last executing test programs: 11.437707595s ago: executing program 2 (id=401): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x42}, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000002900000037"], 0x18}, 0x40e0) 11.158987191s ago: executing program 2 (id=404): r0 = socket$nl_generic(0x10, 0x3, 0x10) mbind(&(0x7f0000000000/0x1000)=nil, 0x3000, 0x1, &(0x7f0000000300), 0x7797, 0x3) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x5, 0x0, 0x2, 0xe, 0x0, 0x0, 0x7, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x4e24, 0xfffffffd, @private1, 0x8598}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x81}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0xfffff800, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}]}, 0x70}, 0x1, 0x400000000000000}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xe8e80) r5 = dup(r4) read$alg(r5, &(0x7f00000004c0)=""/201, 0xc9) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x8, 0x3, 0x3c2}, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) connect$inet6(r3, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) ioctl$SOUND_MIXER_READ_RECSRC(r5, 0x80044dff, &(0x7f0000000100)) r7 = dup2(r3, r3) socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) sendmmsg$unix(r7, &(0x7f0000008380), 0x400000000000174, 0x4008890) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_netdev_private(r0, 0x8943, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a") 8.961127445s ago: executing program 2 (id=409): r0 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, 0x0) r1 = syz_usb_connect$rtl8150(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0xdc3, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9e00", 0x18, 0x6, 0xfde3996dcd16970f, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0xc2, 0xfffd, 0x0, 0xfff, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) 7.596176171s ago: executing program 2 (id=414): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000004940)="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", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x3c}}) ioctl$FS_IOC_RESVSP(r1, 0x40086602, 0x0) socket$inet(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x100000}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) 7.287344481s ago: executing program 2 (id=417): r0 = socket$nl_generic(0x10, 0x3, 0x10) mbind(&(0x7f0000000000/0x1000)=nil, 0x3000, 0x1, &(0x7f0000000300), 0x7797, 0x3) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x5, 0x0, 0x2, 0xe, 0x0, 0x0, 0x7, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x4e24, 0xfffffffd, @private1, 0x8598}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x81}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0xfffff800, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}]}, 0x70}, 0x1, 0x400000000000000}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xe8e80) r5 = dup(r4) read$alg(r5, &(0x7f00000004c0)=""/201, 0xc9) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x8, 0x3, 0x3c2}, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) connect$inet6(r3, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) ioctl$SOUND_MIXER_READ_RECSRC(r5, 0x80044dff, &(0x7f0000000100)) r7 = dup2(r3, r3) socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) sendmmsg$unix(r7, &(0x7f0000008380), 0x400000000000174, 0x4008890) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_netdev_private(r0, 0x8943, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a") 7.146651249s ago: executing program 3 (id=418): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0x7}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff2}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) 6.74728079s ago: executing program 3 (id=419): syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x50b441) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) openat2(0xffffffffffffffff, 0x0, 0x0, 0x44cc750b5a831e98) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001180)=0x2000000) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000180)={0x7f, 0x3ff, 0x7, 0x9, 0x1b, "03f37f0ce56ca288"}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x42080, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_mrelease(0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, r0, 0x0) 5.473048355s ago: executing program 0 (id=421): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, 0x0, 0x40e0) 5.193033111s ago: executing program 2 (id=423): r0 = socket$inet6(0xa, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) ioctl$SIOCSIFMTU(r1, 0x8923, &(0x7f0000000000)={'vxcan1\x00', 0x96}) 5.127464449s ago: executing program 0 (id=424): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000c80)={0x44, 0x0, &(0x7f0000000ac0)=[@reply={0x400c6314, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xfdfdffff, 0x0}) 5.090162014s ago: executing program 1 (id=425): chroot(0x0) 4.842348266s ago: executing program 0 (id=426): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4.822027139s ago: executing program 1 (id=427): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0x7}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff2}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) 4.705081804s ago: executing program 3 (id=428): socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0xc2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010100, 0x15, 0x3, 'sh\x00', 0x28, 0x0, 0x70}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000180)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x1) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0}, 0x0) r5 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f0000000140)=0x12) close(r5) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000002c0)=ANY=[]) sched_setscheduler(0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x2f}, 0x40}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x301540, 0x0) 4.636936613s ago: executing program 0 (id=429): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x2102, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x2, 0x95, 0x102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000300)={0xb, @sdr={0x34565559, 0x2}}) poll(&(0x7f0000000100), 0x0, 0x8) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto(r5, &(0x7f0000000100)="51bf7336f6cdf0ca6c13c866d6bc7b55f2d501845841bb2c078a988b7eb38f11a326083cf884920013fbae4a3a5d9c8ea7ea86669fb6212da0b5c82136d9519daeb17c9f96ad78cccef50ab4eabcafbc1a18735359cd7329816984d180735476f901401079349dfbe2e614f51a07c00544d90a594972ba60e1b497f88dcdc1e45dd28c0678d803638e7bd70a8638136e52c5e932c4111d3c917fb22583198b00707e3a2e001260cbc206759c2454", 0xae, 0x20000000, &(0x7f0000000280)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfd, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xc080) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xbf}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) bind$packet(0xffffffffffffffff, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800080, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r9, 0x4048aecb, &(0x7f00000034c0)) ioctl$KVM_SET_SREGS2(r9, 0x4140aecd, &(0x7f0000000140)={{0x5000, 0x60000, 0x3, 0x4, 0x3, 0xd, 0x59, 0x7, 0x7, 0x65, 0x8, 0x7f}, {0x30000, 0x1000, 0xf, 0x9, 0x1, 0x9, 0x8, 0xf9, 0x8, 0x1, 0x7, 0x16}, {0xeeee8000, 0x70000, 0x0, 0x0, 0x3, 0x8, 0x8, 0x55, 0x65, 0x16, 0x2, 0x9}, {0x26000, 0x2, 0xf, 0x67, 0xf, 0x5, 0x4, 0xfb, 0x1, 0x6, 0x3, 0x4}, {0xb000, 0x54000, 0x4, 0x1, 0x6, 0x7b, 0xf8, 0x4, 0xa, 0x0, 0x2, 0x2}, {0x40000, 0xdddd1000, 0xa, 0x8, 0x2, 0x0, 0x6, 0x3, 0xe, 0x9, 0x9d, 0x4}, {0x50000, 0x5000, 0xb, 0x3, 0x2, 0x8, 0xff, 0x8, 0x3f, 0xa, 0x2, 0x4}, {0x8000000, 0x80a0000, 0xf, 0x1, 0x74, 0x8, 0x9, 0x8e, 0x2, 0x3, 0x2, 0xe9}, {0xffff1000, 0x6}, {0x58000, 0x9}, 0x10, 0x0, 0xdddd0000, 0x300, 0x1, 0x4000, 0x30000, 0x0, [0x2, 0x5, 0x8, 0x7]}) 4.409474212s ago: executing program 1 (id=430): unshare(0x22020600) syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), 0x0) 4.169851273s ago: executing program 1 (id=431): r0 = socket$nl_generic(0x10, 0x3, 0x10) mbind(&(0x7f0000000000/0x1000)=nil, 0x3000, 0x1, &(0x7f0000000300), 0x7797, 0x3) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x5, 0x0, 0x2, 0xe, 0x0, 0x0, 0x7, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x4e24, 0xfffffffd, @private1, 0x8598}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x81}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0xfffff800, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}]}, 0x70}, 0x1, 0x400000000000000}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xe8e80) r5 = dup(r4) read$alg(r5, &(0x7f00000004c0)=""/201, 0xc9) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x8, 0x3, 0x3c2}, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) connect$inet6(r3, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) ioctl$SOUND_MIXER_READ_RECSRC(r5, 0x80044dff, &(0x7f0000000100)) r7 = dup2(r3, r3) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) sendmmsg$unix(r7, &(0x7f0000008380), 0x400000000000174, 0x4008890) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r9, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_netdev_private(r0, 0x8943, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a") 2.519491395s ago: executing program 3 (id=432): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, 0x0, 0x40e0) 2.283356096s ago: executing program 3 (id=433): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = syz_open_dev$video4linux(0x0, 0x7fff, 0x149b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r4) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getpid() r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f0000000000)={0x79}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) 2.02073763s ago: executing program 1 (id=434): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 1.973260096s ago: executing program 0 (id=435): chroot(0x0) 1.700338851s ago: executing program 0 (id=436): syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x50b441) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) openat2(0xffffffffffffffff, 0x0, 0x0, 0x44cc750b5a831e98) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001180)=0x2000000) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000180)={0x7f, 0x3ff, 0x7, 0x9, 0x1b, "03f37f0ce56ca288"}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x42080, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_mrelease(0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, r0, 0x0) 1.111498547s ago: executing program 1 (id=437): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000c80), &(0x7f0000001280)=0x30) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x9, 0x7, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d800800", @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xffffffff}, 0x1c) connect$inet6(r3, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r7, {}, {0xafabc05531515610, 0xfff3}, {0xf, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x0) io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xa}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0) r8 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r8, &(0x7f0000000700)={0x4, 0x8}, 0x10) 0s ago: executing program 3 (id=438): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0x7}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff2}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 55.821461][ T5434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.831394][ T5434] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.247' (ED25519) to the list of known hosts. syzkaller login: [ 83.351027][ T5757] cgroup: Unknown subsys name 'net' [ 83.525923][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.189482][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.896709][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.905475][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.914676][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.922170][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.928425][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.931272][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.937968][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.952150][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.952369][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.963751][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.969080][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.977691][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.988409][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.995834][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.998317][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.018842][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.020287][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.028774][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.046084][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.054065][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.063385][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.113248][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.129073][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.129224][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.712578][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 87.879159][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 87.914519][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 87.947382][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.954998][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.962886][ T5771] bridge_slave_0: entered allmulticast mode [ 87.970808][ T5771] bridge_slave_0: entered promiscuous mode [ 87.985661][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.992947][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.002306][ T5771] bridge_slave_1: entered allmulticast mode [ 88.009343][ T5771] bridge_slave_1: entered promiscuous mode [ 88.016661][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 88.122623][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.156265][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.211575][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.218896][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.226266][ T5772] bridge_slave_0: entered allmulticast mode [ 88.233532][ T5772] bridge_slave_0: entered promiscuous mode [ 88.266901][ T5771] team0: Port device team_slave_0 added [ 88.275101][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.282763][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.290270][ T5772] bridge_slave_1: entered allmulticast mode [ 88.297275][ T5772] bridge_slave_1: entered promiscuous mode [ 88.327372][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.334782][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.342197][ T5775] bridge_slave_0: entered allmulticast mode [ 88.349819][ T5775] bridge_slave_0: entered promiscuous mode [ 88.359037][ T5771] team0: Port device team_slave_1 added [ 88.365138][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.372772][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.380340][ T5775] bridge_slave_1: entered allmulticast mode [ 88.388247][ T5775] bridge_slave_1: entered promiscuous mode [ 88.405464][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.413540][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.423166][ T5774] bridge_slave_0: entered allmulticast mode [ 88.430965][ T5774] bridge_slave_0: entered promiscuous mode [ 88.440057][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.447185][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.454550][ T5774] bridge_slave_1: entered allmulticast mode [ 88.461752][ T5774] bridge_slave_1: entered promiscuous mode [ 88.528645][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.541173][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.554626][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.575503][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.582637][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.609005][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.623610][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.665926][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.683752][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.690906][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.717237][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.741886][ T5775] team0: Port device team_slave_0 added [ 88.751072][ T5772] team0: Port device team_slave_0 added [ 88.761840][ T5775] team0: Port device team_slave_1 added [ 88.770335][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.809072][ T5772] team0: Port device team_slave_1 added [ 88.818365][ T5774] team0: Port device team_slave_0 added [ 88.862806][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.870147][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.897593][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.910878][ T5774] team0: Port device team_slave_1 added [ 88.917284][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.924326][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.950878][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.015753][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.023273][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.049576][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.061659][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.070851][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.097200][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.111217][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.118646][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.144990][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.165928][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.173900][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.173907][ T5783] Bluetooth: hci2: command tx timeout [ 89.200418][ T5776] Bluetooth: hci1: command tx timeout [ 89.208054][ T5783] Bluetooth: hci3: command tx timeout [ 89.212479][ T52] Bluetooth: hci0: command tx timeout [ 89.223686][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.253394][ T5771] hsr_slave_0: entered promiscuous mode [ 89.260860][ T5771] hsr_slave_1: entered promiscuous mode [ 89.315844][ T5775] hsr_slave_0: entered promiscuous mode [ 89.322709][ T5775] hsr_slave_1: entered promiscuous mode [ 89.330201][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.338259][ T5775] Cannot create hsr debugfs directory [ 89.461514][ T5774] hsr_slave_0: entered promiscuous mode [ 89.471276][ T5774] hsr_slave_1: entered promiscuous mode [ 89.477633][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.485218][ T5774] Cannot create hsr debugfs directory [ 89.508067][ T5772] hsr_slave_0: entered promiscuous mode [ 89.518639][ T5772] hsr_slave_1: entered promiscuous mode [ 89.524972][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.535530][ T5772] Cannot create hsr debugfs directory [ 89.850809][ T5771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.883922][ T5771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.895457][ T5771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.908598][ T5771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.018948][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.030566][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.049096][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.060867][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.156759][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.171503][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.185030][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.204077][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.211394][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.271515][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.324027][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.331382][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.361003][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.380515][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.387745][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.422369][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.434376][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.467291][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.578003][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.663972][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.686974][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.701503][ T1315] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.708709][ T1315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.745896][ T1315] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.753187][ T1315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.819258][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.870802][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.878059][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.895780][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.922706][ T3447] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.929987][ T3447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.967110][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.999477][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.062139][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.069398][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.132239][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.139506][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.171219][ T5771] veth0_vlan: entered promiscuous mode [ 91.248098][ T5776] Bluetooth: hci3: command tx timeout [ 91.248415][ T5781] Bluetooth: hci1: command tx timeout [ 91.253633][ T5776] Bluetooth: hci0: command tx timeout [ 91.260619][ T52] Bluetooth: hci2: command tx timeout [ 91.271207][ T5771] veth1_vlan: entered promiscuous mode [ 91.449281][ T5771] veth0_macvtap: entered promiscuous mode [ 91.485133][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.504847][ T5771] veth1_macvtap: entered promiscuous mode [ 91.571326][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.621970][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.672449][ T5771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.686447][ T5771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.696693][ T5771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.712254][ T5771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.727092][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.741733][ T5774] veth0_vlan: entered promiscuous mode [ 91.794319][ T5774] veth1_vlan: entered promiscuous mode [ 91.856049][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.901133][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.926442][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.994208][ T5774] veth0_macvtap: entered promiscuous mode [ 92.009932][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.018351][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.036911][ T5774] veth1_macvtap: entered promiscuous mode [ 92.052862][ T5775] veth0_vlan: entered promiscuous mode [ 92.076395][ T5772] veth0_vlan: entered promiscuous mode [ 92.115165][ T5772] veth1_vlan: entered promiscuous mode [ 92.123422][ T5775] veth1_vlan: entered promiscuous mode [ 92.140668][ T23] cfg80211: failed to load regulatory.db [ 92.161509][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.176298][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.191923][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.203346][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.223159][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.237100][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.273372][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.283343][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.294041][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.303288][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.366624][ T5772] veth0_macvtap: entered promiscuous mode [ 92.404228][ T5772] veth1_macvtap: entered promiscuous mode [ 92.444402][ T5775] veth0_macvtap: entered promiscuous mode [ 92.474478][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.487805][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.497845][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.508524][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.520479][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.534491][ T5775] veth1_macvtap: entered promiscuous mode [ 92.584591][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.595708][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.607035][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.618297][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.630437][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.691911][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.704565][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.715020][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.725915][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.736336][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.747181][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.760173][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.772534][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.797859][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.806650][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.823946][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.846529][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.865872][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.876849][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.894306][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.904241][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.914875][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.927112][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.943885][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.957366][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.973439][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.978408][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.983412][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.004955][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.164488][ T1315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.177303][ T1315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.253793][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.269056][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.329234][ T52] Bluetooth: hci0: command tx timeout [ 93.329992][ T5776] Bluetooth: hci2: command tx timeout [ 93.334739][ T52] Bluetooth: hci1: command tx timeout [ 93.342309][ T5783] Bluetooth: hci3: command tx timeout [ 93.382338][ T127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.390808][ T127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.483763][ T127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.492516][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.518794][ T127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.550109][ T1315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.564446][ T1315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.927893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.945127][ T5880] xt_hashlimit: size too large, truncated to 1048576 [ 94.000672][ T5883] –: renamed from vxcan1 (while UP) [ 94.440123][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.488974][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.497742][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 94.554723][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.564047][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.301306][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.407659][ T5776] Bluetooth: hci1: command tx timeout [ 95.413190][ T5783] Bluetooth: hci0: command tx timeout [ 95.418770][ T5781] Bluetooth: hci3: command tx timeout [ 95.418818][ T52] Bluetooth: hci2: command tx timeout [ 96.197846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.608733][ T789] IPVS: starting estimator thread 0... [ 96.669846][ T5897] program syz.1.9 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.678987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.777715][ T5898] IPVS: using max 27 ests per chain, 64800 per kthread [ 97.796997][ T5904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12'. [ 97.808852][ T5904] hsr_slave_0: left promiscuous mode [ 97.815549][ T5904] hsr_slave_1: left promiscuous mode [ 99.812446][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 100.104559][ T9] usb 1-1: config 0 has no interfaces? [ 100.114174][ T9] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 100.151926][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.166753][ T9] usb 1-1: config 0 descriptor?? [ 100.206249][ T5915] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.371253][ T5918] syz.1.17[5918]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 100.657640][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.868018][ T27] usb 1-1: USB disconnect, device number 2 [ 100.903023][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.933358][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.987313][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.017793][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.026977][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.065151][ T9] usb 2-1: config 0 descriptor?? [ 101.821552][ T5918] netlink: 72 bytes leftover after parsing attributes in process `syz.1.17'. [ 101.916014][ T5930] random: crng reseeded on system resumption [ 103.700822][ T5933] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 104.270612][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 104.317635][ T9] usbhid: probe of 2-1:0.0 failed with error -71 [ 104.368582][ T9] usb 2-1: USB disconnect, device number 2 [ 105.040530][ T5950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23'. [ 105.085636][ T5950] hsr_slave_0: left promiscuous mode [ 105.101583][ T5950] hsr_slave_1: left promiscuous mode [ 105.707997][ T28] audit: type=1326 audit(1768790124.592:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5961 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221c19acb9 code=0x7ffc0000 [ 105.774995][ T28] audit: type=1326 audit(1768790124.592:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5961 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221c19acb9 code=0x7ffc0000 [ 105.869090][ T28] audit: type=1326 audit(1768790124.612:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5961 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f221c19acb9 code=0x7ffc0000 [ 105.987727][ T28] audit: type=1326 audit(1768790124.612:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5961 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221c19acb9 code=0x7ffc0000 [ 106.040110][ T28] audit: type=1326 audit(1768790124.612:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5961 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221c19acb9 code=0x7ffc0000 [ 106.040159][ T28] audit: type=1326 audit(1768790124.632:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5961 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f221c19acb9 code=0x7ffc0000 [ 106.040202][ T28] audit: type=1326 audit(1768790124.632:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5961 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221c19acb9 code=0x7ffc0000 [ 106.040244][ T28] audit: type=1326 audit(1768790124.632:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5961 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f221c19acb9 code=0x7ffc0000 [ 106.040286][ T28] audit: type=1326 audit(1768790124.632:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5961 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221c19acb9 code=0x7ffc0000 [ 106.040327][ T28] audit: type=1326 audit(1768790124.632:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5961 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f221c19acb9 code=0x7ffc0000 [ 107.831816][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36'. [ 108.673681][ T6014] Zero length message leads to an empty skb [ 109.254548][ T6027] Cannot find add_set index 0 as target [ 111.301928][ T6046] netlink: 28 bytes leftover after parsing attributes in process `syz.2.53'. [ 111.311647][ T6046] netlink: 28 bytes leftover after parsing attributes in process `syz.2.53'. [ 111.932902][ T6057] Cannot find add_set index 0 as target [ 114.307616][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 114.520059][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 114.553857][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 114.583317][ T9] usb 4-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 16 [ 114.607539][ T9] usb 4-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 64 [ 114.642707][ T9] usb 4-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.746642][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 114.793051][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.826172][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.844885][ T9] usb 4-1: Product: syz [ 114.864831][ T9] usb 4-1: Manufacturer: syz [ 114.892652][ T9] usb 4-1: SerialNumber: syz [ 114.920277][ T6079] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 114.977782][ T6079] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 115.165739][ T6093] netlink: 28 bytes leftover after parsing attributes in process `syz.2.63'. [ 115.177783][ T6093] netlink: 28 bytes leftover after parsing attributes in process `syz.2.63'. [ 115.280305][ T9] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 115.338678][ T9] usb 4-1: USB disconnect, device number 2 [ 115.773061][ T5783] Bluetooth: hci0: hcon ffff88807a602000 sent 1 < count 7 [ 115.780613][ T5783] Bluetooth: hci0: hcon ffff88807a602000 sent 0 < count 14880 [ 115.789721][ T5783] Bluetooth: hci0: hcon ffff88807a602000 sent 0 < count 4 [ 116.083518][ T6107] Cannot find add_set index 0 as target [ 117.289776][ T6117] loop3: detected capacity change from 0 to 32768 [ 117.330027][ T6117] (syz.3.68,6117,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 117.345089][ T6117] (syz.3.68,6117,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 117.388066][ T6117] JBD2: Ignoring recovery information on journal [ 117.456880][ T6117] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 117.769292][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 117.769307][ T28] audit: type=1800 audit(1768790136.662:23): pid=6117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.68" name="file2" dev="loop3" ino=16978 res=0 errno=0 [ 118.087224][ T5775] ocfs2: Unmounting device (7,3) on (node local) [ 118.957585][ T5835] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 119.159953][ T5835] usb 3-1: Using ep0 maxpacket: 8 [ 119.175543][ T5835] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.213053][ T5835] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 119.252248][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.289472][ T5835] usb 3-1: config 0 descriptor?? [ 119.332707][ T5835] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 120.787452][ C0] sched: RT throttling activated [ 120.787940][ T5835] gspca_vc032x: reg_w err -110 [ 121.141050][ T5835] vc032x: probe of 3-1:0.0 failed with error -110 [ 123.137519][ T6196] Cannot find add_set index 0 as target [ 123.924718][ T5835] usb 3-1: USB disconnect, device number 2 [ 124.532935][ T6209] netlink: 28 bytes leftover after parsing attributes in process `syz.3.81'. [ 124.567719][ T6209] netlink: 28 bytes leftover after parsing attributes in process `syz.3.81'. [ 124.947833][ T5835] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 125.209949][ T5835] usb 2-1: Using ep0 maxpacket: 32 [ 125.228211][ T5835] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 125.237055][ T5835] usb 2-1: config 0 has no interface number 0 [ 125.247491][ T5835] usb 2-1: config 0 interface 230 has no altsetting 0 [ 125.258525][ T5835] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 125.272221][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.302744][ T5835] usb 2-1: Product: syz [ 125.307019][ T5835] usb 2-1: Manufacturer: syz [ 125.330571][ T5835] usb 2-1: SerialNumber: syz [ 125.357676][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 125.412100][ T5835] usb 2-1: config 0 descriptor?? [ 125.428601][ T5835] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 125.462737][ T5835] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 125.612102][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.641366][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.654073][ T27] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 125.669168][ T27] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 125.698546][ T27] usb 1-1: Manufacturer: syz [ 125.712450][ T27] usb 1-1: config 0 descriptor?? [ 126.630808][ T27] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #200: -71 [ 126.665629][ T27] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 126.699534][ T27] uclogic 0003:256C:006D.0001: failed probing pen v2 parameters: -71 [ 126.729226][ T27] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 126.768235][ T27] uclogic: probe of 0003:256C:006D.0001 failed with error -71 [ 126.814650][ T27] usb 1-1: USB disconnect, device number 3 [ 128.088162][ T5783] Bluetooth: hci3: hcon ffff888061768000 sent 1 < count 7 [ 128.095438][ T5783] Bluetooth: hci3: hcon ffff888061768000 sent 0 < count 14880 [ 128.113421][ T5783] Bluetooth: hci3: hcon ffff888061768000 sent 0 < count 4 [ 128.318200][ T5835] ums-usbat: probe of 2-1:0.230 failed with error -5 [ 128.341419][ T5835] usb 2-1: USB disconnect, device number 3 [ 128.604677][ T6278] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.768851][ T6281] bond_slave_0: entered promiscuous mode [ 128.774932][ T6281] bond_slave_1: entered promiscuous mode [ 128.846260][ T6281] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 128.940896][ T6281] bond1: (slave macvlan2): making interface the new active one [ 129.030757][ T6281] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 129.074979][ T6281] syz.2.92 (6281) used greatest stack depth: 19816 bytes left [ 129.395659][ T6294] syzkaller1: entered promiscuous mode [ 129.426165][ T6294] syzkaller1: entered allmulticast mode [ 129.757898][ T6300] syzkaller0: entered promiscuous mode [ 129.817014][ T6300] syzkaller0: entered allmulticast mode [ 131.567985][ T6324] netlink: 28 bytes leftover after parsing attributes in process `syz.2.105'. [ 131.597929][ T6324] netlink: 28 bytes leftover after parsing attributes in process `syz.2.105'. [ 132.931193][ T6334] syzkaller1: entered promiscuous mode [ 132.970428][ T6334] syzkaller1: entered allmulticast mode [ 133.091726][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.098743][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.844750][ T6340] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 135.094547][ T6345] netlink: 28 bytes leftover after parsing attributes in process `syz.2.114'. [ 135.119630][ T6345] netlink: 28 bytes leftover after parsing attributes in process `syz.2.114'. [ 135.637742][ T5835] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 135.870120][ T5835] usb 4-1: Using ep0 maxpacket: 32 [ 135.908861][ T5835] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 135.931533][ T5835] usb 4-1: config 0 has no interface number 0 [ 135.943376][ T5835] usb 4-1: config 0 interface 230 has no altsetting 0 [ 135.961389][ T5835] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 135.975560][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.027178][ T5835] usb 4-1: Product: syz [ 136.045408][ T5835] usb 4-1: Manufacturer: syz [ 136.084050][ T5835] usb 4-1: SerialNumber: syz [ 136.137868][ T5835] usb 4-1: config 0 descriptor?? [ 136.166936][ T5835] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 136.255591][ T5835] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 137.927613][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 138.137572][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 138.152498][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 138.164261][ T9] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 16 [ 138.187567][ T9] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 64 [ 138.247638][ T9] usb 3-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.262143][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 138.272965][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.289670][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.298029][ T9] usb 3-1: Product: syz [ 138.302536][ T9] usb 3-1: Manufacturer: syz [ 138.307354][ T9] usb 3-1: SerialNumber: syz [ 138.324920][ T6384] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 138.332927][ T6384] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 138.634296][ T9] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 138.713098][ T9] usb 3-1: USB disconnect, device number 3 [ 138.994427][ T6395] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 140.597124][ T5835] ums-usbat: probe of 4-1:0.230 failed with error -5 [ 140.647498][ T5835] usb 4-1: USB disconnect, device number 3 [ 144.379040][ T6426] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 145.731966][ T6443] –: renamed from vxcan1 (while UP) [ 146.137620][ T789] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 146.319896][ T789] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.387671][ T789] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.412753][ T789] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 146.447655][ T789] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 146.455757][ T789] usb 1-1: Manufacturer: syz [ 146.474812][ T789] usb 1-1: config 0 descriptor?? [ 146.735210][ T6453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.141'. [ 148.907000][ T789] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #200: -71 [ 148.980763][ T789] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 149.036953][ T789] uclogic 0003:256C:006D.0002: failed probing pen v2 parameters: -71 [ 149.057225][ T789] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 149.077950][ T789] uclogic: probe of 0003:256C:006D.0002 failed with error -71 [ 149.187760][ T789] usb 1-1: USB disconnect, device number 4 [ 149.530242][ T6470] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 149.608320][ T6470] syz.1.145 uses obsolete (PF_INET,SOCK_PACKET) [ 151.715619][ T6495] loop2: detected capacity change from 0 to 32768 [ 151.758105][ T6495] (syz.2.151,6495,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 151.776476][ T6495] (syz.2.151,6495,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 151.838950][ T6495] JBD2: Ignoring recovery information on journal [ 151.909014][ T6495] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 152.248583][ T28] audit: type=1800 audit(1768790171.132:24): pid=6500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.151" name="file2" dev="loop2" ino=16978 res=0 errno=0 [ 152.333944][ T27] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 152.510004][ T5771] ocfs2: Unmounting device (7,2) on (node local) [ 152.647993][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.687255][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.724471][ T27] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 152.757561][ T27] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 152.805903][ T27] usb 4-1: Manufacturer: syz [ 152.819566][ T27] usb 4-1: config 0 descriptor?? [ 153.156574][ T6512] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 153.512947][ T6517] netlink: 388 bytes leftover after parsing attributes in process `syz.0.157'. [ 153.664839][ T27] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #200: -71 [ 153.697206][ T27] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71 [ 153.726352][ T27] uclogic 0003:256C:006D.0003: failed probing pen v2 parameters: -71 [ 153.735588][ T27] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 153.748910][ T27] uclogic: probe of 0003:256C:006D.0003 failed with error -71 [ 153.778940][ T27] usb 4-1: USB disconnect, device number 4 [ 153.947888][ T5860] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 154.157597][ T5860] usb 2-1: Using ep0 maxpacket: 32 [ 154.166862][ T5860] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 154.195575][ T5860] usb 2-1: config 0 has no interface number 0 [ 154.214977][ T5860] usb 2-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 154.267601][ T5860] usb 2-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 154.278846][ T5860] usb 2-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xF2, skipping [ 154.290058][ T5860] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 154.317526][ T5860] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 154.344065][ T5860] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.382307][ T6528] capability: warning: `syz.3.161' uses 32-bit capabilities (legacy support in use) [ 154.390874][ T5860] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 154.407824][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.416090][ T5860] usb 2-1: Product: syz [ 154.426270][ T5860] usb 2-1: Manufacturer: syz [ 154.447552][ T5860] usb 2-1: SerialNumber: syz [ 154.489703][ T5860] usb 2-1: config 0 descriptor?? [ 154.505856][ T6519] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 154.523880][ T6519] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 154.581226][ T5860] microtek usb (rev 0.4.3): expecting 3 got 1 endpoints! Bailing out. [ 154.686306][ T6532] bridge0: port 3(macvlan2) entered blocking state [ 154.698982][ T6532] bridge0: port 3(macvlan2) entered disabled state [ 154.706469][ T6532] macvlan2: entered allmulticast mode [ 154.712215][ T6532] bridge0: entered allmulticast mode [ 154.721696][ T6532] macvlan2: left allmulticast mode [ 154.737496][ T6532] bridge0: left allmulticast mode [ 157.823344][ T5790] usb 2-1: USB disconnect, device number 4 [ 158.137846][ T6581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.179'. [ 158.369359][ T6586] loop2: detected capacity change from 0 to 7 [ 158.382883][ T6449] Dev loop2: unable to read RDB block 7 [ 158.392672][ T6449] loop2: unable to read partition table [ 158.401487][ T6449] loop2: partition table beyond EOD, truncated [ 158.414166][ T6586] Dev loop2: unable to read RDB block 7 [ 158.424490][ T6586] loop2: unable to read partition table [ 158.431060][ T6586] loop2: partition table beyond EOD, truncated [ 158.439683][ T6586] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 158.499653][ T5138] Dev loop2: unable to read RDB block 7 [ 158.529398][ T5138] loop2: unable to read partition table [ 158.579153][ T5138] loop2: partition table beyond EOD, truncated [ 159.948874][ T6598] use of bytesused == 0 is deprecated and will be removed in the future, [ 159.971707][ T6598] use the actual size instead. [ 160.355141][ T6614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.188'. [ 161.647775][ T6634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.196'. [ 161.687680][ T6634] hsr_slave_0: left promiscuous mode [ 161.727622][ T6634] hsr_slave_1: left promiscuous mode [ 162.427055][ T6641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.199'. [ 165.919142][ T6671] netlink: 12 bytes leftover after parsing attributes in process `syz.3.208'. [ 168.026127][ T6703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.217'. [ 168.278526][ T6706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.219'. [ 169.803430][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.226'. [ 170.054451][ T6737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.228'. [ 170.743541][ T5783] Bluetooth: Frame is too long (len 16, expected len 4) [ 171.811796][ T6769] loop1: detected capacity change from 0 to 32768 [ 171.854652][ T6769] (syz.1.235,6769,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 171.868842][ T6769] (syz.1.235,6769,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 171.905345][ T6769] JBD2: Ignoring recovery information on journal [ 171.975565][ T6769] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 171.988872][ T6773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.236'. [ 172.941668][ T5774] ocfs2: Unmounting device (7,1) on (node local) [ 173.140942][ T6780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.238'. [ 174.187562][ T788] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 174.295141][ T6804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.245'. [ 174.378501][ T788] usb 1-1: Using ep0 maxpacket: 32 [ 174.392097][ T788] usb 1-1: unable to get BOS descriptor or descriptor too short [ 174.458330][ T788] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 174.702071][ T6807] loop1: detected capacity change from 0 to 32768 [ 174.721101][ T788] usb 1-1: can't read configurations, error -71 [ 174.743214][ T6807] (syz.1.246,6807,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 174.756850][ T6807] (syz.1.246,6807,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 174.817038][ T6807] JBD2: Ignoring recovery information on journal [ 174.877938][ T6807] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 175.718813][ T5774] ocfs2: Unmounting device (7,1) on (node local) [ 175.892133][ T6816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.248'. [ 176.687574][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 176.914666][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.951364][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.987875][ T9] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 177.009800][ T9] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 177.036818][ T9] usb 2-1: Manufacturer: syz [ 177.090512][ T9] usb 2-1: config 0 descriptor?? [ 177.929059][ T9] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #200: -71 [ 177.969558][ T9] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71 [ 177.989375][ T9] uclogic 0003:256C:006D.0004: failed probing pen v2 parameters: -71 [ 178.017838][ T9] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 178.037772][ T9] uclogic: probe of 0003:256C:006D.0004 failed with error -71 [ 178.107705][ T9] usb 2-1: USB disconnect, device number 5 [ 179.937307][ T6851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.258'. [ 180.039683][ T5790] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 180.257458][ T5790] usb 4-1: Using ep0 maxpacket: 32 [ 180.326501][ T5790] usb 4-1: unable to get BOS descriptor or descriptor too short [ 180.355828][ T5790] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 180.363878][ T5790] usb 4-1: can't read configurations, error -71 [ 182.943269][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 183.210108][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.241663][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.268782][ T9] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 183.297717][ T9] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 183.310115][ T9] usb 2-1: Manufacturer: syz [ 183.348268][ T9] usb 2-1: config 0 descriptor?? [ 183.917263][ T6897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.267'. [ 184.194620][ T9] uclogic 0003:256C:006D.0005: failed retrieving string descriptor #200: -71 [ 184.216666][ T9] uclogic 0003:256C:006D.0005: failed retrieving pen parameters: -71 [ 184.235856][ T5790] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 184.247858][ T9] uclogic 0003:256C:006D.0005: failed probing pen v2 parameters: -71 [ 184.257740][ T9] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 184.265352][ T9] uclogic: probe of 0003:256C:006D.0005 failed with error -71 [ 184.293152][ T9] usb 2-1: USB disconnect, device number 6 [ 184.428122][ T5790] usb 4-1: Using ep0 maxpacket: 32 [ 184.440669][ T5790] usb 4-1: unable to get BOS descriptor or descriptor too short [ 184.453787][ T5790] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 184.463230][ T5790] usb 4-1: can't read configurations, error -71 [ 185.223283][ T6923] tmpfs: Unknown parameter 'fd' [ 185.868205][ T6931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.277'. [ 187.135082][ T6967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.287'. [ 187.277861][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.289'. [ 187.563392][ T6984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.290'. [ 188.097236][ T6989] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 189.188679][ T5860] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 189.508357][ T7019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.300'. [ 190.695922][ T7026] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 191.468513][ T5790] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 191.486664][ T7050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.310'. [ 191.679453][ T5790] usb 4-1: Using ep0 maxpacket: 32 [ 191.731031][ T5790] usb 4-1: config 0 interface 0 has no altsetting 0 [ 191.759165][ T5790] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 191.789009][ T5790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.797151][ T5790] usb 4-1: Product: syz [ 191.811039][ T5790] usb 4-1: Manufacturer: syz [ 191.823783][ T5790] usb 4-1: SerialNumber: syz [ 191.840005][ T5790] usb 4-1: config 0 descriptor?? [ 192.256369][ T5790] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 192.696491][ T5790] usb 4-1: USB disconnect, device number 9 [ 192.785833][ T7072] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 194.402539][ T5783] Bluetooth: Frame is too long (len 16, expected len 4) [ 194.592853][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.600696][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.639969][ T7123] netlink: 28 bytes leftover after parsing attributes in process `syz.2.327'. [ 195.661905][ T7123] netlink: 28 bytes leftover after parsing attributes in process `syz.2.327'. [ 195.693796][ T7125] netlink: 'syz.1.328': attribute type 7 has an invalid length. [ 197.371867][ T7160] netlink: 48 bytes leftover after parsing attributes in process `syz.2.337'. [ 199.842799][ T7180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.342'. [ 200.792470][ T7200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.348'. [ 202.377737][ T7206] netlink: 64 bytes leftover after parsing attributes in process `syz.0.349'. [ 202.834923][ T7212] netlink: 'syz.3.351': attribute type 10 has an invalid length. [ 202.845972][ T7212] bond0: (slave wlan1): Opening slave failed [ 202.865287][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.354'. [ 203.477441][ T7231] netlink: 48 bytes leftover after parsing attributes in process `syz.2.356'. [ 206.234163][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.364'. [ 208.020035][ T7265] netlink: 'syz.1.366': attribute type 15 has an invalid length. [ 208.792561][ T7276] netlink: 48 bytes leftover after parsing attributes in process `syz.0.371'. [ 209.492210][ T7284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'. [ 210.998301][ T7301] process 'syz.3.378' launched '/dev/fd/9' with NULL argv: empty string added [ 211.306861][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 211.332619][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 211.341959][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 211.351204][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 211.359263][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 211.367156][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 211.397150][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 211.438996][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 211.498320][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 211.569225][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 211.587817][ T27] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 211.636324][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 211.669215][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 211.697962][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 211.729573][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 211.747526][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 211.755001][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 211.826658][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 211.844464][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 211.866467][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.877831][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 211.885704][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 211.897482][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.937749][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 211.955819][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 211.963772][ T27] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 211.977715][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 211.983951][ T5083] Bluetooth: hci3: command 0x0406 tx timeout [ 211.990198][ T5083] Bluetooth: hci2: command 0x0406 tx timeout [ 211.996333][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 212.002969][ T27] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 212.011591][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 212.019280][ T27] usb 2-1: Manufacturer: syz [ 212.024094][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 212.033081][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 212.040862][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 212.048641][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 212.056322][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 212.064165][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 212.074154][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 212.085032][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 212.092789][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 212.100736][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 212.108861][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 212.116474][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 212.124532][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 212.132771][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 212.141649][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 212.155394][ T27] usb 2-1: config 0 descriptor?? [ 212.261079][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 212.307579][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 212.325363][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 212.345609][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 212.354104][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 212.362100][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 212.369957][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 212.381269][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 212.450110][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 212.515116][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 212.607618][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 212.692022][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 212.776635][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 212.802327][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 212.861823][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 212.890522][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 212.933272][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 212.941480][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 212.958780][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 212.966420][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 212.980622][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 212.988504][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 212.997303][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 213.005587][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 213.013491][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 213.023861][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 213.052704][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 213.068848][ T27] uclogic 0003:256C:006D.0007: failed retrieving string descriptor #200: -71 [ 213.078468][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 213.089803][ T27] uclogic 0003:256C:006D.0007: failed retrieving pen parameters: -71 [ 213.099460][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 213.108590][ T27] uclogic 0003:256C:006D.0007: failed probing pen v2 parameters: -71 [ 213.117988][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 213.125560][ T27] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 213.133581][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 213.142237][ T27] uclogic: probe of 0003:256C:006D.0007 failed with error -71 [ 213.152354][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 213.164444][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 213.175306][ T27] usb 2-1: USB disconnect, device number 8 [ 213.197980][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 213.218629][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 213.256658][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 213.286712][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 213.295052][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 213.316207][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 213.339991][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 213.368150][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 213.392073][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 213.409830][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 213.424127][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 213.439782][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 213.477481][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 213.498282][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 213.515276][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 213.530853][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 213.552483][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 213.580382][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 213.620861][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 213.657789][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 213.697967][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 213.705434][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 213.791989][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 213.811271][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 213.834518][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 213.871615][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 213.888052][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 213.900829][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 213.923023][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 213.952596][ T5860] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 213.993704][ T5860] hid-generic 0000:0000:0004.0006: hidraw0: HID v0.03 Device [syz1] on syz0 [ 214.255277][ T7331] fido_id[7331]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 214.666788][ T7339] netlink: 48 bytes leftover after parsing attributes in process `syz.3.388'. [ 216.887347][ T28] audit: type=1326 audit(1768790235.772:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7356 comm="syz.3.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0fcb9acb9 code=0x7ffc0000 [ 216.969084][ T28] audit: type=1326 audit(1768790235.812:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7356 comm="syz.3.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0fcb9acb9 code=0x7ffc0000 [ 217.071507][ T28] audit: type=1326 audit(1768790235.812:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7356 comm="syz.3.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff0fcb9acb9 code=0x7ffc0000 [ 217.172415][ T28] audit: type=1326 audit(1768790235.812:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7356 comm="syz.3.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0fcb9acb9 code=0x7ffc0000 [ 217.195098][ T28] audit: type=1326 audit(1768790235.812:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7356 comm="syz.3.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0fcb9acb9 code=0x7ffc0000 [ 217.284653][ T28] audit: type=1326 audit(1768790235.852:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7356 comm="syz.3.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff0fcb9acb9 code=0x7ffc0000 [ 217.335118][ T28] audit: type=1326 audit(1768790235.852:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7356 comm="syz.3.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0fcb9acb9 code=0x7ffc0000 [ 217.390253][ T28] audit: type=1326 audit(1768790235.852:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7356 comm="syz.3.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0fcb9acb9 code=0x7ffc0000 [ 217.470992][ T28] audit: type=1326 audit(1768790235.892:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7356 comm="syz.3.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7ff0fcb9acb9 code=0x7ffc0000 [ 217.613104][ T28] audit: type=1326 audit(1768790235.892:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7356 comm="syz.3.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0fcb9acb9 code=0x7ffc0000 [ 218.044553][ T5776] Bluetooth: hci4: sending frame failed (-49) [ 218.052210][ T52] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 219.596973][ T5860] IPVS: starting estimator thread 0... [ 219.707571][ T7388] IPVS: using max 20 ests per chain, 48000 per kthread [ 223.677546][ T27] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 223.697994][ T8] IPVS: starting estimator thread 0... [ 223.837761][ T7446] IPVS: using max 26 ests per chain, 62400 per kthread [ 223.897078][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.418'. [ 223.913643][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.983678][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.013485][ T27] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 224.079636][ T27] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 224.162607][ T27] usb 2-1: Manufacturer: syz [ 224.192291][ T27] usb 2-1: config 0 descriptor?? [ 225.043001][ T27] uclogic 0003:256C:006D.0008: failed retrieving string descriptor #200: -71 [ 225.127727][ T27] uclogic 0003:256C:006D.0008: failed retrieving pen parameters: -71 [ 225.168300][ T27] uclogic 0003:256C:006D.0008: failed probing pen v2 parameters: -71 [ 225.187497][ T27] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 225.238053][ T27] uclogic: probe of 0003:256C:006D.0008 failed with error -71 [ 225.287275][ T27] usb 2-1: USB disconnect, device number 9 [ 225.874309][ T7467] binder: 7464:7467 unknown command 1074553620 [ 225.890987][ T7466] xt_hashlimit: size too large, truncated to 1048576 [ 225.907442][ T7467] binder: 7464:7467 ioctl c0306201 200000000c80 returned -22 [ 225.962362][ T7469] –: renamed from vxcan1 (while UP) [ 226.261829][ T7474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.427'. [ 229.085319][ T7505] loop2: detected capacity change from 0 to 7 [ 229.100102][ T7505] Dev loop2: unable to read RDB block 7 [ 229.151972][ T7505] loop2: unable to read partition table [ 229.167877][ T7505] loop2: partition table beyond EOD, truncated [ 229.191696][ T7505] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 230.437467][ T8] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 230.680421][ T8] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 230.710395][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 230.724292][ T8] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 230.748580][ T8] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 230.787615][ T8] usb 2-1: Product: syz [ 230.797808][ T8] usb 2-1: Manufacturer: syz [ 230.802461][ T8] usb 2-1: SerialNumber: syz [ 230.849063][ T8] usb 2-1: config 0 descriptor?? [ 230.890355][ T8] usb 2-1: selecting invalid altsetting 0 [ 231.072882][ T7514] [ 231.075286][ T7514] ============================================ [ 231.081460][ T7514] WARNING: possible recursive locking detected [ 231.087639][ T7514] syzkaller #0 Not tainted [ 231.092073][ T7514] -------------------------------------------- [ 231.098236][ T7514] syz.1.437/7514 is trying to acquire lock: [ 231.104145][ T7514] ffff88807b13ab30 (&chip->mutex){+.+.}-{3:3}, at: snd_usb_endpoint_close+0x3c/0x4c0 [ 231.113682][ T7514] [ 231.113682][ T7514] but task is already holding lock: [ 231.121068][ T7514] ffff88807b13ab30 (&chip->mutex){+.+.}-{3:3}, at: snd_usb_endpoint_set_params+0x6d/0x2b40 [ 231.131156][ T7514] [ 231.131156][ T7514] other info that might help us debug this: [ 231.139235][ T7514] Possible unsafe locking scenario: [ 231.139235][ T7514] [ 231.146701][ T7514] CPU0 [ 231.150000][ T7514] ---- [ 231.153294][ T7514] lock(&chip->mutex); [ 231.157480][ T7514] lock(&chip->mutex); [ 231.161667][ T7514] [ 231.161667][ T7514] *** DEADLOCK *** [ 231.161667][ T7514] [ 231.169824][ T7514] May be due to missing lock nesting notation [ 231.169824][ T7514] [ 231.178159][ T7514] 3 locks held by syz.1.437/7514: [ 231.183195][ T7514] #0: ffff8880260cb4e0 (&runtime->oss.params_lock){+.+.}-{3:3}, at: snd_pcm_oss_write+0x209/0xaf0 [ 231.193932][ T7514] #1: ffff8880260cb238 (&runtime->buffer_mutex){+.+.}-{3:3}, at: snd_pcm_hw_params+0x163/0x1ce0 [ 231.204550][ T7514] #2: ffff88807b13ab30 (&chip->mutex){+.+.}-{3:3}, at: snd_usb_endpoint_set_params+0x6d/0x2b40 [ 231.215046][ T7514] [ 231.215046][ T7514] stack backtrace: [ 231.220979][ T7514] CPU: 0 PID: 7514 Comm: syz.1.437 Not tainted syzkaller #0 [ 231.228282][ T7514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 231.238451][ T7514] Call Trace: [ 231.241781][ T7514] [ 231.244740][ T7514] dump_stack_lvl+0x18c/0x250 [ 231.249445][ T7514] ? show_regs_print_info+0x20/0x20 [ 231.254665][ T7514] ? print_deadlock_bug+0x435/0x5d0 [ 231.259882][ T7514] __lock_acquire+0x5dbc/0x7d40 [ 231.264774][ T7514] ? verify_lock_unused+0x140/0x140 [ 231.270005][ T7514] lock_acquire+0x19e/0x420 [ 231.274526][ T7514] ? snd_usb_endpoint_close+0x3c/0x4c0 [ 231.280041][ T7514] ? trace_contention_end+0x39/0xe0 [ 231.285258][ T7514] ? __might_sleep+0xe0/0xe0 [ 231.289872][ T7514] ? read_lock_is_recursive+0x20/0x20 [ 231.295260][ T7514] ? wait_clear_urbs+0x184/0x390 [ 231.300226][ T7514] ? snd_usb_endpoint_sync_pending_stop+0x30/0x30 [ 231.306673][ T7514] __mutex_lock+0x136/0xcc0 [ 231.311198][ T7514] ? snd_usb_endpoint_close+0x3c/0x4c0 [ 231.316704][ T7514] ? usb_free_coherent+0x5d/0x90 [ 231.321663][ T7514] ? release_urbs+0x3fe/0x4a0 [ 231.326382][ T7514] ? snd_usb_endpoint_close+0x3c/0x4c0 [ 231.331894][ T7514] ? mutex_lock_nested+0x20/0x20 [ 231.336882][ T7514] ? snd_usb_endpoint_set_params+0x407/0x2b40 [ 231.343008][ T7514] snd_usb_endpoint_close+0x3c/0x4c0 [ 231.348340][ T7514] snd_usb_hw_params+0x1356/0x19d0 [ 231.353477][ T7514] ? snd_dma_alloc_dir_pages+0x15c/0x230 [ 231.359155][ T7514] ? snd_usb_pcm_close+0x300/0x300 [ 231.364293][ T7514] ? snd_pcm_lib_malloc_pages+0x350/0x750 [ 231.370050][ T7514] ? fixup_unreferenced_params+0x767/0xb00 [ 231.375885][ T7514] snd_pcm_hw_params+0x8a6/0x1ce0 [ 231.380951][ T7514] ? snd_pcm_hw_param_first+0x676/0xb40 [ 231.386522][ T7514] ? snd_pcm_forward+0x6d0/0x6d0 [ 231.391500][ T7514] ? snd_pcm_hw_param_near+0x3d0/0x450 [ 231.396995][ T7514] snd_pcm_oss_change_params_locked+0x2040/0x3cd0 [ 231.403457][ T7514] ? snd_pcm_oss_read2+0x3d0/0x3d0 [ 231.408591][ T7514] ? aa_file_perm+0x3e3/0xee0 [ 231.413289][ T7514] ? preempt_schedule_thunk+0x1a/0x30 [ 231.418701][ T7514] ? mutex_lock_nested+0x20/0x20 [ 231.423665][ T7514] ? aa_path_link+0xea0/0xea0 [ 231.428380][ T7514] ? wake_up_q+0xca/0x100 [ 231.432745][ T7514] snd_pcm_oss_write+0x27e/0xaf0 [ 231.437720][ T7514] ? snd_pcm_oss_read+0x8c0/0x8c0 [ 231.442772][ T7514] vfs_write+0x296/0x990 [ 231.447071][ T7514] ? file_end_write+0x250/0x250 [ 231.451969][ T7514] ? __fget_files+0x28/0x4b0 [ 231.456592][ T7514] ? __fget_files+0x28/0x4b0 [ 231.461217][ T7514] ? __fget_files+0x43d/0x4b0 [ 231.465949][ T7514] ? __fdget_pos+0x1d8/0x330 [ 231.470663][ T7514] ? ksys_write+0x75/0x260 [ 231.475121][ T7514] ksys_write+0x150/0x260 [ 231.479488][ T7514] ? __ia32_sys_read+0x90/0x90 [ 231.484274][ T7514] ? lockdep_hardirqs_on+0x98/0x150 [ 231.489500][ T7514] do_syscall_64+0x55/0xa0 [ 231.493947][ T7514] ? clear_bhb_loop+0x40/0x90 [ 231.498666][ T7514] ? clear_bhb_loop+0x40/0x90 [ 231.503369][ T7514] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 231.509293][ T7514] RIP: 0033:0x7f981b39acb9 [ 231.513735][ T7514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.533366][ T7514] RSP: 002b:00007f981c2b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 231.541805][ T7514] RAX: ffffffffffffffda RBX: 00007f981b616180 RCX: 00007f981b39acb9 [ 231.549800][ T7514] RDX: 0000000000000010 RSI: 0000200000000700 RDI: 000000000000000d [ 231.557795][ T7514] RBP: 00007f981b408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 231.565783][ T7514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.573773][ T7514] R13: 00007f981b616218 R14: 00007f981b616180 R15: 00007ffdf6601c98 [ 231.581775][ T7514] [ 231.634884][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.438'.