000000340)="c70b074bd2c05e40ddd00034357c2f18a771e4b7d30a17f9677413e04a374e2e3f7be866ea44fe9b3e1efb37de0dc93656d7f5a0103070857b711dad5bc1f7859708f30f3c73c4a74102294702893de183ebad615f09b49af85b0977150f2b5da04a44b730de437ce16e815743300e9bd45c64a47763d49a7c98a44f9d4a8b5294ea3e809dfb39387a3967ed3ac539200544332ed57b2e2a54ee2ddae1ec9256c27f33812413bd1faf20f0d9ecef8f706763c9665ac6e06feb3219ac443e1668f7e174dfa8588325041577f88ad5716b36a1b37b5b28ff1d0aaff3f2cf46741b35a854355ad6a2e8a98e140231", 0xed, 0xfffffffffffffff6) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r6, 0x0, 0x0}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) r7 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_S_CROP(r7, 0xc038563c, &(0x7f0000000080)={0x1, 0x0, {0x7, 0x0, 0x4, 0x7}}) socket$netlink(0x10, 0x3, 0x0) 5m37.254926268s ago: executing program 2 (id=123): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x48, 0x9, 0x73, 0xfffffeff}, {0x6, 0x83, 0x6, 0x10400}]}, 0x10) sendmsg$netlink(r3, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="180000002e003303"], 0x18}], 0x1, 0x0, 0x0, 0x20000000}, 0x40040000) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f00000001c0), 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=0x0], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffff000000000a14000000110001000000000000000000000016b2b2735c194ec938826c8965a7c370b23e9b85aae946e52727d3d34372829ac804486f9290d445dac3fa2f4c3ab5fbcce15ee09d4f0f67d8ba44ef9b000000"], 0x28}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) mlock(&(0x7f0000377000/0x2000)=nil, 0x2000) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 5m21.909018178s ago: executing program 32 (id=123): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x48, 0x9, 0x73, 0xfffffeff}, {0x6, 0x83, 0x6, 0x10400}]}, 0x10) sendmsg$netlink(r3, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="180000002e003303"], 0x18}], 0x1, 0x0, 0x0, 0x20000000}, 0x40040000) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f00000001c0), 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=0x0], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffff000000000a14000000110001000000000000000000000016b2b2735c194ec938826c8965a7c370b23e9b85aae946e52727d3d34372829ac804486f9290d445dac3fa2f4c3ab5fbcce15ee09d4f0f67d8ba44ef9b000000"], 0x28}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) mlock(&(0x7f0000377000/0x2000)=nil, 0x2000) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 2m51.819351526s ago: executing program 1 (id=401): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xd, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {}, {0x1, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m44.592803049s ago: executing program 1 (id=414): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000020601040000000000000000000000000c00078008000640000000010500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e657400000000bffb2648c216955eadf2594f9a8b282112759761b8fbd6cd305a1b3bfee9337edf84371ab0475b8ec7c4416bd2d503c975aaed22ca96f54d7d7cc8c0"], 0x54}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 2m43.058215322s ago: executing program 1 (id=418): ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x4000, 0x0}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x9f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c82010000c000100050108"], 0x15) shutdown(r0, 0x0) 2m41.983190458s ago: executing program 1 (id=420): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="2bdc6aef55dd21dc6bac6ddf09a003e72220549a9465ac2c4b461d412e597f534430a3e5032c53402f7255776c146d3d61ff1f7e3354d9ca7b9e0d098242ee409ce5780e9f3aa697ccbdfab748255d4548563116c1aaf7c59a20cb296d50cc205587ed22346087dbfd13643e4789ad053d7af432c13b213a1a50b917a66ba3a210dd3a049e8fcfade01911ed45f8856c7cade1b820cc8ef348ea7e272ba546245a35d8e2c9310d653cb89ff50699653d185e0b2c7d9b9fb46e2cad650b0803315d8a0f3a6c836eab3ae956c9fc8d1ea17dfb2b64392e903283eb6aca1e8b0f058ce14c76e3ff6e7361a7eb2a6a191582ab6ac2258f5e77eb5292e24f61322c6826b32b7aa9f9f2940641d3b3b1f6bd16763a6b4ede8733cd6753d8b7c7875ccddc652380c438883313762089fa5a81d61aebdccc7ea0e929f401dcd27e2f4d2f38bd50c3095e02ef5a8760364f23b2d4fedcdc32c8bc44ddf4ea398dae3f2edc37375b79f398f07464a299ca3c97e5fadc9b09b2a9554c1197c1d5ee3f9da555b0d5ac97e2182367340836bffe5174447fb3ef8e1ecd3e4acc2d68b110510a92438bdac6f6dceaffcfeb68147e256fb545166190db7bda6d357ad22d9da29366c09d34fce2e543bfedc7889a7dc697592aa04d9ab3b9bd68741ce064d4bfb5c7901ae2e1868f00c5630344cd20991f9c62657cd4438049e03ef3837ad5b15528906e8e9e1e5f8cd6d7e59ca47992a6f13cf6b636fbc108dc885ef2a687816be9395a199eae828b3e6e87e615bab1b76ae62acd02590cc0e670825553b92372eed977d9b498a21ee1fb7a7a30e2aafd9f14519bea755969471c6fbbfba623ddddb168cb3210ea99af8962ca432eb12751fc8cd2efde9fc53cbb82e3c824bceb292b7f810cdffd967c83ec384103acdb0654d054dfebbbe39e054112b801ec91102af8c18ec8c4640a08c7e4b1d66d9652e975a19b70eda284209a15d5644a46c43c323995f06357d78199b919b74ba7d0e0b5cff637041f5d0fa7df2f062169a73765a5ec2a82679d818509265d5a2b317572d202ae158248b0e12b6f7366bd79d13a47450651e68699dde88a133aee6e879c9a0c39be14fb03854ba7ac7dc3037c4b3023ba696d42c5df28ee34a623e9e465be53cd3eb50e29d95104a0cab6444b33a1b001c87f218e5cacc06ccfa51e599b9d68130f8e7073decadb620e13235240cb44e467ed6f89ef226df2643953181db7aaba43b70003611991ca8a7f03b6200c972867d3d9b2db0bde22a6930615084cffadc8268b7e5fbfb77150dc14c4a5945e3eedaa3d26657762dcb4c18fed072b894b0ca159f5425493f0054ace8a44ee953461610727b965516d4a45226046e5e3eb3c74ee995787f8b75ca058a68d4cb10e5a6b53664666dd807a65e95a26f4c3b968cc33cae936197768ed6fbc4f38c9df9814523418f6a995e21b039032ca23c1e0be1b006b0b862ca6a1af0bbb987df17d7d01c28b1fc86e44d6eea4c9e6e3dc77d1e15fa643fcade96db303c64645e2cd0418116ea6729dc06619aac708e4314ba8bd1512d68171c2f8368ce73abcc8a0e565550f82446d08ff4f190977c706ec4476cd7b96a9ef5d4d73ae32bb652c45812687ea76d44381f4652e832266a3e84e445b082ec50195946c7deebce4a2cba92206f88fa1616eeff165608f09b7a734c6ace1601d85ba9173f8b8393b74e4bc2bbcbf8582441856475a5d34cd34f99d1d8a0b81890e587470a2e253c4e082b9f8dbd2988ba59263f528fa6d376cf1f9709578ff68c9128b90e11bb5bc871e73d5faaf9a0d870ebad6e55eeba9b6821d35ed49ee5bf4dba75835cac8bb8719b740b5ba84c2d2d4768264dab1cf8111da8da8a2bb26e9d7eb0e5349b511664315536768cca156d91be325d6c9f45a6515b4f93dde1ad85b393753f20d0e3517d2419bfd9ce9bc60307fd226f3747adc9be8eaa0b72fc1310c7c9b4a2c3131732f0a55f669ca4f124731d86d8589a4e153abffd9ee179efac64099cf34232e230adda008c99b94a7b3ed081a57cff3303c1d00d0d4f2af7492423131a47471a516bdb6ce4e5382bf0eaa90af63f37f2be5c08dd5514f0dc41b0d6766f45c3408d250f895e9a330a25e8978eee2008c060e37589b890adb82a6279abc58ab24162f1fd60cdadc1c8ba178970da500c9297869174f428b12d1dc451bd3f31f0a188944ee529b5ba539fd089e1aadb4f7fb0851973db33b1f722d1d0fb18bc02aed6540d40f7f3ca14fc04634470c6f7a3377e03c9d8244094349d8325e9fa98d6fb84acdf0e673fcf45ec9691e15cfeef433d3aca784c9905d103b3b6aa3e5f1f8de5e740a692674971fb045822e09a903558eb099f217b4bdc64bf81fb26856a9f9651aa64b8cd704137008a1b4656fd6e11fef76893b5d8cde3fd542d61f6fd996912d821441fbafc4ac4ba9f9ab60b51be4394c783db0cf33bcdc4c15903801516daa04a994d1022949918acc9844834c2d58275bea38c40edc7835d284cc3628142fe83ceb79cb730c872ac50f5259dddb01362a6096adfe9931d14819e5865434289cd287a3691936a24fa12819a835134f6fdca9b419aa9feaf2de8e36b0f4e32330c858cd826856177de8f7b2235dfab8d477494e2cdfa262e904948eee08728fd7ab0a53c41a2e361e07562baaa4a593bc4bda4fa44c949332d99de8a634e88d3169569e07e07515ec3a25f7cb868600303052fe5fa573fafb94944cbf56bcf77d3b49f1cfa1ec21c1140cce6c5ef3a2f8c024e8113c676316b0ea7d41187d1d8b60469b8e0cb066c9b751fc0bc28132e4b2d573072b60f777db2a1e8fbf71daa317c750f8010c2a61d5ba718cac5147991c488e9842c319c6adfbbb4f60ed3522c2f092ecb217f7cf05c6b5085328e503daec5f0b0da53e2c9f37b5681793aa508aac1fa5588e4994c4c845cb47e20a7aece04bbf76809d97acd630ebf82ea938130c4c12a3238eccf26b9445e84c7eac3aa3db74a903136f280d0ee143330793b093d4efa477af07eacebd07571fc2d262bddc2f0a35022a3e116eb4ef92f72e17f1144cacebae41e6d199f0f8cb25406c88c9cb24f026a1ad65125d0c5b967f6cd2a2bea6dabb076b0ec7c49f925a79c2448d3ba8d34ac16aa17b86b62be4896bbd1947daa68679e59fdeb114c524a154f1a4acc9471b0aafa94ada69378b9b0b266d92b871e32580842d741e700bcdbacb851643f92bdcca2b636bf2c6f79226f44da2084b64cd2b1cd19d6e4f64bf5d207c702c885acdef75a04b9a81abf945d69b24b8584e37d800ecd14d50e0238e3a7c536134da5e24fdc99738f2e6b30ebde27508080a692ff0597d19505504234cd15aef1c586051bfa2bd5a1735bb97b36f4e81312ed97f7a67ebbd446a31f34741d289d548f821cf55123b80bc95590526f566ad85a35257b9a4c83e02d3d8cb0bbeec97de8dcf1d828dd41bfbee993a0b32223c6d0f985f897057c52f0ec8bafe826108c4bf9bf9fcd0372f6905831509a76adff25117964c1f2b4ae72f64ba6166db6ed86016ce46139aa1f68df8f3f98421df345630a775d0616a67bcee09861306b36c77b9cd44833015ee4617ac9b260364bb40e99898c15f95bfb8b70e0589096c6115b7a95eea1a8bdbc405f8ae89209351111fec8062cccc655ecfb8dec785afd02961f690ac4227f3f7eade337d5f8b96af18968a76e97f8c03fc9d55253821ceb864eb40b96a4f7217f4b5388471e6ec5d2607c7f6e63f1b10a7f7bf7cf4bf5ecd1035e37f7e6894f5de13ec9961d26a0dc0679a9cf445faa975a5c49d76034431798343b1d2727715e024deaee17a64d0f864626ada53c8369174afb43535ac951da741cca45e58e0a19daaa2f91010ae8e580153f0f901ccc3604513dd6c093063864b3bb22379ff2078070d518ab0be31afbf3edec0e16316c2bf1d744880e1bb4204812cf7e9d38e91c82cedc1bad7858192e4158a8fb08ba4e743fa4d2626e2641f4eed431e2a75d055e02f8fe547b4965b72af3e2c30b6a9a578d03c9d01ba6ac7ea99586870853d4b963868d450ae8e6bae1c4ef5aec270f576768b6860db7c027c3ce012b2f749405e709deffad53688ae09ce0fd0387126650ccbb4dcd2c6526177913960e6431c77d543f736cdfc0630d05e8b222f5a664ece3b318f0a89fed38fdbf90966581bcda6816d7422d3005d0227779a62b17fcdca3adbb5909a21bc820f0e60e901c330e6640e2c108592ff100f904c28e36f33784209327ee36b3cd3ac8e5bd1e955abc162105c871d2a137ab4f752ca2b36f4a42f177fdbb43c9459daae7a9e21f5e159e157194144b35b465b06b28e8d132935b18156d18251c9137f9012c6944b5122ec9f3dbc2e844a98d57382e5d736314f07effc15fba9f513a6cc2523af2ec6580492cea82f3b28540115577a0c50514aa5e08e1ef3129bc30a950c5b5e97f8da32cb51f9733d6111fb99cac0fdd249cbd2b2a7a43321a339e49315c9e7fa47f85eddd3c853291f2eddf00818c40aa227a56d582d5da84858c456760062d7c6da64eb4a2695ffe7531bdef6a6bc7d53ef743ad25f628d6bad753f6b509a36f1b3b69702bc579007fc9d1fb657a97eb7ef44311e61f3041167a5046e60157dd106e24fc999187f5f82ce5503019687cbaf05938adfcbcffc86f1c9d777a9da186f090010e43e1f17e721113fef4dd62a16067675c1821057ba9f3ca84f38300d3a45600fafd2d641c2154b53720ca828be2c1d02c3086a366d11d493fbede488bbffc621abd53988b5f50ae2e8e2cca20fd9e64d10acb167203ed4a4e942393d13047d660fb0d7272652bb20b043a191460159adb618c12aa530260f9a16dd02d9b019673dffa6d0e1661449bf6e60cb839660983d8f3dc378974d7545645b430afcf61ce7980bc5974e7219e7f6d94e5143c5c6c628113cc865cdd63fe71beef1df6f0f09e8109639bc4678dd760043bd67926ac80fb9089935fe05f9742153fae67bff1b6724d470f3c734c8c6634b0c37715a5398eb0e3b7cd7bc5b1c642e4d1c79b55de028d224fd8b2b89f676a5524abe91aa06fba226f681fa41b27ebd8f243286fa538121674aec648bbf6ba8504377def21a0faaee51711d3dc8b7698bcf88a51fee1be4ea65639fbf32e189b8d27fa2d6e86992636370a804ddc3268367f32791c408f7c226f06231fc6b6eef945b4ee86179eaa7b66581b5fc94c47ee53e15dc3a635aff18b30be6d1472c09c9ac2f62e7f4ba77ad8b38f9ed35b8d0156408c778b891c48deec88296b6a5e8eb8a140ff933cfd02c5ace777eefb4801c94be39038a223862308ed31230e6c0a48613432a8b497bcdd20f5fd8bdf8a29a3b5bbef12fe7e58a3e17c9041648f9683fa85cc3b07d99c669c8979f8d3eb0f88297f053803e2919737e79d96f54a287efd917eb4bd5486469dbc6bfe82a5cea4c7be83b0df73f46add9a4bf696e02c043937aff65e9c66bb94c790990718ba00d11f6727a9278445472b4c594676f1e596870eeeba2d5b43cda489a4a5192b9e263e0f6ff51b474a35ff6db08da2cfadcb4aaa21cc297ffce409a610aa5b44fa40a21bea33c00f20ad88d5e2553f19ce7021d4670d06cd3acaef9cb5a032ccfeb58049c6fa9af8190741ac6904491b66375b578e0d8d09831d70abbd3c9aa65519ac4e6215a228b4c0b11191035b5d9ca4bd6fb2e2f525e71cba4b0140a96d90bc312e9fa6db09017917dbfa4418e02", @ANYRES32=r2, @ANYRES64=r0, @ANYRESHEX, @ANYRESOCT=r2, @ANYRES8], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(r3, &(0x7f0000000640)='\x00', 0x89901) socket(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000810000000200000009"], 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5, r4, 0x0, 0x20}, 0x38) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0xef4, &(0x7f00000003c0)={0x0, 0x26c3, 0x20, 0x3, 0x0, 0x0, r6}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, 0x0) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x28, 0x36, 0x117, 0xfffffffc, 0x814000, {0x1, 0x7c}, [@typed={0x14, 0x4, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'sit0\x00'}) 2m40.372376775s ago: executing program 1 (id=421): r0 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x14, r0, 0x400, 0x70bd2b, 0x25dfdbfd}, 0x14}}, 0x8800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) socket$kcm(0x11, 0xa, 0x300) syz_open_dev$video(0x0, 0x400000000009, 0x48080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x28, 0x0, 0x0) shutdown(r2, 0x1) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0xd931d3864d39ddd2) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, 0x0, 0x0) connect$pptp(r3, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) pipe(&(0x7f0000000180)) socket(0x1e, 0x1, 0x0) 2m34.778582385s ago: executing program 1 (id=427): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r4, 0x50504}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0xfffffffd, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008084) ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00') r10 = socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) brk(0x400000ffc000) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8880, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) 2m21.461039734s ago: executing program 0 (id=457): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x204, @loopback, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x24010045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg', 0x3) shutdown(r0, 0x1) 2m21.398371964s ago: executing program 0 (id=458): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = syz_io_uring_setup(0x10d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0x3}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000400)=""/86, 0x56, 0x0, &(0x7f0000000880)=""/4096, 0x1000}}, 0x10) io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x4aa}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x2}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f0000000300)='l3', 0x2}], 0x2}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) close_range(r0, 0xffffffffffffffff, 0x0) 2m20.30753511s ago: executing program 0 (id=459): openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x40042, 0x21) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000000), 0x80, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000007c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20d01, 0x0) ioctl$TIOCGPKT(r2, 0x80045438, 0x0) 2m19.862347543s ago: executing program 0 (id=460): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r1, 0x40047459, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x60, r4, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 2m19.500790805s ago: executing program 33 (id=427): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r4, 0x50504}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0xfffffffd, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008084) ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00') r10 = socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) brk(0x400000ffc000) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8880, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) 2m18.899339909s ago: executing program 0 (id=465): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000020601040000000000000000000000000c00078008000640000000010500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e657400000000bffb2648c216955eadf2594f9a8b282112759761b8fbd6cd305a1b3bfee9337edf84371ab0475b8ec7c4416bd2d503c975aaed22ca96f54d7d7cc8c0"], 0x54}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) r1 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 2m17.778539104s ago: executing program 0 (id=467): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)={[{@subsystem='cpu'}, {@subsystem='memory'}, {@xattr}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) r4 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0), 0x161) unshare(0x40020000) 2m1.738012847s ago: executing program 34 (id=467): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)={[{@subsystem='cpu'}, {@subsystem='memory'}, {@xattr}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) r4 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0), 0x161) unshare(0x40020000) 49.357124907s ago: executing program 4 (id=581): openat$sequencer(0xffffffffffffff9c, 0x0, 0x400, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) read(r0, &(0x7f00000000c0)=""/72, 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, 0x0, 0x1, 0x9}, 0x14) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x6, 0x10000) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc25c4111, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20010004, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 45.770435275s ago: executing program 4 (id=583): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002900)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}}, 0x0) 45.180939152s ago: executing program 4 (id=585): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7078, 0x0, 0x400007, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23457, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) setrlimit(0x6, &(0x7f0000000180)={0x6, 0x1fffe}) dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x9) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) 34.937641322s ago: executing program 4 (id=586): openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x40042, 0x21) mount$fuse(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000000), 0x80, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000007c0)={0x50, 0x0, r0, {0x7, 0x1f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20d01, 0x0) ioctl$TIOCGPKT(r1, 0x80045438, 0x0) 34.621765349s ago: executing program 3 (id=587): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0x2, 0x4) sendto$inet(r0, 0x0, 0x0, 0x24040014, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x6}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67200000000000150600000fff070067070000200000006a0200000ee60000bf250000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff3d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba4580047a9dc88de358ce795731891a2031de4e09740c64e5506f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfadfe6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a97677400ef0bd697d135324ce480c2960344de346bd511dea4ff7a07400b2d12dd1a8c4c300aee5f948777085ca142b79dfc3aca5fadaa0532ab0572169f68584ff2ee063bc7e75ecd5cc8973464629ba236e3ff97f6033d0800000000000000cef54a60aff12590a50ef147e3e640193d00263003a4ef412420a070dd0327e47c8c7abb77b4b53874788d7e2e5d554de4713db957afb56d4673f1b904c5a317d3670003000000183fb7d36e173044f4ab34"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400)={r7, r2}, 0xc) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000006440)=[{&(0x7f0000000080)="513b5a9c0c0000004d4241fc0560", 0xe}], 0x1}, 0x8000) 34.061736053s ago: executing program 4 (id=588): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x1, r0}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 30.670307428s ago: executing program 4 (id=589): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) chroot(&(0x7f0000000000)='./file0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x114) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000100)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRESDEC=r0], 0x1c8}, 0x4000c010) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB="00000000000700000600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x7, &(0x7f0000ff9000/0x4000)=nil) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xffffff0a) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/prev\x00') read$FUSE(r6, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$inet(r5, &(0x7f00000011c0)={&(0x7f0000000c40)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000001100)=[{&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000000c80)="a1e913045998cb75c6ac7894ad003ca553f5a3d2b22839c7e3c509a396d697760bb1f84a6016e3fd6ca39ff4d5c3076ad25a0766fbb071b7ba671103e9385c221fe8460a80dd503c0407a7a464e254f27a5a29457d838a9032b9e20aaaf569262b20ca6881228093a27a68c840ce8e0d038b31565e8d3f0e97bba8329b084fb9d1a4d25701bbbc04ce0094d6647c3c67407769e95e70efedb0b1b0ec0cd1c59d088fd7f5000ace597153a61212b1fdc1417acc0db33e0fae49cd41f876171fc6f60a3e6ed866fee6", 0xc8}, {&(0x7f0000000d80)="01279fb374ff291378bd2d4c59daf55825717eb2fa0a6922b1f12391e9d1ed0e35ee4a1876a4d5699c9c616cbbe6b7fdac52cbbad94bb28cd578fc16da05b7f308cfb248980a858867c4a8e59606a726e8cf4527d1e0b6e6387716ba093f6afe24e37b1cba234fa62f37666df1af9aa88153bbfdc54c802da50010fc52f7658a7c960769f12aeee2a9d40136ecbcf69e4fcb2689db9fff01a49cd2a00b8723d6ecad105dd6243e9a64608617a079124a", 0xb0}, {&(0x7f0000000e40)="834b2d3cf2beb90c5f75c2f1b9f1aa4fac53efd689847e1d42eead449fa393ffb8e7767fce36f81fb425726099c3c159dadbbf07e3e438abdbe913a7f3cb3c664a16e609dbe5db4dae", 0x49}, {&(0x7f0000000ec0)="34b87b92e85c6f5ab1b55b17bbc6219c7c1cb7cbe6827b68cf0c82c27b51a7b8ceee1596da05f8e7d13a3848075bb29c2e501087f1b84a28b8a9f4b24dae8eac4fbe68b087", 0x45}, {&(0x7f0000000f40)="89cae3577ecac0b64cc1cbaa288d9e5eab56258b2e57b76feb3a09465ce257aee9a9bf09b0c9a21c3f61db758c3434140cfd20f6af748eabf7aac3c06f2bac342af18ce2a3e2ce6ab6288c4ed00bdb3df23c41a076fd99358b4b4f08cbddd043d1b3cdd69a83d190c76dc3458769881c88fb7a4484844318071fabb1b355a635a3ed6f2bc31addd3f5a22a0771cb3c35e00962cf5a46f654e90385e8f23341a0c54bb983afe6de556b44b82b7f06fc", 0xaf}, {&(0x7f0000001000)="06b93f7d637c703399ca734da1186039731b5b46277978cfc0cb4bba0042b1b270171b89c7b672e098f33226fae4512e7d72b02b0357a4dabfdb34e395d0dcd24407a279ae58ae41020e48333317366be80360967cd0a4c5d588777e79f21d6131e13d6e0a", 0x65}, {&(0x7f0000001080)="607e1f27b6b1d6698471e5094c0f945cb8bc40674c795fdacc51f281b6b0522dabf3ec30099eb1a95f8cb2962b8c5849757e9abbdd3809a2eea2bca89ac17286dbd4e7db9063a4b7e426377ca5bf1e5b9077d9ac93b77b49c987e0d9eecfb5aae8e0ffaab82e4cbf61e835341fec995adba97600", 0x74}, {&(0x7f0000002880)="a3fe6c7ebb7f67508ba994f99cba1fdfb50b99bc173d94a4b42a0ec492324344611e5a8e360ab54119551601a34496eed0eb1e59b88fae641a7d1c16a18a93d71a45d2901e38e06b231e6d1f3b908ac730cfb306c8cd665906e051dba9a6c81a4a4d3197238c9c1a66349ab6f3ea78b5157d20f0b621a224eaa74c242f3d0efc11b8976f31dcb0882058bee4e7d82aa87978eca85f0b868d6e4047009a8f85bd592cffc38dc11bfdaaf293c1394e1db49823d4aca51de40063b59dac3759c248a55bac3b40437b4ac0fafded4e6a6603edf96c6d7d5ee7833d31036285393bbac943137eeeec90f927a1ed5a315a7d603b53795082f52d309020741434bfc52c6db6115dc4df16975d1b4bd42334ffc56686a14e4c25368fdcda7a9fd4d9ad5b20568196554cc9dff3bdf6ec95d504f61137b8de5fc6d123055fdc7f89c0cc9169146fa29cd196cd0fcb3172bcd62d80474509ec6df22d82962a90395c71719429ff2af9fc1db66adeefd2841d496b13d4cdfc177678f8e1d391b3a0b27d59ddbccebd9e543391d6beb51a9ac6489d486f2c14dd96ab558049eca479e4298adc199194756f157e672661736dfa7fe1b33bcbdc2bc6e566f6bc852776560a2beff99fc64e5bfdcb250371fed0df4e8f2e31a8bb43b711e7402048727b664187c834ce37db78ef165be4bb502b183610a53e3b281ccafd80ecb2e4e254a6abba582d8d45fa0733485bdc840ca51ed3706e8bfa68a8895038600cdbb606b25c3ea2b409434ae90e97bc6ab1c2552f387e6440478dfe3c146a256f6b97a2804c514ebf991791cc2e7c7b0ce55e8637b80c8cf3514aa3c1896bf1a9b84232488fb0d17fb3c3c46cd442b92c2a232cf37b50269fc2bb413790c16b94edb364b7608ecd312e5c33222bba1136e99357e4496b29c9db27762e0297ab53dbcbbc245920b88d42bd32157617789eb60bdf0a6ff0baaccc975d43d66f8447783d1c14c39a2c016c6300b86300cc2b573c1b61cfc0406d1a907d6ffd22b6cd4f962e0ded4aa1e6c817ed2068990899de2c5a5490e90040217796e6fe7d849b2bbcebbb9ef469d13efeb5dde6fa2adf46a51ca3c460527c0239ea18ec34ab10793043ffe11b15c93735a9eb049af85b09c8047019602b9b2177c0a9d091d5ed6e14478f6bf248a853c57ceacd0d92c65dc5c8fdfdac8ca139e99a87f95f0c9b80fa9346fde4794204ae0e83d720c80df48d666748551757200210e9a3641f94a6c9f806a0d7717c2159108e0170b5288ada483abc56a004e90cbcf9f34fbf7012691d17b1dad43e387dc447c5d0a777854d879252da67fe962f2b2543f8ada32ff067517b031ab9d6c6947af9404e731afd5a667fd66efafd84d978b044d35edff7ee98baad7d0f2bb8e4b000d3e06ce8e95c77ab35bacefba5ad9875e8e3f43d581183de6d0392d496e6ac6466a3e60e98b76a9d522f35ae6ac49a43ddb7b007bcfc26cfb459f2425095e8e411371d0f4910928f0f4cbe857bedbad345ba40cd852e46f7e194fad2fcefb0c02c75913e9a2d7e9f103184d070907a6bb9c076a8b26c74b756da19e733f1cdcf543b91a8261966b76b6f73aaac385ebb382da4c3fa3fc3a5ea09219b6beb1e815fcfd156fcf930850517b90a1f9524f826df21bf2c5a948b0a16391c7bd8eb766f5ba5cf99a0d5243dcd2688dc3f4db3b67960bab895174224591ac25b9cff68fc25d8c75ce3e3a1a2a3dc7418fd253c65d43c277fb4baf44c089d5631a60532c17bbcf136dc3704e4765836a1e6e748ac27bb37a40eb69764c3fd8b2ebb23b0ed879a001d6280749819cf2931d9bc1be8ae1c232bac7a04c9539b98ae22279a10080fec221ecce70f227382c0c0920a9bdf86b43d57fedd30f615d5729b5653dbde996d27d9bf30f822b67169e2ee2d44c7a04e2955cb7308e26f82864d77759699061cc45531d509d2dc53d14cdd027b65b4c2ec25fb82cc34a7a953973cf9b393376cc86a5923d1862a985c15bcaf574d3de59e8b6422cdad6b7f860a62328bec3de78829574118ac4f23b702d24a820adca062e09eba9e80d2d5965f166e7bc46ded201fdd6d5a7c7a1cd2443f648791cca1bf6284bb131fc43585a7ff95f28d5e1670b971109451f2a9132b9955f2328e250f4e8e12d822afd5fbe9abb7ef24ac08bf366191fe625a2cb753fe1c5e91b68a686ede848e52f096beacd3fc6a5cc8197e912c5173c3511f7226d26c6d6ee707dbbbd879641f4d2c6770c165eb07c77011b4023397fff1ba830b113e37d01bf27eabb72d338af74c58164654d12bd5390594f21ea33e90d9472091552c46a0c318eb24e52efc152de8ba30ee399874fed27eb50acf8bb923970e6b81b4f460bc9b0e623ab8cc5926870cd5e825e88cd8121d2b7553517edb1001761cf20195ef53fde1ad1c3293831485d1268514b302bac997092a122b7f0df51a4f9b1f87672de4c5c8767b17e608f1c59f3359e7c99aefe88ad2cd29e4cba9a02575134d8b7004447c26ce6e6d82fea108b0980127c6e473ccdffeaa8b15489c61314fde659ed77985eb1924b5c8b6bbfb423658136d4b1080276bc70993e4e838d1a68448ce3885795a101a82c6785994e82a601ee313bfbcf0bc55ef124fb96d8da63e6b7fc74b66f7958b2076a7bbffc5d1d03954ff20504603b4292615322f02ed4f01e68099bc723fd63efc6fbba15d3c33c2e1e4d33408a27fd5ed7bc5cbcdc04cb155d05be500e4602bbeed61465f4e6188955b3f5b5d6e3dc209753a1aafc537b52dde903357c3d4042987760db5f91e5a4584d2ea80f88565cff1874d8b3ad79f28b54b643ed2bb7f1749efcee2d28c50d28607964ea11373fcc4a01cec713e8654ff12b5373e4cb0ef2edb2b12b2fad6b5c8465c2876f12570554824138c396407649f114cb2d441ea2bb618269e3dff847c44d3016635f7fa081a438c0ed81776f20724a0eba04cb09379dbc630bdf4023f491aca4cba2dad5fcd4cc776506f6d722597df9f9250d8bd06a8923aaffea1e0594ac952c1427374c319907c5b39a73384afa2379973d5f9129c8ccb07cd9212d20d80c35f4965cedc290f45430e7dba5e375455cee646afe1b0d295305d665804f3e5f29fe436cf2b99177b40e0344d8873e654bb96d950ca0c4585fe3d4a20fc3472e79d1c25badca35456bc36466a6a01e795266e1f00e0c0e50038a91dddbf1beff7f5528d82cba4c2438e285f34c1c062a7c89b80d1acc605784950a37f746607b6195cb2654ace2da7a14ed39675628fbbf905aa427bce38c68ff32e9f6ec9237731e137057a5238ad066be34944bb4f194d3de8bfa74e9c74d773075e7cdaf1cacf6cf650b8efee14bc2df947bb70e839ba3c2b4e687de5c89e1754e03e05968a2ba799751f37f8709f4ed51b654563ee078af82f700650e890c985b8b3ab1a69412d57be32e3431014d506178b2c1d9a4625c1bf63c454706427213d774ff4a945e135ff1d6e571100b025b1bffc887012158bf2cef16ae8b595e0549dcf769b7de1ab0b7fcdf99486e5bde4dd6e734825998ce05b3adf87199d1b199f72a4666a13eae4cbae8032b18e7a79c3c0ff5023b43fefc92bf224cb24839e8f1e2ea06ad111baec5c8b3d2e762f34b3cc2adcba42e4287200c74b02e7d2a581f55b1420c8f7318f07080f65b8a97a03ac9bdff6482a27d35d24c4fed8f2ebe0935c628d490189dc94bfdbfa2c721a14b4183e7bbe9ad27ccaa2e9ea71f53fa4e4e6d95e2b9174727b0a1e2da67cf3f18ab76acb16d3508d45d6366f23ca1aef67ac99e501921372fd14280006bc8cdc5397bbb6f1c0d199f813000516144f325679d7c8f4848e0b2a3aa4dfd19946d556ef87fa1d9e3ca8afa80610a2907ffc884e4ab2868a4f0b5f6ec6215dc864034006100e53dbbda70c99016218f890f15d32d2928b68680a6b80229597587a51f3c8734cb0c3cb959e43b19017e67f6da8b29f345a846b88e0a63204ff720b117673ea364321dbc632e18a7a79972b6825b3c7f9dffdc1cbc656848248513da7688b818340c8d7f2740741b983966995f2a3913183caf5cb96a0b3ec5d0cb3ab433a24fe0d1bae4fe20d082b9eace7811b6a329b2d24e4a0a9724337be086ba2339fdfdf096d0d42ab4299125b45eabd1502e94b031b4ea2c5f3dca1536d0fd53e81f9d6cec139610f71ec9b08653866ce1e6727ac4279c0880dcf2dfe5dd0c01a8f3414f442ed0cf1f3d8bb33b1d74c6be01a2f9492bd74a01f4755e6bdf6c45f7655d4abb5fa555c47fe90a6157c101eaa473e66120da0ea1dadd6683083bc0ef778f7534acc2c5edce449b6d4cfc9469d0d5482b0e039ecb04361b5c9a57bf519c5b4c04c535cf2c95cc8e5540fda8811f0cbe14ea1a8c0c6686f385d749adc6ed96185c059fbaa4e70229d62f0af4bcef5956d24948572a7b9cf34fc59299543c74571729320bdba6bd770fc9cd2dae3a5f60fc7080adb1f3b7f5bd260b3abf824747f5597e568f4742b09638961fe47c0a8d63bfc154bbba751bbd5489659f4f831762aefabc78af1b4933e4da232a10e43d8589ecd21ea6c180d2379ed7e0c9926c17ebf436371f741233e01b4a6f4ee5fa668b569160f217f3826a36204d6ac3003e520034ad68f6b1f00ad5d71f85c5767bf28f86a8448044c33f2d0a7d96039ff37ac05b4eb22c3ebb863da36e6bf6c7ce255f66703bbb5e3fda925b8ce982af2bf588fe2f3c1e6f235c52ec940cb4b3e0f58b2cab9ebb990495850e1991f44a69ef6ae41c1298168c84ed1ccae0064caedcbc57ccde3077a18b4e378be1ba65938ba33c92437d1b6b36902dc347722cadcfa74c7f0bf6b497c0e1245c41ae818ea8d3aec669ab516873b866673f1047240215e3cec77bd7c470bf2ec80cb0071ae2d711d8d742be7246b3b3aea267cfb6cf6864c7a774fc147ea90dd579f1b5f86a881da29160ac5f5a49557b0a7c64aa61f68b5a7a8b5498ee1345486d3f7ccb4ab61abaf217cc422e4b964ed22af4c5188e5f62778e3d82fd6ebde6acf2b19a0213769561f51698599c0ee0f000d7c78f8341384182021bb787d696afbb4af6aee46ea40bfef67ba491506d3fd2cbdb034f8af2948a7a3e8fa25a51f1577003964b4fac94992ce0c5a76fa29d88556b43fe1cbee9792b2ec855cc945a654ae961a29a1601799dc49e2fa8085139e563972a6e40d86ed9b5c2e5f1ca1e8376f1d39ed3d24b8a4c0595696233590fb37ba934d0154d6d2128b2117f43fd476c4cb3cccacac0e141f6cf756c0e21639250634a018d75ca927414e007e023097ee8f8db340b851e74b5d19c474834eaee2679183a116a871dc25a8508d7c25271be28b885d2ad2b219d3f0df7c142faa33c8c9f61c5301dd520cb93dad5d1e98da3cfd4f70e8db0c2126d2088dedada883b86e4221d66f2d74e37218cd8735c28c3bbc5ba50ac53b5f22701f7158c9a11c65d304560bbff7150b1d4debb2030012ddb37fcf3f9568a850456b1e01777c362831cf3943ce95c5c1dc024f5a63d7bd02baf3ccedb2824a15c6bb4389b22336048d812d5c16fa97866f9ac818b0055eafc85499a5f37822608af8a0e7ed2747c8d004a628dd49ee18a93830437a379a2d68d40f2ad63e9a605ceec5f5a49f648f90b8998fb4892dd4506f15dc886f72df39fdc54fa8135c91432a34f524fa74e90355a400239b6359705e898e6b669970a17de93bcbbff818ab0ec37f8097673d40c775d4e74ef924c5dc604814", 0x1000}], 0x9, &(0x7f0000001180)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @end]}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x3}}], 0x24}, 0x4084) dup(r4) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_bond\x00', [0x2f, 0x80, 0x10006, 0x4, 0x1, 0xcc7, 0x8, 0x17, 0xa, 0x24c, 0xfff, 0x7, 0x5, 0x5, 0x4, 0x105, 0x8, 0x2, 0x2009, 0x1, 0x89, 0x6, 0x0, 0x20001e5a, 0x1000b, 0x7, 0x9, 0x8, 0x6, 0x401, 0xfffffffd]}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 23.655418044s ago: executing program 3 (id=591): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) r1 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) ftruncate(r1, 0x200002) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @dev}, 0x10) connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) sendfile(r3, r2, 0x0, 0x80001d00c0d0) 20.812955717s ago: executing program 3 (id=592): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x204, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24010045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg', 0x3) shutdown(r0, 0x1) 19.846390994s ago: executing program 3 (id=593): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0xff}, 'port0\x00', 0x3eb, 0x21e3f, 0x10, 0x0, 0x3, 0x5, 0x400, 0x0, 0xa}) openat$sequencer2(0xffffff9c, &(0x7f0000000280), 0x4011, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180), 0x56) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f00003f7000/0x2000)=nil, 0x2000, 0x800001, 0x4000010, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'wg1\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4c, 0xd, 0x62, 0x7, 0x8, 0xe, 0xe3, 0x9, 0xa, 0x0, [0x4e, 0x9, 0xd2, 0x7, 0x401, 0x4, 0x9, 0xfffffffb], [0x7f]}}) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r4 = dup(r1) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000240)) ioctl$TIOCL_SETSEL(r4, 0x541c, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) 16.150909446s ago: executing program 3 (id=594): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000440)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_io_uring_setup(0x10d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0x3}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x4aa}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8969, 0x2}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) 13.778938386s ago: executing program 35 (id=589): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) chroot(&(0x7f0000000000)='./file0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x114) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000100)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRESDEC=r0], 0x1c8}, 0x4000c010) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB="00000000000700000600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x7, &(0x7f0000ff9000/0x4000)=nil) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xffffff0a) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x4aa}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8969, 0x2}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) kernel console output (not intermixed with test programs): 599276][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.599301][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.704835][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.704852][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.704876][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.719553][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.719599][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.719659][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.327273][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.327292][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.327328][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.390148][ T5805] hsr_slave_0: entered promiscuous mode [ 98.391277][ T5805] hsr_slave_1: entered promiscuous mode [ 98.525120][ T5799] hsr_slave_0: entered promiscuous mode [ 98.526192][ T5799] hsr_slave_1: entered promiscuous mode [ 98.527055][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 98.527149][ T5799] Cannot create hsr debugfs directory [ 98.558400][ T5798] hsr_slave_0: entered promiscuous mode [ 98.559506][ T5798] hsr_slave_1: entered promiscuous mode [ 98.560206][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 98.560224][ T5798] Cannot create hsr debugfs directory [ 98.626239][ T5797] hsr_slave_0: entered promiscuous mode [ 98.627189][ T5797] hsr_slave_1: entered promiscuous mode [ 98.628093][ T5797] debugfs: 'hsr0' already exists in 'hsr' [ 98.628119][ T5797] Cannot create hsr debugfs directory [ 98.670525][ T5802] hsr_slave_0: entered promiscuous mode [ 98.671442][ T5802] hsr_slave_1: entered promiscuous mode [ 98.672162][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 98.672191][ T5802] Cannot create hsr debugfs directory [ 98.863156][ T5808] Bluetooth: hci1: command tx timeout [ 98.942623][ T5808] Bluetooth: hci2: command tx timeout [ 99.022513][ T5808] Bluetooth: hci4: command tx timeout [ 99.102455][ T5808] Bluetooth: hci0: command tx timeout [ 99.102465][ T5803] Bluetooth: hci3: command tx timeout [ 99.671518][ T5805] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 99.711575][ T5805] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 99.747412][ T5805] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 99.801152][ T5805] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 99.892736][ T5799] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.937552][ T5799] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.968967][ T5799] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.021047][ T5799] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.136560][ T5798] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.178037][ T5798] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.220785][ T5798] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.269352][ T5798] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.408743][ T5797] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.445549][ T5797] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.480497][ T5797] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.538853][ T5797] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.671009][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.685204][ T5802] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 100.728513][ T5802] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 100.760009][ T5802] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 100.802071][ T5802] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 100.891900][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.935662][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.943208][ T5803] Bluetooth: hci1: command tx timeout [ 100.959746][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.972709][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.011674][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.011971][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.023613][ T5803] Bluetooth: hci2: command tx timeout [ 101.075041][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.102811][ T5803] Bluetooth: hci4: command tx timeout [ 101.134873][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.135016][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.162937][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.182548][ T5803] Bluetooth: hci0: command tx timeout [ 101.188464][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.189046][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.192521][ T5803] Bluetooth: hci3: command tx timeout [ 101.289054][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.291061][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.336528][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.336674][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.389202][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.389331][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.435060][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.485152][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.485284][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.519952][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.548599][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.548770][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.675649][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.750823][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.751629][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.819229][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.819329][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.838615][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.143994][ T5805] veth0_vlan: entered promiscuous mode [ 102.177724][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.213542][ T5805] veth1_vlan: entered promiscuous mode [ 102.385815][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.479021][ T5805] veth0_macvtap: entered promiscuous mode [ 102.491692][ T5799] veth0_vlan: entered promiscuous mode [ 102.507693][ T5805] veth1_macvtap: entered promiscuous mode [ 102.538415][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.559353][ T5799] veth1_vlan: entered promiscuous mode [ 102.574493][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.646821][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.685199][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.713727][ T5798] veth0_vlan: entered promiscuous mode [ 102.735041][ T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.738080][ T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.764618][ T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.777833][ T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.820487][ T5798] veth1_vlan: entered promiscuous mode [ 102.938845][ T5799] veth0_macvtap: entered promiscuous mode [ 102.996025][ T5797] veth0_vlan: entered promiscuous mode [ 103.010652][ T5799] veth1_macvtap: entered promiscuous mode [ 103.034427][ T5803] Bluetooth: hci1: command tx timeout [ 103.102521][ T5803] Bluetooth: hci2: command tx timeout [ 103.148712][ T5797] veth1_vlan: entered promiscuous mode [ 103.183098][ T5803] Bluetooth: hci4: command tx timeout [ 103.213010][ T5798] veth0_macvtap: entered promiscuous mode [ 103.231134][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.254558][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.254585][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.261241][ T5798] veth1_macvtap: entered promiscuous mode [ 103.262601][ T5803] Bluetooth: hci3: command tx timeout [ 103.262634][ T5803] Bluetooth: hci0: command tx timeout [ 103.299677][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.346818][ T1269] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.377434][ T1269] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.397377][ T1269] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.417152][ T5802] veth0_vlan: entered promiscuous mode [ 103.418577][ T1269] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.419652][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.419671][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.516511][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.539744][ T5797] veth0_macvtap: entered promiscuous mode [ 103.543044][ T5802] veth1_vlan: entered promiscuous mode [ 103.565876][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.623115][ T5797] veth1_macvtap: entered promiscuous mode [ 103.714957][ T1269] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.727630][ T1269] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.754910][ T1269] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.776193][ T1269] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.860347][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.944986][ T1304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.945008][ T1304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.967719][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.119563][ T5802] veth0_macvtap: entered promiscuous mode [ 104.128479][ T1304] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.131517][ T1304] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.139710][ T1304] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.178989][ T1304] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.201926][ T5802] veth1_macvtap: entered promiscuous mode [ 104.231050][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.231072][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.390524][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.390547][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.445239][ T5877] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 104.461242][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.619622][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.629983][ T1304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.630046][ T1304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.654889][ T5877] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 104.654920][ T5877] usb 4-1: config 0 has no interface number 0 [ 104.679981][ T5877] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 104.680021][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.680039][ T5877] usb 4-1: Product: syz [ 104.680053][ T5877] usb 4-1: Manufacturer: syz [ 104.680066][ T5877] usb 4-1: SerialNumber: syz [ 104.760028][ T5877] usb 4-1: config 0 descriptor?? [ 104.803430][ T1304] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.804718][ T1304] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.804761][ T1304] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.804793][ T1304] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.879893][ T1269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.879915][ T1269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.010652][ T5877] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 105.054094][ T5877] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 105.054631][ T5877] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 105.054729][ T5877] usb 4-1: media controller created [ 105.118064][ T5877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 106.863916][ T5877] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 106.898520][ T1294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.898542][ T1294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.008887][ T5877] usb 4-1: USB disconnect, device number 2 [ 107.108785][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.108807][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.145153][ T5937] netlink: 'syz.0.10': attribute type 12 has an invalid length. [ 107.145240][ T5937] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10'. [ 107.239515][ T5937] ======================================================= [ 107.239515][ T5937] WARNING: The mand mount option has been deprecated and [ 107.239515][ T5937] and is ignored by this kernel. Remove the mand [ 107.239515][ T5937] option from the mount to silence this warning. [ 107.239515][ T5937] ======================================================= [ 107.317010][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.317032][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.550116][ T5945] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 107.922261][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.322269][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.392277][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.394583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.394657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.394730][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.674861][ T5970] delete_channel: no stack [ 111.882294][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.892345][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.708957][ T5996] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 116.052412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.052476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.870141][ T6025] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 121.820839][ T6044] netlink: 24 bytes leftover after parsing attributes in process `syz.2.34'. [ 122.175799][ T6048] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 125.525375][ T6051] syz.1.35 (6051): drop_caches: 2 [ 125.884453][ T6066] netlink: 'syz.3.40': attribute type 12 has an invalid length. [ 125.884478][ T6066] netlink: 132 bytes leftover after parsing attributes in process `syz.3.40'. [ 125.939370][ T6070] 9p: Bad value for 'wfdno' [ 128.141696][ T6081] syz.0.46 uses obsolete (PF_INET,SOCK_PACKET) [ 128.158329][ T6081] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 130.282452][ T5951] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 130.461554][ T5951] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 130.461585][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.461604][ T5951] usb 2-1: Product: syz [ 130.461617][ T5951] usb 2-1: Manufacturer: syz [ 130.461631][ T5951] usb 2-1: SerialNumber: syz [ 130.621089][ T5951] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 130.700606][ T5884] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 130.920396][ T37] audit: type=1326 audit(1769161010.861:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6113 comm="syz.0.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 130.920817][ T37] audit: type=1326 audit(1769161010.861:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6113 comm="syz.0.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 131.971552][ T37] audit: type=1326 audit(1769161010.901:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6113 comm="syz.0.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 131.971686][ T37] audit: type=1326 audit(1769161010.901:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6113 comm="syz.0.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 131.971718][ T37] audit: type=1326 audit(1769161010.901:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6113 comm="syz.0.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 131.971749][ T37] audit: type=1326 audit(1769161010.901:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6113 comm="syz.0.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 131.971847][ T37] audit: type=1326 audit(1769161010.901:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6113 comm="syz.0.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 131.971878][ T37] audit: type=1326 audit(1769161010.901:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6113 comm="syz.0.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 131.971909][ T37] audit: type=1326 audit(1769161010.901:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6113 comm="syz.0.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 131.971940][ T37] audit: type=1326 audit(1769161010.901:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6113 comm="syz.0.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 131.993970][ T5884] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 131.995997][ T5884] ath9k_htc: Failed to initialize the device [ 132.082648][ T5884] usb 2-1: ath9k_htc: USB layer deinitialized [ 133.701678][ T6127] netlink: 'syz.0.56': attribute type 12 has an invalid length. [ 133.701694][ T6127] netlink: 132 bytes leftover after parsing attributes in process `syz.0.56'. [ 133.747359][ T1236] usb 2-1: USB disconnect, device number 2 [ 135.113837][ T6139] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 135.205260][ T6141] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 139.254980][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.255075][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.809717][ T37] kauditd_printk_skb: 244 callbacks suppressed [ 139.809738][ T37] audit: type=1326 audit(1769161019.751:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6167 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa6cbacb9 code=0x7ffc0000 [ 139.836082][ T37] audit: type=1326 audit(1769161019.781:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6167 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa6cbacb9 code=0x7ffc0000 [ 139.841336][ T37] audit: type=1326 audit(1769161019.781:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6167 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa6cbacb9 code=0x7ffc0000 [ 139.842754][ T37] audit: type=1326 audit(1769161019.781:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6167 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3aa6cbacb9 code=0x7ffc0000 [ 139.872320][ T37] audit: type=1326 audit(1769161019.791:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6167 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa6cbacb9 code=0x7ffc0000 [ 139.872464][ T37] audit: type=1326 audit(1769161019.811:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6167 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa6cbacb9 code=0x7ffc0000 [ 139.872638][ T37] audit: type=1326 audit(1769161019.811:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6167 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa6cbacb9 code=0x7ffc0000 [ 139.882495][ T37] audit: type=1326 audit(1769161019.821:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6167 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa6cbacb9 code=0x7ffc0000 [ 139.900194][ T37] audit: type=1326 audit(1769161019.841:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6167 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa6cbacb9 code=0x7ffc0000 [ 139.900342][ T37] audit: type=1326 audit(1769161019.841:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6167 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3aa6cbacb9 code=0x7ffc0000 [ 139.922143][ T5885] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 140.072378][ T5885] usb 1-1: Using ep0 maxpacket: 8 [ 140.076371][ T5885] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.076432][ T5885] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 140.076459][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.112167][ T5885] usb 1-1: config 0 descriptor?? [ 140.177690][ T5885] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 140.417598][ T5885] gspca_vc032x: reg_r err -32 [ 140.417690][ T5885] vc032x 1-1:0.0: probe with driver vc032x failed with error -32 [ 143.002438][ T5885] usb 1-1: USB disconnect, device number 2 [ 145.469067][ T37] kauditd_printk_skb: 128 callbacks suppressed [ 145.469083][ T37] audit: type=1326 audit(1769161025.411:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6195 comm="syz.2.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da69dacb9 code=0x7ffc0000 [ 145.469117][ T37] audit: type=1326 audit(1769161025.411:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6195 comm="syz.2.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da69dacb9 code=0x7ffc0000 [ 145.469146][ T37] audit: type=1326 audit(1769161025.411:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6195 comm="syz.2.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f1da69dacb9 code=0x7ffc0000 [ 145.469176][ T37] audit: type=1326 audit(1769161025.411:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6195 comm="syz.2.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da69dacb9 code=0x7ffc0000 [ 145.469206][ T37] audit: type=1326 audit(1769161025.411:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6195 comm="syz.2.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da69dacb9 code=0x7ffc0000 [ 145.505536][ T37] audit: type=1326 audit(1769161025.451:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6195 comm="syz.2.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1da69dacb9 code=0x7ffc0000 [ 145.505633][ T37] audit: type=1326 audit(1769161025.451:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6195 comm="syz.2.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da69dacb9 code=0x7ffc0000 [ 145.505796][ T37] audit: type=1326 audit(1769161025.451:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6195 comm="syz.2.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da69dacb9 code=0x7ffc0000 [ 145.508720][ T37] audit: type=1326 audit(1769161025.451:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6195 comm="syz.2.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f1da69dacb9 code=0x7ffc0000 [ 145.508846][ T37] audit: type=1326 audit(1769161025.451:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6195 comm="syz.2.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da69dacb9 code=0x7ffc0000 [ 146.396454][ T6175] syz.4.73 (6175): drop_caches: 2 [ 146.552474][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 146.720906][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 146.720942][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.720966][ T9] usb 2-1: Product: syz [ 146.720983][ T9] usb 2-1: Manufacturer: syz [ 146.720999][ T9] usb 2-1: SerialNumber: syz [ 147.904874][ T9] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 147.925048][ T5885] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 150.564349][ T5807] usb 2-1: USB disconnect, device number 3 [ 150.652323][ T5885] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 150.652526][ T5885] ath9k_htc: Failed to initialize the device [ 150.702985][ T5807] usb 2-1: ath9k_htc: USB layer deinitialized [ 150.884156][ T6231] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 152.399605][ T6027] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 153.104191][ T6027] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 153.104258][ T6027] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.104310][ T6027] usb 3-1: Product: syz [ 153.104360][ T6027] usb 3-1: Manufacturer: syz [ 153.104375][ T6027] usb 3-1: SerialNumber: syz [ 153.639854][ T6027] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 153.813576][ T5997] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 154.300593][ T6251] netlink: 24 bytes leftover after parsing attributes in process `syz.0.94'. [ 155.169023][ T5997] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 155.194502][ T5997] ath9k_htc: Failed to initialize the device [ 155.578659][ T5997] usb 3-1: ath9k_htc: USB layer deinitialized [ 155.794739][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 155.833052][ T5962] usb 3-1: USB disconnect, device number 2 [ 155.892042][ T37] kauditd_printk_skb: 205 callbacks suppressed [ 155.892063][ T37] audit: type=1326 audit(1769161035.831:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6257 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0701c9acb9 code=0x7ffc0000 [ 155.929439][ T37] audit: type=1326 audit(1769161035.871:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6257 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0701c9acb9 code=0x7ffc0000 [ 155.975943][ T37] audit: type=1326 audit(1769161035.921:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6257 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0701c9acb9 code=0x7ffc0000 [ 155.975999][ T37] audit: type=1326 audit(1769161035.921:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6257 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0701c9acb9 code=0x7ffc0000 [ 155.976045][ T37] audit: type=1326 audit(1769161035.921:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6257 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0701c9acb9 code=0x7ffc0000 [ 155.976089][ T37] audit: type=1326 audit(1769161035.921:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6257 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0701c9acb9 code=0x7ffc0000 [ 155.976133][ T37] audit: type=1326 audit(1769161035.921:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6257 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0701c9acb9 code=0x7ffc0000 [ 155.976178][ T37] audit: type=1326 audit(1769161035.921:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6257 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0701c9acb9 code=0x7ffc0000 [ 155.987425][ T37] audit: type=1326 audit(1769161035.931:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6257 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0701c9acb9 code=0x7ffc0000 [ 156.007237][ T37] audit: type=1326 audit(1769161035.931:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6257 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0701c9acb9 code=0x7ffc0000 [ 161.249193][ T6288] delete_channel: no stack [ 161.763446][ T6293] netlink: 24 bytes leftover after parsing attributes in process `syz.4.106'. [ 161.876943][ T5962] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 162.026937][ T5962] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 162.026968][ T5962] usb 2-1: config 0 has no interface number 0 [ 162.067008][ T5962] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 162.067032][ T5962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.067047][ T5962] usb 2-1: Product: syz [ 162.067058][ T5962] usb 2-1: Manufacturer: syz [ 162.067069][ T5962] usb 2-1: SerialNumber: syz [ 162.070949][ T5962] usb 2-1: config 0 descriptor?? [ 163.313559][ T5962] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 163.320515][ T5962] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 163.320747][ T5962] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 163.320796][ T5962] usb 2-1: media controller created [ 163.381609][ T5962] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 164.233780][ T6027] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 164.636230][ T5962] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 164.692289][ T6027] usb 4-1: Using ep0 maxpacket: 8 [ 164.695683][ T6027] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.695744][ T6027] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 164.695786][ T6027] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.847635][ T6027] usb 4-1: config 0 descriptor?? [ 164.927456][ T5962] usb 2-1: USB disconnect, device number 4 [ 164.951445][ T6027] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 165.061754][ T6027] gspca_vc032x: reg_r err -32 [ 165.061844][ T6027] vc032x 4-1:0.0: probe with driver vc032x failed with error -32 [ 168.156243][ T6268] syz.2.97 (6268): drop_caches: 2 [ 168.176266][ T6328] usb 4-1: USB disconnect, device number 3 [ 168.230258][ T6330] Zero length message leads to an empty skb [ 168.576230][ T6333] delete_channel: no stack [ 168.610951][ T6338] netlink: 'syz.1.118': attribute type 12 has an invalid length. [ 168.610975][ T6338] netlink: 132 bytes leftover after parsing attributes in process `syz.1.118'. [ 168.667649][ T6340] 9p: Bad value for 'wfdno' [ 170.664506][ T6347] netlink: 24 bytes leftover after parsing attributes in process `syz.1.120'. [ 175.647575][ T6374] delete_channel: no stack [ 179.326223][ T6388] netlink: 24 bytes leftover after parsing attributes in process `syz.4.131'. [ 183.013014][ T37] kauditd_printk_skb: 180 callbacks suppressed [ 183.013035][ T37] audit: type=1326 audit(1769161062.951:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6411 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 183.052316][ T37] audit: type=1326 audit(1769161062.961:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6411 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 183.052372][ T37] audit: type=1326 audit(1769161062.991:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6411 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 183.052418][ T37] audit: type=1326 audit(1769161062.991:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6411 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 183.052463][ T37] audit: type=1326 audit(1769161062.991:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6411 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 183.052508][ T37] audit: type=1326 audit(1769161062.991:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6411 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 183.056770][ T37] audit: type=1326 audit(1769161063.001:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6411 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 183.102491][ T37] audit: type=1326 audit(1769161063.001:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6411 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 183.103404][ T37] audit: type=1326 audit(1769161063.051:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6411 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 183.114657][ T37] audit: type=1326 audit(1769161063.051:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6411 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 183.488751][ T6419] delete_channel: no stack [ 188.273160][ T6430] syz.3.143 (6430): drop_caches: 2 [ 189.094780][ T5803] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 189.117457][ T5803] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 189.118829][ T5803] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 189.137692][ T5803] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 189.138904][ T5803] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 191.024682][ T6470] delete_channel: no stack [ 191.182396][ T5803] Bluetooth: hci5: command tx timeout [ 192.782351][ T49] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 192.782718][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 192.932955][ T49] usb 5-1: device descriptor read/64, error -32 [ 193.272277][ T5803] Bluetooth: hci5: command tx timeout [ 194.442158][ T49] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 194.443185][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 194.999217][ T49] usb 5-1: device descriptor read/64, error -32 [ 195.342462][ T5803] Bluetooth: hci5: command tx timeout [ 195.389708][ T49] usb usb5-port1: attempt power cycle [ 197.423082][ T5803] Bluetooth: hci5: command tx timeout [ 198.341535][ T3505] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.458227][ T6450] chnl_net:caif_netlink_parms(): no params data found [ 198.886884][ T3505] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.247808][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.247900][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.889946][ T3505] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.295895][ T6561] netlink: 24 bytes leftover after parsing attributes in process `syz.3.175'. [ 204.636601][ T6561] netlink: 24 bytes leftover after parsing attributes in process `syz.3.175'. [ 211.042011][ T3505] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.244429][ T6450] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.244637][ T6450] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.244905][ T6450] bridge_slave_0: entered allmulticast mode [ 211.253253][ T6450] bridge_slave_0: entered promiscuous mode [ 211.304199][ T6450] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.325485][ T6450] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.325678][ T6450] bridge_slave_1: entered allmulticast mode [ 211.330123][ T6450] bridge_slave_1: entered promiscuous mode [ 211.607773][ T6450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.612056][ T6450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.653758][ T6450] team0: Port device team_slave_0 added [ 213.660342][ T6450] team0: Port device team_slave_1 added [ 213.772644][ T6611] netlink: 24 bytes leftover after parsing attributes in process `syz.1.188'. [ 213.776762][ T6611] netlink: 24 bytes leftover after parsing attributes in process `syz.1.188'. [ 215.457779][ T6450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.457792][ T6450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.457812][ T6450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.597647][ T6450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.597666][ T6450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.597703][ T6450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.864721][ T3505] bridge_slave_1: left allmulticast mode [ 216.864910][ T3505] bridge_slave_1: left promiscuous mode [ 216.865683][ T3505] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.020843][ T6634] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 217.105005][ T5803] Bluetooth: hci1: command 0x0406 tx timeout [ 217.250603][ T3505] bridge_slave_0: left allmulticast mode [ 217.250635][ T3505] bridge_slave_0: left promiscuous mode [ 217.250884][ T3505] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.489336][ T6642] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 221.372501][ T5951] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 221.522367][ T5951] usb 5-1: Using ep0 maxpacket: 8 [ 221.552426][ T5951] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.552482][ T5951] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 221.552505][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.557244][ T5951] usb 5-1: config 0 descriptor?? [ 221.619051][ T5951] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 221.801257][ T5951] gspca_vc032x: reg_r err -32 [ 221.801351][ T5951] vc032x 5-1:0.0: probe with driver vc032x failed with error -32 [ 222.065756][ T5801] Bluetooth: hci3: command 0x0406 tx timeout [ 222.065783][ T5806] Bluetooth: hci4: command 0x0406 tx timeout [ 222.073092][ T5801] Bluetooth: hci2: command 0x0406 tx timeout [ 222.101967][ T5877] usb 5-1: USB disconnect, device number 5 [ 222.808350][ T6670] netlink: 24 bytes leftover after parsing attributes in process `syz.1.199'. [ 225.776057][ T3505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.863151][ T3505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.909870][ T3505] bond0 (unregistering): Released all slaves [ 226.378208][ T6450] hsr_slave_0: entered promiscuous mode [ 226.417183][ T6450] hsr_slave_1: entered promiscuous mode [ 226.418205][ T6450] debugfs: 'hsr0' already exists in 'hsr' [ 226.418230][ T6450] Cannot create hsr debugfs directory [ 227.810686][ T37] kauditd_printk_skb: 184 callbacks suppressed [ 227.810705][ T37] audit: type=1326 audit(1769161107.751:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6701 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0701c9acb9 code=0x7ffc0000 [ 227.864716][ T37] audit: type=1326 audit(1769161107.751:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6701 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0701c9acb9 code=0x7ffc0000 [ 227.864767][ T37] audit: type=1326 audit(1769161107.811:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6701 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0701c9acb9 code=0x7ffc0000 [ 227.866043][ T37] audit: type=1326 audit(1769161107.811:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6701 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0701c9acb9 code=0x7ffc0000 [ 227.866196][ T37] audit: type=1326 audit(1769161107.811:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6701 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0701c9acb9 code=0x7ffc0000 [ 227.866615][ T37] audit: type=1326 audit(1769161107.811:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6701 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0701c9acb9 code=0x7ffc0000 [ 227.867941][ T37] audit: type=1326 audit(1769161107.811:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6701 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0701c9acb9 code=0x7ffc0000 [ 227.868417][ T37] audit: type=1326 audit(1769161107.811:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6701 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0701c9acb9 code=0x7ffc0000 [ 227.869279][ T37] audit: type=1326 audit(1769161107.811:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6701 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0701c9acb9 code=0x7ffc0000 [ 227.869443][ T37] audit: type=1326 audit(1769161107.811:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6701 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0701c9acb9 code=0x7ffc0000 [ 230.662375][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 230.956812][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 230.957029][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 230.961605][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.962035][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 230.962064][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.107786][ T9] usb 5-1: config 0 descriptor?? [ 231.114801][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 231.114825][ T10] usb 1-1: config 0 has no interface number 0 [ 231.117935][ T10] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 231.117960][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.117981][ T10] usb 1-1: Product: syz [ 231.117996][ T10] usb 1-1: Manufacturer: syz [ 231.118012][ T10] usb 1-1: SerialNumber: syz [ 231.175874][ T10] usb 1-1: config 0 descriptor?? [ 231.232757][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 231.358376][ T9] gspca_vc032x: reg_r err -32 [ 231.358523][ T9] vc032x 5-1:0.0: probe with driver vc032x failed with error -32 [ 231.494788][ T10] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 231.589003][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 231.589345][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 231.589392][ T10] usb 1-1: media controller created [ 231.640138][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 232.786792][ T10] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 233.065045][ T10] usb 1-1: USB disconnect, device number 3 [ 234.170954][ T9] usb 5-1: USB disconnect, device number 6 [ 234.230608][ T6754] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 234.826137][ T3505] hsr_slave_0: left promiscuous mode [ 234.874469][ T3505] hsr_slave_1: left promiscuous mode [ 234.879618][ T3505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.879716][ T3505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.962736][ T3505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.962758][ T3505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.994226][ T5965] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 235.142634][ T5965] usb 4-1: Using ep0 maxpacket: 16 [ 235.558261][ T5965] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 235.558316][ T5965] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.558367][ T5965] usb 4-1: config 0 has no interface number 0 [ 236.072017][ T3505] veth1_macvtap: left promiscuous mode [ 236.073697][ T3505] veth0_macvtap: left promiscuous mode [ 236.076737][ T3505] veth1_vlan: left promiscuous mode [ 236.135735][ T5965] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 236.135779][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.135868][ T5965] usb 4-1: Product: syz [ 236.135925][ T5965] usb 4-1: Manufacturer: syz [ 236.135995][ T5965] usb 4-1: SerialNumber: syz [ 236.149650][ T3505] veth0_vlan: left promiscuous mode [ 236.367311][ T5965] usb 4-1: config 0 descriptor?? [ 236.538599][ T5965] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046c:14e8) [ 236.538693][ T5965] uvcvideo 4-1:0.105: No valid video chain found. [ 236.780346][ T5965] usb 4-1: USB disconnect, device number 4 [ 238.161530][ T6789] syz.3.226 (6789): drop_caches: 2 [ 240.202280][ T5960] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 240.381612][ T5960] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 240.381643][ T5960] usb 5-1: config 0 has no interface number 0 [ 240.449460][ T5960] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 240.449494][ T5960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.449515][ T5960] usb 5-1: Product: syz [ 240.449531][ T5960] usb 5-1: Manufacturer: syz [ 240.449547][ T5960] usb 5-1: SerialNumber: syz [ 240.496418][ T5960] usb 5-1: config 0 descriptor?? [ 240.835128][ T5960] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 240.995935][ T5960] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 241.002831][ T5960] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 241.003214][ T5960] usb 5-1: media controller created [ 241.793084][ T5960] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 242.083303][ T5960] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 242.139978][ T5960] usb 5-1: USB disconnect, device number 7 [ 242.640447][ T6808] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 242.976156][ T6814] syz.4.233 (6814): drop_caches: 2 [ 243.303073][ T3505] team0 (unregistering): Port device team_slave_1 removed [ 243.544724][ T3505] team0 (unregistering): Port device team_slave_0 removed [ 245.312366][ T5960] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 245.467244][ T5960] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 245.467275][ T5960] usb 5-1: config 0 has no interface number 0 [ 245.469688][ T5960] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 245.469722][ T5960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.469737][ T5960] usb 5-1: Product: syz [ 245.469747][ T5960] usb 5-1: Manufacturer: syz [ 245.469758][ T5960] usb 5-1: SerialNumber: syz [ 245.554005][ T5960] usb 5-1: config 0 descriptor?? [ 245.773683][ T5960] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 245.777028][ T5960] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 245.777266][ T5960] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 245.777303][ T5960] usb 5-1: media controller created [ 245.834165][ T5960] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 247.215582][ T5960] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 247.880345][ T5960] usb 5-1: USB disconnect, device number 8 [ 248.192451][ T5980] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 248.344392][ T5980] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 248.344420][ T5980] usb 2-1: config 0 has no interface number 0 [ 248.347527][ T5980] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 248.347554][ T5980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.347574][ T5980] usb 2-1: Product: syz [ 248.347589][ T5980] usb 2-1: Manufacturer: syz [ 248.347604][ T5980] usb 2-1: SerialNumber: syz [ 248.485397][ T5980] usb 2-1: config 0 descriptor?? [ 249.001170][ T5980] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 249.025819][ T5812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 249.052790][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 249.054167][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 249.082510][ T5812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 249.085211][ T5980] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 249.087637][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 249.133016][ T5980] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 249.133074][ T5980] usb 2-1: media controller created [ 249.280611][ T5980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 249.577251][ T5980] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 249.595238][ T6859] syz.0.243 (6859): drop_caches: 2 [ 250.058947][ T5980] usb 2-1: USB disconnect, device number 5 [ 252.066394][ T5812] Bluetooth: hci0: command tx timeout [ 252.925425][ T6881] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 254.218216][ T5812] Bluetooth: hci0: command tx timeout [ 255.519859][ T6908] syz.0.253 (6908): drop_caches: 2 [ 256.269868][ T5812] Bluetooth: hci0: command tx timeout [ 258.052452][ T6847] chnl_net:caif_netlink_parms(): no params data found [ 258.306144][ T5812] Bluetooth: hci0: command tx timeout [ 260.857629][ T6939] netlink: 'syz.3.261': attribute type 12 has an invalid length. [ 260.857653][ T6939] netlink: 132 bytes leftover after parsing attributes in process `syz.3.261'. [ 260.972370][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 261.127294][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 261.127785][ T10] usb 5-1: config 0 has no interface number 0 [ 261.152316][ T10] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 261.152351][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.152374][ T10] usb 5-1: Product: syz [ 261.152391][ T10] usb 5-1: Manufacturer: syz [ 261.152407][ T10] usb 5-1: SerialNumber: syz [ 261.186909][ T10] usb 5-1: config 0 descriptor?? [ 261.242311][ T6632] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 261.475805][ T10] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 261.679921][ T6632] usb 1-1: Using ep0 maxpacket: 8 [ 262.022509][ T6632] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.022568][ T6632] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 262.022592][ T6632] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.619776][ T10] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 262.620169][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 262.620223][ T10] usb 5-1: media controller created [ 262.624473][ T6632] usb 1-1: config 0 descriptor?? [ 262.677849][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 262.806122][ T6632] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 263.107107][ T10] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 263.174391][ T6632] gspca_vc032x: reg_r err -32 [ 263.174485][ T6632] vc032x 1-1:0.0: probe with driver vc032x failed with error -32 [ 263.339209][ T10] usb 5-1: USB disconnect, device number 9 [ 265.437740][ T5988] usb 1-1: USB disconnect, device number 4 [ 265.818667][ T37] kauditd_printk_skb: 144 callbacks suppressed [ 265.818685][ T37] audit: type=1326 audit(1769161145.761:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6998 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af540acb9 code=0x7ffc0000 [ 265.818729][ T37] audit: type=1326 audit(1769161145.761:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6998 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af540acb9 code=0x7ffc0000 [ 265.872009][ T37] audit: type=1326 audit(1769161145.811:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6998 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af540acb9 code=0x7ffc0000 [ 265.875164][ T37] audit: type=1326 audit(1769161145.811:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6998 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af540acb9 code=0x7ffc0000 [ 265.876113][ T37] audit: type=1326 audit(1769161145.821:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6998 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9af540acb9 code=0x7ffc0000 [ 265.880034][ T37] audit: type=1326 audit(1769161145.821:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6998 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af540acb9 code=0x7ffc0000 [ 265.880134][ T37] audit: type=1326 audit(1769161145.821:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6998 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af540acb9 code=0x7ffc0000 [ 265.880233][ T37] audit: type=1326 audit(1769161145.821:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6998 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af540acb9 code=0x7ffc0000 [ 265.880338][ T37] audit: type=1326 audit(1769161145.821:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6998 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af540acb9 code=0x7ffc0000 [ 265.907809][ T37] audit: type=1326 audit(1769161145.851:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6998 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9af540acb9 code=0x7ffc0000 [ 266.006992][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.007086][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.037774][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 266.087502][ T6847] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.087952][ T6847] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.088563][ T6847] bridge_slave_0: entered allmulticast mode [ 266.234977][ T6847] bridge_slave_0: entered promiscuous mode [ 266.542836][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 266.840951][ T9] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 266.840982][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.841002][ T9] usb 5-1: config 0 has no interface number 0 [ 266.897203][ T9] usb 5-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 266.897236][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.897257][ T9] usb 5-1: Product: syz [ 266.897272][ T9] usb 5-1: Manufacturer: syz [ 266.897288][ T9] usb 5-1: SerialNumber: syz [ 266.955552][ T9] usb 5-1: config 0 descriptor?? [ 266.973138][ T6847] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.973255][ T6847] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.973508][ T6847] bridge_slave_1: entered allmulticast mode [ 266.976214][ T6847] bridge_slave_1: entered promiscuous mode [ 267.069026][ T9] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046c:14e8) [ 267.069092][ T9] uvcvideo 5-1:0.105: No valid video chain found. [ 267.180163][ T5988] usb 5-1: USB disconnect, device number 10 [ 267.363766][ T6847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.393258][ T6847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.452449][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 267.484015][ T6847] team0: Port device team_slave_0 added [ 267.488341][ T6847] team0: Port device team_slave_1 added [ 267.587914][ T6847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.587933][ T6847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.587959][ T6847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.590627][ T6847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.590639][ T6847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.590661][ T6847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.602288][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 267.641430][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.641480][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 267.641502][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.726795][ T9] usb 1-1: config 0 descriptor?? [ 267.772376][ T5864] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 267.804016][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 267.946753][ T5864] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 267.946784][ T5864] usb 4-1: config 0 has no interface number 0 [ 267.949945][ T5864] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 267.949977][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.949998][ T5864] usb 4-1: Product: syz [ 267.950013][ T5864] usb 4-1: Manufacturer: syz [ 267.950028][ T5864] usb 4-1: SerialNumber: syz [ 268.047174][ T5864] usb 4-1: config 0 descriptor?? [ 268.254686][ T5864] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 268.255193][ T9] gspca_vc032x: reg_r err -71 [ 268.255287][ T9] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 268.290092][ T9] usb 1-1: USB disconnect, device number 5 [ 268.368158][ T5864] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 268.368516][ T5864] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 268.368695][ T5864] usb 4-1: media controller created [ 268.463385][ T5864] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 268.704757][ T6847] hsr_slave_0: entered promiscuous mode [ 268.725392][ T6847] hsr_slave_1: entered promiscuous mode [ 268.727998][ T6847] debugfs: 'hsr0' already exists in 'hsr' [ 268.728024][ T6847] Cannot create hsr debugfs directory [ 269.848921][ T5864] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 271.259138][ T5864] usb 4-1: USB disconnect, device number 5 [ 271.352473][ T37] kauditd_printk_skb: 258 callbacks suppressed [ 271.352487][ T37] audit: type=1326 audit(1769161151.281:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7046 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa6cbacb9 code=0x7ffc0000 [ 271.352522][ T37] audit: type=1326 audit(1769161151.291:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7046 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa6cbacb9 code=0x7ffc0000 [ 271.458817][ T37] audit: type=1326 audit(1769161151.381:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7046 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3aa6cbacb9 code=0x7ffc0000 [ 271.458854][ T37] audit: type=1326 audit(1769161151.381:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7046 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa6cbacb9 code=0x7ffc0000 [ 271.458884][ T37] audit: type=1326 audit(1769161151.381:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7046 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa6cbacb9 code=0x7ffc0000 [ 271.458912][ T37] audit: type=1326 audit(1769161151.291:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7046 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa6cbacb9 code=0x7ffc0000 [ 271.458941][ T37] audit: type=1326 audit(1769161151.381:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7046 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa6cbacb9 code=0x7ffc0000 [ 271.458970][ T37] audit: type=1326 audit(1769161151.381:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7046 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3aa6cbacb9 code=0x7ffc0000 [ 271.458997][ T37] audit: type=1326 audit(1769161151.381:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7046 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa6cbacb9 code=0x7ffc0000 [ 271.459025][ T37] audit: type=1326 audit(1769161151.381:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7046 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa6cbacb9 code=0x7ffc0000 [ 271.692357][ T5988] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 271.701416][ T42] bridge_slave_1: left allmulticast mode [ 271.701445][ T42] bridge_slave_1: left promiscuous mode [ 271.750094][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.825793][ T42] bridge_slave_0: left allmulticast mode [ 271.825840][ T42] bridge_slave_0: left promiscuous mode [ 271.826113][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.842273][ T5988] usb 5-1: Using ep0 maxpacket: 8 [ 271.859365][ T5988] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.859411][ T5988] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 271.859432][ T5988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.892306][ T5988] usb 5-1: config 0 descriptor?? [ 271.898744][ T5988] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 272.202948][ T5988] gspca_vc032x: reg_r err -32 [ 272.203318][ T5988] vc032x 5-1:0.0: probe with driver vc032x failed with error -32 [ 274.343993][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.439950][ T7080] syz.3.290 (7080): drop_caches: 2 [ 274.695836][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.718731][ T5988] usb 5-1: USB disconnect, device number 11 [ 274.743482][ T42] bond0 (unregistering): Released all slaves [ 277.561665][ T42] hsr_slave_0: left promiscuous mode [ 277.846876][ T42] hsr_slave_1: left promiscuous mode [ 277.874692][ T7099] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 277.902883][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.993827][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.262322][ T37] kauditd_printk_skb: 370 callbacks suppressed [ 278.262343][ T37] audit: type=1326 audit(1769161158.201:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7111 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 278.265571][ T37] audit: type=1326 audit(1769161158.211:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7111 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 278.265711][ T37] audit: type=1326 audit(1769161158.211:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7111 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 278.287818][ T37] audit: type=1326 audit(1769161158.231:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7111 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 278.307021][ T37] audit: type=1326 audit(1769161158.231:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7111 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 278.307151][ T37] audit: type=1326 audit(1769161158.231:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7111 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 278.307302][ T37] audit: type=1326 audit(1769161158.231:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7111 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 278.337522][ T37] audit: type=1326 audit(1769161158.281:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7111 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 278.337673][ T37] audit: type=1326 audit(1769161158.281:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7111 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 278.337791][ T37] audit: type=1326 audit(1769161158.281:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7111 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 284.115983][ T7153] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 284.332957][ T42] team0 (unregistering): Port device team_slave_1 removed [ 284.443887][ T42] team0 (unregistering): Port device team_slave_0 removed [ 285.977888][ T37] kauditd_printk_skb: 133 callbacks suppressed [ 285.977921][ T37] audit: type=1326 audit(1769161165.851:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7161 comm="syz.0.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 285.978048][ T37] audit: type=1326 audit(1769161165.851:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7161 comm="syz.0.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 286.061379][ T37] audit: type=1326 audit(1769161166.001:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7161 comm="syz.0.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 286.072250][ T37] audit: type=1326 audit(1769161166.011:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7161 comm="syz.0.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 286.073747][ T37] audit: type=1326 audit(1769161166.021:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7161 comm="syz.0.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 286.136934][ T37] audit: type=1326 audit(1769161166.061:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7161 comm="syz.0.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 286.155065][ T37] audit: type=1326 audit(1769161166.101:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7161 comm="syz.0.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 286.157657][ T37] audit: type=1326 audit(1769161166.101:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7161 comm="syz.0.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 286.568904][ T7170] netlink: 24 bytes leftover after parsing attributes in process `syz.1.312'. [ 286.669705][ T7169] netlink: 24 bytes leftover after parsing attributes in process `syz.4.310'. [ 301.015929][ T7259] mmap: syz.4.329 (7259) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 302.575176][ T37] audit: type=1326 audit(1769161182.521:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7272 comm="syz.4.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0701c9acb9 code=0x7ffc0000 [ 302.589309][ T37] audit: type=1326 audit(1769161182.531:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7272 comm="syz.4.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0701c9acb9 code=0x7ffc0000 [ 302.590193][ T37] audit: type=1326 audit(1769161182.531:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7272 comm="syz.4.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0701c9acb9 code=0x7ffc0000 [ 302.590462][ T37] audit: type=1326 audit(1769161182.531:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7272 comm="syz.4.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0701c9acb9 code=0x7ffc0000 [ 302.716798][ T37] audit: type=1326 audit(1769161182.521:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7272 comm="syz.4.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0701c9acb9 code=0x7ffc0000 [ 302.716983][ T37] audit: type=1326 audit(1769161182.661:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7272 comm="syz.4.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0701c9acb9 code=0x7ffc0000 [ 302.717194][ T37] audit: type=1326 audit(1769161182.661:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7272 comm="syz.4.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0701c9acb9 code=0x7ffc0000 [ 302.717667][ T37] audit: type=1326 audit(1769161182.661:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7272 comm="syz.4.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0701c9acb9 code=0x7ffc0000 [ 302.717838][ T37] audit: type=1326 audit(1769161182.661:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7272 comm="syz.4.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0701c9acb9 code=0x7ffc0000 [ 302.718020][ T37] audit: type=1326 audit(1769161182.661:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7272 comm="syz.4.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0701c9acb9 code=0x7ffc0000 [ 303.256192][ T7287] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 304.831147][ T6847] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 304.858635][ T6847] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 304.900032][ T6847] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 304.936820][ T6847] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 305.157442][ T6847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.190231][ T6847] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.203452][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.203663][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.233224][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.233441][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.613212][ T6847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.039020][ T6847] veth0_vlan: entered promiscuous mode [ 306.051300][ T6847] veth1_vlan: entered promiscuous mode [ 306.170954][ T6847] veth0_macvtap: entered promiscuous mode [ 306.197462][ T6847] veth1_macvtap: entered promiscuous mode [ 306.239210][ T6847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.291382][ T6847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.259324][ T3561] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.280917][ T3561] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.433023][ T3561] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.433076][ T3561] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.331078][ T7368] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 309.407518][ T5808] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 309.421323][ T5808] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 309.434803][ T5808] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 309.439454][ T5808] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 309.440184][ T5808] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 309.757147][ T37] kauditd_printk_skb: 138 callbacks suppressed [ 309.757166][ T37] audit: type=1326 audit(1769161189.701:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7384 comm="syz.1.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af540acb9 code=0x7ffc0000 [ 309.757213][ T37] audit: type=1326 audit(1769161189.701:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7384 comm="syz.1.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af540acb9 code=0x7ffc0000 [ 309.757254][ T37] audit: type=1326 audit(1769161189.701:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7384 comm="syz.1.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af540acb9 code=0x7ffc0000 [ 309.757296][ T37] audit: type=1326 audit(1769161189.701:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7384 comm="syz.1.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af540acb9 code=0x7ffc0000 [ 309.771388][ T37] audit: type=1326 audit(1769161189.711:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7384 comm="syz.1.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9af540acb9 code=0x7ffc0000 [ 309.776876][ T37] audit: type=1326 audit(1769161189.721:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7384 comm="syz.1.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af540acb9 code=0x7ffc0000 [ 309.777012][ T37] audit: type=1326 audit(1769161189.721:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7384 comm="syz.1.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af540acb9 code=0x7ffc0000 [ 309.802516][ T37] audit: type=1326 audit(1769161189.721:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7384 comm="syz.1.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af540acb9 code=0x7ffc0000 [ 309.807653][ T37] audit: type=1326 audit(1769161189.751:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7384 comm="syz.1.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9af540acb9 code=0x7ffc0000 [ 309.807793][ T37] audit: type=1326 audit(1769161189.751:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7384 comm="syz.1.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af540acb9 code=0x7ffc0000 [ 311.505536][ T5812] Bluetooth: hci5: command tx timeout [ 313.582733][ T5812] Bluetooth: hci5: command tx timeout [ 315.662253][ T5812] Bluetooth: hci5: command tx timeout [ 317.742443][ T5812] Bluetooth: hci5: command tx timeout [ 319.947922][ T42] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.030153][ T7379] chnl_net:caif_netlink_parms(): no params data found [ 320.197410][ T7462] netlink: 188 bytes leftover after parsing attributes in process `syz.1.366'. [ 321.851549][ T42] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.864133][ T7479] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 323.193135][ T7379] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.193353][ T7379] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.193936][ T7379] bridge_slave_0: entered allmulticast mode [ 323.232290][ T7379] bridge_slave_0: entered promiscuous mode [ 323.244834][ T7379] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.251718][ T7379] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.259409][ T7379] bridge_slave_1: entered allmulticast mode [ 323.314846][ T7379] bridge_slave_1: entered promiscuous mode [ 324.115754][ T7511] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 324.504225][ T42] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.005256][ T42] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.134181][ T7379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.138378][ T7379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.402879][ T7379] team0: Port device team_slave_0 added [ 325.423792][ T7379] team0: Port device team_slave_1 added [ 325.633161][ T7379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.633175][ T7379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.633193][ T7379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.649139][ T7379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.649183][ T7379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.649259][ T7379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.255154][ T7379] hsr_slave_0: entered promiscuous mode [ 326.256611][ T7379] hsr_slave_1: entered promiscuous mode [ 326.257567][ T7379] debugfs: 'hsr0' already exists in 'hsr' [ 326.257598][ T7379] Cannot create hsr debugfs directory [ 326.702660][ T42] bridge_slave_1: left allmulticast mode [ 326.702689][ T42] bridge_slave_1: left promiscuous mode [ 326.702946][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.081490][ T42] bridge_slave_0: left allmulticast mode [ 327.081517][ T42] bridge_slave_0: left promiscuous mode [ 327.081736][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.223205][ T7558] netlink: 16 bytes leftover after parsing attributes in process `syz.0.384'. [ 327.972539][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.972614][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 330.335979][ T7585] tmpfs: Unsupported parameter 'huge' [ 330.688369][ T7585] syz.4.389 (7585): drop_caches: 2 [ 331.523054][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.582942][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.625200][ T42] bond0 (unregistering): Released all slaves [ 332.046537][ T5812] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 332.106431][ T7597] tipc: Started in network mode [ 332.106476][ T7597] tipc: Node identity 92004f8679, cluster identity 4711 [ 332.109108][ T7597] tipc: Enabled bearer , priority 0 [ 332.164985][ T7595] netlink: 44 bytes leftover after parsing attributes in process `syz.1.390'. [ 332.227624][ T7595] tipc: Resetting bearer [ 332.307817][ T7604] syzkaller0: entered promiscuous mode [ 332.307844][ T7604] syzkaller0: entered allmulticast mode [ 332.515115][ T7594] tipc: Disabling bearer [ 333.023974][ T7633] netlink: 20 bytes leftover after parsing attributes in process `syz.0.396'. [ 333.132464][ T5877] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 333.723422][ T5877] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 333.723453][ T5877] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 333.723475][ T5877] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 333.723528][ T5877] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 333.723556][ T5877] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 333.726856][ T5877] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 333.726889][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 333.726911][ T5877] usb 2-1: Product: syz [ 333.726926][ T5877] usb 2-1: Manufacturer: syz [ 334.064996][ T5877] cdc_wdm 2-1:1.0: skipping garbage [ 334.065018][ T5877] cdc_wdm 2-1:1.0: skipping garbage [ 334.105970][ T5877] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 334.106006][ T5877] cdc_wdm 2-1:1.0: Unknown control protocol [ 334.635577][ T42] hsr_slave_0: left promiscuous mode [ 334.693916][ T42] hsr_slave_1: left promiscuous mode [ 334.714540][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.714568][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.759040][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.759072][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.795907][ T5877] usb 2-1: USB disconnect, device number 6 [ 335.519813][ T42] veth1_macvtap: left promiscuous mode [ 335.519914][ T42] veth0_macvtap: left promiscuous mode [ 335.520213][ T42] veth1_vlan: left promiscuous mode [ 335.520383][ T42] veth0_vlan: left promiscuous mode [ 337.576280][ T5812] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 337.576528][ T5812] Bluetooth: hci2: Injecting HCI hardware error event [ 337.581069][ T5808] Bluetooth: hci2: hardware error 0x00 [ 339.663443][ T5808] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 341.270703][ T42] team0 (unregistering): Port device team_slave_1 removed [ 341.503174][ T42] team0 (unregistering): Port device team_slave_0 removed [ 343.650697][ T7662] tipc: Enabled bearer , priority 0 [ 343.663677][ T7664] syzkaller0: entered promiscuous mode [ 343.663702][ T7664] syzkaller0: entered allmulticast mode [ 343.669439][ T7676] tipc: Resetting bearer [ 343.733644][ T5808] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 343.736378][ T5808] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 343.839796][ T7657] tipc: Resetting bearer [ 343.895121][ T7711] netlink: 'syz.4.411': attribute type 1 has an invalid length. [ 343.990628][ T7657] tipc: Disabling bearer [ 345.056531][ T7721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.694294][ T5808] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 346.986451][ T7741] Set syz0 is full, maxelem 0 reached [ 347.326752][ T5864] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 347.504232][ T5864] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 347.504264][ T5864] usb 5-1: config 0 has no interface number 0 [ 347.506772][ T5864] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 347.506802][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.506824][ T5864] usb 5-1: Product: syz [ 347.506840][ T5864] usb 5-1: Manufacturer: syz [ 347.506856][ T5864] usb 5-1: SerialNumber: syz [ 347.565333][ T5864] usb 5-1: config 0 descriptor?? [ 347.570500][ T5864] hub 5-1:0.217: bad descriptor, ignoring hub [ 347.570542][ T5864] hub 5-1:0.217: probe with driver hub failed with error -5 [ 347.888080][ T7747] netlink: 'syz.1.420': attribute type 4 has an invalid length. [ 347.903015][ T7741] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 347.937798][ T5864] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 348.600333][ T5864] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 348.625316][ T5864] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 348.625548][ T5864] usb 5-1: media controller created [ 348.868245][ T5864] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 349.218306][ T5864] DVB: Unable to find symbol dib7000p_attach() [ 349.218338][ T5864] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 351.104178][ T5864] rc_core: IR keymap rc-dib0700-rc5 not found [ 351.104202][ T5864] Registered IR keymap rc-empty [ 351.106346][ T5864] dvb-usb: could not initialize remote control. [ 351.106393][ T5864] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 351.566801][ T5864] usb 5-1: USB disconnect, device number 12 [ 354.604692][ T5864] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 355.735709][ T7783] bond1: entered promiscuous mode [ 355.794167][ T5808] Bluetooth: hci5: link tx timeout [ 355.797016][ T5808] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 355.837679][ T7788] bond_slave_0: entered promiscuous mode [ 355.837753][ T7788] bond_slave_1: entered promiscuous mode [ 355.848603][ T7788] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 355.878804][ T7788] bond1: (slave macvlan2): making interface the new active one [ 355.878828][ T7788] macvlan2: entered promiscuous mode [ 355.878843][ T7788] bond0: entered promiscuous mode [ 355.881505][ T7788] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 355.917845][ T7791] bridge0: port 3(syz_tun) entered blocking state [ 355.918652][ T7791] bridge0: port 3(syz_tun) entered disabled state [ 355.920053][ T7791] syz_tun: entered allmulticast mode [ 355.945750][ T7791] syz_tun: entered promiscuous mode [ 355.947687][ T7791] bridge0: port 3(syz_tun) entered blocking state [ 355.947880][ T7791] bridge0: port 3(syz_tun) entered forwarding state [ 356.022879][ T7788] netlink: 'syz.1.427': attribute type 10 has an invalid length. [ 356.091218][ T7788] bridge0: port 3(syz_tun) entered disabled state [ 356.113039][ T7788] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.152386][ T7788] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.225002][ T7788] bridge0: port 3(syz_tun) entered blocking state [ 356.225169][ T7788] bridge0: port 3(syz_tun) entered forwarding state [ 356.235245][ T7788] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.235736][ T7788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.238697][ T7788] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.239223][ T7788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.287720][ T7788] bridge0: entered promiscuous mode [ 356.339418][ T7788] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 356.671880][ T7791] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 356.694102][ T7791] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:c0b7:8cff:fe6f:f4c3 error=-28 [ 356.763214][ T7379] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 357.843684][ T5808] Bluetooth: hci5: command 0x0406 tx timeout [ 357.988327][ T7379] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 358.063657][ T7820] bridge0: port 3(syz_tun) entered blocking state [ 358.063864][ T7820] bridge0: port 3(syz_tun) entered disabled state [ 358.064055][ T7820] syz_tun: entered allmulticast mode [ 358.070067][ T7820] syz_tun: entered promiscuous mode [ 358.070969][ T7820] bridge0: port 3(syz_tun) entered blocking state [ 358.071225][ T7820] bridge0: port 3(syz_tun) entered forwarding state [ 358.118631][ T7379] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 358.332613][ T7379] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 358.369373][ T7827] netlink: 52 bytes leftover after parsing attributes in process `syz.0.437'. [ 358.486654][ T7827] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.505888][ T7827] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.170881][ T7791] infiniband syz1: set active [ 360.194711][ T7791] infiniband syz1: added syz_tun [ 360.309702][ T7379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.619259][ T7379] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.915946][ T7791] RDS/IB: syz1: added [ 360.948424][ T7791] smc: adding ib device syz1 with port count 1 [ 360.976263][ T7791] smc: ib device syz1 port 1 has no pnetid [ 361.345371][ T6012] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.345512][ T6012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.348235][ T6012] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.348371][ T6012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.905868][ T7873] netlink: 100 bytes leftover after parsing attributes in process `syz.4.448'. [ 366.939047][ T7888] bridge0: port 3(syz_tun) entered disabled state [ 366.988288][ T7888] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.990955][ T7888] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.394731][ T7917] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 369.235526][ T7888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.273648][ T7888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.339200][ T5808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 369.355578][ T5808] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 369.359100][ T5808] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 369.360149][ T5808] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 369.360973][ T5808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 370.210115][ T5808] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 370.227053][ T5808] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 370.246316][ T5808] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 370.249465][ T5808] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 370.262857][ T5808] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 370.376839][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.385411][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.404122][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.411449][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.432600][ T5812] Bluetooth: hci0: command tx timeout [ 371.594025][ T7943] Set syz0 is full, maxelem 0 reached [ 371.843818][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 372.004899][ T9] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 372.004932][ T9] usb 5-1: config 0 has no interface number 0 [ 372.007993][ T9] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 372.008024][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.008047][ T9] usb 5-1: Product: syz [ 372.008075][ T9] usb 5-1: Manufacturer: syz [ 372.008091][ T9] usb 5-1: SerialNumber: syz [ 372.067234][ T9] usb 5-1: config 0 descriptor?? [ 372.081812][ T9] hub 5-1:0.217: bad descriptor, ignoring hub [ 372.081863][ T9] hub 5-1:0.217: probe with driver hub failed with error -5 [ 372.770287][ T37] kauditd_printk_skb: 111 callbacks suppressed [ 372.770305][ T37] audit: type=1326 audit(1769161252.661:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7945 comm="syz.0.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 372.770341][ T37] audit: type=1326 audit(1769161252.661:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7945 comm="syz.0.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 372.770373][ T37] audit: type=1326 audit(1769161252.661:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7945 comm="syz.0.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 372.770448][ T37] audit: type=1326 audit(1769161252.671:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7945 comm="syz.0.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 372.770479][ T37] audit: type=1326 audit(1769161252.671:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7945 comm="syz.0.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 372.770510][ T37] audit: type=1326 audit(1769161252.671:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7945 comm="syz.0.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f020958acb9 code=0x7ffc0000 [ 372.772361][ T7943] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 372.774192][ T5812] Bluetooth: hci6: command tx timeout [ 372.778406][ T9] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 373.089659][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 373.089730][ T9] dib0700: firmware download failed at 7 with -22 [ 373.114750][ T7947] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 373.475935][ T9] usb 5-1: USB disconnect, device number 13 [ 373.506562][ T5812] Bluetooth: hci0: command tx timeout [ 374.787452][ T5808] Bluetooth: hci6: command tx timeout [ 375.313914][ T7975] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 375.313943][ T7975] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 375.314704][ T7975] vhci_hcd vhci_hcd.0: Device attached [ 375.609591][ T5808] Bluetooth: hci0: command tx timeout [ 375.722592][ T7976] vhci_hcd: connection closed [ 375.731496][ T1294] vhci_hcd vhci_hcd.4: stop threads [ 375.733752][ T1294] vhci_hcd vhci_hcd.4: release socket [ 375.736273][ T9] usb 42-1: SetAddress Request (2) to port 0 [ 375.736353][ T9] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 375.763874][ T1294] vhci_hcd vhci_hcd.4: disconnect device [ 376.862234][ T5808] Bluetooth: hci6: command tx timeout [ 377.367008][ T7989] syz.3.476 (7989): drop_caches: 2 [ 377.429152][ T7990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.477'. [ 377.662396][ T5808] Bluetooth: hci0: command tx timeout [ 377.728372][ T7990] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 378.942450][ T5808] Bluetooth: hci6: command tx timeout [ 379.956298][ T7928] chnl_net:caif_netlink_parms(): no params data found [ 380.073116][ T8002] Set syz0 is full, maxelem 0 reached [ 380.312281][ T6328] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 380.464740][ T6328] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 380.464772][ T6328] usb 5-1: config 0 has no interface number 0 [ 380.467600][ T6328] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 380.467635][ T6328] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.467660][ T6328] usb 5-1: Product: syz [ 380.467671][ T6328] usb 5-1: Manufacturer: syz [ 380.467682][ T6328] usb 5-1: SerialNumber: syz [ 380.528321][ T6328] usb 5-1: config 0 descriptor?? [ 380.532855][ T6328] hub 5-1:0.217: bad descriptor, ignoring hub [ 380.532978][ T6328] hub 5-1:0.217: probe with driver hub failed with error -5 [ 380.603180][ T7921] chnl_net:caif_netlink_parms(): no params data found [ 380.731934][ T8000] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 380.749913][ T6328] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 380.767977][ T6328] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 380.768030][ T6328] dib0700: firmware download failed at 7 with -22 [ 380.792577][ T9] usb 42-1: device descriptor read/8, error -110 [ 380.838899][ T6328] usb 5-1: USB disconnect, device number 14 [ 381.093591][ T153] bridge_slave_1: left allmulticast mode [ 381.093624][ T153] bridge_slave_1: left promiscuous mode [ 381.093901][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.215117][ T9] usb usb42-port1: attempt power cycle [ 384.465015][ T153] bridge_slave_0: left allmulticast mode [ 384.465049][ T153] bridge_slave_0: left promiscuous mode [ 384.465309][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.593048][ T9] usb usb42-port1: unable to enumerate USB device [ 385.962881][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.023038][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.045954][ T153] bond0 (unregistering): Released all slaves [ 389.083862][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.083938][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 391.350694][ T5812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 391.386598][ T5812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 391.407764][ T5812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 391.450552][ T5812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 391.473203][ T5812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 392.946052][ T7791] bridge0: port 3(syz_tun) entered disabled state [ 393.134870][ T7791] syz_tun (unregistering): left allmulticast mode [ 393.134896][ T7791] syz_tun (unregistering): left promiscuous mode [ 393.134973][ T7791] bridge0: port 3(syz_tun) entered disabled state [ 393.207839][ T12] smc: removing ib device syz1 [ 393.333028][ T7928] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.333163][ T7928] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.333409][ T7928] bridge_slave_0: entered allmulticast mode [ 393.378269][ T6585] syz1: Port: 1 Link DOWN [ 393.395534][ T7928] bridge_slave_0: entered promiscuous mode [ 393.455991][ T7928] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.456203][ T7928] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.456448][ T7928] bridge_slave_1: entered allmulticast mode [ 393.540456][ T7928] bridge_slave_1: entered promiscuous mode [ 393.745170][ T5808] Bluetooth: hci1: command tx timeout [ 393.854376][ T8064] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 394.752069][ T8059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.492'. [ 395.171215][ T7928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.176631][ T7921] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.177295][ T7921] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.177859][ T7921] bridge_slave_0: entered allmulticast mode [ 395.226520][ T7921] bridge_slave_0: entered promiscuous mode [ 395.266017][ T7928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.266419][ T7921] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.266633][ T7921] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.266831][ T7921] bridge_slave_1: entered allmulticast mode [ 395.322276][ T7921] bridge_slave_1: entered promiscuous mode [ 396.627764][ T5812] Bluetooth: hci1: command tx timeout [ 398.713399][ T5812] Bluetooth: hci1: command tx timeout [ 398.973960][ T7928] team0: Port device team_slave_0 added [ 399.024150][ T7921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.039342][ T8090] pimreg: entered allmulticast mode [ 399.218521][ T7928] team0: Port device team_slave_1 added [ 399.229073][ T7921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.907242][ T8094] netlink: 68 bytes leftover after parsing attributes in process `syz.3.501'. [ 400.453907][ T7921] team0: Port device team_slave_0 added [ 400.471837][ T7928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.471851][ T7928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.471870][ T7928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.600879][ T7921] team0: Port device team_slave_1 added [ 400.782310][ T5812] Bluetooth: hci1: command tx timeout [ 400.832861][ T7928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.832879][ T7928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.832909][ T7928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.134693][ T7921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.134732][ T7921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.134751][ T7921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.091171][ T7921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.091255][ T7921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.091395][ T7921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.404035][ T8116] pimreg: entered allmulticast mode [ 404.488618][ T7928] hsr_slave_0: entered promiscuous mode [ 404.489578][ T7928] hsr_slave_1: entered promiscuous mode [ 404.490244][ T7928] debugfs: 'hsr0' already exists in 'hsr' [ 404.490262][ T7928] Cannot create hsr debugfs directory [ 406.732290][ T153] hsr_slave_0: left promiscuous mode [ 406.984333][ T153] hsr_slave_1: left promiscuous mode [ 406.991505][ T153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.033006][ T153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.198814][ T8133] netlink: 16 bytes leftover after parsing attributes in process `syz.3.513'. [ 407.207234][ T5812] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 409.835172][ T153] team0 (unregistering): Port device team_slave_1 removed [ 410.023003][ T153] team0 (unregistering): Port device team_slave_0 removed [ 412.138628][ T8153] netlink: 64 bytes leftover after parsing attributes in process `syz.3.519'. [ 413.848013][ T7921] hsr_slave_0: entered promiscuous mode [ 413.854885][ T7921] hsr_slave_1: entered promiscuous mode [ 413.855798][ T7921] debugfs: 'hsr0' already exists in 'hsr' [ 413.855816][ T7921] Cannot create hsr debugfs directory [ 418.824614][ T8047] chnl_net:caif_netlink_parms(): no params data found [ 420.350945][ T8047] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.351164][ T8047] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.351424][ T8047] bridge_slave_0: entered allmulticast mode [ 420.572351][ T8047] bridge_slave_0: entered promiscuous mode [ 420.773369][ T8209] netlink: 16 bytes leftover after parsing attributes in process `syz.4.527'. [ 422.629982][ T8047] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.630114][ T8047] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.630383][ T8047] bridge_slave_1: entered allmulticast mode [ 422.669726][ T8047] bridge_slave_1: entered promiscuous mode [ 427.835147][ T153] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.199477][ T7928] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 428.254998][ T8047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.256896][ T7928] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 428.316986][ T8047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.549946][ T153] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.658005][ T8232] netlink: 16 bytes leftover after parsing attributes in process `syz.3.535'. [ 431.075590][ T5808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 431.133659][ T5806] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 431.204183][ T5801] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 431.211901][ T5801] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 431.216036][ T5801] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 431.216953][ T5801] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 431.253880][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 431.283582][ T5803] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 431.285527][ T5803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 431.286554][ T5803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 431.667355][ T7928] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 431.966076][ T153] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.200802][ T8047] team0: Port device team_slave_0 added [ 432.438554][ T153] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.495281][ T8047] team0: Port device team_slave_1 added [ 434.102683][ T5812] Bluetooth: hci5: command tx timeout [ 434.103141][ T5803] Bluetooth: hci2: command tx timeout [ 434.198005][ T8047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.198023][ T8047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.198050][ T8047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.221606][ T8047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.221625][ T8047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.221655][ T8047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.574206][ T8047] hsr_slave_0: entered promiscuous mode [ 435.575715][ T8047] hsr_slave_1: entered promiscuous mode [ 435.576742][ T8047] debugfs: 'hsr0' already exists in 'hsr' [ 435.576769][ T8047] Cannot create hsr debugfs directory [ 435.848519][ T8280] netlink: 16 bytes leftover after parsing attributes in process `syz.4.545'. [ 436.142410][ T5812] Bluetooth: hci5: command tx timeout [ 436.142510][ T5803] Bluetooth: hci2: command tx timeout [ 436.449036][ T153] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.222386][ T5812] Bluetooth: hci5: command tx timeout [ 438.222490][ T5803] Bluetooth: hci2: command tx timeout [ 441.562325][ T5812] Bluetooth: hci5: command tx timeout [ 441.562377][ T5803] Bluetooth: hci2: command tx timeout [ 442.328911][ T153] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.116745][ T153] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.575574][ T153] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.623839][ T8239] chnl_net:caif_netlink_parms(): no params data found [ 450.306745][ T8242] chnl_net:caif_netlink_parms(): no params data found [ 450.323042][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.323119][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.614255][ T5812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 450.633704][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 450.636509][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 450.638314][ T5812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 450.639181][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 451.285903][ T8239] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.286112][ T8239] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.286371][ T8239] bridge_slave_0: entered allmulticast mode [ 451.289301][ T8239] bridge_slave_0: entered promiscuous mode [ 451.383153][ T8239] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.383289][ T8239] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.383666][ T8239] bridge_slave_1: entered allmulticast mode [ 451.387302][ T8239] bridge_slave_1: entered promiscuous mode [ 451.521513][ T8242] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.529341][ T8242] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.529936][ T8242] bridge_slave_0: entered allmulticast mode [ 451.576491][ T8242] bridge_slave_0: entered promiscuous mode [ 452.622651][ T8242] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.622814][ T8242] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.623064][ T8242] bridge_slave_1: entered allmulticast mode [ 452.625737][ T8242] bridge_slave_1: entered promiscuous mode [ 452.631482][ T8239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.003025][ T8367] 9pnet_virtio: no channels available for device syz [ 454.361140][ T8367] netlink: 'syz.3.567': attribute type 1 has an invalid length. [ 454.361198][ T8367] netlink: 'syz.3.567': attribute type 4 has an invalid length. [ 454.361244][ T8367] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.567'. [ 454.372649][ T8367] netlink: 'syz.3.567': attribute type 1 has an invalid length. [ 454.372697][ T8367] netlink: 'syz.3.567': attribute type 4 has an invalid length. [ 454.372734][ T8367] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.567'. [ 454.925038][ T5812] Bluetooth: hci0: command tx timeout [ 455.825697][ T8239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.939721][ T153] bridge_slave_1: left allmulticast mode [ 455.939753][ T153] bridge_slave_1: left promiscuous mode [ 455.940006][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.027576][ T8386] IPv4: Oversized IP packet from 172.20.20.10 [ 456.031536][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 456.035193][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 456.040094][ T153] bridge_slave_0: left allmulticast mode [ 456.040168][ T153] bridge_slave_0: left promiscuous mode [ 456.040754][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.068281][ T8386] IPv4: Oversized IP packet from 172.20.20.10 [ 456.077627][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 456.094641][ T8386] IPv4: Oversized IP packet from 172.20.20.10 [ 456.097091][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 456.097260][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 456.098189][ T8386] IPv4: Oversized IP packet from 172.20.20.10 [ 456.098536][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 456.169103][ T153] bridge_slave_1: left allmulticast mode [ 456.169128][ T153] bridge_slave_1: left promiscuous mode [ 456.169609][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.223324][ T153] bridge_slave_0: left allmulticast mode [ 456.223347][ T153] bridge_slave_0: left promiscuous mode [ 456.223582][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.542325][ T6585] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 456.693196][ T6585] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 456.694505][ T6585] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 456.694566][ T6585] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 456.694598][ T6585] usb 5-1: config 0 interface 0 has no altsetting 0 [ 456.695742][ T6585] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 456.695798][ T6585] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 456.695826][ T6585] usb 5-1: config 0 interface 0 has no altsetting 0 [ 456.697198][ T6585] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 456.697258][ T6585] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 456.697288][ T6585] usb 5-1: config 0 interface 0 has no altsetting 0 [ 456.698527][ T6585] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 456.698608][ T6585] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 456.698639][ T6585] usb 5-1: config 0 interface 0 has no altsetting 0 [ 456.699831][ T6585] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 456.699885][ T6585] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 456.699914][ T6585] usb 5-1: config 0 interface 0 has no altsetting 0 [ 456.701116][ T6585] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 456.701172][ T6585] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 456.701201][ T6585] usb 5-1: config 0 interface 0 has no altsetting 0 [ 456.765178][ T6585] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 456.765339][ T6585] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 456.765412][ T6585] usb 5-1: config 0 interface 0 has no altsetting 0 [ 456.821285][ T6585] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 456.821453][ T6585] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 456.821532][ T6585] usb 5-1: config 0 interface 0 has no altsetting 0 [ 456.880325][ T6585] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 456.880424][ T6585] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 456.880501][ T6585] usb 5-1: Product: syz [ 456.880545][ T6585] usb 5-1: Manufacturer: syz [ 456.880592][ T6585] usb 5-1: SerialNumber: syz [ 456.942394][ T5803] Bluetooth: hci0: command tx timeout [ 456.944693][ T6585] usb 5-1: config 0 descriptor?? [ 457.444474][ T6585] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 458.494999][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 459.022332][ T5803] Bluetooth: hci0: command tx timeout [ 459.074545][ T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 459.074579][ T9] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 459.074599][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 459.074690][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 459.074711][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 459.076943][ T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 459.077009][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 459.077025][ T9] usb 4-1: Product: syz [ 459.077036][ T9] usb 4-1: Manufacturer: syz [ 459.227324][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 459.227342][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 459.227490][ T9] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 459.509538][ T5807] usb 5-1: USB disconnect, device number 15 [ 459.541017][ T5807] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 459.983269][ T153] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 460.210606][ T153] bond0 (unregistering): left promiscuous mode [ 460.210639][ T153] bond_slave_0: left promiscuous mode [ 460.210909][ T153] bond_slave_1: left promiscuous mode [ 460.322878][ T153] bond1 (unregistering): (slave macvlan2): Releasing active interface [ 460.322908][ T153] macvlan2 (unregistering): left promiscuous mode [ 460.530150][ T8411] netlink: 36 bytes leftover after parsing attributes in process `syz.4.581'. [ 460.530179][ T8411] netlink: 16 bytes leftover after parsing attributes in process `syz.4.581'. [ 460.530198][ T8411] netlink: 36 bytes leftover after parsing attributes in process `syz.4.581'. [ 460.530242][ T8411] netlink: 36 bytes leftover after parsing attributes in process `syz.4.581'. [ 461.102565][ T5803] Bluetooth: hci0: command tx timeout [ 461.203133][ T5807] usb 4-1: USB disconnect, device number 6 [ 469.585591][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.841114][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.317706][ T153] bond0 (unregistering): Released all slaves [ 471.355092][ T153] bond1 (unregistering): Released all slaves [ 475.041540][ T8429] fuse: Bad value for 'fd' [ 483.344382][ T8447] comedi comedi0: Minor 47 could not be opened [ 495.460712][ T5812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 495.490396][ T5812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 495.491569][ T5812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 495.521348][ T5812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 495.534430][ T5812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 496.581730][ T5812] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 496.607083][ T5812] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 496.611468][ T5812] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 496.668122][ T5812] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 496.674532][ T5812] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 497.842213][ T5812] Bluetooth: hci1: command tx timeout [ 498.792394][ T5812] Bluetooth: hci6: command tx timeout [ 499.902408][ T5812] Bluetooth: hci1: command tx timeout [ 500.093216][ T5803] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 501.074899][ T5803] Bluetooth: hci6: command tx timeout [ 501.569670][ T5803] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 501.572586][ T5803] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 501.584653][ T5803] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 501.593873][ T5803] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 502.003784][ T5812] Bluetooth: hci1: command tx timeout [ 503.102367][ T5801] Bluetooth: hci6: command tx timeout [ 503.672617][ T5801] Bluetooth: hci7: command tx timeout [ 504.782348][ T5801] Bluetooth: hci1: command tx timeout [ 505.183154][ T5801] Bluetooth: hci6: command tx timeout [ 505.742161][ T5801] Bluetooth: hci7: command tx timeout [ 507.862176][ T5801] Bluetooth: hci7: command tx timeout [ 509.923052][ T5801] Bluetooth: hci7: command tx timeout [ 511.749315][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.749390][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 516.991327][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 517.014243][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 517.017139][ T5812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 517.020148][ T5812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 517.021605][ T5812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 518.418770][ T5801] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 518.456266][ T5801] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 518.458050][ T5801] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 518.461065][ T5801] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 518.488283][ T5801] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 520.152248][ T5812] Bluetooth: hci3: command tx timeout [ 520.624006][ T5812] Bluetooth: hci8: command tx timeout [ 522.223975][ T5812] Bluetooth: hci3: command tx timeout [ 522.792173][ T5812] Bluetooth: hci8: command tx timeout [ 524.302277][ T5812] Bluetooth: hci3: command tx timeout [ 524.899917][ T5812] Bluetooth: hci8: command tx timeout [ 527.065819][ T5801] Bluetooth: hci3: command tx timeout [ 527.065961][ T5812] Bluetooth: hci8: command tx timeout [ 554.953426][ T5801] Bluetooth: hci5: command 0x0406 tx timeout [ 554.953472][ T5801] Bluetooth: hci2: command 0x0406 tx timeout [ 573.362983][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.373762][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 576.332235][ T8244] Bluetooth: hci0: command 0x0406 tx timeout [ 577.463461][ T5812] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 577.540057][ T5812] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 577.617047][ T5803] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 577.682855][ T5803] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 577.684189][ T5803] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 579.742520][ T5803] Bluetooth: hci9: command tx timeout [ 580.075909][ T5801] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 580.089281][ T5801] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 580.096512][ T5801] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 580.153873][ T5808] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 580.157590][ T5808] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 580.181929][ T5808] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 580.194179][ T5808] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 580.199999][ T5808] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 580.213730][ T8501] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 580.220105][ T5808] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 580.230800][ T8501] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 580.236735][ T5808] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 580.237887][ T5808] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 580.253277][ T5808] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 580.254331][ T5808] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 580.302398][ T5808] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 580.373643][ T8502] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 580.374606][ T8502] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 580.425472][ T5812] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 580.426522][ T5812] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 581.822136][ T8502] Bluetooth: hci9: command tx timeout [ 582.385105][ T5801] Bluetooth: hci11: command tx timeout [ 582.473015][ T5801] Bluetooth: hci10: command tx timeout [ 582.542199][ T5801] Bluetooth: hci12: command tx timeout [ 583.913232][ T5801] Bluetooth: hci9: command tx timeout [ 584.062577][ T5801] Bluetooth: hci13: command tx timeout [ 584.462557][ T5801] Bluetooth: hci11: command tx timeout [ 584.542501][ T5801] Bluetooth: hci10: command tx timeout [ 584.622208][ T5801] Bluetooth: hci12: command tx timeout [ 585.982207][ T5801] Bluetooth: hci9: command tx timeout [ 586.142632][ T5801] Bluetooth: hci13: command tx timeout [ 586.553607][ T5801] Bluetooth: hci11: command tx timeout [ 586.622194][ T5801] Bluetooth: hci10: command tx timeout [ 586.712272][ T5801] Bluetooth: hci12: command tx timeout [ 588.225364][ T5801] Bluetooth: hci13: command tx timeout [ 588.622376][ T5801] Bluetooth: hci11: command tx timeout [ 588.729958][ T5801] Bluetooth: hci10: command tx timeout [ 588.782267][ T5801] Bluetooth: hci12: command tx timeout [ 590.302513][ T5801] Bluetooth: hci13: command tx timeout [ 601.983074][ T38] INFO: task kworker/u8:3:58 blocked for more than 143 seconds. [ 601.983114][ T38] Tainted: G L syzkaller #0 [ 601.983129][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 601.983140][ T38] task:kworker/u8:3 state:D stack:21064 pid:58 tgid:58 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 601.983221][ T38] Workqueue: events_unbound linkwatch_event [ 601.983271][ T38] Call Trace: [ 601.983283][ T38] [ 601.983300][ T38] __schedule+0x147b/0x4f50 [ 601.983333][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 601.983393][ T38] ? __pfx___schedule+0x10/0x10 [ 601.983440][ T38] rt_mutex_schedule+0x76/0xf0 [ 601.983465][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 601.983511][ T38] rt_mutex_slowlock+0x2dc/0x710 [ 601.983551][ T38] ? rt_mutex_slowlock+0x1fd/0x710 [ 601.983577][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 601.983623][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 601.983660][ T38] ? linkwatch_event+0xe/0x60 [ 601.983683][ T38] mutex_lock_nested+0x168/0x1d0 [ 601.983707][ T38] ? linkwatch_event+0xe/0x60 [ 601.983731][ T38] ? process_scheduled_works+0xa0f/0x17a0 [ 601.983761][ T38] linkwatch_event+0xe/0x60 [ 601.983786][ T38] process_scheduled_works+0xaec/0x17a0 [ 601.983842][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 601.983866][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 601.983909][ T38] ? assign_work+0x3d3/0x440 [ 601.983941][ T38] worker_thread+0x89f/0xd90 [ 601.984019][ T38] kthread+0x726/0x8b0 [ 601.984055][ T38] ? __pfx_worker_thread+0x10/0x10 [ 601.984085][ T38] ? __pfx_kthread+0x10/0x10 [ 601.984115][ T38] ? rt_spin_unlock+0x14f/0x200 [ 601.984146][ T38] ? rt_spin_unlock+0x160/0x200 [ 601.984170][ T38] ? __pfx_kthread+0x10/0x10 [ 601.984213][ T38] ret_from_fork+0x51b/0xa40 [ 601.984243][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 601.984269][ T38] ? __switch_to+0xc82/0x1410 [ 601.984298][ T38] ? __pfx_kthread+0x10/0x10 [ 601.984330][ T38] ret_from_fork_asm+0x1a/0x30 [ 601.984385][ T38] [ 601.984507][ T38] INFO: task dhcpcd:5462 blocked for more than 143 seconds. [ 601.984526][ T38] Tainted: G L syzkaller #0 [ 601.984539][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 601.984550][ T38] task:dhcpcd state:D stack:21176 pid:5462 tgid:5462 ppid:5461 task_flags:0x400140 flags:0x00080000 [ 601.984612][ T38] Call Trace: [ 601.984620][ T38] [ 601.984635][ T38] __schedule+0x147b/0x4f50 [ 601.984666][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 601.984706][ T38] ? get_page_from_freelist+0x28d4/0x2950 [ 601.984748][ T38] ? __pfx___schedule+0x10/0x10 [ 601.984793][ T38] rt_mutex_schedule+0x76/0xf0 [ 601.984817][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 601.984859][ T38] rt_mutex_slowlock+0x2dc/0x710 [ 601.984885][ T38] ? rt_mutex_slowlock+0x1fd/0x710 [ 601.984910][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 601.984947][ T38] ? rtnl_dumpit+0x92/0x200 [ 601.984994][ T38] ? rtnl_dumpit+0x92/0x200 [ 601.985026][ T38] mutex_lock_nested+0x168/0x1d0 [ 601.985053][ T38] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 601.985091][ T38] rtnl_dumpit+0x92/0x200 [ 601.985131][ T38] netlink_dump+0x722/0xe80 [ 601.985170][ T38] ? __pfx_netlink_dump+0x10/0x10 [ 601.985221][ T38] ? netlink_recvmsg+0x5d6/0xa50 [ 601.985248][ T38] ? netlin[ 601.985248][ T38] ? netlink_recvmsg+0x5d6/0xa50 [ 601.985281][ T38] netlink_recvmsg+0x690/0xa50 [ 601.985307][ T38] ? __might_fault+0xaf/0x130 [ 601.985349][ T38] ? __pfx_netlink_recvmsg+0x10/0x10 [ 601.985382][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 601.985416][ T38] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 601.985448][ T38] ? security_socket_recvmsg+0x7e/0x2c0 [ 601.985480][ T38] ? __pfx_netlink_recvmsg+0x10/0x10 [ 601.985507][ T38] sock_recvmsg+0x22c/0x270 [ 601.985542][ T38] ____sys_recvmsg+0x1f2/0x4b0 [ 601.985579][ T38] ? __pfx_____sys_recvmsg+0x10/0x10 [ 601.985621][ T38] ? import_iovec+0x73/0xa0 [ 601.985658][ T38] ___sys_recvmsg+0x215/0x590 [ 601.985691][ T38] ? __pfx____sys_recvmsg+0x10/0x10 [ 601.985726][ T38] ? __sock_sendmsg+0x109/0x270 [ 601.985769][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 601.985820][ T38] __x64_sys_recvmsg+0x1c0/0x2a0 [ 601.985849][ T38] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 601.985886][ T38] ? rcu_is_watching+0x15/0xb0 [ 601.985929][ T38] do_syscall_64+0xe2/0xf80 [ 601.985960][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.985983][ T38] ? trace_irq_disable+0x37/0x100 [ 601.986009][ T38] ? clear_bhb_loop+0x60/0xb0 [ 601.986037][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.986061][ T38] RIP: 0033:0x7ff80b62d407 [ 601.986090][ T38] RSP: 002b:00007fffc2352370 EFLAGS: 00000202 ORIG_RAX: 000000000000002f [ 601.986115][ T38] RAX: ffffffffffffffda RBX: 00007ff80b5a3740 RCX: 00007ff80b62d407 [ 601.986134][ T38] RDX: 0000000000000000 RSI: 00007fffc2352400 RDI: 0000000000000024 [ 601.986150][ T38] RBP: 00007fffc23523e4 R08: 0000000000000000 R09: 0000000000000000 [ 601.986166][ T38] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000002000 [ 601.986181][ T38] R13: 00007fffc23523f0 R14: 00007fffc23524e0 R15: 0000000000000000 [ 601.986223][ T38] [ 601.986267][ T38] INFO: task kworker/0:7:5951 blocked for more than 143 seconds. [ 601.986287][ T38] Tainted: G L syzkaller #0 [ 601.986299][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 601.986309][ T38] task:kworker/0:7 state:D stack:21064 pid:5951 tgid:5951 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 601.986372][ T38] Workqueue: events switchdev_deferred_process_work [ 601.986407][ T38] Call Trace: [ 601.986414][ T38] [ 601.986428][ T38] __schedule+0x147b/0x4f50 [ 601.986458][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 601.986499][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 601.986549][ T38] ? __pfx___schedule+0x10/0x10 [ 601.986596][ T38] rt_mutex_schedule+0x76/0xf0 [ 601.986620][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 601.986664][ T38] rt_mutex_slowlock+0x2dc/0x710 [ 601.986694][ T38] ? rt_mutex_slowlock+0x1fd/0x710 [ 601.986720][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 601.986758][ T38] ? switchdev_deferred_process_work+0xe/0x20 [ 601.986806][ T38] ? switchdev_deferred_process_work+0xe/0x20 [ 601.986837][ T38] mutex_lock_nested+0x168/0x1d0 [ 601.986864][ T38] ? process_scheduled_works+0xa0f/0x17a0 [ 601.986893][ T38] switchdev_deferred_process_work+0xe/0x20 [ 601.986925][ T38] process_scheduled_works+0xaec/0x17a0 [ 601.986984][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 601.987010][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 601.987045][ T38] ? assign_work+0x3d3/0x440 [ 601.987079][ T38] worker_thread+0x89f/0xd90 [ 601.987121][ T38] ? __kthread_parkme+0x7a/0x1f0 [ 601.987173][ T38] kthread+0x726/0x8b0 [ 601.987229][ T38] ? __pfx_worker_thread+0x10/0x10 [ 601.987255][ T38] ? __pfx_kthread+0x10/0x10 [ 601.987285][ T38] ? rt_spin_unlock+0x14f/0x200 [ 601.987315][ T38] ? rt_spin_unlock+0x160/0x200 [ 601.987338][ T38] ? __pfx_kthread+0x10/0x10 [ 601.987372][ T38] ret_from_fork+0x51b/0xa40 [ 601.987402][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 601.987425][ T38] ? __switch_to+0xc82/0x1410 [ 601.987452][ T38] ? __pfx_kthread+0x10/0x10 [ 601.987487][ T38] ret_from_fork_asm+0x1a/0x30 [ 601.987539][ T38] [ 601.987572][ T38] INFO: task syz-executor:8239 blocked for more than 143 seconds. [ 601.987590][ T38] Tainted: G L syzkaller #0 [ 601.987603][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 601.987614][ T38] task:syz-executor state:D stack:22328 pid:8239 tgid:8239 ppid:1 task_flags:0x400140 flags:0x00080002 [ 601.987674][ T38] Call Trace: [ 601.987682][ T38] [ 601.987696][ T38] __schedule+0x147b/0x4f50 [ 601.987753][ T38] ? __pfx___schedule+0x10/0x10 [ 601.987797][ T38] rt_mutex_schedule+0x76/0xf0 [ 601.987820][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 601.987864][ T38] rt_mutex_slowlock+0x2dc/0x710 [ 601.987892][ T38] ? rt_mutex_slowlock+0x1fd/0x710 [ 601.987918][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 601.987965][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 601.988002][ T38] ? rtnl_newlink+0x8a1/0x1be0 [ 601.988032][ T38] mutex_lock_nested+0x168/0x1d0 [ 601.988056][ T38] ? rtnl_newlink+0x8a1/0x1be0 [ 601.988094][ T38] rtnl_newlink+0x8a1/0x1be0 [ 601.988136][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 601.988168][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 601.988214][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 601.988251][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 601.988341][ T38] ? kernel_text_address+0xa5/0xe0 [ 601.988365][ T38] ? __kernel_text_address+0xd/0x30 [ 601.988386][ T38] ? unwind_get_return_address+0x4d/0x90 [ 601.988417][ T38] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 601.988447][ T38] ? arch_stack_walk+0xfb/0x150 [ 601.988483][ T38] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 601.988533][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 601.988568][ T38] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 601.988607][ T38] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 601.988641][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 601.988675][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 601.988722][ T38] netlink_rcv_skb+0x232/0x4b0 [ 601.988749][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 601.988784][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 601.988820][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 601.988854][ T38] netlink_unicast+0x831/0x9f0 [ 601.988899][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 601.988934][ T38] ? __alloc_skb+0x193/0x390 [ 601.988968][ T38] ? netlink_sendmsg+0x650/0xb40 [ 601.988992][ T38] ? skb_put+0x11b/0x210 [ 601.989016][ T38] netlink_sendmsg+0x813/0xb40 [ 601.989052][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 601.989086][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 601.989115][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 601.989142][ T38] __sock_sendmsg+0x21c/0x270 [ 601.989175][ T38] __sys_sendto+0x3d0/0x560 [ 601.989221][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 601.989289][ T38] ? rcu_is_watching+0x15/0xb0 [ 601.989318][ T38] __x64_sys_sendto+0xde/0x100 [ 601.989358][ T38] do_syscall_64+0xe2/0xf80 [ 601.989386][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.989409][ T38] ? trace_irq_disable+0x37/0x100 [ 601.989433][ T38] ? clear_bhb_loop+0x60/0xb0 [ 601.989459][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.989483][ T38] RIP: 0033:0x7f90d647b58e [ 601.989501][ T38] RSP: 002b:00007ffce471e958 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 601.989525][ T38] RAX: ffffffffffffffda RBX: 0000555586cb6500 RCX: 00007f90d647b58e [ 601.989543][ T38] RDX: 0000000000000088 RSI: 00007f90d7264670 RDI: 0000000000000003 [ 601.989559][ T38] RBP: 0000000000000001 R08: 00007ffce471e9d4 R09: 000000000000000c [ 601.989574][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 601.989589][ T38] R13: 0000000000000000 R14: 00007f90d7264670 R15: 0000000000000000 [ 601.989623][ T38] [ 601.989633][ T38] INFO: task syz-executor:8242 blocked for more than 143 seconds. [ 601.989651][ T38] Tainted: G L syzkaller #0 [ 601.989664][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 601.989674][ T38] task:syz-executor state:D stack:22360 pid:8242 tgid:8242 ppid:1 task_flags:0x400140 flags:0x00080002 [ 601.989735][ T38] Call Trace: [ 601.989743][ T38] [ 601.989756][ T38] __schedule+0x147b/0x4f50 [ 601.989786][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 601.989824][ T38] ? unwind_get_return_address+0x4d/0x90 [ 601.989855][ T38] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 601.989898][ T38] ? __pfx___schedule+0x10/0x10 [ 601.989944][ T38] rt_mutex_schedule+0x76/0xf0 [ 601.989966][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 601.990010][ T38] rt_mutex_slowlock+0x2dc/0x710 [ 601.990038][ T38] ? rt_mutex_slowlock+0x1fd/0x710 [ 601.990103][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 601.990142][ T38] ? rtnl_newlink+0x8a1/0x1be0 [ 601.990181][ T38] ? rtnl_newlink+0x8a1/0x1be0 [ 601.990231][ T38] ? rtnl_newlink+0x8a1/0x1be0 [ 601.990263][ T38] mutex_lock_nested+0x168/0x1d0 [ 601.990295][ T38] rtnl_newlink+0x8a1/0x1be0 [ 601.990338][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 601.990370][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 601.990410][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 601.990448][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 601.990544][ T38] ? kernel_text_address+0xa5/0xe0 [ 601.990569][ T38] ? __kernel_text_address+0xd/0x30 [ 601.990591][ T38] ? unwind_get_return_address+0x4d/0x90 [ 601.990624][ T38] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 601.990653][ T38] ? arch_stack_walk+0xfb/0x150 [ 601.990690][ T38] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 601.990743][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 601.990779][ T38] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 601.990817][ T38] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 601.990853][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 601.990889][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 601.990938][ T38] netlink_rcv_skb+0x232/0x4b0 [ 601.990964][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 601.991003][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 601.991042][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 601.991077][ T38] netlink_unicast+0x831/0x9f0 [ 601.991122][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 601.991159][ T38] ? __alloc_skb+0x193/0x390 [ 601.991194][ T38] ? netlink_sendmsg+0x650/0xb40 [ 601.991224][ T38] ? skb_put+0x11b/0x210 [ 601.991250][ T38] netlink_sendmsg+0x813/0xb40 [ 601.991287][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 601.991335][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 601.991364][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 601.991391][ T38] __sock_sendmsg+0x21c/0x270 [ 601.991424][ T38] __sys_sendto+0x3d0/0x560 [ 601.991464][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 601.991531][ T38] ? rcu_is_watching+0x15/0xb0 [ 601.991561][ T38] __x64_sys_sendto+0xde/0x100 [ 601.991599][ T38] do_syscall_64+0xe2/0xf80 [ 601.991630][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.991653][ T38] ? trace_irq_disable+0x37/0x100 [ 601.991677][ T38] ? clear_bhb_loop+0x60/0xb0 [ 601.991704][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.991727][ T38] RIP: 0033:0x7f47624ab58e [ 601.991745][ T38] RSP: 002b:00007ffd1e69c458 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 601.991769][ T38] RAX: ffffffffffffffda RBX: 000055557029c500 RCX: 00007f47624ab58e [ 601.991787][ T38] RDX: 0000000000000088 RSI: 00007f4763294670 RDI: 0000000000000003 [ 601.991802][ T38] RBP: 0000000000000001 R08: 00007ffd1e69c4d4 R09: 000000000000000c [ 601.991816][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 601.991831][ T38] R13: 0000000000000000 R14: 00007f4763294670 R15: 0000000000000000 [ 601.991865][ T38] [ 601.991877][ T38] INFO: task syz-executor:8338 blocked for more than 143 seconds. [ 601.991895][ T38] Tainted: G L syzkaller #0 [ 601.991908][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 601.991918][ T38] task:syz-executor state:D stack:25656 pid:8338 tgid:8338 ppid:1 task_flags:0x400140 flags:0x00080002 [ 601.991983][ T38] Call Trace: [ 601.991991][ T38] [ 601.992005][ T38] __schedule+0x147b/0x4f50 [ 602.002164][ T38] ? __pfx___schedule+0x10/0x10 [ 602.002231][ T38] rt_mutex_schedule+0x76/0xf0 [ 602.002256][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 602.002302][ T38] rt_mutex_slowlock+0x2dc/0x710 [ 602.002342][ T38] ? rt_mutex_slowlock+0x1fd/0x710 [ 602.002369][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 602.002392][ T38] ? copy_net_ns+0x3e2/0x570 [ 602.002436][ T38] ? ip_tunnel_init_net+0x2d7/0x840 [ 602.002465][ T38] ? ip_tunnel_init_net+0x2d7/0x840 [ 602.002496][ T38] ? ip_tunnel_init_net+0x2d7/0x840 [ 602.002518][ T38] mutex_lock_nested+0x168/0x1d0 [ 602.002548][ T38] ip_tunnel_init_net+0x2d7/0x840 [ 602.002580][ T38] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 602.002610][ T38] ? trace_kmalloc+0x1f/0xb0 [ 602.002639][ T38] ? __kmalloc_noprof+0x256/0x7c0 [ 602.002679][ T38] ops_init+0x35c/0x5c0 [ 602.002723][ T38] setup_net+0x118/0x340 [ 602.002757][ T38] ? __pfx_setup_net+0x10/0x10 [ 602.002790][ T38] ? mutex_rt_init_lockdep+0x66/0x80 [ 602.002817][ T38] ? preinit_net+0x4a0/0x7a0 [ 602.002852][ T38] copy_net_ns+0x3e2/0x570 [ 602.002890][ T38] create_new_namespaces+0x3e7/0x6a0 [ 602.002922][ T38] ? security_capable+0x7e/0x2c0 [ 602.002954][ T38] unshare_nsproxy_namespaces+0x11a/0x160 [ 602.003003][ T38] ksys_unshare+0x4f4/0x900 [ 602.003035][ T38] ? kmem_cache_free+0x71c/0x8c0 [ 602.003066][ T38] ? fput_close_sync+0x11f/0x240 [ 602.003104][ T38] ? __pfx_ksys_unshare+0x10/0x10 [ 602.003138][ T38] ? rcu_is_watching+0x15/0xb0 [ 602.003174][ T38] __x64_sys_unshare+0x38/0x50 [ 602.003214][ T38] do_syscall_64+0xe2/0xf80 [ 602.003247][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.003271][ T38] ? trace_irq_disable+0x37/0x100 [ 602.003296][ T38] ? clear_bhb_loop+0x60/0xb0 [ 602.003325][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.003350][ T38] RIP: 0033:0x7fc64fe7bfa7 [ 602.003371][ T38] RSP: 002b:00007ffcf8f0d838 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 602.003397][ T38] RAX: ffffffffffffffda RBX: 00007fc6500f5f40 RCX: 00007fc64fe7bfa7 [ 602.003416][ T38] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 602.003432][ T38] RBP: 00007fc6500f67b8 R08: 0000000000000000 R09: 0000000000000000 [ 602.003448][ T38] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 602.003463][ T38] R13: 0000000000000003 R14: 00007ffcf8f0da78 R15: 0000000000000000 [ 602.003499][ T38] [ 602.003534][ T38] [ 602.003534][ T38] Showing all locks held in the system: [ 602.003545][ T38] 2 locks held by kworker/0:0/9: [ 602.003561][ T38] 5 locks held by rcuc/0/20: [ 602.003577][ T38] 1 lock held by khungtaskd/38: [ 602.003591][ T38] #0: ffffffff8d9c7780 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 602.003660][ T38] 3 locks held by kworker/u8:2/42: [ 602.003674][ T38] #0: ffff88813fe29938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 602.003742][ T38] #1: ffffc90000b47bc0 ((work_completion)(©->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 602.003803][ T38] #2: ffffffff8d9cdfb0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 602.003865][ T38] 3 locks held by kworker/u8:3/58: [ 602.003879][ T38] #0: ffff88813fe29938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 602.003946][ T38] #1: ffffc9000124fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 602.004007][ T38] #2: ffffffff8ed37f78 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 602.004073][ T38] 5 locks held by kworker/u8:6/153: [ 602.004087][ T38] #0: ffff88801aa94938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 602.004146][ T38] #1: ffffc90003a87bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 602.004224][ T38] #2: ffffffff8ed295e0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xfe/0x7b0 [ 602.004291][ T38] #3: ffffffff8ed37f78 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x940 [ 602.004359][ T38] #4: ffffffff8d9cdfb0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 602.004423][ T38] 3 locks held by kworker/u8:9/1294: [ 602.004437][ T38] #0: ffff88814c916138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 602.004496][ T38] #1: ffffc900053f7bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 602.004559][ T38] #2: ffffffff8ed37f78 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 602.004636][ T38] 2 locks held by klogd/5156: [ 602.004649][ T38] 2 locks held by dhcpcd/5462: [ 602.004663][ T38] #0: ffff888027764928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xe4/0xe80 [ 602.004719][ T38] #1: ffffffff8ed37f78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 602.004785][ T38] 2 locks held by getty/5557: [ 602.004799][ T38] #0: ffff88814dcf50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 602.004858][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 602.004926][ T38] 1 lock held by syz-executor/5802: [ 602.004939][ T38] #0: ffffffff8ed37f78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 602.005005][ T38] 3 locks held by kworker/0:7/5951: [ 602.005019][ T38] #0: ffff88813fe15138 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 602.005074][ T38] #1: ffffc900054a7bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 602.005134][ T38] #2: ffffffff8ed37f78 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 602.005199][ T38] 6 locks held by kworker/u8:16/5956: [ 602.005270][ T38] 2 locks held by syz-executor/8239: [ 602.005284][ T38] #0: ffffffff8e497548 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 602.005347][ T38] #1: ffffffff8ed37f78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 602.005412][ T38] 2 locks held by syz-executor/8242: [ 602.005426][ T38] #0: ffffffff8e497548 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 602.005487][ T38] #1: ffffffff8ed37f78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 602.005555][ T38] 2 locks held by syz-executor/8338: [ 602.005568][ T38] #0: ffffffff8ed295e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cb/0x570 [ 602.005633][ T38] #1: ffffffff8ed37f78 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d7/0x840 [ 602.005691][ T38] 1 lock held by syz.3.594/8459: [ 602.005704][ T38] #0: ffffffff8ed37f78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 602.005764][ T38] 1 lock held by syz-executor/8465: [ 602.005777][ T38] #0: ffffffff8ed37f78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 602.005845][ T38] 1 lock held by syz-executor/8466: [ 602.005859][ T38] #0: ffffffff8ed37f78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 602.005933][ T38] 1 lock held by syz-executor/8471: [ 602.005946][ T38] #0: ffffffff8ed37f78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 602.006015][ T38] 1 lock held by syz-executor/8476: [ 602.006029][ T38] #0: ffffffff8ed37f78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 602.006096][ T38] 1 lock held by syz-executor/8480: [ 602.006110][ T38] #0: ffffffff8ed37f78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 602.006180][ T38] 1 lock held by syz-executor/8490: [ 602.006194][ T38] #0: ffffffff8ed37f78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 602.006268][ T38] 1 lock held by syz-executor/8492: [ 602.006282][ T38] #0: ffffffff8ed37f78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 602.006350][ T38] 1 lock held by syz-executor/8493: [ 602.006364][ T38] #0: ffffffff8ed37f78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 602.006432][ T38] 1 lock held by syz-executor/8494: [ 602.006446][ T38] #0: ffffffff8ed37f78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 602.006514][ T38] 1 lock held by syz-executor/8495: [ 602.006528][ T38] #0: ffffffff8ed37f78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 602.006597][ T38] [ 602.006604][ T38] ============================================= [ 602.006604][ T38] [ 602.006624][ T38] NMI backtrace for cpu 0 [ 602.006650][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 602.006702][ T38] Tainted: [L]=SOFTLOCKUP [ 602.006711][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 602.006725][ T38] Call Trace: [ 602.006734][ T38] [ 602.006744][ T38] dump_stack_lvl+0xe8/0x150 [ 602.006778][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 602.006803][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 602.006829][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 602.006856][ T38] sys_info+0x135/0x170 [ 602.006885][ T38] watchdog+0xf90/0xfe0 [ 602.006917][ T38] ? watchdog+0x209/0xfe0 [ 602.006951][ T38] kthread+0x726/0x8b0 [ 602.006988][ T38] ? __pfx_watchdog+0x10/0x10 [ 602.007013][ T38] ? __pfx_kthread+0x10/0x10 [ 602.007044][ T38] ? rt_spin_unlock+0x14f/0x200 [ 602.007074][ T38] ? rt_spin_unlock+0x160/0x200 [ 602.007097][ T38] ? __pfx_kthread+0x10/0x10 [ 602.007132][ T38] ret_from_fork+0x51b/0xa40 [ 602.007162][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 602.007186][ T38] ? __switch_to+0xc82/0x1410 [ 602.007219][ T38] ? __pfx_kthread+0x10/0x10 [ 602.007254][ T38] ret_from_fork_asm+0x1a/0x30 [ 602.007306][ T38] [ 602.007315][ T38] Sending NMI from CPU 0 to CPUs 1: [ 602.007353][ C1] NMI backtrace for cpu 1 [ 602.007372][ C1] CPU: 1 UID: 0 PID: 5956 Comm: kworker/u8:16 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 602.007399][ C1] Tainted: [L]=SOFTLOCKUP [ 602.007406][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 602.007419][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 602.007442][ C1] RIP: 0010:__lock_acquire+0x524/0x2cf0 [ 602.007477][ C1] Code: 00 48 83 c3 28 41 89 c4 49 39 cf 0f 8d c7 00 00 00 49 83 ff 31 0f 83 83 00 00 00 8b 03 25 ff 1f 00 00 48 0f a3 05 dc 08 6c 11 <73> 10 48 69 c0 c8 00 00 00 48 8d 88 90 e3 aa 92 eb 32 83 3d e3 98 [ 602.007494][ C1] RSP: 0018:ffffc900054763f0 EFLAGS: 00000003 [ 602.007510][ C1] RAX: 000000000000000b RBX: ffff88802ac5aa90 RCX: 0000000000000006 [ 602.007524][ C1] RDX: 0000000000000003 RSI: 0000000000000004 RDI: 0000000000000000 [ 602.007536][ C1] RBP: ffff88802ac5aac0 R08: ffffffff8174b0b5 R09: ffffffff8d9c7780 [ 602.007551][ C1] R10: ffffc900054766f8 R11: ffffffff81ad1370 R12: 0000000000000003 [ 602.007565][ C1] R13: ffff88802ac5aac0 R14: ffff88802ac59e40 R15: 0000000000000004 [ 602.007579][ C1] FS: 0000000000000000(0000) GS:ffff8881268fc000(0000) knlGS:0000000000000000 [ 602.007595][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 602.007609][ C1] CR2: 00007fd36613d497 CR3: 00000000113cc000 CR4: 00000000003526f0 [ 602.007626][ C1] Call Trace: [ 602.007633][ C1] [ 602.007645][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 602.007673][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 602.007702][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 602.007726][ C1] lock_acquire+0x106/0x330 [ 602.007750][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 602.007779][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 602.007803][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 602.007831][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 602.007856][ C1] unwind_next_frame+0xc2/0x23c0 [ 602.007880][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 602.007907][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 602.007933][ C1] ? ret_from_fork+0x51b/0xa40 [ 602.007953][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 602.007980][ C1] ? nft_synproxy_eval_v4+0x352/0x4e0 [ 602.008009][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 602.008034][ C1] arch_stack_walk+0x11b/0x150 [ 602.008061][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 602.008097][ C1] stack_trace_save+0xa9/0x100 [ 602.008125][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 602.008147][ C1] ? kmem_cache_free+0x18d/0x8c0 [ 602.008174][ C1] ? nft_synproxy_do_eval+0x305/0x580 [ 602.008312][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 602.008379][ C1] kasan_save_track+0x3e/0x80 [ 602.008432][ C1] ? kasan_save_track+0x3e/0x80 [ 602.008477][ C1] ? kasan_save_free_info+0x46/0x50 [ 602.008508][ C1] ? __kasan_slab_free+0x5c/0x80 [ 602.008559][ C1] ? kmem_cache_free+0x18d/0x8c0 [ 602.008613][ C1] ? nft_synproxy_eval_v4+0x352/0x4e0 [ 602.008668][ C1] ? nft_synproxy_do_eval+0x305/0x580 [ 602.008727][ C1] ? nft_do_chain+0x45e/0x1990 [ 602.008798][ C1] ? nft_do_chain_inet+0x29d/0x380 [ 602.008858][ C1] ? nf_hook_slow+0xc5/0x220 [ 602.008895][ C1] ? NF_HOOK+0x21f/0x3c0 [ 602.008925][ C1] ? NF_HOOK+0x336/0x3c0 [ 602.008948][ C1] ? __netif_receive_skb+0x143/0x370 [ 602.008983][ C1] ? process_backlog+0x315/0x8f0 [ 602.009016][ C1] ? __napi_poll+0xae/0x510 [ 602.009043][ C1] ? net_rx_action+0x696/0xe00 [ 602.009070][ C1] ? handle_softirqs+0x1de/0x640 [ 602.009092][ C1] ? __local_bh_enable_ip+0x170/0x2b0 [ 602.009113][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1ac7/0x2c80 [ 602.009145][ C1] ? ieee80211_iface_work+0x85e/0x12b0 [ 602.009172][ C1] ? cfg80211_wiphy_work+0x2ab/0x450 [ 602.009222][ C1] ? process_scheduled_works+0xaec/0x17a0 [ 602.009259][ C1] ? worker_thread+0x89f/0xd90 [ 602.009296][ C1] ? kthread+0x726/0x8b0 [ 602.009349][ C1] ? ret_from_fork+0x51b/0xa40 [ 602.009401][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 602.009460][ C1] kasan_save_free_info+0x46/0x50 [ 602.009487][ C1] __kasan_slab_free+0x5c/0x80 [ 602.009523][ C1] kmem_cache_free+0x18d/0x8c0 [ 602.009595][ C1] ? nft_synproxy_eval_v4+0x352/0x4e0 [ 602.009633][ C1] nft_synproxy_eval_v4+0x352/0x4e0 [ 602.009685][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 602.009732][ C1] ? nf_ip_checksum+0x13c/0x510 [ 602.009764][ C1] nft_synproxy_do_eval+0x305/0x580 [ 602.009800][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 602.009831][ C1] ? trace_sched_exit_tp+0x36/0xf0 [ 602.009869][ C1] nft_do_chain+0x45e/0x1990 [ 602.009903][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 602.009948][ C1] nft_do_chain_inet+0x29d/0x380 [ 602.009981][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 602.010021][ C1] ? NF_HOOK+0x9e/0x3c0 [ 602.010055][ C1] ? NF_HOOK+0x9e/0x3c0 [ 602.010074][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 602.010102][ C1] nf_hook_slow+0xc5/0x220 [ 602.010127][ C1] NF_HOOK+0x21f/0x3c0 [ 602.010147][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 602.010168][ C1] ? NF_HOOK+0x9e/0x3c0 [ 602.010187][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 602.010207][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 602.010229][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 602.010251][ C1] ? skb_dst+0x4f/0xd0 [ 602.010270][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 602.010291][ C1] NF_HOOK+0x336/0x3c0 [ 602.010312][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 602.010332][ C1] ? NF_HOOK+0x9e/0x3c0 [ 602.010351][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 602.010372][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 602.010396][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 602.010415][ C1] __netif_receive_skb+0x143/0x370 [ 602.010450][ C1] ? process_backlog+0x272/0x8f0 [ 602.010478][ C1] process_backlog+0x315/0x8f0 [ 602.010511][ C1] __napi_poll+0xae/0x510 [ 602.010538][ C1] net_rx_action+0x696/0xe00 [ 602.010572][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 602.010599][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 602.010629][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 602.010646][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 602.010673][ C1] ? reacquire_held_locks+0x104/0x190 [ 602.010707][ C1] handle_softirqs+0x1de/0x640 [ 602.010735][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 602.010759][ C1] ieee80211_ibss_rx_queued_mgmt+0x1ac7/0x2c80 [ 602.010798][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 602.010824][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf0f/0x2c80 [ 602.010855][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 602.010884][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 602.010912][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 602.010939][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 602.010963][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 602.010990][ C1] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 602.011010][ C1] ? rt_spin_lock+0x1e0/0x400 [ 602.011037][ C1] ? rt_spin_unlock+0x160/0x200 [ 602.011061][ C1] ieee80211_iface_work+0x85e/0x12b0 [ 602.011087][ C1] cfg80211_wiphy_work+0x2ab/0x450 [ 602.011108][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 602.011131][ C1] process_scheduled_works+0xaec/0x17a0 [ 602.011165][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 602.011186][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 602.011212][ C1] ? assign_work+0x3d3/0x440 [ 602.011236][ C1] worker_thread+0x89f/0xd90 [ 602.011265][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 602.011295][ C1] kthread+0x726/0x8b0 [ 602.011323][ C1] ? __pfx_worker_thread+0x10/0x10 [ 602.011344][ C1] ? __pfx_kthread+0x10/0x10 [ 602.011370][ C1] ? rt_spin_unlock+0x14f/0x200 [ 602.011391][ C1] ? rt_spin_unlock+0x160/0x200 [ 602.011410][ C1] ? __pfx_kthread+0x10/0x10 [ 602.011436][ C1] ret_from_fork+0x51b/0xa40 [ 602.011465][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 602.011485][ C1] ? __switch_to+0xc82/0x1410 [ 602.011504][ C1] ? __pfx_kthread+0x10/0x10 [ 602.011531][ C1] ret_from_fork_asm+0x1a/0x30 [ 602.011568][ C1] [ 602.962153][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 602.962184][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 602.962216][ T38] Tainted: [L]=SOFTLOCKUP [ 602.962225][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 602.962239][ T38] Call Trace: [ 602.962249][ T38] [ 602.962261][ T38] vpanic+0x1e0/0x670 [ 602.962313][ T38] panic+0xc5/0xd0 [ 602.962343][ T38] ? __pfx_panic+0x10/0x10 [ 602.962393][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 602.962426][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 602.962456][ T38] watchdog+0xfda/0xfe0 [ 602.962488][ T38] ? watchdog+0x209/0xfe0 [ 602.962523][ T38] kthread+0x726/0x8b0 [ 602.962558][ T38] ? __pfx_watchdog+0x10/0x10 [ 602.962584][ T38] ? __pfx_kthread+0x10/0x10 [ 602.962614][ T38] ? rt_spin_unlock+0x14f/0x200 [ 602.962656][ T38] ? rt_spin_unlock+0x160/0x200 [ 602.962679][ T38] ? __pfx_kthread+0x10/0x10 [ 602.962712][ T38] ret_from_fork+0x51b/0xa40 [ 602.962741][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 602.962765][ T38] ? __switch_to+0xc82/0x1410 [ 602.962791][ T38] ? __pfx_kthread+0x10/0x10 [ 602.962824][ T38] ret_from_fork_asm+0x1a/0x30 [ 602.962873][ T38] [ 602.963035][ T38] Kernel Offset: disabled