last executing test programs: 4m20.16763272s ago: executing program 2 (id=2561): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x188, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x158, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x49}]}]}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10c, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc00}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x0, 0x1, 0x5ac}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xfffffffffffffea8, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x19d}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe7}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4000}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x11a8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x81}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xb5}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}]}}]}, 0x188}, 0x1, 0x0, 0x0, 0x80}, 0x800) 4m19.880256289s ago: executing program 2 (id=2564): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d002103e70000000000000004"], 0x1c}], 0x1}, 0x0) 4m19.656261158s ago: executing program 2 (id=2566): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) socket$kcm(0x21, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r3, 0x0, 0x0, 0x4001c00) fsopen(&(0x7f00000000c0)='ubifs\x00', 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, &(0x7f0000000280)) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)={[&(0x7f0000000000)='.+-:\x00', &(0x7f0000000540)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x13\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\\h\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc\xdc\n\x88\xfc\xcci\xc1\xe8\xf8\x1e6&\bE\x8f\x9b\xc6\x8d0\xa7 -\xecC8O*7\xfa&\xf9\aC\xab\x03g\x06\xda\x8c)\xae\xe3\x16\x9dz\x87\xd6OZX\xa4\xee\xa7\xebe\x14Qp\x96\x00\xd0VK\xe2$i\xd4\xcb-\xd4\x82w\x13\x98\xfcW\x9d\xff\xed\xd4\x14;]\xf8\xccS\xddl\x96v\x97\x988\xa7sQ\x1aN\xbdU.\x89\\\xfa\xc2\xcd\xde', &(0x7f0000000100)='secur ty.', 0x0, 0x0]}) mq_notify(0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 4m16.855922725s ago: executing program 2 (id=2573): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x62c, 0x0, 0x18c, 0x203, 0x340, 0x19030000, 0x564, 0x2e0, 0x2e0, 0x564, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2f8, 0x340, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x60}, {0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0x4}, {0x4}, {}, {0x20}, {0x0, 0x3}, {}, {}, {0x0, 0x8}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x3}, {}, {}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfc}, {}, {0x0, 0x0, 0x0, 0x4754884}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x80, 0x0, 0x1000}, {}, {0x100}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10}]}}, @inet=@rpfilter={{0x24}, {0xe}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0x1dc, 0x224, 0x0, {}, [@common=@rt={{0x138}, {0x101, [0x484, 0x80000000], 0x6, 0x39, 0x6, [@private2, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, @mcast2, @empty, @rand_addr=' \x01\x00', @local, @local, @private0, @loopback, @empty], 0x9}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x688) 4m16.598616702s ago: executing program 2 (id=2574): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x25dfdbfe, {0x7}, [@NDA_VLAN={0x6, 0x5, 0x4}]}, 0x24}}, 0x4004840) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x16) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) io_setup(0x3c, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x5643, 0xffffff80}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000140)={0x101, 0x7ff, 0x9}, 0x10) r3 = socket$inet(0x2, 0x80000, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 4m15.710235852s ago: executing program 2 (id=2577): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x1e) keyctl$reject(0x13, 0x0, 0x7, 0x204, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x10000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="c0e2c3", 0x259584305129a66}) r4 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000080)={0x7, 0x1, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r4, 0xc04c5609, &(0x7f0000000400)=@userptr={0x6, 0x1, 0x4, 0x40, 0xf1, {}, {0x3, 0xc, 0x80, 0x4, 0x6, 0x2, "ab438f99"}, 0x3, 0x2, {0x0}, 0x800}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40080d0) r6 = syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc2c45513, &(0x7f0000002e00)={{0x8, 0x7, 0x3, 0x1ff, 'syz0\x00', 0x7f}, 0x0, [0x8, 0x8, 0x1000, 0x0, 0xb3c, 0xffffffff, 0x1000005, 0x901, 0xbbf, 0x7, 0x15b, 0x7, 0x5944, 0x9, 0x7, 0x4a7, 0x9, 0x5, 0xd, 0x3, 0x2c, 0x400, 0x40, 0x10000000, 0x6, 0x0, 0xffffffff, 0x800, 0x3, 0x3, 0x4, 0x6, 0x6, 0xfff, 0x3ff, 0x1, 0x5, 0x40000003, 0x5, 0x9, 0x7, 0x7fff, 0xffff8000, 0x80000001, 0x53f2806a, 0x20, 0x3, 0x0, 0xe, 0x4, 0x9, 0x5, 0x400, 0x3, 0x9, 0xfffff647, 0x8, 0x4, 0x5, 0x0, 0x9, 0x9, 0x5, 0x8, 0x98, 0xbe, 0x6, 0xa, 0x7, 0x80000000, 0x81, 0x10001, 0x2, 0x80000001, 0x69d, 0xb, 0x3, 0x1, 0x8, 0x9, 0x7, 0x9, 0x1, 0x3, 0x1, 0xffff, 0x6, 0x8, 0x7ff, 0x4, 0xef, 0xff, 0x6, 0x3, 0xf86, 0x589f, 0x3, 0x9, 0x895, 0xfff, 0x9, 0x89, 0x0, 0x1, 0xe0b2, 0x9, 0xfffff561, 0xe, 0x3, 0x3, 0xfffffffa, 0x3, 0x2, 0x1, 0x2ba, 0x1, 0xe, 0x0, 0xf, 0x2, 0xf2, 0x4, 0x0, 0x7, 0x2, 0x7, 0x6, 0x100]}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) bind$packet(r7, &(0x7f0000000000)={0x11, 0x3, r8, 0x1, 0x0, 0x6, @local}, 0x14) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/softnet_stat\x00') sendfile(r9, r9, &(0x7f0000000040)=0x87, 0x3) openat$vhost_vsock(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) 4m0.263644301s ago: executing program 32 (id=2577): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x1e) keyctl$reject(0x13, 0x0, 0x7, 0x204, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x10000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="c0e2c3", 0x259584305129a66}) r4 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000080)={0x7, 0x1, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r4, 0xc04c5609, &(0x7f0000000400)=@userptr={0x6, 0x1, 0x4, 0x40, 0xf1, {}, {0x3, 0xc, 0x80, 0x4, 0x6, 0x2, "ab438f99"}, 0x3, 0x2, {0x0}, 0x800}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40080d0) r6 = syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc2c45513, &(0x7f0000002e00)={{0x8, 0x7, 0x3, 0x1ff, 'syz0\x00', 0x7f}, 0x0, [0x8, 0x8, 0x1000, 0x0, 0xb3c, 0xffffffff, 0x1000005, 0x901, 0xbbf, 0x7, 0x15b, 0x7, 0x5944, 0x9, 0x7, 0x4a7, 0x9, 0x5, 0xd, 0x3, 0x2c, 0x400, 0x40, 0x10000000, 0x6, 0x0, 0xffffffff, 0x800, 0x3, 0x3, 0x4, 0x6, 0x6, 0xfff, 0x3ff, 0x1, 0x5, 0x40000003, 0x5, 0x9, 0x7, 0x7fff, 0xffff8000, 0x80000001, 0x53f2806a, 0x20, 0x3, 0x0, 0xe, 0x4, 0x9, 0x5, 0x400, 0x3, 0x9, 0xfffff647, 0x8, 0x4, 0x5, 0x0, 0x9, 0x9, 0x5, 0x8, 0x98, 0xbe, 0x6, 0xa, 0x7, 0x80000000, 0x81, 0x10001, 0x2, 0x80000001, 0x69d, 0xb, 0x3, 0x1, 0x8, 0x9, 0x7, 0x9, 0x1, 0x3, 0x1, 0xffff, 0x6, 0x8, 0x7ff, 0x4, 0xef, 0xff, 0x6, 0x3, 0xf86, 0x589f, 0x3, 0x9, 0x895, 0xfff, 0x9, 0x89, 0x0, 0x1, 0xe0b2, 0x9, 0xfffff561, 0xe, 0x3, 0x3, 0xfffffffa, 0x3, 0x2, 0x1, 0x2ba, 0x1, 0xe, 0x0, 0xf, 0x2, 0xf2, 0x4, 0x0, 0x7, 0x2, 0x7, 0x6, 0x100]}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) bind$packet(r7, &(0x7f0000000000)={0x11, 0x3, r8, 0x1, 0x0, 0x6, @local}, 0x14) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/softnet_stat\x00') sendfile(r9, r9, &(0x7f0000000040)=0x87, 0x3) openat$vhost_vsock(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) 14.579205675s ago: executing program 3 (id=3542): r0 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB], 0x48) ioctl$KDGETLED(r0, 0x4b31, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x600}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) 13.096484727s ago: executing program 3 (id=3548): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000002840)={0x400, 0x300, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, {0x4}, {}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x1}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x1}) 12.862618966s ago: executing program 3 (id=3551): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x1000, 0x0) unshare(0x6a040000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000140)=0xec62, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000040)) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000600)=0xe4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="50010000000000000000000000000000060000000000000002000000000000000600000000000000060000000000000005000000ffffffff090000000000000003000000000000000e010000000000000400000000000000000000000000000008000000000000000001000003000000040000000020000005000000", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0300000007000000000000000400000000000000000003000000000008"], 0x0, 0x0, 0x0}) sendmmsg$unix(r3, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="d28dc337bc6ddfa74798d8611a14422c7ec86c72ad60bacae32fb49bf02c808f2a88d4418bd79049409ef4c2ce", 0x2d}, {&(0x7f0000000200)="2cca8b30537c193cb811732bc7a09ea334c290906e363f66fb8834176dacea38db5225beeb10ad142f589d3c53b8ea76828b2ec963a4b0ace135c94cb9e7275a7026e1047ad4aebe93ac3d3fd70a74aeb424952e6fe59047243d63e77680fbe023f59dc79246b5f6346a9a694c0a452ef9be2ed0e3e3f623a5d8dccf59626d4e9dc31f39c57b1f00f6a6d5b147e35e96273837c9f8ccf87f56e9c2b0e14012dfcefc9d924e3e4fbcc0a9d0f150e3316199dc7cb5ae92af8c95b393219f800b9ff2443bb9", 0xc4}, {&(0x7f0000000300)="dcde1d5998e346b95283460a5f90d19e594e297cc9ed237ffff371768cd69c5cbc6fe975cf78b6ae24a774b0e4354a905586dfda59bd63f3ed9f668cb49af8cf36864a982968c05c8aa1cde6e4bde0098b4f12b3f47b21d84f719968e779b55ee6919ab968636e0e6b5839d7e5e2e8bd8505a36a6bb599e45fa55b1b5d03320a8f294a99349e1deb062e98e8608bc1dd331bc582842d21f8a00e981ca7a2e39e50a229ad7599c883c5cbd1e7442d", 0xae}, {&(0x7f0000001480)="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", 0x1000}, {&(0x7f00000003c0)="8220c5a5dcb9b2b76f9a17a440680fb0c96bbb5410e3868c31534edfe24b17aaaf66c2e6e2efbae1a1a8c4791aa15b7ee269013853989045fdcec1141981ab7c7ab4d227df8b89bc792546e925c03125fab704040e8429b33c2d4201e4bca98dc22b8a52f8ade7dbe762076bae85926c22236b7632ba5db8b3051eb19e90ee8e5ba1dbe079987b92f6c474b9d911ff4b15a8942104dbe9", 0x97}], 0x5, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [r1, r3]}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [r2, r3, r2, r2, r1, r0, r0, r3, 0xffffffffffffffff]}}], 0x5c, 0x4084}}], 0x1, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0x80, 0x0, 0x400}, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r9 = openat$sw_sync(0xffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f00000000c0)={0x6, "89698ab74a98235749a9a89924cc7208716bde2e9da33997943b7e3eafdabafb"}) syz_emit_ethernet(0x46, &(0x7f0000002e80)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d9200103afffe8000000000000000000000000000b3ff0200"/50], 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000001440)={'veth1_to_bond\x00', &(0x7f00000005c0)=@ethtool_dump={0x3e, 0x1, 0x900000a}}) r10 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r10, 0xc0185648, &(0x7f0000000100)={0x0, 0x102, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90f, 0x20, '\x00', @p_u8=&(0x7f0000000040)=0x1}}) 12.173541018s ago: executing program 3 (id=3555): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) creat(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00', 0xe5) chroot(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00') 11.984590516s ago: executing program 3 (id=3557): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@security={'security\x00', 0x44, 0x4, 0x424, 0xffffffff, 0xc8, 0x294, 0xc8, 0xffffffff, 0xffffffff, 0x35c, 0x35c, 0x35c, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private0, @mcast1, [0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x2a0], 'nr0\x00', 'veth0_vlan\x00'}, 0x203, 0xa4, 0xc8, 0x8502}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa4, 0x1cc}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:modem_device_t:s0\x00'}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@AUDIT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x480) 11.699999681s ago: executing program 3 (id=3560): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8400) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000040)="ee", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x101, @loopback, 0x8000005}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) ioprio_set$uid(0x3, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x22201) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000380)={0x6, 0x7, 'syz2\x00'}, &(0x7f00000003c0)=0x28) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x1, 0x46, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0xc102, 0x0) r6 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r6, 0xc0cc5640, &(0x7f0000000440)={0xa, @pix_mp={0x9, 0x8, 0x33565348, 0x1, 0xa, [{0x32badaa3, 0x1f}, {0x81, 0x3}, {0x100000, 0x9}, {0x6, 0x3dc}, {0x8000, 0x5}, {0x9, 0x9}, {0x6, 0x3}, {0x1, 0x6}], 0x3, 0x9, 0x6, 0x0, 0x3}}) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x5, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000300)="4b8d7bcda0", 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x26c, 0x114, 0x11, 0x148, 0x0, 0x10, 0x1d8, 0x2a8, 0x2a8, 0x1d8, 0x2a8, 0xac, 0x0, {[{{@uncond, 0x10, 0xcc, 0x114, 0x1c, {}, [@common=@ttl={{0x24}, {0x1, 0x3}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x100, {0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x10}, 'bond0\x00', {0xc0000000}}}}, {{@uncond, 0x0, 0x9c, 0xc4, 0x0, {}, [@common=@addrtype={{0x2c}, {0x854, 0x180, 0x1, 0x3}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3}, {0xffffffffffffffff, 0x1}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x2c8) 11.085489092s ago: executing program 33 (id=3560): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8400) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000040)="ee", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x101, @loopback, 0x8000005}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) ioprio_set$uid(0x3, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x22201) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000380)={0x6, 0x7, 'syz2\x00'}, &(0x7f00000003c0)=0x28) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x1, 0x46, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0xc102, 0x0) r6 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r6, 0xc0cc5640, &(0x7f0000000440)={0xa, @pix_mp={0x9, 0x8, 0x33565348, 0x1, 0xa, [{0x32badaa3, 0x1f}, {0x81, 0x3}, {0x100000, 0x9}, {0x6, 0x3dc}, {0x8000, 0x5}, {0x9, 0x9}, {0x6, 0x3}, {0x1, 0x6}], 0x3, 0x9, 0x6, 0x0, 0x3}}) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x5, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000300)="4b8d7bcda0", 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x26c, 0x114, 0x11, 0x148, 0x0, 0x10, 0x1d8, 0x2a8, 0x2a8, 0x1d8, 0x2a8, 0xac, 0x0, {[{{@uncond, 0x10, 0xcc, 0x114, 0x1c, {}, [@common=@ttl={{0x24}, {0x1, 0x3}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x100, {0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x10}, 'bond0\x00', {0xc0000000}}}}, {{@uncond, 0x0, 0x9c, 0xc4, 0x0, {}, [@common=@addrtype={{0x2c}, {0x854, 0x180, 0x1, 0x3}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3}, {0xffffffffffffffff, 0x1}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x2c8) 8.682159348s ago: executing program 5 (id=3566): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8400) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x101, @loopback, 0x8000005}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) ioprio_set$uid(0x3, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x22201) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000380)={0x6, 0x7, 'syz2\x00'}, &(0x7f00000003c0)=0x28) r6 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x7d4b, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x2def, 0x1, 0x46, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0xc102, 0x0) r9 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r9, 0xc0cc5640, &(0x7f0000000440)={0xa, @pix_mp={0x9, 0x8, 0x33565348, 0x1, 0xa, [{0x32badaa3, 0x1f}, {0x81, 0x3}, {0x100000, 0x9}, {0x6, 0x3dc}, {0x8000, 0x5}, {0x9, 0x9}, {0x6, 0x3}, {0x1, 0x6}], 0x3, 0x9, 0x6, 0x0, 0x3}}) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x5, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000300)="4b8d7bcda0", 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x26c, 0x114, 0x11, 0x148, 0x0, 0x10, 0x1d8, 0x2a8, 0x2a8, 0x1d8, 0x2a8, 0xac, 0x0, {[{{@uncond, 0x10, 0xcc, 0x114, 0x1c, {}, [@common=@ttl={{0x24}, {0x1, 0x3}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x100, {0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x10}, 'bond0\x00', {0xc0000000}}}}, {{@uncond, 0x0, 0x9c, 0xc4, 0x0, {}, [@common=@addrtype={{0x2c}, {0x854, 0x180, 0x1, 0x3}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3}, {0xffffffffffffffff, 0x1}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x2c8) 8.564244023s ago: executing program 1 (id=3567): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8400) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x101, @loopback, 0x8000005}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) ioprio_set$uid(0x3, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x22201) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000380)={0x6, 0x7, 'syz2\x00'}, &(0x7f00000003c0)=0x28) r6 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x7d4b, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x2def, 0x1, 0x46, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0xc102, 0x0) r9 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r9, 0xc0cc5640, &(0x7f0000000440)={0xa, @pix_mp={0x9, 0x8, 0x33565348, 0x1, 0xa, [{0x32badaa3, 0x1f}, {0x81, 0x3}, {0x100000, 0x9}, {0x6, 0x3dc}, {0x8000, 0x5}, {0x9, 0x9}, {0x6, 0x3}, {0x1, 0x6}], 0x3, 0x9, 0x6, 0x0, 0x3}}) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x5, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000300)="4b8d7bcda0", 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x26c, 0x114, 0x11, 0x148, 0x0, 0x10, 0x1d8, 0x2a8, 0x2a8, 0x1d8, 0x2a8, 0xac, 0x0, {[{{@uncond, 0x10, 0xcc, 0x114, 0x1c, {}, [@common=@ttl={{0x24}, {0x1, 0x3}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x100, {0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x10}, 'bond0\x00', {0xc0000000}}}}, {{@uncond, 0x0, 0x9c, 0xc4, 0x0, {}, [@common=@addrtype={{0x2c}, {0x854, 0x180, 0x1, 0x3}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3}, {0xffffffffffffffff, 0x1}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x2c8) 6.56382756s ago: executing program 5 (id=3571): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async, rerun: 32) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) remap_file_pages(&(0x7f000057a000/0x1000)=nil, 0x1000, 0x0, 0x3fe, 0x1c0000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async, rerun: 64) r4 = mq_open(&(0x7f000084dff0)='z\xbf\x17', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x101}) (async, rerun: 64) syz_io_uring_setup(0x52a7, &(0x7f0000001600)={0x0, 0x3f87, 0x2, 0x7fffd, 0xea}, &(0x7f0000000100), &(0x7f0000001180)) (async) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000280)) (async) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000040)=0x1) r6 = dup2(r5, r5) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x5) (async) read$FUSE(r6, &(0x7f0000002b40)={0x2020}, 0x2020) (async, rerun: 64) write$UHID_INPUT(r6, &(0x7f0000004b80)={0x8, {"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", 0x1000}}, 0x1006) (async, rerun: 64) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000001200)=@filter={'filter\x00', 0xe, 0x4, 0x37c, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@ip={@remote, @rand_addr=0x64010101, 0xff000000, 0x0, 'team0\x00', 'geneve0\x00', {0xff}, {}, 0x4, 0x1, 0x35}, 0x0, 0xdc, 0x110, 0x0, {}, [@common=@addrtype={{0x2c}, {0x1001, 0x25, 0x1, 0x1}}, @common=@set={{0x40}, {{0x4, [0x2, 0x2, 0x0, 0x4, 0x0, 0x3], 0x0, 0x1}}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0x2, 0x4, 0x5}, {0xffffffffffffffff, 0x4, 0x5}, {0x0, 0x2}, 0x4, 0x9}}}, {{@ip={@remote, @private=0xa010101, 0xff, 0xff0000ff, 'xfrm0\x00', 'veth1_macvtap\x00', {}, {}, 0x21, 0x3, 0x2}, 0x0, 0xc0, 0xe4, 0x0, {}, [@common=@ttl={{0x24}, {0x2, 0x1}}, @common=@ah={{0x2c}, {[0xe, 0x4]}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}, {{@ip={@rand_addr=0x64010102, @loopback, 0xff0000ff, 0xff000000, 'nr0\x00', 'syzkaller1\x00', {0xff}, {}, 0x33, 0x1, 0x61}, 0x0, 0x94, 0xf4, 0x0, {}, [@common=@icmp={{0x24}, {0x3, "0f17"}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x4, 0x2, 0x7, 0x2, 0x6, 0x7], 0x5, 0x6}, {0x2, [0x4, 0x4, 0x2, 0x2, 0x2, 0xf], 0x5, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3d8) (async) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000140)=""/4096, 0x1000, 0x0, 0x0) 6.338417271s ago: executing program 1 (id=3574): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) 6.071251409s ago: executing program 1 (id=3576): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000980)=[{{&(0x7f0000000200)=@sco={0x1f, @none}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/189, 0xbd}, {&(0x7f0000000340)=""/97, 0x61}], 0x2, &(0x7f0000000400)=""/96, 0x60}, 0x80}, {{&(0x7f00000004c0)=@caif=@util, 0x80, &(0x7f0000000700)=[{&(0x7f0000000a00)=""/150, 0x96}, {&(0x7f0000000600)=""/49, 0x31}, {&(0x7f0000000640)=""/181, 0xb5}], 0x3}, 0x5}, {{&(0x7f0000000740)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000840)=[{&(0x7f00000007c0)=""/82, 0x52}], 0x1, &(0x7f0000000880)=""/193, 0xc1}}], 0x3, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xe9) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r7 = fcntl$dupfd(r6, 0x0, r6) write$binfmt_script(r7, &(0x7f0000000100), 0xfffffd9d) write$binfmt_script(r7, &(0x7f0000001b00), 0xfffffd9d) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x2, 0x101, 0x5, 0x5, 0xfffb, 0x8001, 0x4, {0x0, @in6={{0xa, 0x4e20, 0x7, @loopback, 0x4}}, 0x20000000, 0xf4, 0x9, 0x0, 0x4}}, &(0x7f00000001c0)=0xb0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r4, r3, 0x0, 0x20000023893) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap(&(0x7f00002ae000/0x4000)=nil, 0x4000, 0x2000000, 0x12, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix={0x40, 0x9, 0x32315559, 0xc, 0x21b0, 0x4, 0x1, 0x925f, 0x0, 0x8, 0x1, 0x7}}) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) 5.984553577s ago: executing program 4 (id=3577): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socket$rxrpc(0x21, 0x2, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce010203010902"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="038000000000000024ef12800c0001006d6163766c616e00140002800800390008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 5.850627196s ago: executing program 0 (id=3579): socket(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0) syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) socket$inet_smc(0x2b, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) socket$inet6_tcp(0xa, 0x1, 0x0) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x1) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc010643a, &(0x7f0000000000)={0x20000000, 0x0, 0x9}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xd59ce65ac87a33de, 0x84}}}, 0xc0}}, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f00000002c0), &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000340)="d26e88f0c775e48d623ac0db8f697bae8f194d9bcbb186c4d55eaf6fb777e4bc3cf936aef12a6af8ed815ca69383fc0afa045402a00a40eeba1ed626e2252217b2bbeaca9d72a086a1ccf858753f7d", 0x4f, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r4, r4, r3}, 0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={'hmac(sha256-avx2)\x00'}}) r5 = getpid() syz_pidfd_open(r5, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x408d1}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x20b173, 0x2) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/reserved_size', 0x149a82, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0x1}}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1300000010000000001500000000000004000000", @ANYRES32, @ANYBLOB="0000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd\x00') syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x40, 0xf, 0xea, 0x8, 0x1397, 0xbd, 0xd254, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x8c, 0x58, 0x73, 0x0, [], [{{0x9, 0x5, 0x1}}]}}]}}]}}, 0x0) readlinkat(r7, &(0x7f0000000040)='./file1\x00', &(0x7f00000021c0)=""/102372, 0x18fe4) 5.461772788s ago: executing program 5 (id=3580): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8400) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x101, @loopback, 0x8000005}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) ioprio_set$uid(0x3, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x22201) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000380)={0x6, 0x7, 'syz2\x00'}, &(0x7f00000003c0)=0x28) r6 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x7d4b, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x2def, 0x1, 0x46, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0xc102, 0x0) r9 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r9, 0xc0cc5640, &(0x7f0000000440)={0xa, @pix_mp={0x9, 0x8, 0x33565348, 0x1, 0xa, [{0x32badaa3, 0x1f}, {0x81, 0x3}, {0x100000, 0x9}, {0x6, 0x3dc}, {0x8000, 0x5}, {0x9, 0x9}, {0x6, 0x3}, {0x1, 0x6}], 0x3, 0x9, 0x6, 0x0, 0x3}}) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x5, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000300)="4b8d7bcda0", 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x26c, 0x114, 0x11, 0x148, 0x0, 0x10, 0x1d8, 0x2a8, 0x2a8, 0x1d8, 0x2a8, 0xac, 0x0, {[{{@uncond, 0x10, 0xcc, 0x114, 0x1c, {}, [@common=@ttl={{0x24}, {0x1, 0x3}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x100, {0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x10}, 'bond0\x00', {0xc0000000}}}}, {{@uncond, 0x0, 0x9c, 0xc4, 0x0, {}, [@common=@addrtype={{0x2c}, {0x854, 0x180, 0x1, 0x3}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3}, {0xffffffffffffffff, 0x1}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x2c8) 4.276305987s ago: executing program 4 (id=3581): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x62c, 0x0, 0x18c, 0x203, 0x340, 0x19030000, 0x564, 0x2e0, 0x2e0, 0x564, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2f8, 0x340, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x60}, {0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0x4}, {0x4}, {}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x8}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x3}, {}, {}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfc}, {}, {0x0, 0x0, 0x0, 0x4754884}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x80, 0x0, 0x1000}, {}, {0x100}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10}]}}, @inet=@rpfilter={{0x24}, {0xe}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0x1dc, 0x224, 0x0, {}, [@common=@rt={{0x138}, {0x101, [0x484, 0x80000000], 0x6, 0x39, 0x6, [@private2, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, @mcast2, @empty, @rand_addr=' \x01\x00', @local, @local, @private0, @loopback, @empty], 0x9}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x688) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000070000000080a01010000000000000000020000000900010073797a30000000000900020073797a32000000002c00058008000140000000000800024000000000080001400000000608000140000000f9080001400000005c080009"], 0xc4}}, 0x0) 3.99409973s ago: executing program 4 (id=3582): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x6c}, 0x0, @in6=@mcast1, 0x0, 0x2}, {{@in=@remote, 0x0, 0x2b}, 0x8, @in6=@private1, 0x0, 0x5}]}]}, 0x23c}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xb3, 0x93, 0x81, 0x8, 0xb48, 0x1003, 0x7b54, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xb7, 0xfd, 0x27}}]}}]}}, 0x0) 3.774798652s ago: executing program 5 (id=3583): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4c01000010000100000000000000001a00000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000004000000000000000000000000000000000000000080000004000000000000000000004000000000000000000000000000000000000000000000000025bd700000000000020000010000000008001f0004000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="e3"], 0x14c}}, 0x4810) 3.498012118s ago: executing program 5 (id=3584): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r2, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x1, 0x4, 0x13, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xc}, 0x1, 0x60, 0x64, 0x10000}}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000100)={0x1, 0x1, 0xf8, r3, 0x5}, 0xc) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 64) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async, rerun: 64) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[{0xc, 0x101, 0x3}, {0xc, 0x110, 0x1}], 0x18}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, r4, 0x0) 3.090433301s ago: executing program 0 (id=3585): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) 2.943500016s ago: executing program 1 (id=3586): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000200000000000000a20000000000a01040000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000038000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000000c000494080002401ace24d114000000110001"], 0xc0}}, 0x0) 2.902803s ago: executing program 0 (id=3587): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="617700000000000095"], &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x301}, 0x94) 2.764246259s ago: executing program 0 (id=3588): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020) writev(r0, &(0x7f0000000280)=[{&(0x7f0000002080)='T01\n', 0x4}, {&(0x7f0000000500)="3139ead9afeed1fcd5c9a3bd2213ed38912c2fbcf4ad4db659fb38bddbefaaff73cd7e276ad17a9bb66a2d43daeb98a2", 0x30}], 0x2) syz_emit_ethernet(0x92, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x5c, 0x2c, 0x0, @remote, @local, {[@srh={0xff, 0x8, 0x4, 0x4, 0x0, 0x20, 0x1, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, @remote]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0x4000}}}}}}}, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={0x0}) dup3(r1, r2, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000000809000000000000000001090224000100003000090400000203000200092100010001220b00090581032000000007"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000000)={0x0, 0x33524742, 0x2, @stepwise={0x3e57ecdd, 0x6, 0x2a3, 0x1fd, 0x5, 0x2}}) syz_usb_control_io$hid(r3, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220b000000a1"], 0x0}, 0x0) 2.33901507s ago: executing program 4 (id=3589): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=@ipv6_newnexthop={0x18, 0x68, 0x1, 0x0, 0x25dbdbfe, {0x2, 0x0, 0x0, 0x0, 0x25}}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x4008840) chmod(&(0x7f0000000080)='./file0\x00', 0x104) umount2(&(0x7f0000000580)='./file0\x00', 0x2) syz_fuse_handle_req(r2, &(0x7f0000006140)="e0332f8f5747b9f778142cc174a9b5f0244b78bb6346cb5fc9135b8220090ee698fddc241870359d32327f299718466d88c89e68097036bb35abfe03e3c02234dcdb2c7d1209c657485ca1aa3f2fb80e71397b80fca6f3cf2367fb19eb95e5b4a0170063374645d9e020099ffd7def3d94cd29412b3d7b7a47bc70121be848cfcecea78d41a93622b134bd06e84dec07a9e5abc29cb02d5b9091e748cffacf48352628822bab7b24a17bdf4b3f3bd9fb17793496aa6490da3f58039ce5b40745dd63f82d93bed80b50ca5742d67d39029a98db95c9392e2d5fd9a35bad30cfe98682b5a069738a12c3cfd25949106cfc839202fd21c2b28e44be73280d5037351ead2dd1c277d9cc9088c6b14365eb0937ea9685f6b26232293803260f2c8cfe176b55df304bc2865b8f52581afc4beed445ae8cc405cb7bcc51103aef812c41437c5b070a3591ad0964677f4f9017bb300727dfab009056bee3671a9694be2e2f2173fcc06ceba5aed0d93a3d7cd88365c5c354788efcc705e90d572e34e9e566fc206a8167970ecb9cbc43f4d9de4d43688582b6600dfcfc7379c831e756a45835647bd87879a3e3942c61b9ea2c2af35d49a4caa9a109b0beb972996ff8924ea371e15dc48efd12b1203a7f1fe354977fcf9e4ee2c8f210387e551ddb55e5f67ee6bb9bc8772649693b0adf24606e8ccc59f020834d8cbfcadfa1770549fe464dfc412308fbaee8d30bd20c002794bfb923bac6b490841248d12ad9a0e54d1d96e3aff5dc4930a6c8b7c75264a46af7a6339725fb84e0363463ebaaaf58d6b9309ae7c87a8df8c68d2487d684011de1fa7645f3f48cf3bb61bee8bcace2f8ef5f967f2765f8086aeaa5dcc34c84e379a7ddd6438cccb5b8098dfbffffffffffffeadbc4ad2b2ef98412a46f74a171ad056429dbb723cdb9ca9f9f03170dba2870e5988b7cb755599d1eb8f7eaf5c8ded4b56022cb479d0bdfae18f69f9ecc42f4c181ea10838229ba5db7f088ad8d5f77e49c1fd93ed6b983c43b23c7eeb1233f0c114885057a27cd3f67a309e3fecba241836bc92308b830b10b04af6c9595b44e859b9ca7ef079e151fdd500060787be3a7a5b3e23b06ec70f087134504f8b8e7b6799ebfe14f698ba7a813a380e6f92cace9230aa8094a2465f7224e2becad469d0aaf0e48b0098eacfb17abdb69bb2ebba97a09d2b739b532d70db91fcb0fcb38bccdc01d7c8113024ea8b619e385e58d31899721416e10b408504a9c4fcf870d21051227440a616cf62f6637b62eceaee09029f88009be02269cb5e5ed090c6f5e6c652c31214aef301bd23ec2504f90991cd27539c1b8b54db51825e951d076cd0e70f56de4b91894ce22049205483a0fe7d7886b36118bebd96d138980e26604b6e70a7275c6b81501143119a8c2c271558202eda196704ef9ae3c33301e1afbe56d069ce4926bf531d960f3df58192f3da558adc169d48d39e24e04e95c406b34b1f4ed2726ef0f6a67dd84c75636984191d019cebfa883fdf99affcdb4c874614a5312455403895891daf7469d6721583ccd1290ab05b14516f22965fc52c4a528f1a5c20cc133fea279d9efc991ec4d51d2654daceda234f6d3b0c635db697aba3eeaf8356319adba42428266ac09a6e6495ca8f60c1c4e052068511696296e88ef86a591948627ba97df634e0063eb5f208df00a069b1213c29e58cf76f591253d60de9d7c01d29992ccc728140299c429fec0df9d90f83fa2467ce00de83b16d10c7edb80ff8d4b1b19eea9bd1e2783a0d41215c9cf23bc3ca1ff414e3f29aadba00c5a8d5b44c28c10e99140e5428278e54bfd880a93fd1b54b560422ab2bfcf120a7902373b6442c6e9867b19aa0a6b77b1634ab6fd1c8a1d90d99ebb9ebcb89d593562b266fbc53c40501f9298690283c45059b3f6ee278e46cb3904c947446c28af8855b2a68e6e0c0da205a6e12fdd15b393d579039b31c1a54230ac2ea13cf1f5540046b4dcccdd731fff7323c4880e5d2d8668d8a7f08920715c17ef9652eb55f224c82a6fdb970dbf1032403f283bd868a23f4785a6ab9c0bcd2308dba1a1f258ae512cf64784e501008db366ab7093a6cc4b6ee86154d44a1a15c10834602dd5ccf730f6d1142ac19d113496dbcb80021cb5733924265d082a8453b5c21e0245e4a2627e8df090da6a129ee49c58c1a7437369acdee15f5e4e5638f05d9f6391572d9890219def702a013a2b05239664dba44feec2a9508a3200b47de03e6a784bca2f3633df534af33da0a95a34ca845b61a22ff55a5a4c04ff9e06e7162f458a8c56e106e75ffb76a921f4057dd73d5f3801aa78ca4c78d6b79bce560404c2fe3d57876287f73e84c27c486ffb997951f9e0b3aa81a5e7804ac7360add11e7851842d0ed8df041c999e50226fef006373bbb53d5d8e9d1653924e60234fd0b6645b821746f3d88591ff66e294e8e958ca425ddbc7d604f7cbbcb9d5fe0d4ad53878eb16bc801def1005e1eb12a6d4924d2179948e7aa542f2600ba3c6c600629d64c529c7326c1f38aa4e1a6cc259e58f86400d65d67856c8f4fffc33ad4c279dc05367307f562f8127f37b03c3cf38a97cfde0c02aad8ac40d347a9e0a496f227c068dc6c666fb2b6a18990f607399b0707d135752d93739e1840b5b4c125c81eeeb318869b408f87778451e49f3ad988a8aa97672989ad367833ff7e7f0e79c37ac794fe466623e122127fb94ebbc01bc775183b26b2dc407b1aa1a55d4ce04dbe1df4fba0377fea4c4bfa5a37c4dd733fd116b9c7f50b11dd512ad68646b9ddca295fe27bee78476901fbb5c8d2856ae0e9e21ab26e3587c1325f1fa28edb4081f2ba309d5fc39f7f54abbd0d5a152c2f7e3a8b3a5ef6e097b109061c91124f41f33055a7bb86706629f614d40346715cf2fe387ef4e4fc6646839824d3ef85eeac85bc5e681320f6fa7057e0a10de8c4678b48510f77b91bb397dd1209eaba8ea1f237c348e9e0d7af1229e2c04b6560e48e3a7491f3066b63a8923becdcfd8594c1c55098a51283b599765b049831cacd9478e5e996c778d524b476f6677218c94886d7548be7617e5796e35bb3c9b13d70e4897867d85f0350e9329985f051fb556b861aef7dead54e6b29b9ad837cb4774f47a5371ef034612aa0c151345546b876b53e9f2c06e3ce0113e67eba8842f4ac5b51a61315bf050078c710dcf14371d9593730b1d0302ef999f488bbf42b7360171da98ad68932bda4937358fd1d0c2bcd04f7dbe2beaffa0d53cccda316cb19270cf4aa56695ef3203b49fe92d1623cc1d714da6b8f94112db1781562ab2ae50bda23debd55da440434299c992f2f8c264310d6d8ccdd042737db0253d6889d8bf36fe99a131b73300c9798b8fd58b5fc681b97e71230cd3094e441fe5cf1294bbc28f41146f06e39d5e19e673dd489dbddfc16fe281160a8008e375025cbf25e84945f2f0a5ffb2cd58273328ea9d7533b2f0861eff95823cea18dc1877183fefab808bda0890f91f1d79b36953b138fd62caea3411900647a4afadfecade2ff6274175f06614d108daaf9821c413a137e33c826957953bb39e2d852097f978c3577abcb71d68b45794247d8e82614979708f6d6d0e469828206b22913d6d320d815d42c0d943640c63196f703f946089f535eac511e26c6a5a529e875eb15aaf65fd50dcbaf37a009f2f9081cdbc744cf7aa2336913e89f1961581ad4bb6aeb1d23a787e2d3f99639871df5842c30581263d5139128f0a3f37ef48bb636d7aae06581de6baa55a12019d3ed831950915fdc1eee819dd01047bda606f2852699529718c99606246a92bb1dd9435d8f3a48646c0e423441bc783be358c0c91e6846419b6c0a81354500cb2721834dc11ba40c3bbe5717e5142922a168ca0e20fc269ea584c7f68ff7cced62c4277385368b4ad596b79c45a9c4575c37f300cab37a5693cb777fabed412934d3a77505b17cb2628119ddff45f3fcbffb50386eb9cfb6f82b37fa852ad4b65bf8e2898b11bf051cb7fb0fa81cbf81b9ceebb05498aeb2691eb15297edd682976d5a4f444cdaa82f063bc4482c28c4e6257c7cf3e5ee5a502c6527b77b12725e7526ff896ee2f8066536dce04d63072a34c19d533d4dbdb93e7185482cbf7510c5eef2f8aebebad011727cd8061a367b7e1868252bb43d9a74c9c6a10539e357d5367fac69a9296fe5a79a2e5b45950ff462e0e882aa32ff7f29b5644e5311f3e0b076c58683de29ad9dd8b2c92a41ca8313ac997e44981e82aec550bbf6c88adf3d54e9fdf93d9dce95289e9086043d888f19d209cbea79f8f5b2c81b2c3889eae1cb5305e282b883c4cfa3798eceeabb442a74ff6a8470020a296ef01d8e32553663c844e67e5a3a44375f0074ce9547a6c489ee86d7652219491f35c6b904d51a26c3d2cc77d8ff97050dd0d0aed4a1ecf1db7ac48673a1dcc70ac16f709dcf4b90148aede5302111ceaa3a81c49b724cfa206283b62513f96c1da77efafe2d2d08a5f391ab690b5d974ceed2e95e85b1039def0e94c79cc0aa1de1f8133e985adfadf4a657710487b265bb6692fd2b91a06ac98d50b052b8a13168e2638b93209238fbe67f4590a81a2cdbcc479ca9178720a6ec05bc9457f27ad2e2fd2f4e9c643ef85b6287a01f7fd597799cce7d6464ed3c95110733d4ba92314ba3dd81e51f541a6e37f8bb14376e41560f9049b4ff349a467defc205f915a345b5f06d090645180ca642c719f03e9813bff7fd635660efe38b022130d42f2cedd792bcba2bfb14385c6d1cbe5ff2e38c22f1f8d5e4d93d296042507e43f24ff904827b16f2a3572d26078d7fdb0cfdbe2e6bee07b94ae441e510681c96f97ef0ddbd7efbd80ce0689f6e2022a189dd2937d3eadd82a154a5fac91b5ef48523706957b8d5f55077973e9a036009d745a6df39ba154dc59c4ef784d62b3f2d782dc508242a1b0e4cc294b6e62e98ef946f0d984c3174cf86b8a0beb615f046ec50dd0c8a9c0f36df60bd162f1130f894085e7c47b6c28ff336f5d75166c1840e7ad07204fc10ce976505f6aece0316d8c65b973f61cea2fe4c6db722717985c25249f041c07a86b878702a8c9ab7c33fe41039041aa38489b02a28f18d69ab34619e9e35514c54592c8059984ace64b5302b5f22d68c35c7ffb23c63ce877a1e1b160dd2c329eabcc0e1e3072021bd811de3c0c7a68af20ddb9e2912b7eecc2a8cf083a252d0fe31629b20559f7b976e4d8625644385c692b8cdc2886a42d750962d0dee10a1546ecb7ef961216cc456d2450a44aab07014fe0be076ca6bcb46b644af844b2ad8b3817f1895a5d579af3dc937541f4b7e9203e7a7af534b406d8f6e3bc555d767603122ab1c4e62de19d6af63be8e39fe45732859d6d92e11f1a847f7d62764b6364aa7f95f03cc7deba467da5be71657ae50ff6bf93c51efb7d19ac9887e92fe5f3c9d545209eff307c9e02073bd3404827e148aa63c135ed668589bdfec38cb47716201a9d02f1b03993f89e96b33b32e52ddffb0580dac45422ba7a3fef76e519a3dc8d12eac60c2d2f8c4303aafa3e80135c403360d51c9cdeba3ffb31e664302f587e0e983ede7f9b2bfe2bc64bd5029cfa88445e043e08f3e9affee25e980e75d2664738726e3d2eade7dce0ece78a514bbbe5a54c121374d079e3b05996052d66889742232b73e950e1a9892e7352c9e546a8cfb48332d2b2be6327208ca51dc2869a562581947f62b0d5bfb3e0911d4854f822d6738b4deb195840d2bbae0b074b8d1e1010c24ec00052dce7d259e3044aab1a99d261fb3b49cf09dfc85473f94db06d49e202ca12182283d48144f8389a5301679901600bf8130d36315b277a99204b85a1598f84bd2d4c4893108f6717bf44234181467d6eeee61e1823268b5c60bf04d0e13e429f411b51adfca20ff1a1b1eee203d59b03da1643c3e9fc474a91470116c6c5275542adb10f3adae2ae87e88b93f334e0ceb6216fc081e8d84d8b0a503196dc50599b22b89b807627b427a815aea0dbca69e5fb215ee996395d8a21a1c67ac295be33c6517504e1f00f579f8c484873cc670b5b9e787b1c30ca1f0b25f8bb8f4bde3b3f4fa730c292cbf97b25068ba9c65f78c555d5f75d52a57958d7111e824f3afa16484f625abf62afc80654c36fd9f8284466422fb18e08274e8febc719d45b784974d50d187ad2349429af3f7930252a4d45997762e9d5f5493d408ca144532aa89aa3d43c46951dafb8f81794e2e9679ce238cfe86e112f4f046d87feec3be04461032819d62f217faa71fa9dc6da8861015567d1f7309090e25b7015dcc6d72a5e7ba53296ab1bc72467ac50831628cf5238155aed3fb189a8b527ebd38771e16454fe51e3edde55cea454414690491207c23f6cf33aaeeda432de2d1ede04e039a16245e66cce6f4e4ea534f290f02a2a81a46d6ffea7967dfbe37461f83d472091156594852823392efc953f4ac099d74e2d0328d9f47bd952352981a34055acd0273309484ab56afa85ff0c22fb53ac5d7cc8e346b4c2f38a4e2451738146b7b90c14f826c7dbc1b2be79d83772a8d629f2dfaf15286a15be1ea22a05d4ee3de6a6bfb7e208dbbcc88e77baac940d6438aeeb77c3a32db08b46e79545b65f7f3c1bd433092bc9116668c338ab35c01cb5871167868c6b61bd4c0ca5f96e5ce2465da06c4a320839f3bb7c0dffd40d5bb9a32fcbc6f691787de7211da062616272c77c62ac83e4cb29fb954ab27d9009877b79be54acd336bfe2a6e087abaab004743f5ea4ec8ddfb8086920e8e458a413adb98077a3cf860513cc8a453eb129556c871be7e7232a6130c4332819ad17b289fdb31f8f8854dffb4cfeca6d792567b444c750820a2a8a2e0f93779e61a4966650909369fc8bd5bd2bad4ff95cc8a14f6cd83ae6411b4bfe1a9b5cdf1fcf32c54cef1731edc47d41fa581376b25006fc859b98805d70a157e501a2cb2ab425340965213adfecdb5addb2b4b2ec5cc6935e4e279bb98283fb20dfcd8a2c91aefda9dc5a57bba4d8803d1eb0f4ba9529de01e39c2aa60a91267c31d036a3f669b9377661837f58c6950fdf38986ea13ff5e9c4d966bf999002da1a854d54aa225b259d91eb88425328e7d13b06dea321a151a8dfc44755214da97168e8acf027d66b7fff45ded94fcde53ff80342d4595644549c4ed827225596e2b30480e94eb049b6cd718fe8424d044bb5098e0206047ddb81755e3cb92131dd47ec754b64c4b78f663e364cf8a74cdd9857c81316dc4ccd5f02a84b310abfbc9d6a23ee6d1eaf6b8fc1544cfeb06002c8a40fb0e49859d2073a7b1cb112713518ad5e007d0a256f901469bfa5cae98841f877faeb584d41bfe695da72ca5700ae085f39c99f769502ea9f43c0b84ca4611441d5adb3e5d0a426297e535258748169cad487f97d171c0630642943508206ce648aad2971297f3d4037d73e5fbc73460ca7401b7dbd7807273ae077a81fd0d4bc90b6068e3ec95afcfeab16619306fb23942a4308e8253b35f4912df392dfc5daf35dd842a5a1f78fc294cbdbd504056f0c7779121b5b3db7461e437347452476f3b0bb22e63aa23cb9d3e797c6c95513058d8fb2c27864ac0e1f5001c988e29c79bfa4236c7be41dee5561d825c1f0fbebc0c06cc4712e88ad5efd94f4eb4e93794af42a9752a2ebc57dc2f3881c75bbb23ad25b69619f9f5b07fe114ba291d2b5b4c1c175e1aa3ee3eda55e6126b3ad1e613bf8e0bbac727b879e7796fa0ad100893677a18b53f5eb31db43a97370d3749afa92fd0291fa96b05daa6beb43b9c1c11d9515976976d1cc1e44f35d317299ceb68ea2545f2a2b92b4e1046f6f92c33aae6995593189bb2611576599fd765b8e6fe2e88674ffd57ee8252287b1904d622c36a502db45c72b0d5fc3d983cc44bc955eb43911404667a4ab147d72b69ff2514dfb820ad75758e85df88499cea94ed658b4c1c2f49fe2bbb8d2dd97f844a6df289296cfb9cd5bc8d17aa235e2c4501b1422b25acd6dbc3a91d03904c545320524f9034955ab02f5d058097c37d23984baf808d28b3e12821eb8919a77c1b6a8bdeceecfcc487c39db592817dd378a7c5127b427e7279b2a82f6b8eec6b3fabe0947e353e7a386475b15011de93e2f2891f772ef90f4aba1ee1c4d7321c81ce4dcaa378daeabb93182c319494436dbe67d252a01291cacb59686ebd53c6df21c083e98fa299cf5e9b59f1ccea95c62b1437c8ff8754a6372b5b879ebc3241f6430871eafe35337d75cb68c42862846df4342ab434f7f0a7b9f66824e1e696e3dbecde179592774b7511e5a7a1a06ba601eb5f2a935c7cef0f83ecd412a84afdd05120fceb1afb6445ebfcdff8fffffffb75dddccc45afb4f5bb1308d39309c92c0b61a322d5229881fa5d598113cce54107036ca9f63fe863d257c706fe89d5c7ae59a459c6f15ba48d80da4aff541797b26418acddb987df3544bc4918cdbbdd8dd1bc2163c89635044e7b4da878457727a667c0146a12b4c46639497243259bfe4aa5ea50eb79f39fa9209256c9a685e3e39d6d8b6a9ca7d3554fbff0908ad6c6ecf68e506c20b16cd4a98e3ada9eb0cb3eb0b75b13b6d80bf99eddf2282da52cec085d3a725b71c29395d605e1eb26143290946a3a0d24347fa46145735dbf4eabc12150b8d5f7eeca804d7ed1fecd0132d1b94ebec65cbc07dfd4d54a5140567e77c646bd92666922c43aca8e482c59b970fa43087eb76d6715e4e8e5ebe54ca391383ef685b133534fcc1e5c5eb56f9d76a888506c4ac8d289c37039e0c4f927b0e11e85c5c7ec1cf4b19bebee6014cb89ee57f2ade8d166005e956d46a0c01f60b58299479e8a59a2e88f1a7ffd08b27d92fc2772b338959bd0a1c9cb95075c3cc17043c818345b29b76c0b8ed41c8c7259cc780c657cb9509daec1558453cfe061f54e08523a55d3223897559d51096b680802140800000000000000322e007c2af0c08867291dd732bfe4b24d1d5ae517a7f5903c369ac6b157d42eb6ca8c0d7b50fd533a56c814e7cf04db3012eebd53ec1b123d65ab1e462dc19182b690d56a88ad5a1f4d89f1749b005e88085505cc6d7de8eeee08def67bc1d1519d44b7a62dc07e491f328f786956d9200f00d78829e6af7c1a5835366201374b9487330920d4c57e2f7073292e173acc2424bb0d5e0e9448b4c02f9cfc99bc408110b6a3e9bc3799e4b178c2871069bc7d9ceba564378f02b2932c36f159478b5facd452b595a86d119216af9d860bd3997305320159a69a70fc62284141d23d2dc1e5394b271d99e5570450f1c55807e96c7cbe1b7c2e3e96f69fecf0f375e36e0d2acf319e37199e98486a8d145ce2d996c1909402744cce63664a75e480b197c345360321e830e5912d1d7bfe5a129a67fa98e6eda5268fa588047859daa11d087d0dbf0ccc7e120e3a5820cb4f5dc06748317e3f866518eb66e39dc8a68a7411b3403fc8eeab8283dee4d767e8e5842ed922e03ae5b3c9c494d5ebc61527ccd1222740fedd9e469ba6b30761cf387d654081c7e63182860e4548748058914a9cea01caf074fe6a78fafa2b45c516f9f20af9ac6773a400fa9661a872f6b55f0ed52a9be9e9c35502604b924f0eb628d6545da3220b003f9a5587e87e4b04fa495423b7c72093b764adfd1430a2e608b7af3d2bf80fef00e5b69abe386618274921ff57621bb99739de2e066ff17e95eba027f6a35170af3a69e93359a9643e155832d45c1aa9a8f71ad35504b99d3d0a1c11ae108664ea36f4dcded083aee17ac9efe7ee3fdf7b63c7c09bcef62caa88708510d45cea79d323083ddbfe7e5d3d9138f206a7af82ef1d26c85015c3e55a285a35d0052546493536b9061db27291a9292033753b7bddac63dac6f6271689240e43523c434a65e1d35299e386c953d0c92f21057e0b7883e049d20961e75069587eb3df62064d6f76bbfd96635bb19837ba2ab193d79072ffb8829306b63697ff104a65031b8a38c24cca9ba23d5cdf753169a00fe2b2c3849f234a7029b657b3324c10d553e601aa97d17024f7bf5a99f96392f4a079a83daa27f4e3b512ee8536e764ce4dc36fd0874dfa502a693e55bd9f116202c5e906703e2c43d84448598b7af78aa60a205c152841e75e23436738ccaa6bbcef87e6a237d86d1a5e38e56c162cd6d61a4fb8b410b1643ad557a22348edfa82c23db11c9abdd8141fce263a66537512e93a930a4801ad862a902c7c1e00eb7c7466b1351318b7196c2a9016c55a05e104e124bdb568132f9397e31b10d04e5284bd029ea2f6a3ed11854e09b5871d6a725c21a9ef5d7e729a90a8206d5f61e6e42e47dda3e31b9134d47872a0dd7a576b665ec6ceaa5fd7d85ed7feede9ac9fc23e40241c0318077edda75b62eb271e28fb3705f7b4950c14b721a3a74a7a4e4de02cef5de76a1602b906016c0892ef37db51b0a1dd53f28b3d896f20abbad1ad0e0220960423267fc6e1779d1150fd584dd184bb43278d2d68ff21ac0daeef5408348cb80f4a9e0e606f6048bbaa517289451f084fffb63c5d904788cfc310b5495528a58f4650dafc4e4675b99d35ebab710ac6fefcee6c51a2835510fb6d2dbd8f97c3e53fb7a23c3f3c0283eb2271504581b9c1fa31e35c117e56a5d668a9c57df3b4e1129ca019a8b877fa4a22768dfbdd9d2154e17f4a7755b065090d88982471bfb242d89af5c6782693a6ab1b1be74dfa5655ac3b5ef4ace8dc595803cf4025bdf5c0e9fbe7a12a3a313311809591da08a2cc6cd8480dc960e1f79fa208440a0e589be5756c36d5830a51c4bdc39c2a85c0431bae3a7331b2ffdf23623693d343a7938a8a8a4dd4d523c6450a705bccbb38427f06f4f84a18adf303c0ddecf4ce2b6cdde4e09a4c31816195f0fe9f05fcdc0609f8a75ad2f23d5c24faaf346c13ec0512a5c29477ac561c878085d1a323f6bab08e2fb9ee57d7bb621ef21caf3609d74036c6dc1d7be0b6058d89dcb8d9aa4462fa0a740be66e3fdaa957f27c5a26dc586ac8c927ab2d7cf1b761798ea4191be8f4423cf1a6727d0c5f27a9969a753573afa584dea82678f3471ba36d726c396d68c671e579120f1a11cd50fa66b26fc2d6cb74ba07edbd5d3a288cf58ed1255381df02b2fb8983b7cf833433d1ab8fdef12651c3507e4b69fbc4b234678cca36761e8da434e5f036f204a1400da15277ef27ac140e2d574b89c0fd617da27e6ce862883bbe81c288834b9477d0d440c15dad505b363fcc1cfef8e2e3a96438809505844196acd0af751dedfced67f209c2ffa9c6da842c93ff4b5fd54a67df904f2f31b4236728c99582a667a8461d397770a657ffa7d514b0f076d7f35e9704a836e7882a2acf0a0ec2158ac7234953c3696abdc791c0b163ee76fbcc5adc18b6fa0f51f76f3d313a0d891f1deb69f6e44289b1aa43a768b8d13270959763a2c45129daeea493a5b0d7b36753b223dca9a8037368653400", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x8, {0x7, 0x29, 0x0, 0x10208000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x284e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7ffe, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r7 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r7, 0xc02864c3, &(0x7f0000000540)={0x0}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r8 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000300)=r8, 0x1) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r4, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r4, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 2.338023931s ago: executing program 1 (id=3598): r0 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB], 0x48) ioctl$KDGETLED(r0, 0x4b31, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x700}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) 860.847759ms ago: executing program 0 (id=3590): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) (async) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4008080, &(0x7f0000000540)={0xa, 0x4e24, 0x1, @remote}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="71b44d", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)='&rc', 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="9912f0e9cbeab733511eda1d02de1315e920d416160bb18659215cbba391bacab28be9ff29f59b80fa512b48471e9e3cc61be606db92049580fa6875b6bf756922dc1560c0c1c2c019269867817d8db2cfd69b9041294d5a87db9ddc42d4092603fb4e1a926aeecbc58359880020dcfff1bf3b3d929f79cd4a2624705b13452c56e3f9554d3d5a0d777f134a7e215ee8108f4c19e8bf3f7669cf21a80edc680f975d9a80e1ddf31c6bd3685eda89170ea69add6169e2467caa2438e02061d2ab992656fc9df773185f4c5517c676590d5f141dfef614b35661f62ded6e37209e280e9bf2f85a", 0xe6}, {&(0x7f0000000580)="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", 0x4c1}, {0x0, 0xb}], 0x3}}, {{&(0x7f0000001a40)={0xa, 0x4e21, 0x0, @remote}, 0x1c, 0x0}}], 0x4, 0x400c404) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) (async) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) recvmmsg$unix(r1, &(0x7f0000003600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d80)=@getchain={0x0, 0x66, 0x300, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x9, 0x8}}, [{0x0, 0xb, 0x7}, {0x0, 0xb, 0x8}, {0x0, 0xb, 0xff}, {0x0, 0xb, 0x4}]}, 0x144}, 0x1, 0x0, 0x0, 0x81}, 0x20040010) (async) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740), 0x0, 0x10, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x80000b, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r5, r5, &(0x7f0000000040)=0x4, 0x6) (async) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0043, 0x87) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 858.651626ms ago: executing program 4 (id=3591): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@dev={0xac, 0x14, 0x14, 0x28}, 0x1, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0xfffffffffffffc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffffffffffff}, {}, {}, 0x0, 0x3502, 0xa, 0x0, 0x0, 0x18}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x138}}, 0x0) 760.286652ms ago: executing program 1 (id=3592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8400) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x101, @loopback, 0x8000005}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) ioprio_set$uid(0x3, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x22201) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000380)={0x6, 0x7, 'syz2\x00'}, &(0x7f00000003c0)=0x28) r6 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x7d4b, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x2def, 0x1, 0x46, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0xc102, 0x0) r9 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r9, 0xc0cc5640, &(0x7f0000000440)={0xa, @pix_mp={0x9, 0x8, 0x33565348, 0x1, 0xa, [{0x32badaa3, 0x1f}, {0x81, 0x3}, {0x100000, 0x9}, {0x6, 0x3dc}, {0x8000, 0x5}, {0x9, 0x9}, {0x6, 0x3}, {0x1, 0x6}], 0x3, 0x9, 0x6, 0x0, 0x3}}) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x5, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000300)="4b8d7bcda0", 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x26c, 0x114, 0x11, 0x148, 0x0, 0x10, 0x1d8, 0x2a8, 0x2a8, 0x1d8, 0x2a8, 0xac, 0x0, {[{{@uncond, 0x10, 0xcc, 0x114, 0x1c, {}, [@common=@ttl={{0x24}, {0x1, 0x3}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x100, {0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x10}, 'bond0\x00', {0xc0000000}}}}, {{@uncond, 0x0, 0x9c, 0xc4, 0x0, {}, [@common=@addrtype={{0x2c}, {0x854, 0x180, 0x1, 0x3}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3}, {0xffffffffffffffff, 0x1}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x2c8) 621.091831ms ago: executing program 5 (id=3593): socket$unix(0x1, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd2835090000000000010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000030000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 589.640726ms ago: executing program 4 (id=3594): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private0}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='hfsplus\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000006c0)='\x9e\x82g\x81\x03\xbf\x8c\x1b\xc2\xd4\xda!:\xbe\xdb\x83\xa4\x8e\xec\xf7\xb4\r\xf4G\xd0\x14W<\x86V\xac\xccz\xa92\xeb\ad\x8b%\x11\b\xa3\xeb\xdf%\x7fSl:t\xa5\xe1p\xf5\x8fM\xc1E\xbe\x86,\xcf\xbf`\xba\xb9\xb7\xcc\xfc\x19H\xa6K\xb5\xe9\xd2W\xb0\xdf\xfa\x86\xa0o\xbe\xef\xed\xc8?\xf8\xff)x\xdc\x06\xd6x4\xfb\x00\x17%/v\xde\x0e\xc6\x93\x82', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\xf7\xb7_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\x8c3\xa0\x11x+)\x1a\xe5\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<', 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40086602, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x24044080) io_setup(0x7, &(0x7f0000000280)=0x0) r5 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) io_submit(r4, 0x1, &(0x7f0000000300)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x200, r0, &(0x7f0000000740)="0135e91a81bc6594a58736e005e7ce1f183654cb0ff8006e4e30e221acfe8d9d33346b92f5b21c951e66ae6fef8d2a8846081c1e739eefb5f88f16072536610387b0dced709954aa16dc9b878ff49917617c401d8eca33612fe5c7d4e8edf218831b298765dc4764333bb336bb0505c31e5569be107432d9225d71ad2fe50e886374ef50f912f34515a5e25db76feab05210a5900c82413ac09b73469f8610ece6dfd5b7b5cf1693969621a87e08eac2c5e2ed2de221a86930b045da63068a30d46d12414810fa2439c9dfd4e15d0cac72ed6b41d52d506e328beefcd18ca4e5a46ac1e7d46cbf14", 0xe8, 0x80000000, 0x0, 0x1, r5}]) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f00000003c0)={0x0, 0xffffff16, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000000f140100fdffffff004c8500080045006d616400dee105ad84f1eabe3713e666f420c826e6d6b158addba37c0c5c21713334d9e27bcbb83007e40b19e675ea96c7554e54ee53845de7532b92fd41c4fe82651d42609f96a822f2baf6a5d69a356fd19e5a2196d6b8b4b170a34581ed00f9106d347cdb837ffdfd80e9ba660378e492648d44365fe2b0ab9e44eb"], 0x18}}, 0x400) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44000080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfd24, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000140)='./file0\x00', 0x10b) r7 = syz_open_dev$usbfs(&(0x7f0000000340), 0x76, 0x101341) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f00000001c0), 0xed) mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x3, 0x10012, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_IOCTL(r7, 0x80045515, &(0x7f0000000040)=@usbdevfs_connect) 0s ago: executing program 0 (id=3595): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = fsopen(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000140001002abd7000ffdbdf240a"], 0x2c}, 0x1, 0x0, 0x0, 0x20006054}, 0x24005040) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x800, 0x2) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r4, 0x4068aea3, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000280)={0xf0f022}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x2, @win={{0xdd52, 0x10000c, 0x40, 0xe0fd}, 0x6, 0x10, 0x0, 0xc, &(0x7f0000000380)="e378aa62443b7fd1abf0e38dfa83979c380d38b06d6c93ffd0470d6389f572ef482832", 0x6}}) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x2000000, 0x13, r6, 0x10000000) socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000080)=r6, 0x4) syz_usb_connect$uac1(0x2, 0x97, &(0x7f0000001880)=ANY=[@ANYBLOB="12015002000000206b1d0101400001020301090285000301bbd0080904000000010100000a24017f0200030201020b24050600bf9b5ab6dc3e0c240202010202090800f701090401000001020000090401010101020000090501092000000180072501039a8556090402000001020000090402010101020000082402010101080a072401010203000905"], &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) pipe2$watch_queue(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r7, r6, 0x0, 0x7ffffffd) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r9 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'dvmrp1\x00', 0x0}) setsockopt$inet6_mreq(r9, 0x29, 0x1c, &(0x7f00000001c0)={@remote, r10}, 0x14) syz_kvm_setup_cpu$x86(r4, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x28, &(0x7f0000000200)=[@dstype0, @dstype0={0x6, 0x4}], 0x2) ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000000400)=ANY=[]) syz_open_dev$dmmidi(&(0x7f0000000340), 0x7f, 0x501042) sendfile(r1, r0, 0x0, 0x100000000000023b) sendfile(r1, r0, 0x0, 0x4) kernel console output (not intermixed with test programs): attributes in process `syz.3.3031'. [ 837.274208][T16193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3032'. [ 837.283950][T16122] Bluetooth: hci1: command tx timeout [ 837.292116][T16124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 837.316217][T16124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 837.361860][T16124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 837.388284][ T5917] glorious 0003:258A:0036.0022: unknown main item tag 0x1 [ 837.437763][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 837.454726][T16124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 837.469927][ T5917] glorious 0003:258A:0036.0022: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.5-1/input0 [ 837.472874][T16124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 837.572163][ T5917] usb 5-1: USB disconnect, device number 16 [ 837.683870][T16124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 838.034219][T16124] hsr_slave_0: entered promiscuous mode [ 838.042657][T16124] hsr_slave_1: entered promiscuous mode [ 838.098229][T16124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 838.121061][T16124] Cannot create hsr debugfs directory [ 838.236810][ T979] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 838.426090][ T979] usb 4-1: Using ep0 maxpacket: 16 [ 838.433739][ T979] usb 4-1: config 0 has no interfaces? [ 838.442490][ T979] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 838.451798][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.463963][ T979] usb 4-1: Product: syz [ 838.485404][ T979] usb 4-1: Manufacturer: syz [ 838.508995][ T979] usb 4-1: SerialNumber: syz [ 838.530232][ T979] usb 4-1: config 0 descriptor?? [ 839.059266][ T9] usb 6-1: USB disconnect, device number 11 [ 839.261666][T16223] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3037'. [ 839.366343][T16122] Bluetooth: hci1: command tx timeout [ 839.628690][ T4257] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 839.650514][ T4257] bond0 (unregistering): Released all slaves [ 839.685188][ T4257] bond1 (unregistering): Released all slaves [ 839.701796][T16232] loop6: detected capacity change from 0 to 524287999 [ 839.724248][T16232] netlink: 'syz.5.3041': attribute type 1 has an invalid length. [ 839.747766][ T4257] bond2 (unregistering): Released all slaves [ 839.771999][ T4257] bond3 (unregistering): Released all slaves [ 839.808047][T16205] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 839.941561][ T979] usb 4-1: USB disconnect, device number 86 [ 840.067955][T16232] 8021q: adding VLAN 0 to HW filter on device bond1 [ 840.170902][T16234] 8021q: adding VLAN 0 to HW filter on device bond1 [ 840.191991][T16234] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 840.205378][T16244] syz.4.3042: attempt to access beyond end of device [ 840.205378][T16244] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 840.235198][T16234] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 840.382594][T16235] gretap1: entered promiscuous mode [ 840.402150][T16235] bond1: (slave gretap1): making interface the new active one [ 840.411937][T16235] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 840.503271][T16236] bond1: (slave vlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 840.774680][T16248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3044'. [ 840.784917][ T4257] : left promiscuous mode [ 841.342115][ T5917] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 841.439951][T16122] Bluetooth: hci1: command tx timeout [ 841.564342][ T5917] usb 4-1: Using ep0 maxpacket: 8 [ 841.582291][ T5917] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 841.605850][ T5917] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.658767][ T5917] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 841.678162][ T5917] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 841.761934][T16264] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3047'. [ 841.906912][ T5917] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 841.952788][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.990106][ T5917] usb 4-1: Product: syz [ 842.005734][ T5917] usb 4-1: Manufacturer: syz [ 842.010456][ T5917] usb 4-1: SerialNumber: syz [ 843.170625][T16255] ip6gre1: entered promiscuous mode [ 843.176681][T16255] ip6gre1: entered allmulticast mode [ 843.445913][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 843.620234][ T9] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 843.641416][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.668948][ T9] usb 5-1: Product: syz [ 843.673187][ T9] usb 5-1: Manufacturer: syz [ 843.701520][ T9] usb 5-1: SerialNumber: syz [ 843.727568][ T9] usb 5-1: config 0 descriptor?? [ 843.753308][ T9] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 843.828057][T16293] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3053'. [ 844.286125][ T9] gspca_sunplus: reg_r err -110 [ 844.291159][ T9] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 844.626912][ T1208] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 844.657179][ T4257] hsr_slave_0: left promiscuous mode [ 844.740544][ T4257] hsr_slave_1: left promiscuous mode [ 844.776060][ T4257] veth1_vlan: left promiscuous mode [ 844.781390][ T4257] veth0_vlan: left promiscuous mode [ 844.805797][ T1208] usb 6-1: Using ep0 maxpacket: 16 [ 844.934024][ T1208] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 844.954700][ T1208] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 844.995537][ T1208] usb 6-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 845.009153][ T1208] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.032938][ T1208] usb 6-1: config 0 descriptor?? [ 845.039928][ T5917] cdc_ncm 4-1:1.0: bind() failure [ 845.123254][ T5917] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 845.167922][ T5917] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 845.207932][ T5917] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 845.258263][ T5917] cdc_ncm 4-1:1.1: bind() failure [ 845.274327][ T5917] usbtest 4-1:1.1: couldn't get endpoints, -22 [ 845.300426][ T5917] usbtest 4-1:1.1: probe with driver usbtest failed with error -22 [ 845.310669][T16317] syz.1.3057: attempt to access beyond end of device [ 845.310669][T16317] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 845.383936][ T5917] usb 4-1: USB disconnect, device number 87 [ 846.223607][T11170] usb 5-1: USB disconnect, device number 17 [ 847.440122][T11170] usb 6-1: USB disconnect, device number 12 [ 847.442312][T16329] xt_SECMARK: invalid mode: 0 [ 847.570849][T16333] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 847.582913][T16333] team0: Port device batadv1 added [ 847.608798][T16124] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 847.827418][T16124] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 847.891581][T16124] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 847.956011][T16124] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 848.820167][T16124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 848.848190][T16124] 8021q: adding VLAN 0 to HW filter on device team0 [ 849.046761][T10833] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.054018][T10833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 849.093906][T10833] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.101157][T10833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 849.183691][ T4257] IPVS: stop unused estimator thread 0... [ 849.366472][T16124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 849.537688][T16124] veth0_vlan: entered promiscuous mode [ 849.592505][T16124] veth1_vlan: entered promiscuous mode [ 849.676800][T16383] syz.1.3068: attempt to access beyond end of device [ 849.676800][T16383] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 849.717744][T16124] veth0_macvtap: entered promiscuous mode [ 849.779633][T16124] veth1_macvtap: entered promiscuous mode [ 849.929187][T16124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 850.000352][T16124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 850.353537][T16124] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.385707][T16124] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.394464][T16124] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.424015][T16124] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.748069][ T1344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.794450][ T1344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.422006][ T4257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.458974][ T4257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.685751][ T5917] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 851.905798][ T5917] usb 2-1: Using ep0 maxpacket: 8 [ 852.044042][ T5917] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 852.096043][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 852.122965][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 852.182547][ T5917] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 852.200382][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.209611][ T5917] usb 2-1: Product: syz [ 852.214076][T16422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3010'. [ 852.230275][ T5917] usb 2-1: Manufacturer: syz [ 852.241321][ T5917] usb 2-1: SerialNumber: syz [ 852.255837][ T48] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 852.271840][ T5917] usb 2-1: config 0 descriptor?? [ 852.300621][ T5917] streamzap 2-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 852.381513][T16425] Cannot find add_set index 3 as target [ 852.426299][ T48] usb 6-1: Using ep0 maxpacket: 8 [ 852.442761][ T48] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 852.470367][ T48] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 852.581220][ T48] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 852.601468][ T48] usb 6-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 852.614018][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.628318][ T48] usb 6-1: Product: syz [ 852.637271][ T48] usb 6-1: Manufacturer: syz [ 852.644464][ T48] usb 6-1: SerialNumber: syz [ 852.668706][ T48] usb 6-1: config 0 descriptor?? [ 852.725757][ T979] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 852.758797][T16432] netlink: 'syz.3.3078': attribute type 3 has an invalid length. [ 852.780368][T16432] netlink: 'syz.3.3078': attribute type 3 has an invalid length. [ 852.809693][T16432] netlink: 'syz.3.3078': attribute type 3 has an invalid length. [ 852.834493][T16432] netlink: 'syz.3.3078': attribute type 3 has an invalid length. [ 852.856019][T16432] netlink: 'syz.3.3078': attribute type 3 has an invalid length. [ 852.874924][T16432] netlink: 'syz.3.3078': attribute type 3 has an invalid length. [ 852.874996][T16432] netlink: 'syz.3.3078': attribute type 3 has an invalid length. [ 852.880463][T16432] netlink: 'syz.3.3078': attribute type 3 has an invalid length. [ 852.880524][T16432] netlink: 'syz.3.3078': attribute type 3 has an invalid length. [ 852.880556][T16432] netlink: 'syz.3.3078': attribute type 3 has an invalid length. [ 852.889318][ T979] usb 1-1: Using ep0 maxpacket: 32 [ 852.892784][ T979] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 852.892803][ T979] usb 1-1: config 0 has no interface number 0 [ 852.897051][ T979] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 852.897082][ T979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.897104][ T979] usb 1-1: Product: syz [ 852.897120][ T979] usb 1-1: Manufacturer: syz [ 852.897135][ T979] usb 1-1: SerialNumber: syz [ 852.900649][ T979] usb 1-1: config 0 descriptor?? [ 852.915501][ T979] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 852.923178][ T5917] usb 6-1: USB disconnect, device number 13 [ 853.114498][T16429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 853.168339][T16429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 853.220702][T16429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 853.235113][T16429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 853.272254][ T979] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 853.298308][ T979] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 854.008300][T16456] syz.3.3082: attempt to access beyond end of device [ 854.008300][T16456] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 854.026251][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 854.034829][ T979] usb 1-1: USB disconnect, device number 16 [ 854.047566][ T979] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 854.146306][T11170] usb 2-1: USB disconnect, device number 124 [ 854.202902][ T979] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 854.237824][ T979] quatech2 1-1:0.51: device disconnected [ 854.357173][T16460] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 855.594448][T16486] 8021q: adding VLAN 0 to HW filter on device team0 [ 855.612566][T16486] bond0: (slave team0): Enslaving as an active interface with an up link [ 855.847196][T16492] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3091'. [ 856.165325][T16501] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3096'. [ 856.515796][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 856.706587][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 856.725982][ T10] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.766397][ T10] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 856.786923][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 856.800863][ T10] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 856.824078][ T10] usb 6-1: Product: syz [ 856.834196][ T10] usb 6-1: Manufacturer: syz [ 856.872543][ T10] hub 6-1:4.0: USB hub found [ 857.078875][ T10] hub 6-1:4.0: 2 ports detected [ 857.255888][T11170] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 857.280638][T16519] syz.0.3100: attempt to access beyond end of device [ 857.280638][T16519] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 857.485279][T11170] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 857.503287][T11170] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.614602][ T30] audit: type=1326 audit(1750625410.339:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16500 comm="syz.5.3096" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 857.641731][T16501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.660449][ T30] audit: type=1326 audit(1750625410.379:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16500 comm="syz.5.3096" exe="/root/syz-executor" sig=0 arch=40000003 syscall=132 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 857.661725][T11170] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 857.693549][T16501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.779664][ T30] audit: type=1326 audit(1750625410.379:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16500 comm="syz.5.3096" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 857.803197][T11170] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.831107][ T30] audit: type=1326 audit(1750625410.379:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16500 comm="syz.5.3096" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 857.914785][ T30] audit: type=1326 audit(1750625410.379:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16500 comm="syz.5.3096" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 857.917145][T11170] usb 4-1: config 0 descriptor?? [ 857.945800][ T979] usb 2-1: new low-speed USB device number 125 using dummy_hcd [ 858.053533][ T30] audit: type=1326 audit(1750625410.379:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16500 comm="syz.5.3096" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 858.137096][ T30] audit: type=1326 audit(1750625410.449:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16500 comm="syz.5.3096" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 858.166490][ T979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 858.230150][T16514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.231238][ T979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 858.241802][ T30] audit: type=1326 audit(1750625410.449:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16500 comm="syz.5.3096" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 858.296263][T16514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 858.316252][ T979] usb 2-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 858.325463][ T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.362144][ T30] audit: type=1326 audit(1750625410.449:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16500 comm="syz.5.3096" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 858.390807][ T10] hub 6-1:4.0: hub_ext_port_status failed (err = -71) [ 858.392772][ T979] usb 2-1: config 0 descriptor?? [ 858.424222][ T10] usb 6-1: USB disconnect, device number 14 [ 858.430733][ T1208] usb 6-1: Failed to suspend device, error -19 [ 858.468875][ T30] audit: type=1326 audit(1750625410.449:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16500 comm="syz.5.3096" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 858.815417][T16514] program syz.3.3101 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 858.868246][ T979] glorious 0003:258A:0036.0024: unknown main item tag 0x1 [ 858.892655][ T979] glorious 0003:258A:0036.0024: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.1-1/input0 [ 858.926470][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 858.936828][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 858.949647][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 858.966627][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 858.976113][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 859.303506][ T6207] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.419873][ T6207] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.460732][T16541] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3108'. [ 859.573974][T16543] xt_hashlimit: max too large, truncated to 1048576 [ 859.581538][T16544] xt_hashlimit: max too large, truncated to 1048576 [ 859.583004][ T6207] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.671823][T16544] SET target dimension over the limit! [ 859.685735][T16543] SET target dimension over the limit! [ 859.778160][T11170] uclogic 0003:256C:006D.0023: failed retrieving Huion firmware version: -71 [ 859.799020][T11170] uclogic 0003:256C:006D.0023: failed probing parameters: -71 [ 859.865704][T11170] uclogic 0003:256C:006D.0023: probe with driver uclogic failed with error -71 [ 859.956209][T11170] usb 4-1: USB disconnect, device number 88 [ 859.970022][ T6207] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.060791][T16551] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 860.456780][ T1208] usb 2-1: USB disconnect, device number 125 [ 860.572048][ T6207] bridge_slave_1: left allmulticast mode [ 860.608512][ T6207] bridge_slave_1: left promiscuous mode [ 860.614342][ T6207] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.670441][ T6207] bridge_slave_0: left allmulticast mode [ 860.696582][ T6207] bridge_slave_0: left promiscuous mode [ 860.724838][ T6207] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.786004][ T979] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 861.090814][ T51] Bluetooth: hci2: command tx timeout [ 861.137604][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 861.184389][ T979] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 861.203249][ T979] usb 4-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 861.365812][ T979] usb 4-1: Manufacturer: syz [ 861.414217][ T979] usb 4-1: config 0 descriptor?? [ 861.457019][ T979] hub 4-1:0.0: USB hub found [ 861.662561][ T979] hub 4-1:0.0: 1 port detected [ 861.683995][T16565] input: syz0 as /devices/virtual/input/input48 [ 862.167079][ T6207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 862.202235][ T6207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 862.282267][ T6207] bond0 (unregistering): Released all slaves [ 862.337330][T16574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3116'. [ 862.353219][T16574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3116'. [ 862.486322][T16536] chnl_net:caif_netlink_parms(): no params data found [ 862.535762][ T10] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 862.649375][ T6207] tipc: Left network mode [ 862.707875][ T10] usb 6-1: config 0 has no interfaces? [ 862.734480][ T10] usb 6-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 862.818895][T16584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.867672][T16584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.912108][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.034825][ T10] usb 6-1: config 0 descriptor?? [ 863.120802][ T51] Bluetooth: hci2: command tx timeout [ 863.368578][ T10] usb 4-1: USB disconnect, device number 89 [ 863.380775][T16536] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.419618][T16536] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.452755][T16536] bridge_slave_0: entered allmulticast mode [ 863.503424][T16536] bridge_slave_0: entered promiscuous mode [ 863.549284][T16573] bridge0: entered promiscuous mode [ 863.577653][T16573] vlan3: entered promiscuous mode [ 863.728608][T16536] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.758406][T16536] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.775851][T16536] bridge_slave_1: entered allmulticast mode [ 863.788828][T16536] bridge_slave_1: entered promiscuous mode [ 863.873847][ T10] usb 6-1: USB disconnect, device number 15 [ 864.002384][T16536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 864.098954][T13409] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 864.170690][T16536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 864.275904][ T48] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 864.338954][T13409] usb 2-1: config 0 has no interfaces? [ 864.348376][T13409] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 864.363353][T13409] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.458407][T13409] usb 2-1: Product: syz [ 864.465329][T16536] team0: Port device team_slave_0 added [ 864.474679][T13409] usb 2-1: Manufacturer: syz [ 864.485966][ T48] usb 1-1: device descriptor read/64, error -71 [ 864.489931][T13409] usb 2-1: SerialNumber: syz [ 864.542685][T13409] usb 2-1: config 0 descriptor?? [ 864.561551][T16536] team0: Port device team_slave_1 added [ 864.862879][ T48] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 864.921857][T16610] [U]  [ 865.030441][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 865.030461][ T30] audit: type=1800 audit(1750625417.759:1662): pid=16612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3123" name=03 dev="tmpfs" ino=538 res=0 errno=0 [ 865.098244][ T48] usb 1-1: device descriptor read/64, error -71 [ 865.144284][T16536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 865.151389][T16536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 865.196989][T16536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 865.217808][ T51] Bluetooth: hci2: command tx timeout [ 865.250308][ T48] usb usb1-port1: attempt power cycle [ 865.333904][T16536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 865.353764][T16536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 865.476174][T16536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 865.548605][T13409] usb 2-1: USB disconnect, device number 126 [ 865.628660][ T48] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 866.015944][ T48] usb 1-1: device descriptor read/8, error -71 [ 866.126065][T16536] hsr_slave_0: entered promiscuous mode [ 866.140734][T16536] hsr_slave_1: entered promiscuous mode [ 866.285756][ T48] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 866.322058][ T48] usb 1-1: device descriptor read/8, error -71 [ 866.335787][T11170] usb 2-1: new low-speed USB device number 127 using dummy_hcd [ 866.471059][ T48] usb usb1-port1: unable to enumerate USB device [ 866.499395][T11170] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 866.509070][T11170] usb 2-1: config 0 has no interface number 0 [ 866.515284][T11170] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 866.528844][T16637] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3128'. [ 866.836630][T11170] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 866.853570][T16640] syz.3.3127: attempt to access beyond end of device [ 866.853570][T16640] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 866.911910][T11170] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 866.921581][T11170] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.943205][T11170] usb 2-1: config 0 descriptor?? [ 867.037338][T16631] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 867.126445][T11170] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 867.286368][ T51] Bluetooth: hci2: command tx timeout [ 867.676852][T11170] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 867.922378][T11170] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 867.971796][T11170] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.027019][T11170] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 868.054787][T16653] batman_adv: batadv0: Adding interface: ip6gretap1 [ 868.067053][T11170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.078240][T16653] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 868.106565][T16653] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 868.122450][T11170] usb 6-1: config 0 descriptor?? [ 868.591606][ T6207] hsr_slave_0: left promiscuous mode [ 868.606778][T16646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.606970][ T6207] hsr_slave_1: left promiscuous mode [ 868.686702][ T6207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 868.689758][T16646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 868.732038][ T6207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 868.768662][ T6207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 868.781266][ T6207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 868.830145][ T6207] veth1_macvtap: left promiscuous mode [ 868.839856][ T6207] veth0_macvtap: left promiscuous mode [ 868.919488][ T6207] veth1_vlan: left promiscuous mode [ 868.928957][ T6207] veth0_vlan: left promiscuous mode [ 869.133057][T13409] usb 2-1: USB disconnect, device number 127 [ 869.463017][T16662] program syz.5.3129 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 870.083763][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.090915][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.215948][T13409] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 870.845078][T13409] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 870.855608][T13409] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 870.883733][T13409] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 870.902601][T13409] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.963525][T16646] kthread_run failed with err -4 [ 872.032664][T11170] uclogic 0003:256C:006D.0025: failed retrieving Huion firmware version: -71 [ 872.041724][T11170] uclogic 0003:256C:006D.0025: failed probing parameters: -71 [ 872.079913][T11170] uclogic 0003:256C:006D.0025: probe with driver uclogic failed with error -71 [ 872.150924][T11170] usb 6-1: USB disconnect, device number 16 [ 872.314078][T16689] syz.1.3138: attempt to access beyond end of device [ 872.314078][T16689] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 872.776060][T16696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.786828][T16696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.843958][T15545] usb 1-1: USB disconnect, device number 21 [ 872.875249][T16693] bridge1: entered promiscuous mode [ 873.005944][ T1208] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 873.146231][ T1208] usb 4-1: device descriptor read/64, error -71 [ 873.193724][ T6207] IPVS: stop unused estimator thread 0... [ 873.286674][T16706] Cannot find del_set index 0 as target [ 873.395856][ T1208] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 873.459964][T16536] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 873.509736][T16536] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 873.552471][T16536] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 873.566260][ T1208] usb 4-1: device descriptor read/64, error -71 [ 873.641978][T16536] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 873.756789][ T1208] usb usb4-port1: attempt power cycle [ 873.786129][ T5917] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 873.979234][ T5917] usb 1-1: config 0 has no interfaces? [ 874.023126][T16536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 874.031637][ T5917] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 874.065825][T13409] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 874.090556][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.113296][T16739] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3151'. [ 874.129941][ T5917] usb 1-1: Product: syz [ 874.136375][ T1208] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 874.153414][T16536] 8021q: adding VLAN 0 to HW filter on device team0 [ 874.164603][ T5917] usb 1-1: Manufacturer: syz [ 874.181660][ T5917] usb 1-1: SerialNumber: syz [ 874.196493][ T1208] usb 4-1: device descriptor read/8, error -71 [ 874.211140][ T5917] usb 1-1: config 0 descriptor?? [ 874.251405][ T6210] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.258111][T13409] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 874.258622][ T6210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 874.307108][T13409] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 874.336836][T13409] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 874.354906][ T6210] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.362118][ T6210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 874.365723][T13409] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.394373][T13409] usb 2-1: config 0 descriptor?? [ 874.465934][ T1208] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 874.522745][T16714] [U]  [ 874.526589][ T1208] usb 4-1: device descriptor read/8, error -71 [ 874.665017][T16744] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3152'. [ 874.666087][ T1208] usb usb4-port1: unable to enumerate USB device [ 874.703245][T16536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 874.824864][T13409] steelseries 0003:1038:1410.0026: unbalanced delimiter at end of report description [ 874.838616][T16536] veth0_vlan: entered promiscuous mode [ 874.855541][T13409] steelseries 0003:1038:1410.0026: parse failed [ 874.873183][T13409] steelseries 0003:1038:1410.0026: probe with driver steelseries failed with error -22 [ 874.879870][T16750] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 874.943888][T16536] veth1_vlan: entered promiscuous mode [ 875.003500][T16536] veth0_macvtap: entered promiscuous mode [ 875.033705][T16731] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3149'. [ 875.037622][T16536] veth1_macvtap: entered promiscuous mode [ 875.145041][T16536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 875.189417][T13409] usb 2-1: USB disconnect, device number 2 [ 875.193164][T16536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 875.222174][T16536] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.232417][T16536] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.242130][T16536] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.252425][T16536] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.374161][T16763] syz.5.3154: attempt to access beyond end of device [ 875.374161][T16763] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 875.683734][ T1329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 875.694693][ T1329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 875.751249][ T6207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 875.760470][ T6207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.490916][ T5917] usb 1-1: USB disconnect, device number 22 [ 876.545332][T16792] validate_nla: 44 callbacks suppressed [ 876.545372][T16792] netlink: 'syz.1.3159': attribute type 10 has an invalid length. [ 876.707681][T16786] gretap2: entered allmulticast mode [ 876.776577][T16792] 8021q: adding VLAN 0 to HW filter on device team0 [ 876.819585][T16792] bond0: (slave team0): Enslaving as an active interface with an up link [ 876.900562][T13409] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 877.185770][T13409] usb 4-1: Using ep0 maxpacket: 32 [ 877.211668][T13409] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 877.225704][T13409] usb 4-1: config 0 has no interface number 0 [ 877.236218][T13409] usb 4-1: config 0 interface 89 has no altsetting 0 [ 877.269547][T13409] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 877.340161][T13409] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.413806][T13409] usb 4-1: Product: syz [ 877.440018][T13409] usb 4-1: Manufacturer: syz [ 877.451106][T13409] usb 4-1: SerialNumber: syz [ 877.472512][T13409] usb 4-1: config 0 descriptor?? [ 877.715864][T16789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 877.976335][T16789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.000160][T16789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 878.020338][T16789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.081721][ T9] usb 4-1: USB disconnect, device number 94 [ 878.238403][T13409] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 878.471812][T13409] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 878.484135][T13409] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 878.498591][T13409] usb 6-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 878.554349][T16824] netlink: 'syz.4.3162': attribute type 2 has an invalid length. [ 878.572253][T16824] : entered promiscuous mode [ 878.745974][T13409] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.820302][T13409] usb 6-1: config 0 descriptor?? [ 879.078702][T16827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3169'. [ 879.460683][T13409] glorious 0003:258A:0036.0027: unknown main item tag 0x1 [ 879.472913][T13409] glorious 0003:258A:0036.0027: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.5-1/input0 [ 879.545712][T15545] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 879.772072][T15545] usb 4-1: config 0 has no interfaces? [ 879.782404][T15545] usb 4-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 879.828577][T15545] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.852754][T16840] input: syz0 as /devices/virtual/input/input49 [ 879.861411][T15545] usb 4-1: config 0 descriptor?? [ 880.034146][T16844] syz.1.3171: attempt to access beyond end of device [ 880.034146][T16844] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 880.133857][T16828] team_slave_0: entered promiscuous mode [ 880.139656][T16828] team_slave_1: entered promiscuous mode [ 880.216583][T16828] vlan2: entered promiscuous mode [ 880.261436][T16828] team0: entered promiscuous mode [ 880.469882][ T5917] usb 4-1: USB disconnect, device number 95 [ 880.546258][T16856] loop8: detected capacity change from 0 to 7 [ 880.580899][T16856] Dev loop8: unable to read RDB block 7 [ 880.625267][T16856] loop8: unable to read partition table [ 880.641114][T16856] loop8: partition table beyond EOD, truncated [ 880.660631][T16856] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 881.004837][T13409] usb 6-1: USB disconnect, device number 17 [ 881.138728][T16861] veth0_to_team: entered promiscuous mode [ 881.144642][T16861] veth0_to_team: entered allmulticast mode [ 881.393894][T16868] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3181'. [ 881.895740][ T48] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 881.905853][T13409] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 882.323231][ T48] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 882.708124][ T48] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 882.737788][T13409] usb 6-1: config 0 has no interfaces? [ 882.747864][T13409] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 882.757071][T13409] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.766916][T13409] usb 6-1: Product: syz [ 882.771276][T13409] usb 6-1: Manufacturer: syz [ 882.776070][T13409] usb 6-1: SerialNumber: syz [ 882.787230][ T48] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 882.818005][T13409] usb 6-1: config 0 descriptor?? [ 882.860651][ T48] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 882.915006][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 882.985916][ T48] usb 4-1: Product: syz [ 883.024201][ T48] usb 4-1: Manufacturer: syz [ 883.043037][ T48] usb 4-1: SerialNumber: syz [ 883.309892][ T48] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 96 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 883.569615][T13409] usb 4-1: USB disconnect, device number 96 [ 883.579593][T13409] usblp0: removed [ 883.857381][T16901] syz.1.3189: attempt to access beyond end of device [ 883.857381][T16901] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 883.942740][T16902] Cannot find add_set index 3 as target [ 885.076046][ T979] usb 6-1: USB disconnect, device number 18 [ 886.178103][ T48] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 886.376256][ T48] usb 6-1: Using ep0 maxpacket: 16 [ 886.417745][T16928] loop8: detected capacity change from 0 to 6 [ 886.435329][T16932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3198'. [ 886.446918][T16928] Dev loop8: unable to read RDB block 6 [ 886.452662][T16928] loop8: unable to read partition table [ 886.465473][T16928] loop8: partition table beyond EOD, truncated [ 886.479952][T16928] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 886.498598][ T48] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 886.549742][ T48] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 886.658511][ T48] usb 6-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 886.668098][ T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.678298][ T48] usb 6-1: config 0 descriptor?? [ 887.346639][T13409] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 887.505461][T16945] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3202'. [ 887.522235][T13409] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 887.531150][T13409] usb 2-1: config 0 has no interface number 0 [ 887.543601][T13409] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 887.553272][T13409] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.568876][T13409] usb 2-1: Product: syz [ 887.573248][T13409] usb 2-1: Manufacturer: syz [ 887.594956][T13409] usb 2-1: SerialNumber: syz [ 887.666351][T16935] sctp: [Deprecated]: syz.3.3199 (pid 16935) Use of int in maxseg socket option. [ 887.666351][T16935] Use struct sctp_assoc_value instead [ 887.698541][T13409] usb 2-1: config 0 descriptor?? [ 887.712119][T16945] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3202'. [ 887.810419][T16945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3202'. [ 888.350547][T16951] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 888.525077][ T5917] usb 6-1: USB disconnect, device number 19 [ 888.720888][T16955] lo: entered promiscuous mode [ 888.726595][T16955] tunl0: entered promiscuous mode [ 888.757348][T16955] gre0: entered promiscuous mode [ 888.774208][T16955] gretap0: entered promiscuous mode [ 888.781603][T16961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3208'. [ 888.785114][T16955] erspan0: entered promiscuous mode [ 888.803998][T16955] ip_vti0: entered promiscuous mode [ 888.811031][T16955] ip6_vti0: entered promiscuous mode [ 888.838117][T16955] sit0: entered promiscuous mode [ 888.862119][T16955] ip6tnl0: entered promiscuous mode [ 888.871673][T16955] ip6gre0: entered promiscuous mode [ 888.893794][T16955] syz_tun: entered promiscuous mode [ 888.903962][T16955] ip6gretap0: entered promiscuous mode [ 888.913437][T16955] bridge0: entered promiscuous mode [ 888.923596][T16955] vcan0: entered promiscuous mode [ 888.950816][T16955] bond0: entered promiscuous mode [ 888.974879][T16955] bond_slave_0: entered promiscuous mode [ 888.985478][T16968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3210'. [ 888.987818][T16955] bond_slave_1: entered promiscuous mode [ 889.004579][T16955] team0: entered promiscuous mode [ 889.012711][T16955] team_slave_0: entered promiscuous mode [ 889.030600][T16955] team_slave_1: entered promiscuous mode [ 889.041097][T16955] batadv1: entered promiscuous mode [ 889.051873][T16955] dummy0: entered promiscuous mode [ 889.059121][T16955] nlmon0: entered promiscuous mode [ 889.071010][T16955] caif0: entered promiscuous mode [ 889.076919][T16955] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 889.209576][T13409] usb 2-1: Firmware version (0.0) predates our first public release. [ 889.228425][T13409] usb 2-1: Please update to version 0.2 or newer [ 889.296463][T13409] usb 2-1: USB disconnect, device number 3 [ 889.429764][T16978] input: syz1 as /devices/virtual/input/input50 [ 889.495891][ T979] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 889.674987][ T979] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.686231][ T979] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 889.701057][ T979] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 889.710319][ T979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.720091][ T979] usb 6-1: config 0 descriptor?? [ 889.755777][T15545] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 889.960764][T15545] usb 4-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=61.d8 [ 889.980161][T15545] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.010919][T16990] Cannot find add_set index 3 as target [ 890.026176][T15545] usb 4-1: Product: syz [ 890.038771][T15545] usb 4-1: Manufacturer: syz [ 890.045619][T15545] usb 4-1: SerialNumber: syz [ 890.094619][T15545] usb 4-1: config 0 descriptor?? [ 890.114340][T15545] usb 4-1: selecting invalid altsetting 1 [ 890.147191][T15545] flexcop_usb: set interface failed. [ 890.162467][ T979] usbhid 6-1:0.0: can't add hid device: -32 [ 890.169000][ T979] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 890.191072][T15545] b2c2_flexcop_usb 4-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 890.212975][ T979] usb 6-1: USB disconnect, device number 20 [ 890.312547][T15545] usb 4-1: USB disconnect, device number 97 [ 890.579771][T16996] xt_CT: No such helper "syz0" [ 890.764363][T17013] binder: 17007:17013 ioctl 40046205 0 returned -22 [ 890.908002][T11170] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 890.949049][T17023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3228'. [ 891.075963][T17025] Cannot find add_set index 3 as target [ 891.078076][T11170] usb 5-1: config 0 has no interfaces? [ 891.095794][T11170] usb 5-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 891.116042][T11170] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.145337][T11170] usb 5-1: config 0 descriptor?? [ 891.156855][T17033] input: syz0 as /devices/virtual/input/input51 [ 891.304352][T17037] IPVS: set_ctl: invalid protocol: 44 172.30.1.1:20000 [ 891.305801][ T9] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 891.547402][T17039] Cannot find add_set index 3 as target [ 891.595480][T17005] bridge0: entered promiscuous mode [ 891.622708][T17005] vlan2: entered promiscuous mode [ 891.718687][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 891.729516][ T9] usb 4-1: config 0 has no interfaces? [ 891.744930][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 891.767421][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.775545][ T9] usb 4-1: Product: syz [ 891.787559][T13409] usb 5-1: USB disconnect, device number 18 [ 891.805123][ T9] usb 4-1: Manufacturer: syz [ 891.823535][ T9] usb 4-1: SerialNumber: syz [ 891.843990][ T9] usb 4-1: config 0 descriptor?? [ 891.978542][T17047] ptrace attach of ""[17048] was attempted by "./syz-executor exec"[17047] [ 892.282912][T17047] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3237'. [ 892.311831][ T9] usb 4-1: USB disconnect, device number 98 [ 892.366636][T17047] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3237'. [ 892.380913][T17051] xt_SECMARK: invalid mode: 0 [ 892.643625][T17061] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3243'. [ 892.805819][ T9] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 892.972982][ T9] usb 2-1: config 0 has no interfaces? [ 892.979348][ T9] usb 2-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 892.993234][T17073] vlan2: entered allmulticast mode [ 893.005808][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.015710][T17073] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 893.060923][ T9] usb 2-1: config 0 descriptor?? [ 893.129060][T17077] xt_bpf: check failed: parse error [ 893.339038][T17080] FAULT_INJECTION: forcing a failure. [ 893.339038][T17080] name failslab, interval 1, probability 0, space 0, times 0 [ 893.352867][T17080] CPU: 1 UID: 0 PID: 17080 Comm: syz.0.3249 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 893.352893][T17080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 893.352904][T17080] Call Trace: [ 893.352912][T17080] [ 893.352921][T17080] dump_stack_lvl+0x189/0x250 [ 893.352954][T17080] ? __pfx____ratelimit+0x10/0x10 [ 893.352982][T17080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 893.353010][T17080] ? __pfx__printk+0x10/0x10 [ 893.353031][T17080] ? __pfx___might_resched+0x10/0x10 [ 893.353058][T17080] ? fs_reclaim_acquire+0x7d/0x100 [ 893.353086][T17080] should_fail_ex+0x414/0x560 [ 893.353115][T17080] should_failslab+0xa8/0x100 [ 893.353135][T17080] __kmalloc_cache_noprof+0x70/0x3d0 [ 893.353155][T17080] ? ah_init_state+0x117/0x650 [ 893.353182][T17080] ah_init_state+0x117/0x650 [ 893.353202][T17080] ? __xfrm_init_state+0x7ef/0x13f0 [ 893.353228][T17080] __xfrm_init_state+0xa73/0x13f0 [ 893.353250][T17080] ? __xfrm_init_state+0x7ef/0x13f0 [ 893.353276][T17080] xfrm_init_state+0x18/0xa0 [ 893.353296][T17080] pfkey_add+0x1d38/0x2e00 [ 893.353336][T17080] ? __pfx_pfkey_add+0x10/0x10 [ 893.353354][T17080] ? kmem_cache_free+0x18f/0x400 [ 893.353385][T17080] pfkey_sendmsg+0xbfe/0x1090 [ 893.353419][T17080] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 893.353465][T17080] ? __asan_memset+0x22/0x50 [ 893.353492][T17080] ? __import_iovec+0x5d4/0x7f0 [ 893.353509][T17080] ? aa_sock_msg_perm+0x94/0x160 [ 893.353537][T17080] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 893.353561][T17080] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 893.353582][T17080] __sock_sendmsg+0x21c/0x270 [ 893.353615][T17080] ____sys_sendmsg+0x505/0x830 [ 893.353644][T17080] ? __pfx_____sys_sendmsg+0x10/0x10 [ 893.353685][T17080] ___sys_sendmsg+0x21f/0x2a0 [ 893.353712][T17080] ? __pfx____sys_sendmsg+0x10/0x10 [ 893.353772][T17080] ? __fget_files+0x2a/0x420 [ 893.353793][T17080] ? __fget_files+0x3a0/0x420 [ 893.353825][T17080] __sys_sendmsg+0x164/0x220 [ 893.353852][T17080] ? __pfx___sys_sendmsg+0x10/0x10 [ 893.353891][T17080] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 893.353922][T17080] ? lockdep_hardirqs_on+0x9c/0x150 [ 893.353953][T17080] __do_fast_syscall_32+0xb6/0x2b0 [ 893.353972][T17080] ? lockdep_hardirqs_on+0x9c/0x150 [ 893.354004][T17080] do_fast_syscall_32+0x34/0x80 [ 893.354024][T17080] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 893.354047][T17080] RIP: 0023:0xf709e539 [ 893.354065][T17080] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 893.354083][T17080] RSP: 002b:00000000f508e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 893.354104][T17080] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 893.354118][T17080] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 893.354129][T17080] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 893.354141][T17080] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 893.354153][T17080] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 893.354182][T17080] [ 893.370656][T17057] vlan2: entered promiscuous mode [ 893.377799][ C1] vkms_vblank_simulate: vblank timer overrun [ 893.879736][ T9] usb 2-1: USB disconnect, device number 4 [ 893.921137][T17086] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 893.992523][T17086] batadv1: entered promiscuous mode [ 894.051480][T17086] team0: Port device batadv1 added [ 894.152720][T17091] xt_CT: You must specify a L4 protocol and not use inversions on it [ 894.267986][T17098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3255'. [ 894.280300][T17098] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3255'. [ 894.909711][T17111] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3260'. [ 894.923703][T17111] netlink: 204 bytes leftover after parsing attributes in process `syz.5.3260'. [ 894.935370][T17111] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3260'. [ 895.766304][ T5917] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 895.922006][T17132] loop4: detected capacity change from 0 to 524255232 [ 895.960154][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 895.972264][ T5917] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 895.992751][ T5917] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 896.006003][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.161940][ T5917] usb 5-1: config 0 descriptor?? [ 896.206038][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 896.355859][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 896.363738][ T10] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 896.372496][ T10] usb 2-1: config 0 has no interface number 0 [ 896.400573][ T10] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 896.415896][T15545] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 896.435269][ T10] usb 2-1: config 0 interface 85 has no altsetting 0 [ 896.484805][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 896.494131][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.502331][ T10] usb 2-1: Product: syz [ 896.506666][ T10] usb 2-1: Manufacturer: syz [ 896.511302][ T10] usb 2-1: SerialNumber: syz [ 896.520089][ T10] usb 2-1: config 0 descriptor?? [ 896.585745][T15545] usb 1-1: Using ep0 maxpacket: 16 [ 896.660223][ T5917] usbhid 5-1:0.0: can't add hid device: -32 [ 896.675083][ T5917] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 897.020056][T17142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3273'. [ 897.044621][T17144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3272'. [ 897.146898][ T10] appletouch 2-1:0.85: Geyser mode initialized. [ 897.173057][ T10] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input52 [ 897.363119][T17145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.378503][T17145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.492109][ T10] usb 2-1: USB disconnect, device number 5 [ 897.573082][ T10] appletouch 2-1:0.85: input: appletouch disconnected [ 897.759285][T17157] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3277'. [ 897.777043][T17157] netlink: 204 bytes leftover after parsing attributes in process `syz.5.3277'. [ 897.787716][T17157] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3277'. [ 897.972277][T17163] tipc: Enabling of bearer rejected, failed to enable media [ 897.981041][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 898.155736][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 898.169008][ T10] usb 2-1: config 0 has an invalid interface number: 247 but max is 0 [ 898.180170][ T10] usb 2-1: config 0 has no interface number 0 [ 898.193431][ T10] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 898.203991][ T10] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 898.258174][ T10] usb 2-1: Product: syz [ 898.271381][ T10] usb 2-1: Manufacturer: syz [ 898.293972][ T10] usb 2-1: config 0 descriptor?? [ 898.388563][T17167] netlink: zone id is out of range [ 898.406066][T17167] netlink: zone id is out of range [ 898.411802][T17167] netlink: zone id is out of range [ 898.418950][T17167] netlink: zone id is out of range [ 898.424674][T17167] netlink: zone id is out of range [ 898.432521][T17167] netlink: zone id is out of range [ 898.440842][T17167] netlink: zone id is out of range [ 898.448754][T17167] netlink: zone id is out of range [ 898.454295][T17167] netlink: zone id is out of range [ 898.462776][T17167] netlink: zone id is out of range [ 899.068683][T15545] usb 1-1: unable to get BOS descriptor or descriptor too short [ 899.093636][T15545] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 899.110865][T15545] usb 1-1: can't read configurations, error -71 [ 899.273741][T17178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3284'. [ 899.340723][T17181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3285'. [ 899.697294][ T10] usb 2-1: USB disconnect, device number 6 [ 899.755979][T17185] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3286'. [ 900.156712][T15545] usb 5-1: USB disconnect, device number 19 [ 900.394499][T17206] vivid-000: disconnect [ 900.413618][T17204] vivid-000: reconnect [ 900.677099][T17215] Cannot find add_set index 3 as target [ 900.743833][T17217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3297'. [ 901.233982][T17227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3301'. [ 901.458728][T17235] netlink: 'syz.0.3302': attribute type 1 has an invalid length. [ 901.618153][T17235] 8021q: adding VLAN 0 to HW filter on device bond1 [ 901.764862][T17244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3306'. [ 901.790208][T17242] bond1: (slave gretap1): making interface the new active one [ 901.807652][T17241] netlink: 'syz.3.3305': attribute type 3 has an invalid length. [ 901.815462][T17241] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3305'. [ 901.865854][T17242] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 902.058666][T17260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 902.103212][T17242] syz.0.3302 (17242) used greatest stack depth: 19512 bytes left [ 902.107087][T17260] netlink: 'syz.1.3309': attribute type 10 has an invalid length. [ 902.193332][T17268] loop6: detected capacity change from 0 to 7 [ 902.242376][T17268] Dev loop6: unable to read RDB block 7 [ 902.293246][T17268] loop6: AHDI p4 [ 902.304192][T17260] mac80211_hwsim hwsim40 wlan1: entered promiscuous mode [ 902.312593][T17260] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 902.315883][T17268] loop6: partition table partially beyond EOD, truncated [ 902.893561][T17290] Cannot find add_set index 3 as target [ 903.052872][T17299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3318'. [ 903.255897][ T5917] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 903.300558][T17303] Cannot find add_set index 3 as target [ 903.465967][ T5917] usb 6-1: Using ep0 maxpacket: 8 [ 903.477043][ T5917] usb 6-1: config 150 has an invalid interface number: 204 but max is 1 [ 903.524077][ T5917] usb 6-1: config 150 has no interface number 0 [ 903.531557][ T5917] usb 6-1: config 150 interface 204 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 903.551281][ T5917] usb 6-1: config 150 interface 204 has no altsetting 0 [ 903.561142][ T5917] usb 6-1: config 150 interface 1 has no altsetting 0 [ 903.572747][ T5917] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 903.583608][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.594001][ T5917] usb 6-1: Product: syz [ 903.598803][ T5917] usb 6-1: Manufacturer: syz [ 903.604380][ T5917] usb 6-1: SerialNumber: syz [ 903.609405][ T9] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 903.772208][ T9] usb 1-1: config 0 has no interfaces? [ 903.781993][ T9] usb 1-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 903.816088][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.884602][ T5917] xr_serial 6-1:150.204: xr_serial converter detected [ 903.932078][ T9] usb 1-1: config 0 descriptor?? [ 904.159006][T17308] bridge0: entered promiscuous mode [ 904.164485][T17308] vlan2: entered promiscuous mode [ 904.266469][ T1208] usb 1-1: USB disconnect, device number 25 [ 904.555943][ T9] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 904.667219][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 904.699864][ T5917] usb 6-1: xr_serial converter now attached to ttyUSB0 [ 904.748345][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 904.776136][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 904.805908][ T9] usb 5-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 904.820835][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.836407][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 904.847483][ T10] usb 2-1: config 0 has no interfaces? [ 904.859777][ T9] usb 5-1: config 0 descriptor?? [ 904.877883][ T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 904.890041][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.915903][ T10] usb 2-1: Product: syz [ 904.920138][ T10] usb 2-1: Manufacturer: syz [ 904.942841][ T5917] usb 6-1: USB disconnect, device number 21 [ 904.964989][ T5917] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 904.965164][T17328] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 904.986235][ T5917] xr_serial 6-1:150.204: device disconnected [ 904.995844][ T10] usb 2-1: SerialNumber: syz [ 905.019967][ T10] usb 2-1: config 0 descriptor?? [ 905.167552][T17333] vlan2: entered promiscuous mode [ 905.172760][T17333] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 905.185324][T17333] vlan2: entered allmulticast mode [ 905.191337][T17333] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 905.221984][T17333] team0: Port device vlan2 added [ 905.329971][T17337] FAULT_INJECTION: forcing a failure. [ 905.329971][T17337] name failslab, interval 1, probability 0, space 0, times 0 [ 905.343751][T17337] CPU: 0 UID: 0 PID: 17337 Comm: syz.0.3329 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 905.343779][T17337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 905.343791][T17337] Call Trace: [ 905.343799][T17337] [ 905.343812][T17337] dump_stack_lvl+0x189/0x250 [ 905.343847][T17337] ? __pfx____ratelimit+0x10/0x10 [ 905.343877][T17337] ? __pfx_dump_stack_lvl+0x10/0x10 [ 905.343907][T17337] ? __pfx__printk+0x10/0x10 [ 905.343934][T17337] ? __pfx___might_resched+0x10/0x10 [ 905.343961][T17337] ? fs_reclaim_acquire+0x7d/0x100 [ 905.343988][T17337] should_fail_ex+0x414/0x560 [ 905.344026][T17337] should_failslab+0xa8/0x100 [ 905.344048][T17337] __kmalloc_node_noprof+0xd1/0x4e0 [ 905.344067][T17337] ? crypto_create_tfm_node+0x83/0x3f0 [ 905.344091][T17337] crypto_create_tfm_node+0x83/0x3f0 [ 905.344107][T17337] crypto_alloc_tfm_node+0x172/0x3f0 [ 905.344122][T17337] ah_init_state+0x140/0x650 [ 905.344138][T17337] __xfrm_init_state+0xa73/0x13f0 [ 905.344151][T17337] ? __xfrm_init_state+0x7ef/0x13f0 [ 905.344165][T17337] xfrm_init_state+0x18/0xa0 [ 905.344176][T17337] pfkey_add+0x1d38/0x2e00 [ 905.344197][T17337] ? __pfx_pfkey_add+0x10/0x10 [ 905.344207][T17337] ? kmem_cache_free+0x18f/0x400 [ 905.344223][T17337] pfkey_sendmsg+0xbfe/0x1090 [ 905.344242][T17337] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 905.344266][T17337] ? __asan_memset+0x22/0x50 [ 905.344281][T17337] ? __import_iovec+0x5d4/0x7f0 [ 905.344290][T17337] ? aa_sock_msg_perm+0x94/0x160 [ 905.344305][T17337] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 905.344318][T17337] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 905.344329][T17337] __sock_sendmsg+0x21c/0x270 [ 905.344347][T17337] ____sys_sendmsg+0x505/0x830 [ 905.344363][T17337] ? __pfx_____sys_sendmsg+0x10/0x10 [ 905.344384][T17337] ___sys_sendmsg+0x21f/0x2a0 [ 905.344398][T17337] ? __pfx____sys_sendmsg+0x10/0x10 [ 905.344430][T17337] ? __fget_files+0x2a/0x420 [ 905.344441][T17337] ? __fget_files+0x3a0/0x420 [ 905.344458][T17337] __sys_sendmsg+0x164/0x220 [ 905.344471][T17337] ? __pfx___sys_sendmsg+0x10/0x10 [ 905.344491][T17337] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 905.344508][T17337] ? lockdep_hardirqs_on+0x9c/0x150 [ 905.344524][T17337] __do_fast_syscall_32+0xb6/0x2b0 [ 905.344534][T17337] ? lockdep_hardirqs_on+0x9c/0x150 [ 905.344551][T17337] do_fast_syscall_32+0x34/0x80 [ 905.344561][T17337] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 905.344573][T17337] RIP: 0023:0xf709e539 [ 905.344583][T17337] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 905.344592][T17337] RSP: 002b:00000000f508e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 905.344604][T17337] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 905.344612][T17337] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 905.344618][T17337] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 905.344624][T17337] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 905.344630][T17337] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 905.344645][T17337] [ 905.666184][ T979] usb 2-1: USB disconnect, device number 7 [ 905.718653][ T9] glorious 0003:258A:0036.0028: unknown main item tag 0x1 [ 905.732345][ T9] glorious 0003:258A:0036.0028: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.4-1/input0 [ 905.833300][T17339] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 905.866708][T17339] team0: Port device batadv1 added [ 906.043915][T17346] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3332'. [ 906.045001][T17346] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3332'. [ 906.396228][ T979] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 906.461585][T17357] --map-set only usable from mangle table [ 906.537820][ T979] usb 1-1: device descriptor read/64, error -71 [ 906.805810][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 906.876530][ T979] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 907.078170][ T979] usb 1-1: device descriptor read/64, error -71 [ 907.170823][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 907.185956][ T979] usb usb1-port1: attempt power cycle [ 907.213593][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 907.223524][ T48] usb 5-1: USB disconnect, device number 20 [ 907.250596][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 907.357381][ T9] usb 2-1: config 1 interface 0 has no altsetting 1 [ 907.411139][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 907.430048][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.454336][ T9] usb 2-1: Product: syz [ 907.461363][ T9] usb 2-1: Manufacturer: syz [ 907.469127][ T9] usb 2-1: SerialNumber: syz [ 907.484013][ T9] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 907.502320][ T9] cdc_ncm 2-1:1.0: bind() failure [ 907.535868][ T979] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 907.586628][ T979] usb 1-1: device descriptor read/8, error -71 [ 907.609491][T17374] loop8: detected capacity change from 0 to 7 [ 907.627725][ T5917] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 907.629321][T14739] Dev loop8: unable to read RDB block 7 [ 907.644625][T14739] loop8: unable to read partition table [ 907.650878][T14739] loop8: partition table beyond EOD, truncated [ 907.659008][T17374] Dev loop8: unable to read RDB block 7 [ 907.666161][T17374] loop8: unable to read partition table [ 907.684509][T17374] loop8: partition table beyond EOD, truncated [ 907.696060][T15545] usb 2-1: USB disconnect, device number 8 [ 907.703995][T17374] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 907.777349][ T5917] usb 6-1: device descriptor read/64, error -71 [ 907.825762][ T979] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 907.847605][ T979] usb 1-1: device descriptor read/8, error -71 [ 907.965808][T17384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3347'. [ 907.977537][ T979] usb usb1-port1: unable to enumerate USB device [ 908.059871][ T5917] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 908.112199][T17388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3349'. [ 908.225873][ T5917] usb 6-1: device descriptor read/64, error -71 [ 908.238215][T17390] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3350'. [ 908.247794][T17390] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3350'. [ 908.265976][T17390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3350'. [ 908.346781][ T5917] usb usb6-port1: attempt power cycle [ 908.422068][T17394] xt_bpf: check failed: parse error [ 908.428751][T17396] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 908.433761][T17394] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3352'. [ 908.570098][T17402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3355'. [ 908.742964][ T5917] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 908.744693][T17411] overlayfs: missing 'lowerdir' [ 908.805140][T17412] netlink: 'syz.4.3354': attribute type 10 has an invalid length. [ 908.828009][T17412] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3354'. [ 908.856296][ T5917] usb 6-1: device descriptor read/8, error -71 [ 909.005732][T17412] team0: Port device geneve0 added [ 909.029211][ T9] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 909.117169][ T5917] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 909.236728][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 909.350124][ T5917] usb 6-1: device descriptor read/8, error -71 [ 909.518959][ T5917] usb usb6-port1: unable to enumerate USB device [ 910.170907][T17422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3361'. [ 910.185803][ T979] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 910.356093][ T979] usb 1-1: Using ep0 maxpacket: 32 [ 910.469887][ T979] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 910.539001][ T979] usb 1-1: config 0 has no interface number 0 [ 910.581715][ T979] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 910.625789][ T979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.701782][ T979] usb 1-1: Product: syz [ 910.718360][ T979] usb 1-1: Manufacturer: syz [ 910.736568][ T979] usb 1-1: SerialNumber: syz [ 910.984868][ T979] usb 1-1: config 0 descriptor?? [ 911.013718][ T979] smsc95xx v2.0.0 [ 911.017504][T11170] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 911.197750][T17436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3365'. [ 911.246068][T11170] usb 5-1: config 0 has no interfaces? [ 911.274461][T11170] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 911.336331][T11170] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.428490][ T979] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 911.455193][T11170] usb 5-1: Product: syz [ 911.465080][T11170] usb 5-1: Manufacturer: syz [ 911.469777][ T979] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 911.485996][T11170] usb 5-1: SerialNumber: syz [ 911.504031][T11170] usb 5-1: config 0 descriptor?? [ 911.653334][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 911.662027][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 911.705726][ T9] usb 4-1: can't read configurations, error -71 [ 911.722349][T11170] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 911.885794][T11170] usb 6-1: Using ep0 maxpacket: 16 [ 911.916239][T11170] usb 6-1: unable to get BOS descriptor or descriptor too short [ 911.979777][T11170] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 912.003062][T11170] usb 6-1: can't read configurations, error -71 [ 912.788018][T17448] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3369'. [ 912.987701][ T979] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 913.053100][ T979] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 913.086026][ T979] usb 1-1: USB disconnect, device number 30 [ 913.737854][T17465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3374'. [ 914.252000][T17477] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3378'. [ 914.422658][T17483] xt_hashlimit: overflow, try lower: 5/0 [ 914.466145][ T5920] usb 5-1: USB disconnect, device number 21 [ 915.185302][T17493] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3382'. [ 915.536312][T17496] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 915.548499][ T9] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 915.716373][T13409] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 915.726906][ T9] usb 1-1: config 0 has no interfaces? [ 915.732475][ T9] usb 1-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 915.772481][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.797619][ T9] usb 1-1: config 0 descriptor?? [ 915.815860][T17506] FAULT_INJECTION: forcing a failure. [ 915.815860][T17506] name failslab, interval 1, probability 0, space 0, times 0 [ 915.859364][T17506] CPU: 0 UID: 0 PID: 17506 Comm: syz.5.3389 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 915.859395][T17506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 915.859409][T17506] Call Trace: [ 915.859417][T17506] [ 915.859426][T17506] dump_stack_lvl+0x189/0x250 [ 915.859462][T17506] ? __pfx____ratelimit+0x10/0x10 [ 915.859492][T17506] ? __pfx_dump_stack_lvl+0x10/0x10 [ 915.859522][T17506] ? __pfx__printk+0x10/0x10 [ 915.859551][T17506] ? __pfx___might_resched+0x10/0x10 [ 915.859581][T17506] ? fs_reclaim_acquire+0x7d/0x100 [ 915.859609][T17506] should_fail_ex+0x414/0x560 [ 915.859639][T17506] should_failslab+0xa8/0x100 [ 915.859662][T17506] __kmalloc_node_noprof+0xd1/0x4e0 [ 915.859681][T17506] ? crypto_create_tfm_node+0x83/0x3f0 [ 915.859707][T17506] crypto_create_tfm_node+0x83/0x3f0 [ 915.859733][T17506] crypto_ahash_init_tfm+0x162/0x770 [ 915.859762][T17506] ? __kmalloc_node_noprof+0x293/0x4e0 [ 915.859789][T17506] crypto_create_tfm_node+0x18c/0x3f0 [ 915.859816][T17506] crypto_alloc_tfm_node+0x172/0x3f0 [ 915.859846][T17506] ah_init_state+0x140/0x650 [ 915.859875][T17506] __xfrm_init_state+0xa73/0x13f0 [ 915.859897][T17506] ? __xfrm_init_state+0x7ef/0x13f0 [ 915.859923][T17506] xfrm_init_state+0x18/0xa0 [ 915.859943][T17506] pfkey_add+0x1d38/0x2e00 [ 915.859984][T17506] ? __pfx_pfkey_add+0x10/0x10 [ 915.860000][T17506] ? kmem_cache_free+0x18f/0x400 [ 915.860032][T17506] pfkey_sendmsg+0xbfe/0x1090 [ 915.860069][T17506] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 915.860112][T17506] ? __asan_memset+0x22/0x50 [ 915.860138][T17506] ? __import_iovec+0x5d4/0x7f0 [ 915.860155][T17506] ? aa_sock_msg_perm+0x94/0x160 [ 915.860182][T17506] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 915.860207][T17506] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 915.860228][T17506] __sock_sendmsg+0x21c/0x270 [ 915.860267][T17506] ____sys_sendmsg+0x505/0x830 [ 915.860297][T17506] ? __pfx_____sys_sendmsg+0x10/0x10 [ 915.860338][T17506] ___sys_sendmsg+0x21f/0x2a0 [ 915.860365][T17506] ? __pfx____sys_sendmsg+0x10/0x10 [ 915.860426][T17506] ? __fget_files+0x2a/0x420 [ 915.860447][T17506] ? __fget_files+0x3a0/0x420 [ 915.860479][T17506] __sys_sendmsg+0x164/0x220 [ 915.860506][T17506] ? __pfx___sys_sendmsg+0x10/0x10 [ 915.860544][T17506] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 915.860572][T17506] ? lockdep_hardirqs_on+0x9c/0x150 [ 915.860602][T17506] __do_fast_syscall_32+0xb6/0x2b0 [ 915.860620][T17506] ? lockdep_hardirqs_on+0x9c/0x150 [ 915.860650][T17506] do_fast_syscall_32+0x34/0x80 [ 915.860667][T17506] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 915.860687][T17506] RIP: 0023:0xf7fa6539 [ 915.860702][T17506] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 915.860718][T17506] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 915.860736][T17506] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 915.860748][T17506] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 915.860758][T17506] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 915.860768][T17506] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 915.860779][T17506] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 915.860803][T17506] [ 916.196379][ C0] vkms_vblank_simulate: vblank timer overrun [ 916.246064][T13409] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 916.256389][T13409] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 916.267362][T13409] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 916.302564][T13409] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=ee.9d [ 916.312228][T13409] usb 4-1: New USB device strings: Mfr=230, Product=157, SerialNumber=160 [ 916.321066][T13409] usb 4-1: Product: syz [ 916.325255][T13409] usb 4-1: Manufacturer: syz [ 916.329887][T13409] usb 4-1: SerialNumber: syz [ 916.347313][T17491] vlan3: entered promiscuous mode [ 916.361373][T13409] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 916.368911][T13409] usb 4-1: invalid MIDI out EP 0 [ 916.447377][T13409] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 916.524249][T15537] udevd[15537]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 916.564474][T13409] usb 4-1: USB disconnect, device number 101 [ 916.570960][T17494] delete_channel: no stack [ 916.585321][T17513] netlink: 'syz.4.3390': attribute type 4 has an invalid length. [ 916.624034][ T9] usb 1-1: USB disconnect, device number 31 [ 916.665734][ T5917] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 916.748941][T17515] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 916.761219][T17515] team0: Port device batadv1 added [ 916.817678][ T5917] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 916.856511][ T5917] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 916.889522][ T5917] usb 6-1: config 0 interface 0 has no altsetting 0 [ 916.897449][ T5917] usb 6-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 916.920148][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.945097][ T5917] usb 6-1: config 0 descriptor?? [ 917.059324][T17521] netlink: 4844 bytes leftover after parsing attributes in process `syz.4.3394'. [ 917.186573][T17511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 917.228467][T17511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 917.260885][ T5917] lenovo 0003:17EF:6067.0029: unknown main item tag 0x0 [ 917.268796][ T5917] lenovo 0003:17EF:6067.0029: unknown main item tag 0x0 [ 917.325329][ T5917] lenovo 0003:17EF:6067.0029: hidraw0: USB HID v0.00 Device [HID 17ef:6067] on usb-dummy_hcd.5-1/input0 [ 917.478586][ T5917] usb 6-1: USB disconnect, device number 28 [ 918.025471][ T30] audit: type=1326 audit(1750625470.749:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17534 comm="syz.5.3398" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 918.050762][ T30] audit: type=1326 audit(1750625470.749:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17534 comm="syz.5.3398" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 918.072854][ C0] vkms_vblank_simulate: vblank timer overrun [ 918.086448][ T979] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 918.092102][ T30] audit: type=1326 audit(1750625470.749:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17534 comm="syz.5.3398" exe="/root/syz-executor" sig=0 arch=40000003 syscall=177 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 918.120807][ T30] audit: type=1326 audit(1750625470.749:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17534 comm="syz.5.3398" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 918.145871][ T5920] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 918.160341][ T30] audit: type=1326 audit(1750625470.749:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17534 comm="syz.5.3398" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 918.186692][ T30] audit: type=1326 audit(1750625470.749:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17534 comm="syz.5.3398" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 918.213761][ T30] audit: type=1326 audit(1750625470.749:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17534 comm="syz.5.3398" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 918.235867][ C0] vkms_vblank_simulate: vblank timer overrun [ 918.247528][ T30] audit: type=1326 audit(1750625470.749:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17534 comm="syz.5.3398" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 918.269728][ C0] vkms_vblank_simulate: vblank timer overrun [ 918.328054][ T30] audit: type=1326 audit(1750625470.749:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17534 comm="syz.5.3398" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 918.362045][ T30] audit: type=1326 audit(1750625470.749:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17534 comm="syz.5.3398" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 918.386084][ T979] usb 1-1: Using ep0 maxpacket: 32 [ 918.399790][ T979] usb 1-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 918.412594][ T979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.430704][ T979] usb 1-1: config 0 descriptor?? [ 918.446498][ T5920] usb 2-1: config 0 has no interfaces? [ 918.452005][ T5920] usb 2-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 918.461553][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.507026][ T5920] usb 2-1: config 0 descriptor?? [ 918.624035][T17543] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3401'. [ 918.755267][T17533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3397'. [ 918.805912][T13409] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 918.848994][T17533] vlan2: entered promiscuous mode [ 918.921888][ T979] viewsonic 0003:2133:0018.002A: item fetching failed at offset 0/4 [ 918.956996][ T979] viewsonic 0003:2133:0018.002A: probe with driver viewsonic failed with error -22 [ 918.970134][T13409] usb 4-1: config 0 has no interfaces? [ 918.987099][T13409] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 919.004909][T13409] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.014898][T13409] usb 4-1: Product: syz [ 919.027765][T13409] usb 4-1: Manufacturer: syz [ 919.032658][T13409] usb 4-1: SerialNumber: syz [ 919.049863][T13409] usb 4-1: config 0 descriptor?? [ 919.062514][ T10] usb 2-1: USB disconnect, device number 9 [ 919.127948][ T979] usb 1-1: USB disconnect, device number 32 [ 919.135952][ T5917] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 919.285720][ T5917] usb 6-1: Using ep0 maxpacket: 16 [ 919.298555][ T5917] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 919.314708][T17541] [U]  [ 919.365694][ T5917] usb 6-1: config 0 has no interface number 0 [ 919.377874][ T5917] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 919.390549][ T5917] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 919.500529][ T5917] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 919.509951][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.524144][ T5917] usb 6-1: config 0 descriptor?? [ 919.881714][T17554] Cannot find add_set index 3 as target [ 920.025327][T17556] Cannot find add_set index 3 as target [ 920.159985][ T5917] usbhid 6-1:0.1: can't add hid device: -71 [ 920.192114][ T5917] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 920.230397][ T5917] usb 6-1: USB disconnect, device number 29 [ 920.414406][T17567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3408'. [ 921.209651][T17583] tipc: Started in network mode [ 921.217054][T17583] tipc: Node identity -:, cluster identity 4711 [ 921.244359][T17583] tipc: Enabling of bearer rejected, failed to enable media [ 921.265736][ T5917] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 921.425759][ T5917] usb 1-1: device descriptor read/64, error -71 [ 921.449680][ T5920] usb 4-1: USB disconnect, device number 102 [ 921.685901][ T5917] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 921.741939][T17594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3412'. [ 921.818404][ T5917] usb 1-1: device descriptor read/64, error -71 [ 921.947629][ T5917] usb usb1-port1: attempt power cycle [ 921.976073][T17598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3415'. [ 922.036654][T17600] netlink: 'syz.3.3416': attribute type 27 has an invalid length. [ 922.178603][T17602] Cannot find add_set index 3 as target [ 922.325795][ T5917] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 922.336118][ T5920] usb 4-1: new low-speed USB device number 103 using dummy_hcd [ 922.391843][ T5917] usb 1-1: device descriptor read/8, error -71 [ 922.497757][ T5920] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 922.516564][ T5920] usb 4-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 922.526705][T17615] fuse: Bad value for 'group_id' [ 922.531858][T17615] fuse: Bad value for 'group_id' [ 922.537730][ T5920] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 922.549226][ T5920] usb 4-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 922.563516][T17616] Cannot find add_set index 3 as target [ 922.572300][ T5920] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 922.583041][ T5920] usb 4-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 922.599122][ T5920] usb 4-1: string descriptor 0 read error: -22 [ 922.605465][ T5920] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 922.615939][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.657540][ T5917] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 922.676633][ T5917] usb 1-1: device descriptor read/8, error -71 [ 922.796245][ T5917] usb usb1-port1: unable to enumerate USB device [ 922.838366][T17600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 922.850229][T17600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 922.865046][ T5920] usb 4-1: USB disconnect, device number 103 [ 923.191957][T17623] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3424'. [ 923.339431][ T5917] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 923.435102][T17626] input: syz0 as /devices/virtual/input/input53 [ 923.533776][ T5917] usb 6-1: config 0 has no interfaces? [ 923.611065][ T5917] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 923.661549][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.685784][ T5917] usb 6-1: Product: syz [ 923.690091][ T5917] usb 6-1: Manufacturer: syz [ 923.694706][ T5917] usb 6-1: SerialNumber: syz [ 923.737415][ T5917] usb 6-1: config 0 descriptor?? [ 923.852080][T17636] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3428'. [ 923.896422][T17638] Cannot find add_set index 3 as target [ 923.954263][T17621] [U]  [ 924.103713][T17641] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 924.112210][T17639] ipvlan2: entered promiscuous mode [ 925.565867][T13409] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 925.662494][T17662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3437'. [ 925.718876][T17664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3438'. [ 925.760204][T13409] usb 1-1: config 0 has no interfaces? [ 925.778569][T13409] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 925.787917][T13409] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.811869][T13409] usb 1-1: Product: syz [ 925.824362][T13409] usb 1-1: Manufacturer: syz [ 925.836654][T13409] usb 1-1: SerialNumber: syz [ 925.847560][T17666] Cannot find add_set index 3 as target [ 925.873880][T13409] usb 1-1: config 0 descriptor?? [ 925.908851][T17668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 925.950492][T11170] usb 6-1: USB disconnect, device number 30 [ 925.956386][T17671] netlink: 'syz.3.3439': attribute type 10 has an invalid length. [ 926.005271][T17671] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 926.239940][T17677] xt_SECMARK: invalid mode: 0 [ 926.346413][T17679] input: syz0 as /devices/virtual/input/input54 [ 927.075850][T13409] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 927.239352][T13409] usb 4-1: config 0 has no interfaces? [ 927.266360][T13409] usb 4-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 927.315960][T13409] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.343903][T13409] usb 4-1: config 0 descriptor?? [ 927.446449][T17704] veth0_to_team: entered promiscuous mode [ 927.452713][T17704] veth0_to_team: entered allmulticast mode [ 927.641871][T17687] bridge0: entered promiscuous mode [ 927.647451][T17687] vlan2: entered promiscuous mode [ 927.751105][ T979] usb 4-1: USB disconnect, device number 104 [ 927.785731][T13409] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 927.884097][ T5917] usb 1-1: USB disconnect, device number 37 [ 927.966068][T17707] loop8: detected capacity change from 0 to 7 [ 927.976413][T17707] Dev loop8: unable to read RDB block 7 [ 927.985604][T17707] loop8: unable to read partition table [ 927.994770][T17707] loop8: partition table beyond EOD, truncated [ 928.001093][T17707] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 928.054605][T13409] usb 6-1: config 0 has no interfaces? [ 928.140075][T13409] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 928.156444][T13409] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.170480][T13409] usb 6-1: Product: syz [ 928.175016][T13409] usb 6-1: Manufacturer: syz [ 928.190145][T13409] usb 6-1: SerialNumber: syz [ 928.259583][T13409] usb 6-1: config 0 descriptor?? [ 928.305770][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 928.500626][T17703] [U]  [ 928.643180][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 928.887569][T17721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3457'. [ 928.995786][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 929.013861][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 929.157773][T17726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3459'. [ 929.209179][T17726] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3459'. [ 929.219283][ T9] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 929.259053][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.493325][ T9] usb 2-1: config 0 descriptor?? [ 930.245828][ T979] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 930.405335][ T979] usb 1-1: config 0 has no interfaces? [ 930.412387][ T979] usb 1-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 930.443333][ T979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.455393][ T979] usb 1-1: config 0 descriptor?? [ 930.465729][ T9] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 930.583491][ T10] usb 6-1: USB disconnect, device number 31 [ 930.646590][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 930.654289][ T9] usb 4-1: config 73 has too many interfaces: 109, using maximum allowed: 32 [ 930.680970][ T9] usb 4-1: config 73 has 1 interface, different from the descriptor's value: 109 [ 930.681848][T17739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3464'. [ 930.720478][T17739] vlan3: entered promiscuous mode [ 930.735772][ T9] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 930.772120][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.807413][T17746] Cannot find add_set index 3 as target [ 930.912714][ T979] usb 1-1: USB disconnect, device number 38 [ 931.053681][ T9] usb 4-1: string descriptor 0 read error: -71 [ 931.087591][ T9] usb 4-1: Found UVC 0.00 device (2833:0201) [ 931.117675][ T9] usb 4-1: No valid video chain found. [ 931.132834][ T9] usb 4-1: USB disconnect, device number 105 [ 931.520280][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.526841][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.616711][ T9] usb 2-1: USB disconnect, device number 10 [ 931.671890][T17768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3473'. [ 932.038550][T17783] [U]  [ 932.325867][ T979] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 932.495774][ T979] usb 2-1: Using ep0 maxpacket: 8 [ 932.504594][ T979] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 932.514923][ T979] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 932.590979][ T979] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 932.682807][ T979] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 932.722929][ T979] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 932.787459][ T979] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 932.824620][ T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.155888][T13409] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 933.165194][ T979] usb 2-1: usb_control_msg returned -32 [ 933.171083][ T979] usbtmc 2-1:16.0: can't read capabilities [ 933.283698][T17800] Cannot find add_set index 3 as target [ 933.367958][T13409] usb 5-1: config 2 has an invalid interface number: 233 but max is 0 [ 933.387419][T13409] usb 5-1: config 2 has no interface number 0 [ 933.437162][T13409] usb 5-1: config 2 interface 233 has no altsetting 0 [ 933.505912][T13409] usb 5-1: New USB device found, idVendor=2013, idProduct=0262, bcdDevice=86.7d [ 933.515714][T13409] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.531704][T13409] usb 5-1: Product: syz [ 933.623036][T13409] usb 5-1: Manufacturer: syz [ 933.658552][T13409] usb 5-1: SerialNumber: syz [ 933.801350][T17801] netlink: 'syz.1.3478': attribute type 10 has an invalid length. [ 933.909280][T13409] usb 5-1: USB disconnect, device number 22 [ 933.934817][ T979] usb 2-1: USB disconnect, device number 11 [ 934.037093][T17803] vcan0: tx drop: invalid da for name 0x0400000000000000 [ 934.468453][T17806] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 934.825819][T13409] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 935.049820][T17824] loop6: detected capacity change from 0 to 7 [ 935.088544][T17824] Dev loop6: unable to read RDB block 7 [ 935.094979][T17824] loop6: AHDI p4 [ 935.105710][T17824] loop6: partition table partially beyond EOD, truncated [ 935.480127][T17830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3494'. [ 935.946225][T17853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3501'. [ 936.094922][T17856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3502'. [ 936.818534][T17864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 936.897763][T17864] netlink: 'syz.0.3504': attribute type 10 has an invalid length. [ 937.001247][T17864] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 937.874843][T17874] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 938.082058][T17886] [U]  [ 938.129539][T17884] xt_SECMARK: invalid mode: 0 [ 938.554121][ T979] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 938.696214][ T10] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 938.725943][ T979] usb 4-1: Using ep0 maxpacket: 16 [ 938.855038][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 938.872329][ T10] usb 1-1: config 0 has no interfaces? [ 938.956477][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 938.991475][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.008257][ T10] usb 1-1: Product: syz [ 939.036917][ T10] usb 1-1: Manufacturer: syz [ 939.049262][ T10] usb 1-1: SerialNumber: syz [ 939.078665][ T10] usb 1-1: config 0 descriptor?? [ 939.366121][ T48] usb 1-1: USB disconnect, device number 39 [ 940.527949][T17897] xt_CT: You must specify a L4 protocol and not use inversions on it [ 942.481816][T17907] Cannot find del_set index 0 as target [ 943.060324][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 943.246643][ T10] usb 2-1: config 0 has no interfaces? [ 943.275391][ T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 943.293127][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.311350][ T10] usb 2-1: Product: syz [ 943.332329][ T10] usb 2-1: Manufacturer: syz [ 943.344494][ T10] usb 2-1: SerialNumber: syz [ 943.380581][ T10] usb 2-1: config 0 descriptor?? [ 943.766022][ T979] usb 4-1: unable to get BOS descriptor or descriptor too short [ 943.786556][ T979] usb 4-1: unable to read config index 0 descriptor/start: -32 [ 943.803265][ T979] usb 4-1: chopping to 0 config(s) [ 943.822445][ T979] usb 4-1: can't read configurations, error -32 [ 943.986301][ T979] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 944.155310][ T979] usb 4-1: device descriptor read/64, error -32 [ 944.289853][ T979] usb usb4-port1: attempt power cycle [ 944.417459][T17920] loop8: detected capacity change from 0 to 7 [ 944.431757][T17924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3523'. [ 944.456925][T17920] Dev loop8: unable to read RDB block 7 [ 944.471733][T17920] loop8: unable to read partition table [ 944.497502][T17920] loop8: partition table beyond EOD, truncated [ 944.516920][T17920] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 944.612779][T17927] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3524'. [ 944.655230][T17930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3525'. [ 944.677782][T17927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3524'. [ 944.716786][T17930] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3525'. [ 944.735990][ T979] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 944.768337][ T979] usb 4-1: config 0 has no interfaces? [ 944.775759][ T979] usb 4-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 944.784843][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.798454][ T979] usb 4-1: config 0 descriptor?? [ 944.915725][T11170] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 945.022048][T17923] vlan2: entered promiscuous mode [ 945.084315][T17932] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 945.105400][T13409] usb 4-1: USB disconnect, device number 108 [ 945.105538][T11170] usb 6-1: unable to get BOS descriptor or descriptor too short [ 945.142532][T11170] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 945.153824][T11170] usb 6-1: can't read configurations, error -71 [ 945.822543][ T10] usb 2-1: USB disconnect, device number 13 [ 946.258098][ T5920] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 946.309463][T17951] Cannot find add_set index 3 as target [ 946.329507][T17953] [U]  [ 946.462173][ T5920] usb 1-1: Using ep0 maxpacket: 16 [ 946.475782][ T9] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 946.489631][ T5920] usb 1-1: config 1 has an invalid interface number: 23 but max is 2 [ 946.499481][ T5920] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 946.520773][ T5920] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 946.531843][ T5920] usb 1-1: config 1 has no interface number 0 [ 946.543597][ T5920] usb 1-1: config 1 interface 23 altsetting 8 endpoint 0x5 has an invalid bInterval 36, changing to 7 [ 946.555300][ T5920] usb 1-1: config 1 interface 23 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 946.568864][ T5920] usb 1-1: config 1 interface 23 has no altsetting 0 [ 946.642933][ T5920] usb 1-1: New USB device found, idVendor=14b2, idProduct=3c07, bcdDevice=1a.61 [ 946.652321][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.660771][ T5920] usb 1-1: Product: 쓓⭙㵾ఉ쿼厥êŒæ™¦î«°É®í‡¥ï²¹ç–£ä¾´â‰½îŠ‰â €à¦œë¨ŽïŒ’ᆽ [ 946.672153][ T5920] usb 1-1: Manufacturer: 㠭ꨖî”▤뜾릞꾯∗ê¹í ä˜¯å¸—⋽⸡枨ǯ窘Ⲣ⢖サĜ霟Ⳃ鰭설孮ﬖ噢圙䖩ê¼ìžìŠ€ïŠµç¯žâŽ§æ諔핷᥂洓韕삈깕鋘ֆ秡鮴䥎ン쮆狨ᑅ뚖ï½ï„§å¶‘䢛∵扡⋔⭜ܛ쵄牻榣AîŠéŸ´í‚éºá´˜ë½ºè²®ã¶°å«æ‹šå—¤ï¼­ç»ëŸ•ãŸ”鼤蠅㳚㇅è™áŠä…⽳ᵊëžå“™æ¯´ì³‚℞闼衺땬掇﫜댠쎡 [ 946.768531][ T5920] usb 1-1: SerialNumber: 夗ᧅ஑왅탤êﰎ힯ë¾ë¶„﷨맩蠵䠳幛꾄텟套ᎌ곦㨸⃉瞓ᄌ꣙ã°ì·‰æŽ®áµ›ä¸’ã…¡æƒáŒáº‡é‡“ë‘城ឲᘮ콄쇪힯ᄇኅ頎轪𗟘䶫ã™é‹šáƒ‹äŠ†è”®î”ç«ä ·å¿ªåœïŠ«îž‡åƒµà­¬ç”¾î‰†ê€à£ˆêšê•åž½á®ç…‹ëˆÊµä¸¤çš¿à®§ì‘¥á¿±çˆ‡ã»¼ï“Ÿêª¬í—ç¦â¤¸âž±ä–•ê¦‹îª„純䒸蚖熑겺⿇➙놯ꌕ赟 [ 946.808714][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 946.890575][ T9] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 946.898865][ T9] usb 4-1: config 0 has no interface number 0 [ 946.905925][ T9] usb 4-1: config 0 interface 89 has no altsetting 0 [ 946.915211][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 946.925008][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.951987][ T9] usb 4-1: Product: syz [ 946.962497][ T9] usb 4-1: Manufacturer: syz [ 946.973095][ T9] usb 4-1: SerialNumber: syz [ 947.029143][ T9] usb 4-1: config 0 descriptor?? [ 947.253936][T17950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 947.328340][T17950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 947.340930][T17950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 947.368474][T17950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 947.399857][T13409] usb 4-1: USB disconnect, device number 109 [ 948.051875][T17964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3537'. [ 948.421914][T17969] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3538'. [ 948.597533][ T5920] usb 1-1: USB disconnect, device number 40 [ 948.741628][T17969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3538'. [ 948.774686][T17977] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3540'. [ 949.933249][T17993] Cannot find add_set index 3 as target [ 950.425711][ T9] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 950.587617][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 950.597748][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=01a8, bcdDevice= 0.40 [ 950.607010][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.656814][ T9] usb 2-1: Product: syz [ 950.681359][ T9] usb 2-1: Manufacturer: syz [ 950.702413][ T9] usb 2-1: SerialNumber: syz [ 950.769827][T18007] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3549'. [ 951.087496][T18014] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3552'. [ 951.181722][ T9] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 253 proto 1 vid 0x0525 pid 0x01A8 [ 951.646695][T18021] syzkaller1: entered promiscuous mode [ 951.652234][T18021] syzkaller1: entered allmulticast mode [ 951.785913][ T5920] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 951.939361][T11170] usb 2-1: USB disconnect, device number 14 [ 951.959629][ T5920] usb 5-1: too many configurations: 227, using maximum allowed: 8 [ 951.970782][T11170] usblp0: removed [ 952.018724][ T5920] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 952.048569][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.082681][ T5920] usb 5-1: config 0 descriptor?? [ 952.161843][ T5920] pwc: Samsung MPC-C10 USB webcam detected. [ 952.182635][ T5920] pwc: Warning: more than 1 configuration available. [ 952.251460][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.341965][ T5920] pwc: send_video_command error -71 [ 952.375820][ T5920] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 952.383554][ T5920] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 952.418158][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.485708][T11170] usb 6-1: new low-speed USB device number 34 using dummy_hcd [ 952.496851][ T5920] usb 5-1: USB disconnect, device number 23 [ 952.623319][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.660801][T11170] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 952.706233][T11170] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 952.752550][T11170] usb 6-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 952.764598][T18041] netlink: 'syz.1.3563': attribute type 4 has an invalid length. [ 952.790901][T11170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.821520][T11170] usb 6-1: config 0 descriptor?? [ 952.848829][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.025929][ T5920] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 953.053842][T18048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3564'. [ 953.102724][T18048] netlink: 'syz.1.3564': attribute type 15 has an invalid length. [ 953.160449][ T49] bridge_slave_1: left allmulticast mode [ 953.166049][T18048] netlink: 'syz.1.3564': attribute type 18 has an invalid length. [ 953.182557][ T49] bridge_slave_1: left promiscuous mode [ 953.194598][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.226473][ T5920] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 953.238985][ T49] bridge_slave_0: left allmulticast mode [ 953.256101][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 953.270924][ T49] bridge_slave_0: left promiscuous mode [ 953.279751][ T5920] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 953.288740][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.307446][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.323951][T16122] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 953.337367][T16122] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 953.340890][T11170] glorious 0003:258A:0036.002B: unknown main item tag 0x1 [ 953.353122][T16122] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 953.353396][ T5920] usb 1-1: config 0 descriptor?? [ 953.380089][T16122] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 953.381401][T11170] glorious 0003:258A:0036.002B: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.5-1/input0 [ 953.408263][T16122] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 953.726458][ T49] batman_adv: batadv0: Removing interface: ip6gretap1 [ 953.865760][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 953.971403][ T49] team0: Port device gretap1 removed [ 954.037657][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 954.150868][ T9] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 954.171203][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 954.190702][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 954.211555][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.233419][ T9] usb 5-1: config 0 descriptor?? [ 954.502151][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 954.531582][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 954.545142][ T49] bond0 (unregistering): (slave team0): Releasing backup interface [ 954.625178][ T49] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 954.656348][ T49] bond0 (unregistering): Released all slaves [ 954.696725][T18048] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 954.706157][T18048] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 954.715544][T18048] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 954.724331][T18048] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 954.919386][T18048] vxlan0: entered promiscuous mode [ 954.939445][ T9] hid-picolcd 0003:04D8:F002.002C: unknown main item tag 0x0 [ 954.947178][ T9] hid-picolcd 0003:04D8:F002.002C: unknown main item tag 0x0 [ 954.959950][ T9] hid-picolcd 0003:04D8:F002.002C: unknown main item tag 0x0 [ 954.985990][ T9] hid-picolcd 0003:04D8:F002.002C: unknown main item tag 0x0 [ 954.999643][ T5920] usb 1-1: string descriptor 0 read error: -71 [ 955.012103][ T5920] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 955.037912][ T9] hid-picolcd 0003:04D8:F002.002C: unknown main item tag 0x0 [ 955.086468][T13409] usb 6-1: USB disconnect, device number 34 [ 955.128441][ T5920] usb 1-1: USB disconnect, device number 41 [ 955.145680][ T9] hid-picolcd 0003:04D8:F002.002C: unknown main item tag 0x0 [ 955.189426][ T9] hid-picolcd 0003:04D8:F002.002C: unknown main item tag 0x0 [ 955.279997][ T9] hid-picolcd 0003:04D8:F002.002C: No report with id 0xf3 found [ 955.337702][ T9] hid-picolcd 0003:04D8:F002.002C: No report with id 0xf4 found [ 955.457171][T16122] Bluetooth: hci3: command tx timeout [ 955.606736][T18067] Cannot find add_set index 3 as target [ 955.792167][T18075] Cannot find add_set index 3 as target [ 956.605067][T18084] xt_CT: You must specify a L4 protocol and not use inversions on it [ 956.981250][T18056] chnl_net:caif_netlink_parms(): no params data found [ 957.344522][ T5920] usb 5-1: USB disconnect, device number 24 [ 957.446649][T18101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3572'. [ 957.515719][ T51] Bluetooth: hci3: command tx timeout [ 957.537390][T18102] Cannot find del_set index 0 as target [ 957.634953][T18108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3575'. [ 958.072179][T18056] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.103866][T18056] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.111674][T18056] bridge_slave_0: entered allmulticast mode [ 958.133495][T18056] bridge_slave_0: entered promiscuous mode [ 958.155718][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 958.181280][T18056] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.199973][T18056] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.215179][T18056] bridge_slave_1: entered allmulticast mode [ 958.223457][T18056] bridge_slave_1: entered promiscuous mode [ 958.229407][T13409] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 958.336615][ T5920] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 958.346110][ T10] usb 2-1: config 0 has no interfaces? [ 958.357368][ T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 958.367284][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.386036][T13409] usb 5-1: Using ep0 maxpacket: 16 [ 958.394686][T13409] usb 5-1: config 0 has no interfaces? [ 958.405846][T13409] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 958.421900][ T10] usb 2-1: Product: syz [ 958.426775][T13409] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.434791][T13409] usb 5-1: Product: syz [ 958.439436][ T10] usb 2-1: Manufacturer: syz [ 958.444142][ T10] usb 2-1: SerialNumber: syz [ 958.451921][T13409] usb 5-1: Manufacturer: syz [ 958.457571][ T10] usb 2-1: config 0 descriptor?? [ 958.465407][T18056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.483123][T13409] usb 5-1: SerialNumber: syz [ 958.561626][T18056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 958.565708][ T5920] usb 1-1: Using ep0 maxpacket: 8 [ 958.577790][T13409] usb 5-1: config 0 descriptor?? [ 958.611770][T18129] Cannot find add_set index 3 as target [ 958.645404][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 958.792318][ T5920] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 958.805272][T18116] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3577'. [ 958.846811][ T5920] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 958.856798][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.871513][ T5920] usb 1-1: Product: syz [ 958.882974][ T5920] usb 1-1: Manufacturer: syz [ 958.893658][ T5920] usb 1-1: SerialNumber: syz [ 958.907190][T18056] team0: Port device team_slave_0 added [ 958.915988][ T48] usb 5-1: USB disconnect, device number 25 [ 958.947931][ T5920] usb 1-1: config 0 descriptor?? [ 959.057486][T18056] team0: Port device team_slave_1 added [ 959.197443][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 959.219524][T18136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.229851][T18136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.324188][ T49] hsr_slave_0: left promiscuous mode [ 959.341065][ T49] hsr_slave_1: left promiscuous mode [ 959.353196][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 959.365997][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 959.379698][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 959.387848][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 959.480176][ T49] veth1_macvtap: left promiscuous mode [ 959.508115][ T49] veth0_macvtap: left promiscuous mode [ 959.534253][ T49] veth1_vlan: left promiscuous mode [ 959.557896][ T49] veth0_vlan: left promiscuous mode [ 959.595840][T16122] Bluetooth: hci3: command tx timeout [ 959.605105][T18143] xt_bpf: check failed: parse error [ 959.626630][T18143] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3581'. [ 960.033727][T18119] could not allocate digest TFM handle hmac(sha256-avx2) [ 960.042319][T18148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3582'. [ 960.079609][ T5920] usb 1-1: USB disconnect, device number 42 [ 960.090465][ T49] batadv1 (unregistering): left promiscuous mode [ 960.142414][ T49] team0 (unregistering): Port device batadv1 removed [ 960.175517][T18151] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3583'. [ 960.366137][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 960.529900][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 960.553417][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 960.564853][ T10] usb 5-1: config 0 has no interface number 0 [ 960.589886][ T10] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 960.609165][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.617494][ T10] usb 5-1: Product: syz [ 960.621853][ T10] usb 5-1: Manufacturer: syz [ 960.634150][ T10] usb 5-1: SerialNumber: syz [ 960.668721][ T10] usb 5-1: config 0 descriptor?? [ 960.684859][ T10] usb 5-1: selecting invalid altsetting 1 [ 960.712383][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 960.738330][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 960.805987][ T5920] usb 2-1: USB disconnect, device number 15 [ 960.865061][ T10] DVB: Unable to find symbol stv0299_attach() [ 960.982294][ T10] DVB: Unable to find symbol tda8083_attach() [ 961.007204][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 961.038415][ T49] team_slave_1 (unregistering): left promiscuous mode [ 961.043681][ T10] usb 5-1: USB disconnect, device number 26 [ 961.054867][ T49] team0 (unregistering): Port device team_slave_1 removed [ 961.160871][ T49] team_slave_0 (unregistering): left promiscuous mode [ 961.170304][ T49] team0 (unregistering): Port device team_slave_0 removed [ 961.265889][ T5920] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 961.436649][ T5920] usb 1-1: Using ep0 maxpacket: 8 [ 961.455947][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 961.474044][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 961.503095][ T5920] usb 1-1: New USB device found, idVendor=0009, idProduct=0000, bcdDevice= 0.00 [ 961.535655][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.555958][ T5920] usb 1-1: config 0 descriptor?? [ 961.691919][T16122] Bluetooth: hci3: command tx timeout [ 962.031342][ T5920] hid-generic 0003:0009:0000.002D: unknown main item tag 0x2 [ 962.052725][ T5920] hid-generic 0003:0009:0000.002D: unknown main item tag 0x0 [ 962.138343][ T5920] hid-generic 0003:0009:0000.002D: item fetching failed at offset 10/11 [ 962.155511][ T5920] hid-generic 0003:0009:0000.002D: probe with driver hid-generic failed with error -22 [ 962.239844][ T5920] usb 1-1: USB disconnect, device number 43 [ 962.782307][T18056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 962.802573][T18056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 962.915709][T18056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 963.076790][T18056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 963.095707][T18056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 963.186793][T18056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 963.448924][T18189] Cannot find add_set index 3 as target [ 963.596214][ T10] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 963.749181][T18056] hsr_slave_0: entered promiscuous mode [ 963.758749][ T10] usb 6-1: config 0 has no interfaces? [ 963.773352][ T10] usb 6-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 963.801687][T18056] hsr_slave_1: entered promiscuous mode [ 963.810548][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.823044][T18056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 963.858436][T18056] Cannot create hsr debugfs directory [ 963.868209][ T10] usb 6-1: config 0 descriptor?? [ 964.135785][ T5920] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 964.173892][T18188] team_slave_0: entered promiscuous mode [ 964.179840][T18188] team_slave_1: entered promiscuous mode [ 964.185532][T18188] batadv1: entered promiscuous mode [ 964.224531][T18188] vlan3: entered promiscuous mode [ 964.240178][T18188] team0: entered promiscuous mode [ 964.278382][T18188] vlan2: entered promiscuous mode [ 964.297716][ T5920] usb 1-1: unable to get BOS descriptor or descriptor too short [ 964.309834][ T5920] usb 1-1: not running at top speed; connect to a high speed hub [ 964.315882][T18188] [ 964.319898][T18188] ====================================================== [ 964.320413][ T5920] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 964.326901][T18188] WARNING: possible circular locking dependency detected [ 964.326927][T18188] 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 Not tainted [ 964.326940][T18188] ------------------------------------------------------ [ 964.326949][T18188] syz.5.3593/18188 is trying to acquire lock: [ 964.326960][T18188] ffff88803eab4d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_set_promiscuity+0x10e/0x260 [ 964.327023][T18188] [ 964.327023][T18188] but task is already holding lock: [ 964.327030][T18188] ffff888029af0e00 (team->team_lock_key#6){+.+.}-{4:4}, at: team_change_rx_flags+0x38/0x220 [ 964.327090][T18188] [ 964.327090][T18188] which lock already depends on the new lock. [ 964.327090][T18188] [ 964.402422][T18188] [ 964.402422][T18188] the existing dependency chain (in reverse order) is: [ 964.411417][T18188] [ 964.411417][T18188] -> #1 (team->team_lock_key#6){+.+.}-{4:4}: [ 964.419575][T18188] lock_acquire+0x120/0x360 [ 964.424586][T18188] __mutex_lock+0x182/0xe80 [ 964.429590][T18188] team_device_event+0x182/0xa20 [ 964.435032][T18188] notifier_call_chain+0x1b3/0x3e0 [ 964.440650][T18188] dev_close_many+0x29c/0x410 [ 964.445828][T18188] vlan_device_event+0x1748/0x1d00 [ 964.451443][T18188] notifier_call_chain+0x1b3/0x3e0 [ 964.457070][T18188] __dev_notify_flags+0x18d/0x2e0 [ 964.462597][T18188] netif_change_flags+0xe8/0x1a0 [ 964.468034][T18188] do_setlink+0xc55/0x41c0 [ 964.472951][T18188] rtnl_newlink+0x160b/0x1c70 [ 964.478125][T18188] rtnetlink_rcv_msg+0x7cc/0xb70 [ 964.483561][T18188] netlink_rcv_skb+0x208/0x470 [ 964.488825][T18188] netlink_unicast+0x75b/0x8d0 [ 964.494082][T18188] netlink_sendmsg+0x805/0xb30 [ 964.499347][T18188] __sock_sendmsg+0x21c/0x270 [ 964.504522][T18188] ____sys_sendmsg+0x505/0x830 [ 964.509794][T18188] ___sys_sendmsg+0x21f/0x2a0 [ 964.514984][T18188] __sys_sendmsg+0x164/0x220 [ 964.520082][T18188] __do_fast_syscall_32+0xb6/0x2b0 [ 964.525704][T18188] do_fast_syscall_32+0x34/0x80 [ 964.531091][T18188] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 964.537934][T18188] [ 964.537934][T18188] -> #0 (&dev_instance_lock_key#20){+.+.}-{4:4}: [ 964.546438][T18188] validate_chain+0xb9b/0x2140 [ 964.551748][T18188] __lock_acquire+0xab9/0xd20 [ 964.556933][T18188] lock_acquire+0x120/0x360 [ 964.561944][T18188] __mutex_lock+0x182/0xe80 [ 964.566952][T18188] dev_set_promiscuity+0x10e/0x260 [ 964.572661][T18188] __dev_set_promiscuity+0x534/0x740 [ 964.578489][T18188] netif_set_promiscuity+0x50/0xe0 [ 964.584102][T18188] dev_set_promiscuity+0x126/0x260 [ 964.589803][T18188] team_change_rx_flags+0x123/0x220 [ 964.595522][T18188] __dev_set_promiscuity+0x534/0x740 [ 964.601318][T18188] netif_set_promiscuity+0x50/0xe0 [ 964.607107][T18188] dev_set_promiscuity+0x126/0x260 [ 964.612724][T18188] __dev_set_promiscuity+0x534/0x740 [ 964.618523][T18188] __dev_change_flags+0x41b/0x6d0 [ 964.624069][T18188] rtnl_newlink_create+0x555/0xb00 [ 964.629688][T18188] rtnl_newlink+0x16d6/0x1c70 [ 964.634872][T18188] rtnetlink_rcv_msg+0x7cc/0xb70 [ 964.640320][T18188] netlink_rcv_skb+0x208/0x470 [ 964.645590][T18188] netlink_unicast+0x75b/0x8d0 [ 964.650865][T18188] netlink_sendmsg+0x805/0xb30 [ 964.656136][T18188] __sock_sendmsg+0x21c/0x270 [ 964.661328][T18188] ____sys_sendmsg+0x505/0x830 [ 964.666600][T18188] ___sys_sendmsg+0x21f/0x2a0 [ 964.671778][T18188] __sys_sendmsg+0x164/0x220 [ 964.676872][T18188] __do_fast_syscall_32+0xb6/0x2b0 [ 964.682570][T18188] do_fast_syscall_32+0x34/0x80 [ 964.687921][T18188] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 964.694758][T18188] [ 964.694758][T18188] other info that might help us debug this: [ 964.694758][T18188] [ 964.704974][T18188] Possible unsafe locking scenario: [ 964.704974][T18188] [ 964.712411][T18188] CPU0 CPU1 [ 964.717762][T18188] ---- ---- [ 964.723111][T18188] lock(team->team_lock_key#6); [ 964.728044][T18188] lock(&dev_instance_lock_key#20); [ 964.735846][T18188] lock(team->team_lock_key#6); [ 964.743657][T18188] lock(&dev_instance_lock_key#20); [ 964.748934][T18188] [ 964.748934][T18188] *** DEADLOCK *** [ 964.748934][T18188] [ 964.757093][T18188] 3 locks held by syz.5.3593/18188: [ 964.762278][T18188] #0: ffffffff8fa30870 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 964.771776][T18188] #1: ffffffff8f50fc48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 964.780815][T18188] #2: ffff888029af0e00 (team->team_lock_key#6){+.+.}-{4:4}, at: team_change_rx_flags+0x38/0x220 [ 964.791330][T18188] [ 964.791330][T18188] stack backtrace: [ 964.797203][T18188] CPU: 0 UID: 0 PID: 18188 Comm: syz.5.3593 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 964.797219][T18188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 964.797226][T18188] Call Trace: [ 964.797231][T18188] [ 964.797236][T18188] dump_stack_lvl+0x189/0x250 [ 964.797261][T18188] ? __pfx_dump_stack_lvl+0x10/0x10 [ 964.797277][T18188] ? __pfx__printk+0x10/0x10 [ 964.797289][T18188] ? print_lock_name+0xde/0x100 [ 964.797300][T18188] print_circular_bug+0x2ee/0x310 [ 964.797312][T18188] check_noncircular+0x134/0x160 [ 964.797323][T18188] validate_chain+0xb9b/0x2140 [ 964.797333][T18188] ? __pfx___irq_work_queue_local+0x10/0x10 [ 964.797348][T18188] ? console_unlock+0x21b/0x270 [ 964.797359][T18188] ? __pfx_console_unlock+0x10/0x10 [ 964.797371][T18188] __lock_acquire+0xab9/0xd20 [ 964.797387][T18188] ? dev_set_promiscuity+0x10e/0x260 [ 964.797399][T18188] lock_acquire+0x120/0x360 [ 964.797413][T18188] ? dev_set_promiscuity+0x10e/0x260 [ 964.797426][T18188] __mutex_lock+0x182/0xe80 [ 964.797436][T18188] ? dev_set_promiscuity+0x10e/0x260 [ 964.797448][T18188] ? __pfx__printk+0x10/0x10 [ 964.797459][T18188] ? dev_set_promiscuity+0x10e/0x260 [ 964.797470][T18188] ? __netdev_printk+0x365/0x4d0 [ 964.797485][T18188] ? __pfx___mutex_lock+0x10/0x10 [ 964.797494][T18188] ? netdev_info+0x10a/0x160 [ 964.797507][T18188] ? __pfx_netdev_info+0x10/0x10 [ 964.797518][T18188] ? __mutex_lock+0x330/0xe80 [ 964.797528][T18188] dev_set_promiscuity+0x10e/0x260 [ 964.797540][T18188] ? __pfx_vlan_dev_change_rx_flags+0x10/0x10 [ 964.797554][T18188] __dev_set_promiscuity+0x534/0x740 [ 964.797566][T18188] ? netdev_info+0x10a/0x160 [ 964.797578][T18188] netif_set_promiscuity+0x50/0xe0 [ 964.797590][T18188] dev_set_promiscuity+0x126/0x260 [ 964.797602][T18188] team_change_rx_flags+0x123/0x220 [ 964.797619][T18188] ? __pfx_team_change_rx_flags+0x10/0x10 [ 964.797634][T18188] __dev_set_promiscuity+0x534/0x740 [ 964.797647][T18188] netif_set_promiscuity+0x50/0xe0 [ 964.797659][T18188] dev_set_promiscuity+0x126/0x260 [ 964.797671][T18188] ? __pfx_vlan_dev_change_rx_flags+0x10/0x10 [ 964.797683][T18188] __dev_set_promiscuity+0x534/0x740 [ 964.797696][T18188] __dev_change_flags+0x41b/0x6d0 [ 964.797709][T18188] ? __pfx___dev_change_flags+0x10/0x10 [ 964.797723][T18188] rtnl_newlink_create+0x555/0xb00 [ 964.797738][T18188] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 964.797749][T18188] ? rtnl_newlink+0x8db/0x1c70 [ 964.797759][T18188] ? __pfx___mutex_lock+0x10/0x10 [ 964.797770][T18188] ? ns_capable+0x8a/0xf0 [ 964.797787][T18188] rtnl_newlink+0x16d6/0x1c70 [ 964.797797][T18188] ? netlink_sendmsg+0x805/0xb30 [ 964.797811][T18188] ? __pfx_rtnl_newlink+0x10/0x10 [ 964.797826][T18188] ? kasan_quarantine_put+0xdd/0x220 [ 964.797842][T18188] ? lockdep_hardirqs_on+0x9c/0x150 [ 964.797858][T18188] ? nlmon_xmit+0xb0/0x100 [ 964.797872][T18188] ? kmem_cache_free+0x18f/0x400 [ 964.797884][T18188] ? __local_bh_enable_ip+0x12d/0x1c0 [ 964.797899][T18188] ? lockdep_hardirqs_on+0x9c/0x150 [ 964.797914][T18188] ? __local_bh_enable_ip+0x12d/0x1c0 [ 964.797928][T18188] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 964.797944][T18188] ? __dev_queue_xmit+0x27e/0x3a70 [ 964.797960][T18188] ? __lock_acquire+0xab9/0xd20 [ 964.797979][T18188] ? __pfx_rtnl_newlink+0x10/0x10 [ 964.797988][T18188] rtnetlink_rcv_msg+0x7cc/0xb70 [ 964.797999][T18188] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 964.798009][T18188] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 964.798018][T18188] ? ref_tracker_free+0x63a/0x7d0 [ 964.798031][T18188] ? __copy_skb_header+0xa7/0x550 [ 964.798044][T18188] ? __pfx_ref_tracker_free+0x10/0x10 [ 964.798057][T18188] ? __skb_clone+0x63/0x7a0 [ 964.798071][T18188] netlink_rcv_skb+0x208/0x470 [ 964.798082][T18188] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 964.798092][T18188] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 964.798106][T18188] ? netlink_deliver_tap+0x2e/0x1b0 [ 964.798117][T18188] ? netlink_deliver_tap+0x2e/0x1b0 [ 964.798128][T18188] netlink_unicast+0x75b/0x8d0 [ 964.798140][T18188] netlink_sendmsg+0x805/0xb30 [ 964.798154][T18188] ? __pfx_netlink_sendmsg+0x10/0x10 [ 964.798166][T18188] ? __import_iovec+0x5d4/0x7f0 [ 964.798175][T18188] ? aa_sock_msg_perm+0x94/0x160 [ 964.798188][T18188] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 964.798202][T18188] ? __pfx_netlink_sendmsg+0x10/0x10 [ 964.798213][T18188] __sock_sendmsg+0x21c/0x270 [ 964.798229][T18188] ____sys_sendmsg+0x505/0x830 [ 964.798242][T18188] ? __pfx_____sys_sendmsg+0x10/0x10 [ 964.798259][T18188] ? __pfx_futex_wake_mark+0x10/0x10 [ 964.798275][T18188] ___sys_sendmsg+0x21f/0x2a0 [ 964.798288][T18188] ? __pfx____sys_sendmsg+0x10/0x10 [ 964.798307][T18188] ? __fget_files+0x2a/0x420 [ 964.798318][T18188] ? __fget_files+0x3a0/0x420 [ 964.798331][T18188] __sys_sendmsg+0x164/0x220 [ 964.798343][T18188] ? __pfx___sys_sendmsg+0x10/0x10 [ 964.798357][T18188] ? rcu_is_watching+0x15/0xb0 [ 964.798373][T18188] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 964.798389][T18188] ? lockdep_hardirqs_on+0x9c/0x150 [ 964.798403][T18188] __do_fast_syscall_32+0xb6/0x2b0 [ 964.798413][T18188] ? lockdep_hardirqs_on+0x9c/0x150 [ 964.798428][T18188] do_fast_syscall_32+0x34/0x80 [ 964.798437][T18188] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 964.798451][T18188] RIP: 0023:0xf7fa6539 [ 964.798460][T18188] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 964.798470][T18188] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 964.798483][T18188] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 0000000080000280 [ 964.798490][T18188] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 964.798497][T18188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 964.798503][T18188] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 964.798509][T18188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 964.798519][T18188] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 965.396047][ T5920] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 965.416602][ T5920] usb 1-1: config 1 interface 2 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 965.427988][T18188] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 965.530476][ T5920] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 965.705720][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.773026][ T5920] usb 1-1: Product: syz [ 965.817792][ T5920] usb 1-1: Manufacturer: syz [ 965.822436][ T5920] usb 1-1: SerialNumber: syz [ 966.379855][ T10] usb 6-1: USB disconnect, device number 35 [ 966.428515][ T5920] usb 1-1: can't set config #1, error -71 [ 966.491837][ T5920] usb 1-1: USB disconnect, device number 44 [ 966.522368][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.583227][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.640483][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.692401][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.795375][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.808192][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.878346][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.889265][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.934362][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.947346][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.981284][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.991844][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.062563][ T49] bridge_slave_1: left allmulticast mode [ 967.069007][ T49] bridge_slave_1: left promiscuous mode [ 967.074713][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.091317][ T49] bridge_slave_0: left allmulticast mode [ 967.098343][ T49] bridge_slave_0: left promiscuous mode [ 967.104054][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.113592][ T49] bridge_slave_1: left allmulticast mode [ 967.119292][ T49] bridge_slave_1: left promiscuous mode [ 967.124965][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.137606][ T49] bridge_slave_0: left allmulticast mode [ 967.143276][ T49] bridge_slave_0: left promiscuous mode [ 967.150292][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.163764][ T49] bridge_slave_1: left allmulticast mode [ 967.172445][ T49] bridge_slave_1: left promiscuous mode [ 967.178486][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.189888][ T49] bridge_slave_0: left allmulticast mode [ 967.195579][ T49] bridge_slave_0: left promiscuous mode [ 967.205484][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.340061][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 967.349783][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 967.360396][ T49] bond0 (unregistering): Released all slaves [ 967.396725][ T49] team0: Port device geneve0 removed [ 967.450402][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 967.461338][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 967.470967][ T49] bond0 (unregistering): Released all slaves [ 967.620456][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 967.630400][ T49] bond_slave_0: left promiscuous mode [ 967.636885][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 967.648156][ T49] bond_slave_1: left promiscuous mode [ 967.654687][ T49] bond0 (unregistering): (slave team0): Releasing backup interface [ 967.663505][ T49] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 967.671961][ T49] mac80211_hwsim hwsim40 wlan1: left promiscuous mode [ 967.680448][ T49] bond0 (unregistering): Released all slaves [ 967.690183][ T49] bond1 (unregistering): Released all slaves [ 969.350950][ T49] : left promiscuous mode [ 969.402961][ T49] tipc: Left network mode [ 969.847063][ T49] hsr_slave_0: left promiscuous mode [ 969.853125][ T49] hsr_slave_1: left promiscuous mode [ 969.859433][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 969.867297][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 969.879607][ T49] hsr_slave_0: left promiscuous mode [ 969.885508][ T49] hsr_slave_1: left promiscuous mode [ 969.891703][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 969.899640][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 969.908198][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 969.916115][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 969.928846][ T49] hsr_slave_0: left promiscuous mode [ 969.934572][ T49] hsr_slave_1: left promiscuous mode [ 969.940615][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 969.950367][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 969.958831][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 969.968754][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 969.982443][ T49] veth1_macvtap: left promiscuous mode [ 969.990749][ T49] veth0_macvtap: left promiscuous mode [ 969.996461][ T49] veth1_vlan: left promiscuous mode [ 970.001742][ T49] veth0_vlan: left promiscuous mode [ 970.010751][ T49] veth1_macvtap: left promiscuous mode [ 970.016736][ T49] veth0_macvtap: left promiscuous mode [ 970.022311][ T49] veth1_vlan: left promiscuous mode [ 970.030286][ T49] veth0_vlan: left promiscuous mode [ 970.243170][ T49] team0 (unregistering): Port device team_slave_1 removed [ 970.253359][ T49] team0 (unregistering): Port device team_slave_0 removed [ 970.332819][ T49] team0 (unregistering): Port device batadv1 removed [ 970.433983][ T49] team0 (unregistering): Port device team_slave_1 removed [ 970.463655][ T49] team0 (unregistering): Port device team_slave_0 removed [ 970.562449][ T49] batadv1 (unregistering): left promiscuous mode [ 970.569435][ T49] team0 (unregistering): Port device batadv1 removed [ 970.640678][ T49] team_slave_1 (unregistering): left promiscuous mode [ 970.648216][ T49] team0 (unregistering): Port device team_slave_1 removed [ 970.680150][ T49] team_slave_0 (unregistering): left promiscuous mode [ 970.687747][ T49] team0 (unregistering): Port device team_slave_0 removed [ 971.564359][ T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.624924][ T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.672856][ T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.750356][ T49] vlan2 (unregistering): left promiscuous mode [ 971.756655][ T49] netdevsim netdevsim5 netdevsim0 (unregistering): left promiscuous mode [ 971.766620][ T49] team0: Port device vlan2 removed [ 971.774574][ T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.884767][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.940849][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.991335][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.036864][ T49] team0: Port device vlan2 removed [ 972.044799][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.148532][ T49] bridge_slave_1: left allmulticast mode [ 972.154226][ T49] bridge_slave_1: left promiscuous mode [ 972.162477][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.173378][ T49] bridge_slave_0: left allmulticast mode [ 972.183164][ T49] bridge_slave_0: left promiscuous mode [ 972.189929][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.203186][ T49] bridge_slave_1: left allmulticast mode [ 972.209807][ T49] bridge_slave_1: left promiscuous mode [ 972.215508][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.224857][ T49] bridge_slave_0: left allmulticast mode [ 972.231499][ T49] bridge_slave_0: left promiscuous mode [ 972.241029][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.353523][ T49] bond1 (unregistering): (slave gretap1): Releasing active interface [ 972.510996][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 972.521246][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 972.533065][ T49] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 972.541551][ T49] bond0 (unregistering): Released all slaves [ 972.640482][ T49] bond1 (unregistering): Released all slaves [ 972.649682][ T49] bond2 (unregistering): Released all slaves [ 972.672042][ T49] bond1 (unregistering): (slave gretap1): Releasing active interface [ 972.722155][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 972.732398][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 972.742859][ T49] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 972.752653][ T49] bond0 (unregistering): Released all slaves [ 972.853920][ T49] bond1 (unregistering): Released all slaves [ 972.935217][ T49] tipc: Left network mode [ 973.528049][ T49] hsr_slave_0: left promiscuous mode [ 973.533880][ T49] hsr_slave_1: left promiscuous mode [ 973.542140][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 973.551938][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 973.559840][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 973.568980][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 973.579911][ T49] hsr_slave_0: left promiscuous mode [ 973.586916][ T49] hsr_slave_1: left promiscuous mode [ 973.592677][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 973.600633][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 973.610044][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 973.619094][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 973.633786][ T49] veth1_macvtap: left promiscuous mode [ 973.640166][ T49] veth0_macvtap: left promiscuous mode [ 973.646909][ T49] veth1_vlan: left promiscuous mode [ 973.652192][ T49] veth0_vlan: left promiscuous mode [ 973.658878][ T49] veth1_macvtap: left promiscuous mode [ 973.664409][ T49] veth0_macvtap: left promiscuous mode [ 973.671728][ T49] veth1_vlan: left promiscuous mode [ 973.677609][ T49] veth0_vlan: left promiscuous mode [ 973.783376][ T49] batadv1 (unregistering): left promiscuous mode [ 973.792098][ T49] team0 (unregistering): Port device batadv1 removed [ 973.888675][ T49] team_slave_1 (unregistering): left promiscuous mode [ 973.896346][ T49] team0 (unregistering): Port device team_slave_1 removed [ 973.923278][ T49] team_slave_0 (unregistering): left promiscuous mode [ 973.930736][ T49] team0 (unregistering): Port device team_slave_0 removed [ 974.027421][ T49] team0 (unregistering): Port device batadv1 removed [ 974.101019][ T49] team0 (unregistering): Port device team_slave_1 removed [ 974.125091][ T49] team0 (unregistering): Port device team_slave_0 removed